{ "SchemaVersion": 2, "Trivy": { "Version": "0.70.0" }, "ReportID": "01a1b919-a0e5-7792-8204-ca0e9b9eab82", "CreatedAt": "2026-11-08T04:00:26.981497754+01:00", "ArtifactID": "sha256:24393ad13b90a3f15064e89a3a9bb7ef1d0c9756bbc4b5ec8c87db1b07a2afff", "ArtifactName": "louislam/uptime-kuma:latest", "ArtifactType": "container_image", "Metadata": { "Size": 478329344, "OS": { "Family": "debian", "Name": "10.13", "EOSL": true }, "ImageID": "sha256:ded82109b2b8c18d50c94642d27be734565beab7a954709450420131e54e1241", "DiffIDs": [ "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55", "sha256:500f85ae4f3c23e1e510e3f2b783c06f2694fa424c536924b51b5eaf7578c0a5", "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42", "sha256:992966ad9edb95959d27e87368e3837d3869222cf7e178d6289ab851f8f67e22", "sha256:98ef264d932e923f9d4b14abc814da13bd3e65dbf7c11363eddb00f38606089d", "sha256:a60ae4868cc51917ad91a4d4e18bc0c5d8ddcd5a3af18a00c62043373f882b11", "sha256:6130c115f0a46ab68630be8d156fb7b20df201c08d0976f777557224125a3367", "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb", "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b", "sha256:876bdbf8f1d0135a138be01936955ee2f9b7202910454888d2af75f09bfef79a", "sha256:02752038536e207373f0c5908523273e7004ec5e7cc7a003cc51daec464ae34d", "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef", "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983", "sha256:fb1bf1371e557f7b45350550e66be0e10e2d06b0dd15772075f52ef1f2ab038e", "sha256:29bb22a7421e5ae8047e33ee897e5768436061c3b88b8ccc12f4911007db86d4" ], "RepoTags": [ "louislam/uptime-kuma:latest" ], "RepoDigests": [ "louislam/uptime-kuma@sha256:70233f4acb5163fd2a59a49909cf01e44415cecff13dba69e3a86647a2919f83" ], "Reference": "louislam/uptime-kuma:latest", "ImageConfig": { "architecture": "amd64", "created": "2026-09-16T11:41:26.123511601Z", "history": [ { "created": "2024-05-21T13:48:08Z", "created_by": "/bin/sh -c #(nop) ADD file:cce4de1623245f9f28e3365e6cf749d85dcfedddea2d6fbc963c309a40818f52 in / " }, { "created": "2024-05-21T13:48:08Z", "created_by": "/bin/sh -c #(nop) CMD [\"bash\"]", "empty_layer": true }, { "created": "2024-05-21T13:48:08Z", "created_by": "RUN /bin/sh -c groupadd --gid 1000 node \u0026\u0026 useradd --uid 1000 --gid node --shell /bin/bash --create-home node # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2024-05-21T13:48:08Z", "created_by": "ENV NODE_VERSION=18.20.3", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2024-05-21T13:48:08Z", "created_by": "RUN /bin/sh -c ARCH= OPENSSL_ARCH= \u0026\u0026 dpkgArch=\"$(dpkg --print-architecture)\" \u0026\u0026 case \"${dpkgArch##*-}\" in amd64) ARCH='x64' OPENSSL_ARCH='linux-x86_64';; ppc64el) ARCH='ppc64le' OPENSSL_ARCH='linux-ppc64le';; s390x) ARCH='s390x' OPENSSL_ARCH='linux*-s390x';; arm64) ARCH='arm64' OPENSSL_ARCH='linux-aarch64';; armhf) ARCH='armv7l' OPENSSL_ARCH='linux-armv4';; i386) ARCH='x86' OPENSSL_ARCH='linux-elf';; *) echo \"unsupported architecture\"; exit 1 ;; esac \u0026\u0026 set -ex \u0026\u0026 apt-get update \u0026\u0026 apt-get install -y ca-certificates curl wget gnupg dirmngr xz-utils libatomic1 --no-install-recommends \u0026\u0026 rm -rf /var/lib/apt/lists/* \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in 4ED778F539E3634C779C87C6D7062848A1AB005C 141F07595B7B3FFE74309A937405533BE57C7D57 74F12602B6F1C4E913FAA37AD3A89613643B6201 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 61FC681DFB92A079F1685E77973F295594EC4689 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 CC68F5A3106FF448322E48ED27F5E38D5B0A215F ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION-linux-$ARCH.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 rm \"node-v$NODE_VERSION-linux-$ARCH.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apt-mark auto '.*' \u003e /dev/null \u0026\u0026 find /usr/local -type f -executable -exec ldd '{}' ';' | awk '/=\u003e/ { so = $(NF-1); if (index(so, \"/usr/local/\") == 1) { next }; gsub(\"^/(usr/)?\", \"\", so); print so }' | sort -u | xargs -r dpkg-query --search | cut -d: -f1 | sort -u | xargs -r apt-mark manual \u0026\u0026 apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs \u0026\u0026 node --version \u0026\u0026 npm --version # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2024-05-21T13:48:08Z", "created_by": "ENV YARN_VERSION=1.22.19", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2024-05-21T13:48:08Z", "created_by": "RUN /bin/sh -c set -ex \u0026\u0026 savedAptMark=\"$(apt-mark showmanual)\" \u0026\u0026 apt-get update \u0026\u0026 apt-get install -y ca-certificates curl wget gnupg dirmngr --no-install-recommends \u0026\u0026 rm -rf /var/lib/apt/lists/* \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in 6A010C5166006599AA17F08146C2130DFD2497F5 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz\" \u0026\u0026 curl -fsSLO --compressed \"https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz.asc\" \u0026\u0026 gpg --batch --verify yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 mkdir -p /opt \u0026\u0026 tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/ \u0026\u0026 ln -s /opt/yarn-v$YARN_VERSION/bin/yarn /usr/local/bin/yarn \u0026\u0026 ln -s /opt/yarn-v$YARN_VERSION/bin/yarnpkg /usr/local/bin/yarnpkg \u0026\u0026 rm yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz \u0026\u0026 apt-mark auto '.*' \u003e /dev/null \u0026\u0026 { [ -z \"$savedAptMark\" ] || apt-mark manual $savedAptMark \u003e /dev/null; } \u0026\u0026 find /usr/local -type f -executable -exec ldd '{}' ';' | awk '/=\u003e/ { so = $(NF-1); if (index(so, \"/usr/local/\") == 1) { next }; gsub(\"^/(usr/)?\", \"\", so); print so }' | sort -u | xargs -r dpkg-query --search | cut -d: -f1 | sort -u | xargs -r apt-mark manual \u0026\u0026 apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false \u0026\u0026 yarn --version \u0026\u0026 rm -rf /tmp/* # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2024-05-21T13:48:08Z", "created_by": "COPY docker-entrypoint.sh /usr/local/bin/ # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2024-05-21T13:48:08Z", "created_by": "ENTRYPOINT [\"docker-entrypoint.sh\"]", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2024-05-21T13:48:08Z", "created_by": "CMD [\"node\"]", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2025-10-08T08:34:50Z", "created_by": "ARG TARGETPLATFORM", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2025-10-08T08:34:50Z", "created_by": "WORKDIR /app", "comment": "buildkit.dockerfile.v0" }, { "created": "2025-10-08T08:38:05Z", "created_by": "RUN |1 TARGETPLATFORM=linux/amd64 /bin/sh -c sed -i '/^deb/s/^/#/' /etc/apt/sources.list \u0026\u0026 echo \"deb http://archive.debian.org/debian buster main contrib non-free\" | tee -a /etc/apt/sources.list \u0026\u0026 echo \"deb http://archive.debian.org/debian-security buster/updates main contrib non-free\" | tee -a /etc/apt/sources.list \u0026\u0026 echo \"deb http://archive.debian.org/debian buster-updates main contrib non-free\" | tee -a /etc/apt/sources.list # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2025-10-08T08:38:26Z", "created_by": "RUN |1 TARGETPLATFORM=linux/amd64 /bin/sh -c apt-get update \u0026\u0026 apt-get --yes --no-install-recommends install python3 python3-pip python3-cryptography python3-six python3-yaml python3-click python3-markdown python3-requests python3-requests-oauthlib sqlite3 iputils-ping util-linux dumb-init curl ca-certificates sudo nscd \u0026\u0026 pip3 --no-cache-dir install apprise==1.6.0 \u0026\u0026 rm -rf /var/lib/apt/lists/* \u0026\u0026 apt --yes autoremove # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2025-10-08T08:38:31Z", "created_by": "RUN |1 TARGETPLATFORM=linux/amd64 /bin/sh -c set -eux \u0026\u0026 mkdir -p --mode=0755 /usr/share/keyrings \u0026\u0026 curl --fail --show-error --silent --location --insecure https://pkg.cloudflare.com/cloudflare-main.gpg --output /usr/share/keyrings/cloudflare-main.gpg \u0026\u0026 echo 'deb [signed-by=/usr/share/keyrings/cloudflare-main.gpg] https://pkg.cloudflare.com/cloudflared buster main' | tee /etc/apt/sources.list.d/cloudflared.list \u0026\u0026 apt-get update \u0026\u0026 apt-get install --yes --no-install-recommends cloudflared \u0026\u0026 cloudflared version \u0026\u0026 rm -rf /var/lib/apt/lists/* \u0026\u0026 apt --yes autoremove # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2025-10-08T08:38:32Z", "created_by": "COPY ./docker/etc/nscd.conf /etc/nscd.conf # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2025-10-08T08:38:32Z", "created_by": "COPY ./docker/etc/sudoers /etc/sudoers # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2025-10-20T17:53:05Z", "created_by": "WORKDIR /app", "comment": "buildkit.dockerfile.v0" }, { "created": "2025-10-20T17:53:48Z", "created_by": "ENV UPTIME_KUMA_IS_CONTAINER=1", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2025-10-20T17:53:48Z", "created_by": "COPY /app /app # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2025-10-20T17:53:48Z", "created_by": "EXPOSE map[3001/tcp:{}]", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2025-10-20T17:53:48Z", "created_by": "VOLUME [/app/data]", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2025-10-20T17:53:48Z", "created_by": "HEALTHCHECK \u0026{[\"CMD-SHELL\" \"extra/healthcheck\"] \"1m0s\" \"30s\" \"3m0s\" \"0s\" '\\x05'}", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2025-10-20T17:53:48Z", "created_by": "ENTRYPOINT [\"/usr/bin/dumb-init\" \"--\" \"extra/entrypoint.sh\"]", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2025-10-20T17:53:48Z", "created_by": "CMD [\"node\" \"server/server.js\"]", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-09-16T11:41:25Z", "created_by": "COPY docker-latest-warning.js /app/dist/docker-latest-warning.js # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-09-16T11:41:26Z", "created_by": "RUN /bin/sh -c rm -f /app/dist/index.html.gz /app/dist/index.html.br \u0026\u0026 sed -i 's#\u003c/head\u003e#\u003cscript src=\"/docker-latest-warning.js\"\u003e\u003c/script\u003e\u003c/head\u003e#' /app/dist/index.html \u0026\u0026 grep -q \"docker-latest-warning.js\" /app/dist/index.html # buildkit", "comment": "buildkit.dockerfile.v0" } ], "os": "linux", "rootfs": { "type": "layers", "diff_ids": [ "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55", "sha256:500f85ae4f3c23e1e510e3f2b783c06f2694fa424c536924b51b5eaf7578c0a5", "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42", "sha256:992966ad9edb95959d27e87368e3837d3869222cf7e178d6289ab851f8f67e22", "sha256:98ef264d932e923f9d4b14abc814da13bd3e65dbf7c11363eddb00f38606089d", "sha256:a60ae4868cc51917ad91a4d4e18bc0c5d8ddcd5a3af18a00c62043373f882b11", "sha256:6130c115f0a46ab68630be8d156fb7b20df201c08d0976f777557224125a3367", "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb", "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b", "sha256:876bdbf8f1d0135a138be01936955ee2f9b7202910454888d2af75f09bfef79a", "sha256:02752038536e207373f0c5908523273e7004ec5e7cc7a003cc51daec464ae34d", "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef", "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983", "sha256:fb1bf1371e557f7b45350550e66be0e10e2d06b0dd15772075f52ef1f2ab038e", "sha256:29bb22a7421e5ae8047e33ee897e5768436061c3b88b8ccc12f4911007db86d4" ] }, "config": { "Cmd": [ "node", "server/server.js" ], "Healthcheck": { "Test": [ "CMD-SHELL", "extra/healthcheck" ], "Interval": 60000000000, "Timeout": 30000000000, "StartPeriod": 180000000000, "Retries": 5 }, "Entrypoint": [ "/usr/bin/dumb-init", "--", "extra/entrypoint.sh" ], "Env": [ "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", "NODE_VERSION=18.20.3", "YARN_VERSION=1.22.19", "UPTIME_KUMA_IS_CONTAINER=1" ], "Volumes": { "/app/data": {} }, "WorkingDir": "/app", "ExposedPorts": { "3001/tcp": {} }, "ArgsEscaped": true } }, "Layers": [ { "Size": 73326592, "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, { "Size": 346112, "DiffID": "sha256:500f85ae4f3c23e1e510e3f2b783c06f2694fa424c536924b51b5eaf7578c0a5" }, { "Size": 112146432, "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, { "Size": 7175168, "DiffID": "sha256:992966ad9edb95959d27e87368e3837d3869222cf7e178d6289ab851f8f67e22" }, { "Size": 3584, "DiffID": "sha256:98ef264d932e923f9d4b14abc814da13bd3e65dbf7c11363eddb00f38606089d" }, { "Size": 1536, "DiffID": "sha256:a60ae4868cc51917ad91a4d4e18bc0c5d8ddcd5a3af18a00c62043373f882b11" }, { "Size": 3584, "DiffID": "sha256:6130c115f0a46ab68630be8d156fb7b20df201c08d0976f777557224125a3367" }, { "Size": 61747200, "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, { "Size": 41640960, "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, { "Size": 6144, "DiffID": "sha256:876bdbf8f1d0135a138be01936955ee2f9b7202910454888d2af75f09bfef79a" }, { "Size": 3072, "DiffID": "sha256:02752038536e207373f0c5908523273e7004ec5e7cc7a003cc51daec464ae34d" }, { "Size": 1024, "DiffID": "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef" }, { "Size": 181916160, "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, { "Size": 5632, "DiffID": "sha256:fb1bf1371e557f7b45350550e66be0e10e2d06b0dd15772075f52ef1f2ab038e" }, { "Size": 6144, "DiffID": "sha256:29bb22a7421e5ae8047e33ee897e5768436061c3b88b8ccc12f4911007db86d4" } ] }, "Results": [ { "Target": "louislam/uptime-kuma:latest (debian 10.13)", "Class": "os-pkgs", "Type": "debian", "Packages": [ { "ID": "adduser@3.118", "Name": "adduser", "Identifier": { "PURL": "pkg:deb/debian/adduser@3.118?arch=all\u0026distro=debian-10.13", "UID": "57a3a73ec6dd6b12" }, "Version": "3.118", "Arch": "all", "SrcName": "adduser", "SrcVersion": "3.118", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Debian Adduser Developers \u003cadduser@packages.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debconf@1.5.71+deb10u1", "passwd@1:4.5-1.1" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/sbin/adduser", "/usr/sbin/deluser", "/usr/share/adduser/adduser.conf", "/usr/share/doc/adduser/TODO", "/usr/share/doc/adduser/changelog.gz", "/usr/share/doc/adduser/copyright", "/usr/share/doc/adduser/examples/INSTALL", "/usr/share/doc/adduser/examples/README.gz", "/usr/share/doc/adduser/examples/adduser.local", "/usr/share/doc/adduser/examples/adduser.local.conf", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/adduser.conf", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/bash.bashrc", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/profile", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel.other/index.html", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bash_logout", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bash_profile", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bashrc", "/usr/share/locale/ca/LC_MESSAGES/adduser.mo", "/usr/share/locale/cs/LC_MESSAGES/adduser.mo", "/usr/share/locale/da/LC_MESSAGES/adduser.mo", "/usr/share/locale/de/LC_MESSAGES/adduser.mo", "/usr/share/locale/es/LC_MESSAGES/adduser.mo", "/usr/share/locale/eu/LC_MESSAGES/adduser.mo", "/usr/share/locale/fr/LC_MESSAGES/adduser.mo", "/usr/share/locale/hu/LC_MESSAGES/adduser.mo", "/usr/share/locale/it/LC_MESSAGES/adduser.mo", "/usr/share/locale/ja/LC_MESSAGES/adduser.mo", "/usr/share/locale/ko/LC_MESSAGES/adduser.mo", "/usr/share/locale/nb/LC_MESSAGES/adduser.mo", "/usr/share/locale/nl/LC_MESSAGES/adduser.mo", "/usr/share/locale/pl/LC_MESSAGES/adduser.mo", "/usr/share/locale/pt/LC_MESSAGES/adduser.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/adduser.mo", "/usr/share/locale/ru/LC_MESSAGES/adduser.mo", "/usr/share/locale/sk/LC_MESSAGES/adduser.mo", "/usr/share/locale/sv/LC_MESSAGES/adduser.mo", "/usr/share/locale/uk/LC_MESSAGES/adduser.mo", "/usr/share/locale/vi/LC_MESSAGES/adduser.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/adduser.mo", "/usr/share/man/da/man5/adduser.conf.5.gz", "/usr/share/man/da/man5/deluser.conf.5.gz", "/usr/share/man/da/man8/adduser.8.gz", "/usr/share/man/da/man8/deluser.8.gz", "/usr/share/man/de/man5/adduser.conf.5.gz", "/usr/share/man/de/man5/deluser.conf.5.gz", "/usr/share/man/de/man8/adduser.8.gz", "/usr/share/man/de/man8/deluser.8.gz", "/usr/share/man/es/man5/adduser.conf.5.gz", "/usr/share/man/es/man5/deluser.conf.5.gz", "/usr/share/man/es/man8/adduser.8.gz", "/usr/share/man/es/man8/deluser.8.gz", "/usr/share/man/fr/man5/adduser.conf.5.gz", "/usr/share/man/fr/man5/deluser.conf.5.gz", "/usr/share/man/fr/man8/adduser.8.gz", "/usr/share/man/fr/man8/deluser.8.gz", "/usr/share/man/it/man5/adduser.conf.5.gz", "/usr/share/man/it/man5/deluser.conf.5.gz", "/usr/share/man/it/man8/adduser.8.gz", "/usr/share/man/it/man8/deluser.8.gz", "/usr/share/man/man5/adduser.conf.5.gz", "/usr/share/man/man5/deluser.conf.5.gz", "/usr/share/man/man8/adduser.8.gz", "/usr/share/man/man8/deluser.8.gz", "/usr/share/man/pl/man5/adduser.conf.5.gz", "/usr/share/man/pl/man5/deluser.conf.5.gz", "/usr/share/man/pl/man8/adduser.8.gz", "/usr/share/man/pl/man8/deluser.8.gz", "/usr/share/man/pt/man5/adduser.conf.5.gz", "/usr/share/man/pt/man5/deluser.conf.5.gz", "/usr/share/man/pt/man8/adduser.8.gz", "/usr/share/man/pt/man8/deluser.8.gz", "/usr/share/man/ru/man5/adduser.conf.5.gz", "/usr/share/man/ru/man5/deluser.conf.5.gz", "/usr/share/man/ru/man8/adduser.8.gz", "/usr/share/man/ru/man8/deluser.8.gz", "/usr/share/man/sv/man5/adduser.conf.5.gz", "/usr/share/man/sv/man5/deluser.conf.5.gz", "/usr/share/man/sv/man8/adduser.8.gz", "/usr/share/man/sv/man8/deluser.8.gz", "/usr/share/perl5/Debian/AdduserCommon.pm" ], "AnalyzedBy": "dpkg" }, { "ID": "apt@1.8.2.3", "Name": "apt", "Identifier": { "PURL": "pkg:deb/debian/apt@1.8.2.3?arch=amd64\u0026distro=debian-10.13", "UID": "5fc1589d0f3610db" }, "Version": "1.8.2.3", "Arch": "amd64", "SrcName": "apt", "SrcVersion": "1.8.2.3", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "APT Development Team \u003cdeity@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "adduser@3.118", "debian-archive-keyring@2019.1+deb10u2", "gpgv@2.2.12-1+deb10u2", "libapt-pkg5.0@1.8.2.3", "libc6@2.28-10+deb10u3", "libgcc1@1:8.3.0-6", "libgnutls30@3.6.7-4+deb10u12", "libseccomp2@2.3.3-4", "libstdc++6@8.3.0-6" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/systemd/system/apt-daily-upgrade.service", "/lib/systemd/system/apt-daily-upgrade.timer", "/lib/systemd/system/apt-daily.service", "/lib/systemd/system/apt-daily.timer", "/usr/bin/apt", "/usr/bin/apt-cache", "/usr/bin/apt-cdrom", "/usr/bin/apt-config", "/usr/bin/apt-get", "/usr/bin/apt-key", "/usr/bin/apt-mark", "/usr/lib/apt/apt-helper", "/usr/lib/apt/apt.systemd.daily", "/usr/lib/apt/methods/cdrom", "/usr/lib/apt/methods/copy", "/usr/lib/apt/methods/file", "/usr/lib/apt/methods/ftp", "/usr/lib/apt/methods/gpgv", "/usr/lib/apt/methods/http", "/usr/lib/apt/methods/mirror", "/usr/lib/apt/methods/rred", "/usr/lib/apt/methods/rsh", "/usr/lib/apt/methods/store", "/usr/lib/apt/solvers/dump", "/usr/lib/dpkg/methods/apt/desc.apt", "/usr/lib/dpkg/methods/apt/install", "/usr/lib/dpkg/methods/apt/names", "/usr/lib/dpkg/methods/apt/setup", "/usr/lib/dpkg/methods/apt/update", "/usr/lib/x86_64-linux-gnu/libapt-private.so.0.0.0", "/usr/share/bash-completion/completions/apt", "/usr/share/bug/apt/script", "/usr/share/doc/apt/NEWS.Debian.gz", "/usr/share/doc/apt/changelog.gz", "/usr/share/doc/apt/copyright", "/usr/share/doc/apt/examples/apt.conf", "/usr/share/doc/apt/examples/configure-index.gz", "/usr/share/doc/apt/examples/preferences", "/usr/share/doc/apt/examples/sources.list", "/usr/share/lintian/overrides/apt", "/usr/share/locale/ar/LC_MESSAGES/apt.mo", "/usr/share/locale/ast/LC_MESSAGES/apt.mo", "/usr/share/locale/bg/LC_MESSAGES/apt.mo", "/usr/share/locale/bs/LC_MESSAGES/apt.mo", "/usr/share/locale/ca/LC_MESSAGES/apt.mo", "/usr/share/locale/cs/LC_MESSAGES/apt.mo", "/usr/share/locale/cy/LC_MESSAGES/apt.mo", "/usr/share/locale/da/LC_MESSAGES/apt.mo", "/usr/share/locale/de/LC_MESSAGES/apt.mo", "/usr/share/locale/dz/LC_MESSAGES/apt.mo", "/usr/share/locale/el/LC_MESSAGES/apt.mo", "/usr/share/locale/es/LC_MESSAGES/apt.mo", "/usr/share/locale/eu/LC_MESSAGES/apt.mo", "/usr/share/locale/fi/LC_MESSAGES/apt.mo", "/usr/share/locale/fr/LC_MESSAGES/apt.mo", "/usr/share/locale/gl/LC_MESSAGES/apt.mo", "/usr/share/locale/hu/LC_MESSAGES/apt.mo", "/usr/share/locale/it/LC_MESSAGES/apt.mo", "/usr/share/locale/ja/LC_MESSAGES/apt.mo", "/usr/share/locale/km/LC_MESSAGES/apt.mo", "/usr/share/locale/ko/LC_MESSAGES/apt.mo", "/usr/share/locale/ku/LC_MESSAGES/apt.mo", "/usr/share/locale/lt/LC_MESSAGES/apt.mo", "/usr/share/locale/mr/LC_MESSAGES/apt.mo", "/usr/share/locale/nb/LC_MESSAGES/apt.mo", "/usr/share/locale/ne/LC_MESSAGES/apt.mo", "/usr/share/locale/nl/LC_MESSAGES/apt.mo", "/usr/share/locale/nn/LC_MESSAGES/apt.mo", "/usr/share/locale/pl/LC_MESSAGES/apt.mo", "/usr/share/locale/pt/LC_MESSAGES/apt.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/apt.mo", "/usr/share/locale/ro/LC_MESSAGES/apt.mo", "/usr/share/locale/ru/LC_MESSAGES/apt.mo", "/usr/share/locale/sk/LC_MESSAGES/apt.mo", "/usr/share/locale/sl/LC_MESSAGES/apt.mo", "/usr/share/locale/sv/LC_MESSAGES/apt.mo", "/usr/share/locale/th/LC_MESSAGES/apt.mo", "/usr/share/locale/tl/LC_MESSAGES/apt.mo", "/usr/share/locale/tr/LC_MESSAGES/apt.mo", "/usr/share/locale/uk/LC_MESSAGES/apt.mo", "/usr/share/locale/vi/LC_MESSAGES/apt.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/apt.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/apt.mo", "/usr/share/man/de/man1/apt-transport-http.1.gz", "/usr/share/man/de/man1/apt-transport-https.1.gz", "/usr/share/man/de/man1/apt-transport-mirror.1.gz", "/usr/share/man/de/man5/apt.conf.5.gz", "/usr/share/man/de/man5/apt_auth.conf.5.gz", "/usr/share/man/de/man5/apt_preferences.5.gz", "/usr/share/man/de/man5/sources.list.5.gz", "/usr/share/man/de/man8/apt-cache.8.gz", "/usr/share/man/de/man8/apt-cdrom.8.gz", "/usr/share/man/de/man8/apt-config.8.gz", "/usr/share/man/de/man8/apt-get.8.gz", "/usr/share/man/de/man8/apt-key.8.gz", "/usr/share/man/de/man8/apt-mark.8.gz", "/usr/share/man/de/man8/apt-secure.8.gz", "/usr/share/man/de/man8/apt.8.gz", "/usr/share/man/es/man5/apt_preferences.5.gz", "/usr/share/man/es/man8/apt-cache.8.gz", "/usr/share/man/es/man8/apt-cdrom.8.gz", "/usr/share/man/es/man8/apt-config.8.gz", "/usr/share/man/fr/man1/apt-transport-http.1.gz", "/usr/share/man/fr/man1/apt-transport-https.1.gz", "/usr/share/man/fr/man1/apt-transport-mirror.1.gz", "/usr/share/man/fr/man5/apt.conf.5.gz", "/usr/share/man/fr/man5/apt_auth.conf.5.gz", "/usr/share/man/fr/man5/apt_preferences.5.gz", "/usr/share/man/fr/man5/sources.list.5.gz", "/usr/share/man/fr/man8/apt-cache.8.gz", "/usr/share/man/fr/man8/apt-cdrom.8.gz", "/usr/share/man/fr/man8/apt-config.8.gz", "/usr/share/man/fr/man8/apt-get.8.gz", "/usr/share/man/fr/man8/apt-key.8.gz", "/usr/share/man/fr/man8/apt-mark.8.gz", "/usr/share/man/fr/man8/apt-secure.8.gz", "/usr/share/man/fr/man8/apt.8.gz", "/usr/share/man/it/man5/apt.conf.5.gz", "/usr/share/man/it/man5/apt_preferences.5.gz", "/usr/share/man/it/man5/sources.list.5.gz", "/usr/share/man/it/man8/apt-cache.8.gz", "/usr/share/man/it/man8/apt-cdrom.8.gz", "/usr/share/man/it/man8/apt-config.8.gz", "/usr/share/man/it/man8/apt-get.8.gz", "/usr/share/man/it/man8/apt-key.8.gz", "/usr/share/man/it/man8/apt-mark.8.gz", "/usr/share/man/it/man8/apt-secure.8.gz", "/usr/share/man/it/man8/apt.8.gz", "/usr/share/man/ja/man5/apt.conf.5.gz", "/usr/share/man/ja/man5/apt_preferences.5.gz", "/usr/share/man/ja/man5/sources.list.5.gz", "/usr/share/man/ja/man8/apt-cache.8.gz", "/usr/share/man/ja/man8/apt-cdrom.8.gz", "/usr/share/man/ja/man8/apt-config.8.gz", "/usr/share/man/ja/man8/apt-get.8.gz", "/usr/share/man/ja/man8/apt-key.8.gz", "/usr/share/man/ja/man8/apt-mark.8.gz", "/usr/share/man/ja/man8/apt-secure.8.gz", "/usr/share/man/ja/man8/apt.8.gz", "/usr/share/man/man1/apt-transport-http.1.gz", "/usr/share/man/man1/apt-transport-https.1.gz", "/usr/share/man/man1/apt-transport-mirror.1.gz", "/usr/share/man/man5/apt.conf.5.gz", "/usr/share/man/man5/apt_auth.conf.5.gz", "/usr/share/man/man5/apt_preferences.5.gz", "/usr/share/man/man5/sources.list.5.gz", "/usr/share/man/man8/apt-cache.8.gz", "/usr/share/man/man8/apt-cdrom.8.gz", "/usr/share/man/man8/apt-config.8.gz", "/usr/share/man/man8/apt-get.8.gz", "/usr/share/man/man8/apt-key.8.gz", "/usr/share/man/man8/apt-mark.8.gz", "/usr/share/man/man8/apt-secure.8.gz", "/usr/share/man/man8/apt.8.gz", "/usr/share/man/nl/man1/apt-transport-http.1.gz", "/usr/share/man/nl/man1/apt-transport-https.1.gz", "/usr/share/man/nl/man1/apt-transport-mirror.1.gz", "/usr/share/man/nl/man5/apt.conf.5.gz", "/usr/share/man/nl/man5/apt_auth.conf.5.gz", "/usr/share/man/nl/man5/apt_preferences.5.gz", "/usr/share/man/nl/man5/sources.list.5.gz", "/usr/share/man/nl/man8/apt-cache.8.gz", "/usr/share/man/nl/man8/apt-cdrom.8.gz", "/usr/share/man/nl/man8/apt-config.8.gz", "/usr/share/man/nl/man8/apt-get.8.gz", "/usr/share/man/nl/man8/apt-key.8.gz", "/usr/share/man/nl/man8/apt-mark.8.gz", "/usr/share/man/nl/man8/apt-secure.8.gz", "/usr/share/man/nl/man8/apt.8.gz", "/usr/share/man/pl/man5/apt_preferences.5.gz", "/usr/share/man/pl/man8/apt-cache.8.gz", "/usr/share/man/pl/man8/apt-cdrom.8.gz", "/usr/share/man/pl/man8/apt-config.8.gz", "/usr/share/man/pt/man1/apt-transport-http.1.gz", "/usr/share/man/pt/man1/apt-transport-https.1.gz", "/usr/share/man/pt/man1/apt-transport-mirror.1.gz", "/usr/share/man/pt/man5/apt.conf.5.gz", "/usr/share/man/pt/man5/apt_auth.conf.5.gz", "/usr/share/man/pt/man5/apt_preferences.5.gz", "/usr/share/man/pt/man5/sources.list.5.gz", "/usr/share/man/pt/man8/apt-cache.8.gz", "/usr/share/man/pt/man8/apt-cdrom.8.gz", "/usr/share/man/pt/man8/apt-config.8.gz", "/usr/share/man/pt/man8/apt-get.8.gz", "/usr/share/man/pt/man8/apt-key.8.gz", "/usr/share/man/pt/man8/apt-mark.8.gz", "/usr/share/man/pt/man8/apt-secure.8.gz", "/usr/share/man/pt/man8/apt.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "base-files@10.3+deb10u13", "Name": "base-files", "Identifier": { "PURL": "pkg:deb/debian/base-files@10.3%2Bdeb10u13?arch=amd64\u0026distro=debian-10.13", "UID": "e644097c5aac0deb" }, "Version": "10.3+deb10u13", "Arch": "amd64", "SrcName": "base-files", "SrcVersion": "10.3+deb10u13", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Santiago Vila \u003csanvila@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/lib/os-release", "/usr/share/base-files/dot.bashrc", "/usr/share/base-files/dot.profile", "/usr/share/base-files/dot.profile.md5sums", "/usr/share/base-files/info.dir", "/usr/share/base-files/motd", "/usr/share/base-files/profile", "/usr/share/base-files/profile.md5sums", "/usr/share/base-files/staff-group-for-usr-local", "/usr/share/common-licenses/Apache-2.0", "/usr/share/common-licenses/Artistic", "/usr/share/common-licenses/BSD", "/usr/share/common-licenses/CC0-1.0", "/usr/share/common-licenses/GFDL-1.2", "/usr/share/common-licenses/GFDL-1.3", "/usr/share/common-licenses/GPL-1", "/usr/share/common-licenses/GPL-2", "/usr/share/common-licenses/GPL-3", "/usr/share/common-licenses/LGPL-2", "/usr/share/common-licenses/LGPL-2.1", "/usr/share/common-licenses/LGPL-3", "/usr/share/common-licenses/MPL-1.1", "/usr/share/common-licenses/MPL-2.0", "/usr/share/doc/base-files/README", "/usr/share/doc/base-files/README.FHS", "/usr/share/doc/base-files/changelog.gz", "/usr/share/doc/base-files/copyright", "/usr/share/lintian/overrides/base-files" ], "AnalyzedBy": "dpkg" }, { "ID": "base-passwd@3.5.46", "Name": "base-passwd", "Identifier": { "PURL": "pkg:deb/debian/base-passwd@3.5.46?arch=amd64\u0026distro=debian-10.13", "UID": "e41c38f08bf16fbb" }, "Version": "3.5.46", "Arch": "amd64", "SrcName": "base-passwd", "SrcVersion": "3.5.46", "Licenses": [ "GPL-2.0-only", "PD" ], "Maintainer": "Colin Watson \u003ccjwatson@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libdebconfclient0@0.249" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/sbin/update-passwd", "/usr/share/base-passwd/group.master", "/usr/share/base-passwd/passwd.master", "/usr/share/doc-base/users-and-groups", "/usr/share/doc/base-passwd/README", "/usr/share/doc/base-passwd/changelog.gz", "/usr/share/doc/base-passwd/copyright", "/usr/share/doc/base-passwd/users-and-groups.html", "/usr/share/doc/base-passwd/users-and-groups.txt.gz", "/usr/share/lintian/overrides/base-passwd", "/usr/share/man/de/man8/update-passwd.8.gz", "/usr/share/man/es/man8/update-passwd.8.gz", "/usr/share/man/fr/man8/update-passwd.8.gz", "/usr/share/man/ja/man8/update-passwd.8.gz", "/usr/share/man/man8/update-passwd.8.gz", "/usr/share/man/pl/man8/update-passwd.8.gz", "/usr/share/man/ru/man8/update-passwd.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "bash@5.0-4", "Name": "bash", "Identifier": { "PURL": "pkg:deb/debian/bash@5.0-4?arch=amd64\u0026distro=debian-10.13", "UID": "11f502b07c04ae3e" }, "Version": "5.0", "Release": "4", "Arch": "amd64", "SrcName": "bash", "SrcVersion": "5.0", "SrcRelease": "4", "Licenses": [ "GPL-3.0-only" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "base-files@10.3+deb10u13", "debianutils@4.8.6.1" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/bin/bash", "/usr/bin/bashbug", "/usr/bin/clear_console", "/usr/share/doc/bash/CHANGES.gz", "/usr/share/doc/bash/COMPAT.gz", "/usr/share/doc/bash/INTRO.gz", "/usr/share/doc/bash/NEWS.gz", "/usr/share/doc/bash/POSIX.gz", "/usr/share/doc/bash/RBASH", "/usr/share/doc/bash/README.Debian.gz", "/usr/share/doc/bash/README.abs-guide", "/usr/share/doc/bash/README.commands.gz", "/usr/share/doc/bash/README.gz", "/usr/share/doc/bash/changelog.Debian.gz", "/usr/share/doc/bash/changelog.gz", "/usr/share/doc/bash/copyright", "/usr/share/doc/bash/inputrc.arrows", "/usr/share/lintian/overrides/bash", "/usr/share/locale/af/LC_MESSAGES/bash.mo", "/usr/share/locale/bg/LC_MESSAGES/bash.mo", "/usr/share/locale/ca/LC_MESSAGES/bash.mo", "/usr/share/locale/cs/LC_MESSAGES/bash.mo", "/usr/share/locale/da/LC_MESSAGES/bash.mo", "/usr/share/locale/de/LC_MESSAGES/bash.mo", "/usr/share/locale/el/LC_MESSAGES/bash.mo", "/usr/share/locale/en@boldquot/LC_MESSAGES/bash.mo", "/usr/share/locale/en@quot/LC_MESSAGES/bash.mo", "/usr/share/locale/eo/LC_MESSAGES/bash.mo", "/usr/share/locale/es/LC_MESSAGES/bash.mo", "/usr/share/locale/et/LC_MESSAGES/bash.mo", "/usr/share/locale/fi/LC_MESSAGES/bash.mo", "/usr/share/locale/fr/LC_MESSAGES/bash.mo", "/usr/share/locale/ga/LC_MESSAGES/bash.mo", "/usr/share/locale/gl/LC_MESSAGES/bash.mo", "/usr/share/locale/hr/LC_MESSAGES/bash.mo", "/usr/share/locale/hu/LC_MESSAGES/bash.mo", "/usr/share/locale/id/LC_MESSAGES/bash.mo", "/usr/share/locale/it/LC_MESSAGES/bash.mo", "/usr/share/locale/ja/LC_MESSAGES/bash.mo", "/usr/share/locale/lt/LC_MESSAGES/bash.mo", "/usr/share/locale/nb/LC_MESSAGES/bash.mo", "/usr/share/locale/nl/LC_MESSAGES/bash.mo", "/usr/share/locale/pl/LC_MESSAGES/bash.mo", "/usr/share/locale/pt/LC_MESSAGES/bash.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/bash.mo", "/usr/share/locale/ro/LC_MESSAGES/bash.mo", "/usr/share/locale/ru/LC_MESSAGES/bash.mo", "/usr/share/locale/sk/LC_MESSAGES/bash.mo", "/usr/share/locale/sl/LC_MESSAGES/bash.mo", "/usr/share/locale/sr/LC_MESSAGES/bash.mo", "/usr/share/locale/sv/LC_MESSAGES/bash.mo", "/usr/share/locale/tr/LC_MESSAGES/bash.mo", "/usr/share/locale/uk/LC_MESSAGES/bash.mo", "/usr/share/locale/vi/LC_MESSAGES/bash.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/bash.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/bash.mo", "/usr/share/man/man1/bash.1.gz", "/usr/share/man/man1/bashbug.1.gz", "/usr/share/man/man1/clear_console.1.gz", "/usr/share/man/man1/rbash.1.gz", "/usr/share/man/man7/bash-builtins.7.gz", "/usr/share/menu/bash" ], "AnalyzedBy": "dpkg" }, { "ID": "bsdutils@1:2.33.1-0.1+deb10u1", "Name": "bsdutils", "Identifier": { "PURL": "pkg:deb/debian/bsdutils@2.33.1-0.1%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13\u0026epoch=1", "UID": "20bef2d8d5df798" }, "Version": "2.33.1", "Release": "0.1+deb10u1", "Epoch": 1, "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.33.1", "SrcRelease": "0.1+deb10u1", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "public-domain", "BSD-4-Clause", "MIT", "BSD-2-Clause", "BSD-3-Clause", "LGPL-2.0-or-later", "LGPL-2.1-or-later", "GPL-3.0-or-later", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "LaMont Jones \u003clamont@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/bin/logger", "/usr/bin/renice", "/usr/bin/script", "/usr/bin/scriptreplay", "/usr/bin/wall", "/usr/share/bash-completion/completions/logger", "/usr/share/bash-completion/completions/renice", "/usr/share/bash-completion/completions/script", "/usr/share/bash-completion/completions/scriptreplay", "/usr/share/bash-completion/completions/wall", "/usr/share/doc/bsdutils/changelog.Debian.gz", "/usr/share/doc/bsdutils/changelog.gz", "/usr/share/doc/bsdutils/copyright", "/usr/share/lintian/overrides/bsdutils", "/usr/share/man/man1/logger.1.gz", "/usr/share/man/man1/renice.1.gz", "/usr/share/man/man1/script.1.gz", "/usr/share/man/man1/scriptreplay.1.gz", "/usr/share/man/man1/wall.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "ca-certificates@20200601~deb10u2", "Name": "ca-certificates", "Identifier": { "PURL": "pkg:deb/debian/ca-certificates@20200601~deb10u2?arch=all\u0026distro=debian-10.13", "UID": "d73a3f43c7418756" }, "Version": "20200601~deb10u2", "Arch": "all", "SrcName": "ca-certificates", "SrcVersion": "20200601~deb10u2", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "MPL-2.0" ], "Maintainer": "Julien Cristau \u003cjcristau@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debconf@1.5.71+deb10u1", "openssl@1.1.1n-0+deb10u6" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/sbin/update-ca-certificates", "/usr/share/ca-certificates/mozilla/ACCVRAIZ1.crt", "/usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM.crt", "/usr/share/ca-certificates/mozilla/Actalis_Authentication_Root_CA.crt", "/usr/share/ca-certificates/mozilla/AffirmTrust_Commercial.crt", "/usr/share/ca-certificates/mozilla/AffirmTrust_Networking.crt", "/usr/share/ca-certificates/mozilla/AffirmTrust_Premium.crt", "/usr/share/ca-certificates/mozilla/AffirmTrust_Premium_ECC.crt", "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt", "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt", "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt", "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt", "/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt", "/usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt", "/usr/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt", "/usr/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt", "/usr/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt", "/usr/share/ca-certificates/mozilla/CA_Disig_Root_R2.crt", "/usr/share/ca-certificates/mozilla/CFCA_EV_ROOT.crt", "/usr/share/ca-certificates/mozilla/COMODO_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/COMODO_ECC_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/Certigna.crt", "/usr/share/ca-certificates/mozilla/Certigna_Root_CA.crt", "/usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt", "/usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt", "/usr/share/ca-certificates/mozilla/Chambers_of_Commerce_Root_-_2008.crt", "/usr/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt", "/usr/share/ca-certificates/mozilla/Cybertrust_Global_Root.crt", "/usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt", "/usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt", "/usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_CA.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt", "/usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt", "/usr/share/ca-certificates/mozilla/E-Tugra_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/EC-ACC.crt", "/usr/share/ca-certificates/mozilla/EE_Certification_Centre_Root_CA.crt", "/usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt", "/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt", "/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G2.crt", "/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G4.crt", "/usr/share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt", "/usr/share/ca-certificates/mozilla/GTS_Root_R1.crt", "/usr/share/ca-certificates/mozilla/GTS_Root_R2.crt", "/usr/share/ca-certificates/mozilla/GTS_Root_R3.crt", "/usr/share/ca-certificates/mozilla/GTS_Root_R4.crt", "/usr/share/ca-certificates/mozilla/GeoTrust_Global_CA.crt", "/usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G2.crt", "/usr/share/ca-certificates/mozilla/GeoTrust_Primary_Certification_Authority_-_G3.crt", "/usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA.crt", "/usr/share/ca-certificates/mozilla/GeoTrust_Universal_CA_2.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R4.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R2.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R3.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R6.crt", "/usr/share/ca-certificates/mozilla/Global_Chambersign_Root_-_2008.crt", "/usr/share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt", "/usr/share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt", "/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt", "/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt", "/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt", "/usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_1.crt", "/usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt", "/usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt", "/usr/share/ca-certificates/mozilla/IdenTrust_Commercial_Root_CA_1.crt", "/usr/share/ca-certificates/mozilla/IdenTrust_Public_Sector_Root_CA_1.crt", "/usr/share/ca-certificates/mozilla/Izenpe.com.crt", "/usr/share/ca-certificates/mozilla/LuxTrust_Global_Root_2.crt", "/usr/share/ca-certificates/mozilla/Microsec_e-Szigno_Root_CA_2009.crt", "/usr/share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt", "/usr/share/ca-certificates/mozilla/Network_Solutions_Certificate_Authority.crt", "/usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GA_CA.crt", "/usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt", "/usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt", "/usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt", "/usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt", "/usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt", "/usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt", "/usr/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt", "/usr/share/ca-certificates/mozilla/SecureSign_RootCA11.crt", "/usr/share/ca-certificates/mozilla/SecureTrust_CA.crt", "/usr/share/ca-certificates/mozilla/Secure_Global_CA.crt", "/usr/share/ca-certificates/mozilla/Security_Communication_RootCA2.crt", "/usr/share/ca-certificates/mozilla/Security_Communication_Root_CA.crt", "/usr/share/ca-certificates/mozilla/Sonera_Class_2_Root_CA.crt", "/usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_EV_Root_CA.crt", "/usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_Root_CA_-_G2.crt", "/usr/share/ca-certificates/mozilla/Staat_der_Nederlanden_Root_CA_-_G3.crt", "/usr/share/ca-certificates/mozilla/Starfield_Class_2_CA.crt", "/usr/share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt", "/usr/share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt", "/usr/share/ca-certificates/mozilla/SwissSign_Gold_CA_-_G2.crt", "/usr/share/ca-certificates/mozilla/SwissSign_Silver_CA_-_G2.crt", "/usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt", "/usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt", "/usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt", "/usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt", "/usr/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/Taiwan_GRCA.crt", "/usr/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt", "/usr/share/ca-certificates/mozilla/TrustCor_ECA-1.crt", "/usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-1.crt", "/usr/share/ca-certificates/mozilla/TrustCor_RootCert_CA-2.crt", "/usr/share/ca-certificates/mozilla/Trustis_FPS_Root_CA.crt", "/usr/share/ca-certificates/mozilla/UCA_Extended_Validation_Root.crt", "/usr/share/ca-certificates/mozilla/UCA_Global_G2_Root.crt", "/usr/share/ca-certificates/mozilla/USERTrust_ECC_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt", "/usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt", "/usr/share/ca-certificates/mozilla/VeriSign_Universal_Root_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/Verisign_Class_3_Public_Primary_Certification_Authority_-_G3.crt", "/usr/share/ca-certificates/mozilla/XRamp_Global_CA_Root.crt", "/usr/share/ca-certificates/mozilla/certSIGN_ROOT_CA.crt", "/usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_C3.crt", "/usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_G3.crt", "/usr/share/ca-certificates/mozilla/emSign_Root_CA_-_C1.crt", "/usr/share/ca-certificates/mozilla/emSign_Root_CA_-_G1.crt", "/usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA.crt", "/usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G2.crt", "/usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-_G3.crt", "/usr/share/doc/ca-certificates/README.Debian", "/usr/share/doc/ca-certificates/changelog.gz", "/usr/share/doc/ca-certificates/copyright", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/Makefile", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/README", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/ca-certificates-local.triggers", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/changelog", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/compat", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/control", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/copyright", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/postrm", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/rules", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/source/format", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/local/Local_Root_CA.crt", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/local/Makefile", "/usr/share/man/man8/update-ca-certificates.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "cloudflared@2025.7.0", "Name": "cloudflared", "Identifier": { "PURL": "pkg:deb/debian/cloudflared@2025.7.0?arch=amd64\u0026distro=debian-10.13", "UID": "c5a8c97c3751000e" }, "Version": "2025.7.0", "Arch": "amd64", "SrcName": "cloudflared", "SrcVersion": "2025.7.0", "Maintainer": "Cloudflare \u003csupport@cloudflare.com\u003e", "Repository": { "Class": "third-party" }, "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "dpkg" }, { "ID": "coreutils@8.30-3", "Name": "coreutils", "Identifier": { "PURL": "pkg:deb/debian/coreutils@8.30-3?arch=amd64\u0026distro=debian-10.13", "UID": "bb398514281a32a3" }, "Version": "8.30", "Release": "3", "Arch": "amd64", "SrcName": "coreutils", "SrcVersion": "8.30", "SrcRelease": "3", "Licenses": [ "GPL-3.0-only" ], "Maintainer": "Michael Stone \u003cmstone@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/bin/cat", "/bin/chgrp", "/bin/chmod", "/bin/chown", "/bin/cp", "/bin/date", "/bin/dd", "/bin/df", "/bin/dir", "/bin/echo", "/bin/false", "/bin/ln", "/bin/ls", "/bin/mkdir", "/bin/mknod", "/bin/mktemp", "/bin/mv", "/bin/pwd", "/bin/readlink", "/bin/rm", "/bin/rmdir", "/bin/sleep", "/bin/stty", "/bin/sync", "/bin/touch", "/bin/true", "/bin/uname", "/bin/vdir", "/usr/bin/[", "/usr/bin/arch", "/usr/bin/b2sum", "/usr/bin/base32", "/usr/bin/base64", "/usr/bin/basename", "/usr/bin/chcon", "/usr/bin/cksum", "/usr/bin/comm", "/usr/bin/csplit", "/usr/bin/cut", "/usr/bin/dircolors", "/usr/bin/dirname", "/usr/bin/du", "/usr/bin/env", "/usr/bin/expand", "/usr/bin/expr", "/usr/bin/factor", "/usr/bin/fmt", "/usr/bin/fold", "/usr/bin/groups", "/usr/bin/head", "/usr/bin/hostid", "/usr/bin/id", "/usr/bin/install", "/usr/bin/join", "/usr/bin/link", "/usr/bin/logname", "/usr/bin/md5sum", "/usr/bin/mkfifo", "/usr/bin/nice", "/usr/bin/nl", "/usr/bin/nohup", "/usr/bin/nproc", "/usr/bin/numfmt", "/usr/bin/od", "/usr/bin/paste", "/usr/bin/pathchk", "/usr/bin/pinky", "/usr/bin/pr", "/usr/bin/printenv", "/usr/bin/printf", "/usr/bin/ptx", "/usr/bin/realpath", "/usr/bin/runcon", "/usr/bin/seq", "/usr/bin/sha1sum", "/usr/bin/sha224sum", "/usr/bin/sha256sum", "/usr/bin/sha384sum", "/usr/bin/sha512sum", "/usr/bin/shred", "/usr/bin/shuf", "/usr/bin/sort", "/usr/bin/split", "/usr/bin/stat", "/usr/bin/stdbuf", "/usr/bin/sum", "/usr/bin/tac", "/usr/bin/tail", "/usr/bin/tee", "/usr/bin/test", "/usr/bin/timeout", "/usr/bin/tr", "/usr/bin/truncate", "/usr/bin/tsort", "/usr/bin/tty", "/usr/bin/unexpand", "/usr/bin/uniq", "/usr/bin/unlink", "/usr/bin/users", "/usr/bin/wc", "/usr/bin/who", "/usr/bin/whoami", "/usr/bin/yes", "/usr/lib/x86_64-linux-gnu/coreutils/libstdbuf.so", "/usr/sbin/chroot", "/usr/share/doc/coreutils/AUTHORS", "/usr/share/doc/coreutils/NEWS.Debian.gz", "/usr/share/doc/coreutils/NEWS.gz", "/usr/share/doc/coreutils/README.Debian", "/usr/share/doc/coreutils/README.gz", "/usr/share/doc/coreutils/THANKS.gz", "/usr/share/doc/coreutils/TODO.gz", "/usr/share/doc/coreutils/changelog.Debian.gz", "/usr/share/doc/coreutils/changelog.gz", "/usr/share/doc/coreutils/copyright", "/usr/share/info/coreutils.info.gz", "/usr/share/locale/af/LC_MESSAGES/coreutils.mo", "/usr/share/locale/be/LC_MESSAGES/coreutils.mo", "/usr/share/locale/bg/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ca/LC_MESSAGES/coreutils.mo", "/usr/share/locale/cs/LC_MESSAGES/coreutils.mo", "/usr/share/locale/da/LC_MESSAGES/coreutils.mo", "/usr/share/locale/de/LC_MESSAGES/coreutils.mo", "/usr/share/locale/el/LC_MESSAGES/coreutils.mo", "/usr/share/locale/eo/LC_MESSAGES/coreutils.mo", "/usr/share/locale/es/LC_MESSAGES/coreutils.mo", "/usr/share/locale/et/LC_MESSAGES/coreutils.mo", "/usr/share/locale/eu/LC_MESSAGES/coreutils.mo", "/usr/share/locale/fi/LC_MESSAGES/coreutils.mo", "/usr/share/locale/fr/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ga/LC_MESSAGES/coreutils.mo", "/usr/share/locale/gl/LC_MESSAGES/coreutils.mo", "/usr/share/locale/hr/LC_MESSAGES/coreutils.mo", "/usr/share/locale/hu/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ia/LC_MESSAGES/coreutils.mo", "/usr/share/locale/id/LC_MESSAGES/coreutils.mo", "/usr/share/locale/it/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ja/LC_MESSAGES/coreutils.mo", "/usr/share/locale/kk/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ko/LC_MESSAGES/coreutils.mo", "/usr/share/locale/lg/LC_MESSAGES/coreutils.mo", "/usr/share/locale/lt/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ms/LC_MESSAGES/coreutils.mo", "/usr/share/locale/nb/LC_MESSAGES/coreutils.mo", "/usr/share/locale/nl/LC_MESSAGES/coreutils.mo", "/usr/share/locale/pl/LC_MESSAGES/coreutils.mo", "/usr/share/locale/pt/LC_MESSAGES/coreutils.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ro/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ru/LC_MESSAGES/coreutils.mo", "/usr/share/locale/sk/LC_MESSAGES/coreutils.mo", "/usr/share/locale/sl/LC_MESSAGES/coreutils.mo", "/usr/share/locale/sr/LC_MESSAGES/coreutils.mo", "/usr/share/locale/sv/LC_MESSAGES/coreutils.mo", "/usr/share/locale/tr/LC_MESSAGES/coreutils.mo", "/usr/share/locale/uk/LC_MESSAGES/coreutils.mo", "/usr/share/locale/vi/LC_MESSAGES/coreutils.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/coreutils.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/coreutils.mo", "/usr/share/man/man1/arch.1.gz", "/usr/share/man/man1/b2sum.1.gz", "/usr/share/man/man1/base32.1.gz", "/usr/share/man/man1/base64.1.gz", "/usr/share/man/man1/basename.1.gz", "/usr/share/man/man1/cat.1.gz", "/usr/share/man/man1/chcon.1.gz", "/usr/share/man/man1/chgrp.1.gz", "/usr/share/man/man1/chmod.1.gz", "/usr/share/man/man1/chown.1.gz", "/usr/share/man/man1/cksum.1.gz", "/usr/share/man/man1/comm.1.gz", "/usr/share/man/man1/cp.1.gz", "/usr/share/man/man1/csplit.1.gz", "/usr/share/man/man1/cut.1.gz", "/usr/share/man/man1/date.1.gz", "/usr/share/man/man1/dd.1.gz", "/usr/share/man/man1/df.1.gz", "/usr/share/man/man1/dir.1.gz", "/usr/share/man/man1/dircolors.1.gz", "/usr/share/man/man1/dirname.1.gz", "/usr/share/man/man1/du.1.gz", "/usr/share/man/man1/echo.1.gz", "/usr/share/man/man1/env.1.gz", "/usr/share/man/man1/expand.1.gz", "/usr/share/man/man1/expr.1.gz", "/usr/share/man/man1/factor.1.gz", "/usr/share/man/man1/false.1.gz", "/usr/share/man/man1/fmt.1.gz", "/usr/share/man/man1/fold.1.gz", "/usr/share/man/man1/groups.1.gz", "/usr/share/man/man1/head.1.gz", "/usr/share/man/man1/hostid.1.gz", "/usr/share/man/man1/id.1.gz", "/usr/share/man/man1/install.1.gz", "/usr/share/man/man1/join.1.gz", "/usr/share/man/man1/link.1.gz", "/usr/share/man/man1/ln.1.gz", "/usr/share/man/man1/logname.1.gz", "/usr/share/man/man1/ls.1.gz", "/usr/share/man/man1/md5sum.1.gz", "/usr/share/man/man1/mkdir.1.gz", "/usr/share/man/man1/mkfifo.1.gz", "/usr/share/man/man1/mknod.1.gz", "/usr/share/man/man1/mktemp.1.gz", "/usr/share/man/man1/mv.1.gz", "/usr/share/man/man1/nice.1.gz", "/usr/share/man/man1/nl.1.gz", "/usr/share/man/man1/nohup.1.gz", "/usr/share/man/man1/nproc.1.gz", "/usr/share/man/man1/numfmt.1.gz", "/usr/share/man/man1/od.1.gz", "/usr/share/man/man1/paste.1.gz", "/usr/share/man/man1/pathchk.1.gz", "/usr/share/man/man1/pinky.1.gz", "/usr/share/man/man1/pr.1.gz", "/usr/share/man/man1/printenv.1.gz", "/usr/share/man/man1/printf.1.gz", "/usr/share/man/man1/ptx.1.gz", "/usr/share/man/man1/pwd.1.gz", "/usr/share/man/man1/readlink.1.gz", "/usr/share/man/man1/realpath.1.gz", "/usr/share/man/man1/rm.1.gz", "/usr/share/man/man1/rmdir.1.gz", "/usr/share/man/man1/runcon.1.gz", "/usr/share/man/man1/seq.1.gz", "/usr/share/man/man1/sha1sum.1.gz", "/usr/share/man/man1/sha224sum.1.gz", "/usr/share/man/man1/sha256sum.1.gz", "/usr/share/man/man1/sha384sum.1.gz", "/usr/share/man/man1/sha512sum.1.gz", "/usr/share/man/man1/shred.1.gz", "/usr/share/man/man1/shuf.1.gz", "/usr/share/man/man1/sleep.1.gz", "/usr/share/man/man1/sort.1.gz", "/usr/share/man/man1/split.1.gz", "/usr/share/man/man1/stat.1.gz", "/usr/share/man/man1/stdbuf.1.gz", "/usr/share/man/man1/stty.1.gz", "/usr/share/man/man1/sum.1.gz", "/usr/share/man/man1/sync.1.gz", "/usr/share/man/man1/tac.1.gz", "/usr/share/man/man1/tail.1.gz", "/usr/share/man/man1/tee.1.gz", "/usr/share/man/man1/test.1.gz", "/usr/share/man/man1/timeout.1.gz", "/usr/share/man/man1/touch.1.gz", "/usr/share/man/man1/tr.1.gz", "/usr/share/man/man1/true.1.gz", "/usr/share/man/man1/truncate.1.gz", "/usr/share/man/man1/tsort.1.gz", "/usr/share/man/man1/tty.1.gz", "/usr/share/man/man1/uname.1.gz", "/usr/share/man/man1/unexpand.1.gz", "/usr/share/man/man1/uniq.1.gz", "/usr/share/man/man1/unlink.1.gz", "/usr/share/man/man1/users.1.gz", "/usr/share/man/man1/vdir.1.gz", "/usr/share/man/man1/wc.1.gz", "/usr/share/man/man1/who.1.gz", "/usr/share/man/man1/whoami.1.gz", "/usr/share/man/man1/yes.1.gz", "/usr/share/man/man8/chroot.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "curl@7.64.0-4+deb10u9", "Name": "curl", "Identifier": { "PURL": "pkg:deb/debian/curl@7.64.0-4%2Bdeb10u9?arch=amd64\u0026distro=debian-10.13", "UID": "4b71c5960f6f4d19" }, "Version": "7.64.0", "Release": "4+deb10u9", "Arch": "amd64", "SrcName": "curl", "SrcVersion": "7.64.0", "SrcRelease": "4+deb10u9", "Licenses": [ "curl", "ISC", "BSD-3-Clause", "public-domain", "BSD-4-Clause", "other" ], "Maintainer": "Alessandro Ghedini \u003cghedo@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libcurl4@7.64.0-4+deb10u9", "zlib1g@1:1.2.11.dfsg-1+deb10u2" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/bin/curl", "/usr/share/doc/curl/NEWS.Debian.gz", "/usr/share/doc/curl/changelog.Debian.gz", "/usr/share/doc/curl/changelog.gz", "/usr/share/doc/curl/copyright", "/usr/share/man/man1/curl.1.gz", "/usr/share/zsh/vendor-completions/_curl" ], "AnalyzedBy": "dpkg" }, { "ID": "dash@0.5.10.2-5", "Name": "dash", "Identifier": { "PURL": "pkg:deb/debian/dash@0.5.10.2-5?arch=amd64\u0026distro=debian-10.13", "UID": "2c4ba61500cb0203" }, "Version": "0.5.10.2", "Release": "5", "Arch": "amd64", "SrcName": "dash", "SrcVersion": "0.5.10.2", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Andrej Shadura \u003candrewsh@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debconf@1.5.71+deb10u1", "debianutils@4.8.6.1", "dpkg@1.19.8" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/bin/dash", "/usr/share/doc/dash/NEWS.Debian.gz", "/usr/share/doc/dash/README.Debian.diet", "/usr/share/doc/dash/README.source", "/usr/share/doc/dash/changelog.Debian.gz", "/usr/share/doc/dash/changelog.gz", "/usr/share/doc/dash/copyright", "/usr/share/lintian/overrides/dash", "/usr/share/man/man1/dash.1.gz", "/usr/share/menu/dash" ], "AnalyzedBy": "dpkg" }, { "ID": "debconf@1.5.71+deb10u1", "Name": "debconf", "Identifier": { "PURL": "pkg:deb/debian/debconf@1.5.71%2Bdeb10u1?arch=all\u0026distro=debian-10.13", "UID": "66b88e291e3459c0" }, "Version": "1.5.71+deb10u1", "Arch": "all", "SrcName": "debconf", "SrcVersion": "1.5.71+deb10u1", "Licenses": [ "BSD-2-Clause" ], "Maintainer": "Debconf Developers \u003cdebconf-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/bin/debconf", "/usr/bin/debconf-apt-progress", "/usr/bin/debconf-communicate", "/usr/bin/debconf-copydb", "/usr/bin/debconf-escape", "/usr/bin/debconf-set-selections", "/usr/bin/debconf-show", "/usr/sbin/dpkg-preconfigure", "/usr/sbin/dpkg-reconfigure", "/usr/share/bash-completion/completions/debconf", "/usr/share/debconf/confmodule", "/usr/share/debconf/confmodule.sh", "/usr/share/debconf/debconf.conf", "/usr/share/debconf/fix_db.pl", "/usr/share/debconf/frontend", "/usr/share/debconf/transition_db.pl", "/usr/share/doc/debconf/NEWS.Debian.gz", "/usr/share/doc/debconf/README.Debian", "/usr/share/doc/debconf/changelog.gz", "/usr/share/doc/debconf/copyright", "/usr/share/lintian/overrides/debconf", "/usr/share/man/man1/debconf-apt-progress.1.gz", "/usr/share/man/man1/debconf-communicate.1.gz", "/usr/share/man/man1/debconf-copydb.1.gz", "/usr/share/man/man1/debconf-escape.1.gz", "/usr/share/man/man1/debconf-set-selections.1.gz", "/usr/share/man/man1/debconf-show.1.gz", "/usr/share/man/man1/debconf.1.gz", "/usr/share/man/man8/dpkg-preconfigure.8.gz", "/usr/share/man/man8/dpkg-reconfigure.8.gz", "/usr/share/perl5/Debconf/AutoSelect.pm", "/usr/share/perl5/Debconf/Base.pm", "/usr/share/perl5/Debconf/Client/ConfModule.pm", "/usr/share/perl5/Debconf/ConfModule.pm", "/usr/share/perl5/Debconf/Config.pm", "/usr/share/perl5/Debconf/Db.pm", "/usr/share/perl5/Debconf/DbDriver.pm", "/usr/share/perl5/Debconf/DbDriver/Backup.pm", "/usr/share/perl5/Debconf/DbDriver/Cache.pm", "/usr/share/perl5/Debconf/DbDriver/Copy.pm", "/usr/share/perl5/Debconf/DbDriver/Debug.pm", "/usr/share/perl5/Debconf/DbDriver/DirTree.pm", "/usr/share/perl5/Debconf/DbDriver/Directory.pm", "/usr/share/perl5/Debconf/DbDriver/File.pm", "/usr/share/perl5/Debconf/DbDriver/LDAP.pm", "/usr/share/perl5/Debconf/DbDriver/PackageDir.pm", "/usr/share/perl5/Debconf/DbDriver/Pipe.pm", "/usr/share/perl5/Debconf/DbDriver/Stack.pm", "/usr/share/perl5/Debconf/Element.pm", "/usr/share/perl5/Debconf/Element/Dialog/Boolean.pm", "/usr/share/perl5/Debconf/Element/Dialog/Error.pm", "/usr/share/perl5/Debconf/Element/Dialog/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Dialog/Note.pm", "/usr/share/perl5/Debconf/Element/Dialog/Password.pm", "/usr/share/perl5/Debconf/Element/Dialog/Progress.pm", "/usr/share/perl5/Debconf/Element/Dialog/Select.pm", "/usr/share/perl5/Debconf/Element/Dialog/String.pm", "/usr/share/perl5/Debconf/Element/Dialog/Text.pm", "/usr/share/perl5/Debconf/Element/Editor/Boolean.pm", "/usr/share/perl5/Debconf/Element/Editor/Error.pm", "/usr/share/perl5/Debconf/Element/Editor/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Editor/Note.pm", "/usr/share/perl5/Debconf/Element/Editor/Password.pm", "/usr/share/perl5/Debconf/Element/Editor/Progress.pm", "/usr/share/perl5/Debconf/Element/Editor/Select.pm", "/usr/share/perl5/Debconf/Element/Editor/String.pm", "/usr/share/perl5/Debconf/Element/Editor/Text.pm", "/usr/share/perl5/Debconf/Element/Gnome.pm", "/usr/share/perl5/Debconf/Element/Gnome/Boolean.pm", "/usr/share/perl5/Debconf/Element/Gnome/Error.pm", "/usr/share/perl5/Debconf/Element/Gnome/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Gnome/Note.pm", "/usr/share/perl5/Debconf/Element/Gnome/Password.pm", "/usr/share/perl5/Debconf/Element/Gnome/Progress.pm", "/usr/share/perl5/Debconf/Element/Gnome/Select.pm", "/usr/share/perl5/Debconf/Element/Gnome/String.pm", "/usr/share/perl5/Debconf/Element/Gnome/Text.pm", "/usr/share/perl5/Debconf/Element/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Noninteractive.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Boolean.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Error.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Note.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Password.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Progress.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Select.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/String.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Text.pm", "/usr/share/perl5/Debconf/Element/Select.pm", "/usr/share/perl5/Debconf/Element/Teletype/Boolean.pm", "/usr/share/perl5/Debconf/Element/Teletype/Error.pm", "/usr/share/perl5/Debconf/Element/Teletype/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Teletype/Note.pm", "/usr/share/perl5/Debconf/Element/Teletype/Password.pm", "/usr/share/perl5/Debconf/Element/Teletype/Progress.pm", "/usr/share/perl5/Debconf/Element/Teletype/Select.pm", "/usr/share/perl5/Debconf/Element/Teletype/String.pm", "/usr/share/perl5/Debconf/Element/Teletype/Text.pm", "/usr/share/perl5/Debconf/Element/Web/Boolean.pm", "/usr/share/perl5/Debconf/Element/Web/Error.pm", "/usr/share/perl5/Debconf/Element/Web/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Web/Note.pm", "/usr/share/perl5/Debconf/Element/Web/Password.pm", "/usr/share/perl5/Debconf/Element/Web/Progress.pm", "/usr/share/perl5/Debconf/Element/Web/Select.pm", "/usr/share/perl5/Debconf/Element/Web/String.pm", "/usr/share/perl5/Debconf/Element/Web/Text.pm", "/usr/share/perl5/Debconf/Encoding.pm", "/usr/share/perl5/Debconf/Format.pm", "/usr/share/perl5/Debconf/Format/822.pm", "/usr/share/perl5/Debconf/FrontEnd.pm", "/usr/share/perl5/Debconf/FrontEnd/Dialog.pm", "/usr/share/perl5/Debconf/FrontEnd/Editor.pm", "/usr/share/perl5/Debconf/FrontEnd/Gnome.pm", "/usr/share/perl5/Debconf/FrontEnd/Kde.pm", "/usr/share/perl5/Debconf/FrontEnd/Noninteractive.pm", "/usr/share/perl5/Debconf/FrontEnd/Passthrough.pm", "/usr/share/perl5/Debconf/FrontEnd/Readline.pm", "/usr/share/perl5/Debconf/FrontEnd/ScreenSize.pm", "/usr/share/perl5/Debconf/FrontEnd/Teletype.pm", "/usr/share/perl5/Debconf/FrontEnd/Text.pm", "/usr/share/perl5/Debconf/FrontEnd/Web.pm", "/usr/share/perl5/Debconf/Gettext.pm", "/usr/share/perl5/Debconf/Iterator.pm", "/usr/share/perl5/Debconf/Log.pm", "/usr/share/perl5/Debconf/Path.pm", "/usr/share/perl5/Debconf/Priority.pm", "/usr/share/perl5/Debconf/Question.pm", "/usr/share/perl5/Debconf/Template.pm", "/usr/share/perl5/Debconf/Template/Transient.pm", "/usr/share/perl5/Debconf/TmpFile.pm", "/usr/share/perl5/Debian/DebConf/Client/ConfModule.pm", "/usr/share/pixmaps/debian-logo.png" ], "AnalyzedBy": "dpkg" }, { "ID": "debian-archive-keyring@2019.1+deb10u2", "Name": "debian-archive-keyring", "Identifier": { "PURL": "pkg:deb/debian/debian-archive-keyring@2019.1%2Bdeb10u2?arch=all\u0026distro=debian-10.13", "UID": "33d38364024305e9" }, "Version": "2019.1+deb10u2", "Arch": "all", "SrcName": "debian-archive-keyring", "SrcVersion": "2019.1+deb10u2", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Debian Release Team \u003cpackages@release.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/share/doc/debian-archive-keyring/README", "/usr/share/doc/debian-archive-keyring/changelog.gz", "/usr/share/doc/debian-archive-keyring/copyright", "/usr/share/keyrings/debian-archive-bookworm-automatic.gpg", "/usr/share/keyrings/debian-archive-bookworm-security-automatic.gpg", "/usr/share/keyrings/debian-archive-bookworm-stable.gpg", "/usr/share/keyrings/debian-archive-bullseye-automatic.gpg", "/usr/share/keyrings/debian-archive-bullseye-security-automatic.gpg", "/usr/share/keyrings/debian-archive-bullseye-stable.gpg", "/usr/share/keyrings/debian-archive-buster-automatic.gpg", "/usr/share/keyrings/debian-archive-buster-security-automatic.gpg", "/usr/share/keyrings/debian-archive-buster-stable.gpg", "/usr/share/keyrings/debian-archive-keyring.gpg", "/usr/share/keyrings/debian-archive-removed-keys.gpg", "/usr/share/keyrings/debian-archive-stretch-automatic.gpg", "/usr/share/keyrings/debian-archive-stretch-security-automatic.gpg", "/usr/share/keyrings/debian-archive-stretch-stable.gpg" ], "AnalyzedBy": "dpkg" }, { "ID": "debianutils@4.8.6.1", "Name": "debianutils", "Identifier": { "PURL": "pkg:deb/debian/debianutils@4.8.6.1?arch=amd64\u0026distro=debian-10.13", "UID": "3eb7516812583ec7" }, "Version": "4.8.6.1", "Arch": "amd64", "SrcName": "debianutils", "SrcVersion": "4.8.6.1", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Clint Adams \u003cclint@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/bin/run-parts", "/bin/tempfile", "/bin/which", "/sbin/installkernel", "/usr/bin/ischroot", "/usr/bin/savelog", "/usr/sbin/add-shell", "/usr/sbin/remove-shell", "/usr/share/debianutils/shells", "/usr/share/doc/debianutils/README.shells.gz", "/usr/share/doc/debianutils/changelog.gz", "/usr/share/doc/debianutils/copyright", "/usr/share/man/de/man1/tempfile.1.gz", "/usr/share/man/de/man1/which.1.gz", "/usr/share/man/de/man8/add-shell.8.gz", "/usr/share/man/de/man8/installkernel.8.gz", "/usr/share/man/de/man8/remove-shell.8.gz", "/usr/share/man/de/man8/run-parts.8.gz", "/usr/share/man/de/man8/savelog.8.gz", "/usr/share/man/es/man1/tempfile.1.gz", "/usr/share/man/es/man1/which.1.gz", "/usr/share/man/es/man8/add-shell.8.gz", "/usr/share/man/es/man8/installkernel.8.gz", "/usr/share/man/es/man8/remove-shell.8.gz", "/usr/share/man/es/man8/run-parts.8.gz", "/usr/share/man/es/man8/savelog.8.gz", "/usr/share/man/fr/man1/tempfile.1.gz", "/usr/share/man/fr/man1/which.1.gz", "/usr/share/man/fr/man8/add-shell.8.gz", "/usr/share/man/fr/man8/installkernel.8.gz", "/usr/share/man/fr/man8/remove-shell.8.gz", "/usr/share/man/fr/man8/run-parts.8.gz", "/usr/share/man/fr/man8/savelog.8.gz", "/usr/share/man/it/man1/tempfile.1.gz", "/usr/share/man/it/man1/which.1.gz", "/usr/share/man/it/man8/add-shell.8.gz", "/usr/share/man/it/man8/installkernel.8.gz", "/usr/share/man/it/man8/remove-shell.8.gz", "/usr/share/man/it/man8/run-parts.8.gz", "/usr/share/man/it/man8/savelog.8.gz", "/usr/share/man/ja/man1/tempfile.1.gz", "/usr/share/man/ja/man1/which.1.gz", "/usr/share/man/ja/man8/add-shell.8.gz", "/usr/share/man/ja/man8/installkernel.8.gz", "/usr/share/man/ja/man8/remove-shell.8.gz", "/usr/share/man/ja/man8/run-parts.8.gz", "/usr/share/man/ja/man8/savelog.8.gz", "/usr/share/man/man1/ischroot.1.gz", "/usr/share/man/man1/tempfile.1.gz", "/usr/share/man/man1/which.1.gz", "/usr/share/man/man8/add-shell.8.gz", "/usr/share/man/man8/installkernel.8.gz", "/usr/share/man/man8/remove-shell.8.gz", "/usr/share/man/man8/run-parts.8.gz", "/usr/share/man/man8/savelog.8.gz", "/usr/share/man/pl/man1/tempfile.1.gz", "/usr/share/man/pl/man1/which.1.gz", "/usr/share/man/pl/man8/add-shell.8.gz", "/usr/share/man/pl/man8/installkernel.8.gz", "/usr/share/man/pl/man8/remove-shell.8.gz", "/usr/share/man/pl/man8/run-parts.8.gz", "/usr/share/man/pl/man8/savelog.8.gz", "/usr/share/man/sl/man1/tempfile.1.gz", "/usr/share/man/sl/man1/which.1.gz", "/usr/share/man/sl/man8/add-shell.8.gz", "/usr/share/man/sl/man8/installkernel.8.gz", "/usr/share/man/sl/man8/remove-shell.8.gz", "/usr/share/man/sl/man8/run-parts.8.gz", "/usr/share/man/sl/man8/savelog.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "diffutils@1:3.7-3", "Name": "diffutils", "Identifier": { "PURL": "pkg:deb/debian/diffutils@3.7-3?arch=amd64\u0026distro=debian-10.13\u0026epoch=1", "UID": "12ecc99d339c2c1e" }, "Version": "3.7", "Release": "3", "Epoch": 1, "Arch": "amd64", "SrcName": "diffutils", "SrcVersion": "3.7", "SrcRelease": "3", "SrcEpoch": 1, "Licenses": [ "GPL-2.0-or-later", "GFDL-1.3-or-later" ], "Maintainer": "Santiago Vila \u003csanvila@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/bin/cmp", "/usr/bin/diff", "/usr/bin/diff3", "/usr/bin/sdiff", "/usr/share/doc/diffutils/NEWS.gz", "/usr/share/doc/diffutils/changelog.Debian.gz", "/usr/share/doc/diffutils/changelog.gz", "/usr/share/doc/diffutils/copyright", "/usr/share/info/diffutils.info.gz", "/usr/share/locale/bg/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ca/LC_MESSAGES/diffutils.mo", "/usr/share/locale/cs/LC_MESSAGES/diffutils.mo", "/usr/share/locale/da/LC_MESSAGES/diffutils.mo", "/usr/share/locale/de/LC_MESSAGES/diffutils.mo", "/usr/share/locale/el/LC_MESSAGES/diffutils.mo", "/usr/share/locale/eo/LC_MESSAGES/diffutils.mo", "/usr/share/locale/es/LC_MESSAGES/diffutils.mo", "/usr/share/locale/fi/LC_MESSAGES/diffutils.mo", "/usr/share/locale/fr/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ga/LC_MESSAGES/diffutils.mo", "/usr/share/locale/gl/LC_MESSAGES/diffutils.mo", "/usr/share/locale/he/LC_MESSAGES/diffutils.mo", "/usr/share/locale/hr/LC_MESSAGES/diffutils.mo", "/usr/share/locale/hu/LC_MESSAGES/diffutils.mo", "/usr/share/locale/id/LC_MESSAGES/diffutils.mo", "/usr/share/locale/it/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ja/LC_MESSAGES/diffutils.mo", "/usr/share/locale/lv/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ms/LC_MESSAGES/diffutils.mo", "/usr/share/locale/nb/LC_MESSAGES/diffutils.mo", "/usr/share/locale/nl/LC_MESSAGES/diffutils.mo", "/usr/share/locale/pl/LC_MESSAGES/diffutils.mo", "/usr/share/locale/pt/LC_MESSAGES/diffutils.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ro/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ru/LC_MESSAGES/diffutils.mo", "/usr/share/locale/sr/LC_MESSAGES/diffutils.mo", "/usr/share/locale/sv/LC_MESSAGES/diffutils.mo", "/usr/share/locale/tr/LC_MESSAGES/diffutils.mo", "/usr/share/locale/uk/LC_MESSAGES/diffutils.mo", "/usr/share/locale/vi/LC_MESSAGES/diffutils.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/diffutils.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/diffutils.mo", "/usr/share/man/man1/cmp.1.gz", "/usr/share/man/man1/diff.1.gz", "/usr/share/man/man1/diff3.1.gz", "/usr/share/man/man1/sdiff.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "dpkg@1.19.8", "Name": "dpkg", "Identifier": { "PURL": "pkg:deb/debian/dpkg@1.19.8?arch=amd64\u0026distro=debian-10.13", "UID": "b6631909e4080ceb" }, "Version": "1.19.8", "Arch": "amd64", "SrcName": "dpkg", "SrcVersion": "1.19.8", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "BSD-2-Clause", "public-domain-s-s-d", "public-domain-md5" ], "Maintainer": "Dpkg Developers \u003cdebian-dpkg@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "tar@1.30+dfsg-6+deb10u1" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/sbin/start-stop-daemon", "/usr/bin/dpkg", "/usr/bin/dpkg-deb", "/usr/bin/dpkg-divert", "/usr/bin/dpkg-maintscript-helper", "/usr/bin/dpkg-query", "/usr/bin/dpkg-split", "/usr/bin/dpkg-statoverride", "/usr/bin/dpkg-trigger", "/usr/bin/update-alternatives", "/usr/share/bug/dpkg", "/usr/share/doc/dpkg/AUTHORS", "/usr/share/doc/dpkg/README.feature-removal-schedule.gz", "/usr/share/doc/dpkg/THANKS.gz", "/usr/share/doc/dpkg/changelog.Debian.gz", "/usr/share/doc/dpkg/changelog.gz", "/usr/share/doc/dpkg/copyright", "/usr/share/doc/dpkg/usertags.gz", "/usr/share/dpkg/abitable", "/usr/share/dpkg/cputable", "/usr/share/dpkg/ostable", "/usr/share/dpkg/tupletable", "/usr/share/lintian/overrides/dpkg", "/usr/share/lintian/profiles/dpkg/main.profile", "/usr/share/locale/ast/LC_MESSAGES/dpkg.mo", "/usr/share/locale/bs/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ca/LC_MESSAGES/dpkg.mo", "/usr/share/locale/cs/LC_MESSAGES/dpkg.mo", "/usr/share/locale/da/LC_MESSAGES/dpkg.mo", "/usr/share/locale/de/LC_MESSAGES/dpkg.mo", "/usr/share/locale/dz/LC_MESSAGES/dpkg.mo", "/usr/share/locale/el/LC_MESSAGES/dpkg.mo", "/usr/share/locale/eo/LC_MESSAGES/dpkg.mo", "/usr/share/locale/es/LC_MESSAGES/dpkg.mo", "/usr/share/locale/et/LC_MESSAGES/dpkg.mo", "/usr/share/locale/eu/LC_MESSAGES/dpkg.mo", "/usr/share/locale/fr/LC_MESSAGES/dpkg.mo", "/usr/share/locale/gl/LC_MESSAGES/dpkg.mo", "/usr/share/locale/hu/LC_MESSAGES/dpkg.mo", "/usr/share/locale/id/LC_MESSAGES/dpkg.mo", "/usr/share/locale/it/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ja/LC_MESSAGES/dpkg.mo", "/usr/share/locale/km/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ko/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ku/LC_MESSAGES/dpkg.mo", "/usr/share/locale/lt/LC_MESSAGES/dpkg.mo", "/usr/share/locale/mr/LC_MESSAGES/dpkg.mo", "/usr/share/locale/nb/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ne/LC_MESSAGES/dpkg.mo", "/usr/share/locale/nl/LC_MESSAGES/dpkg.mo", "/usr/share/locale/nn/LC_MESSAGES/dpkg.mo", "/usr/share/locale/pa/LC_MESSAGES/dpkg.mo", "/usr/share/locale/pl/LC_MESSAGES/dpkg.mo", "/usr/share/locale/pt/LC_MESSAGES/dpkg.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ro/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ru/LC_MESSAGES/dpkg.mo", "/usr/share/locale/sk/LC_MESSAGES/dpkg.mo", "/usr/share/locale/sv/LC_MESSAGES/dpkg.mo", "/usr/share/locale/th/LC_MESSAGES/dpkg.mo", "/usr/share/locale/tl/LC_MESSAGES/dpkg.mo", "/usr/share/locale/tr/LC_MESSAGES/dpkg.mo", "/usr/share/locale/vi/LC_MESSAGES/dpkg.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/dpkg.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/dpkg.mo", "/usr/share/man/de/man1/dpkg-deb.1.gz", "/usr/share/man/de/man1/dpkg-divert.1.gz", "/usr/share/man/de/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/de/man1/dpkg-query.1.gz", "/usr/share/man/de/man1/dpkg-split.1.gz", "/usr/share/man/de/man1/dpkg-statoverride.1.gz", "/usr/share/man/de/man1/dpkg-trigger.1.gz", "/usr/share/man/de/man1/dpkg.1.gz", "/usr/share/man/de/man1/update-alternatives.1.gz", "/usr/share/man/de/man5/dpkg.cfg.5.gz", "/usr/share/man/de/man8/start-stop-daemon.8.gz", "/usr/share/man/es/man1/dpkg-split.1.gz", "/usr/share/man/es/man1/update-alternatives.1.gz", "/usr/share/man/fr/man1/dpkg-deb.1.gz", "/usr/share/man/fr/man1/dpkg-divert.1.gz", "/usr/share/man/fr/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/fr/man1/dpkg-query.1.gz", "/usr/share/man/fr/man1/dpkg-split.1.gz", "/usr/share/man/fr/man1/dpkg-statoverride.1.gz", "/usr/share/man/fr/man1/dpkg-trigger.1.gz", "/usr/share/man/fr/man1/dpkg.1.gz", "/usr/share/man/fr/man1/update-alternatives.1.gz", "/usr/share/man/fr/man5/dpkg.cfg.5.gz", "/usr/share/man/fr/man8/start-stop-daemon.8.gz", "/usr/share/man/it/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/it/man1/dpkg-split.1.gz", "/usr/share/man/it/man1/update-alternatives.1.gz", "/usr/share/man/ja/man1/dpkg-split.1.gz", "/usr/share/man/ja/man1/update-alternatives.1.gz", "/usr/share/man/man1/dpkg-deb.1.gz", "/usr/share/man/man1/dpkg-divert.1.gz", "/usr/share/man/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/man1/dpkg-query.1.gz", "/usr/share/man/man1/dpkg-split.1.gz", "/usr/share/man/man1/dpkg-statoverride.1.gz", "/usr/share/man/man1/dpkg-trigger.1.gz", "/usr/share/man/man1/dpkg.1.gz", "/usr/share/man/man1/update-alternatives.1.gz", "/usr/share/man/man5/dpkg.cfg.5.gz", "/usr/share/man/man8/start-stop-daemon.8.gz", "/usr/share/man/nl/man1/dpkg-deb.1.gz", "/usr/share/man/nl/man1/dpkg-divert.1.gz", "/usr/share/man/nl/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/nl/man1/dpkg-query.1.gz", "/usr/share/man/nl/man1/dpkg-split.1.gz", "/usr/share/man/nl/man1/dpkg-statoverride.1.gz", "/usr/share/man/nl/man1/dpkg-trigger.1.gz", "/usr/share/man/nl/man1/dpkg.1.gz", "/usr/share/man/nl/man1/update-alternatives.1.gz", "/usr/share/man/nl/man5/dpkg.cfg.5.gz", "/usr/share/man/nl/man8/start-stop-daemon.8.gz", "/usr/share/man/pl/man1/dpkg-split.1.gz", "/usr/share/man/pl/man1/update-alternatives.1.gz", "/usr/share/man/sv/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/sv/man1/dpkg-split.1.gz", "/usr/share/man/sv/man1/dpkg-trigger.1.gz", "/usr/share/man/sv/man1/update-alternatives.1.gz", "/usr/share/polkit-1/actions/org.dpkg.pkexec.update-alternatives.policy" ], "AnalyzedBy": "dpkg" }, { "ID": "dumb-init@1.2.2-1.1", "Name": "dumb-init", "Identifier": { "PURL": "pkg:deb/debian/dumb-init@1.2.2-1.1?arch=amd64\u0026distro=debian-10.13", "UID": "6e55d718b643597a" }, "Version": "1.2.2", "Release": "1.1", "Arch": "amd64", "SrcName": "dumb-init", "SrcVersion": "1.2.2", "SrcRelease": "1.1", "Licenses": [ "MIT" ], "Maintainer": "ChangZhuo Chen (陳昌倬) \u003cczchen@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/bin/dumb-init", "/usr/share/doc/dumb-init/README.md.gz", "/usr/share/doc/dumb-init/changelog.Debian.gz", "/usr/share/doc/dumb-init/copyright", "/usr/share/man/man1/dumb-init.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "e2fsprogs@1.44.5-1+deb10u3", "Name": "e2fsprogs", "Identifier": { "PURL": "pkg:deb/debian/e2fsprogs@1.44.5-1%2Bdeb10u3?arch=amd64\u0026distro=debian-10.13", "UID": "9d0af2b1fc98ad2b" }, "Version": "1.44.5", "Release": "1+deb10u3", "Arch": "amd64", "SrcName": "e2fsprogs", "SrcVersion": "1.44.5", "SrcRelease": "1+deb10u3", "Licenses": [ "GPL-2.0-only", "LGPL-2.0-only" ], "Maintainer": "Theodore Y. Ts'o \u003ctytso@mit.edu\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/sbin/badblocks", "/sbin/debugfs", "/sbin/dumpe2fs", "/sbin/e2fsck", "/sbin/e2image", "/sbin/e2undo", "/sbin/logsave", "/sbin/mke2fs", "/sbin/resize2fs", "/sbin/tune2fs", "/usr/bin/chattr", "/usr/bin/lsattr", "/usr/sbin/e2freefrag", "/usr/sbin/e4crypt", "/usr/sbin/e4defrag", "/usr/sbin/filefrag", "/usr/sbin/mklost+found", "/usr/share/doc/e2fsprogs/NEWS.gz", "/usr/share/doc/e2fsprogs/README", "/usr/share/doc/e2fsprogs/changelog.Debian.gz", "/usr/share/doc/e2fsprogs/copyright", "/usr/share/lintian/overrides/e2fsprogs", "/usr/share/man/man1/chattr.1.gz", "/usr/share/man/man1/lsattr.1.gz", "/usr/share/man/man5/e2fsck.conf.5.gz", "/usr/share/man/man5/ext4.5.gz", "/usr/share/man/man5/mke2fs.conf.5.gz", "/usr/share/man/man8/badblocks.8.gz", "/usr/share/man/man8/debugfs.8.gz", "/usr/share/man/man8/dumpe2fs.8.gz", "/usr/share/man/man8/e2freefrag.8.gz", "/usr/share/man/man8/e2fsck.8.gz", "/usr/share/man/man8/e2image.8.gz", "/usr/share/man/man8/e2label.8.gz", "/usr/share/man/man8/e2mmpstatus.8.gz", "/usr/share/man/man8/e2undo.8.gz", "/usr/share/man/man8/e4crypt.8.gz", "/usr/share/man/man8/e4defrag.8.gz", "/usr/share/man/man8/filefrag.8.gz", "/usr/share/man/man8/logsave.8.gz", "/usr/share/man/man8/mke2fs.8.gz", "/usr/share/man/man8/mklost+found.8.gz", "/usr/share/man/man8/resize2fs.8.gz", "/usr/share/man/man8/tune2fs.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "fdisk@2.33.1-0.1+deb10u1", "Name": "fdisk", "Identifier": { "PURL": "pkg:deb/debian/fdisk@2.33.1-0.1%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "807d2ccd1d3252cc" }, "Version": "2.33.1", "Release": "0.1+deb10u1", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.33.1", "SrcRelease": "0.1+deb10u1", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "public-domain", "BSD-4-Clause", "MIT", "BSD-2-Clause", "BSD-3-Clause", "LGPL-2.0-or-later", "LGPL-2.1-or-later", "GPL-3.0-or-later", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "LaMont Jones \u003clamont@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libfdisk1@2.33.1-0.1+deb10u1", "libmount1@2.33.1-0.1+deb10u1", "libncursesw6@6.1+20181013-2+deb10u5", "libsmartcols1@2.33.1-0.1+deb10u1", "libtinfo6@6.1+20181013-2+deb10u5" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/sbin/cfdisk", "/sbin/fdisk", "/sbin/sfdisk", "/usr/share/bash-completion/completions/cfdisk", "/usr/share/bash-completion/completions/fdisk", "/usr/share/bash-completion/completions/sfdisk", "/usr/share/doc/fdisk/changelog.Debian.gz", "/usr/share/doc/fdisk/changelog.gz", "/usr/share/doc/fdisk/copyright", "/usr/share/man/man8/cfdisk.8.gz", "/usr/share/man/man8/fdisk.8.gz", "/usr/share/man/man8/sfdisk.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "findutils@4.6.0+git+20190209-2", "Name": "findutils", "Identifier": { "PURL": "pkg:deb/debian/findutils@4.6.0%2Bgit%2B20190209-2?arch=amd64\u0026distro=debian-10.13", "UID": "491d8d51bfa996b7" }, "Version": "4.6.0+git+20190209", "Release": "2", "Arch": "amd64", "SrcName": "findutils", "SrcVersion": "4.6.0+git+20190209", "SrcRelease": "2", "Licenses": [ "GPL-3.0-only", "GFDL-1.3-only" ], "Maintainer": "Andreas Metzler \u003cametzler@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/bin/find", "/usr/bin/xargs", "/usr/share/doc-base/findutils", "/usr/share/doc/findutils/NEWS.Debian.gz", "/usr/share/doc/findutils/NEWS.gz", "/usr/share/doc/findutils/README.gz", "/usr/share/doc/findutils/TODO", "/usr/share/doc/findutils/changelog.Debian.gz", "/usr/share/doc/findutils/changelog.gz", "/usr/share/doc/findutils/copyright", "/usr/share/info/find-maint.info.gz", "/usr/share/info/find.info-1.gz", "/usr/share/info/find.info-2.gz", "/usr/share/info/find.info.gz", "/usr/share/locale/be/LC_MESSAGES/findutils.mo", "/usr/share/locale/bg/LC_MESSAGES/findutils.mo", "/usr/share/locale/ca/LC_MESSAGES/findutils.mo", "/usr/share/locale/cs/LC_MESSAGES/findutils.mo", "/usr/share/locale/da/LC_MESSAGES/findutils.mo", "/usr/share/locale/de/LC_MESSAGES/findutils.mo", "/usr/share/locale/el/LC_MESSAGES/findutils.mo", "/usr/share/locale/eo/LC_MESSAGES/findutils.mo", "/usr/share/locale/es/LC_MESSAGES/findutils.mo", "/usr/share/locale/et/LC_MESSAGES/findutils.mo", "/usr/share/locale/fi/LC_MESSAGES/findutils.mo", "/usr/share/locale/fr/LC_MESSAGES/findutils.mo", "/usr/share/locale/ga/LC_MESSAGES/findutils.mo", "/usr/share/locale/gl/LC_MESSAGES/findutils.mo", "/usr/share/locale/hr/LC_MESSAGES/findutils.mo", "/usr/share/locale/hu/LC_MESSAGES/findutils.mo", "/usr/share/locale/id/LC_MESSAGES/findutils.mo", "/usr/share/locale/it/LC_MESSAGES/findutils.mo", "/usr/share/locale/ja/LC_MESSAGES/findutils.mo", "/usr/share/locale/ko/LC_MESSAGES/findutils.mo", "/usr/share/locale/lg/LC_MESSAGES/findutils.mo", "/usr/share/locale/lt/LC_MESSAGES/findutils.mo", "/usr/share/locale/ms/LC_MESSAGES/findutils.mo", "/usr/share/locale/nb/LC_MESSAGES/findutils.mo", "/usr/share/locale/nl/LC_MESSAGES/findutils.mo", "/usr/share/locale/pl/LC_MESSAGES/findutils.mo", "/usr/share/locale/pt/LC_MESSAGES/findutils.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/findutils.mo", "/usr/share/locale/ro/LC_MESSAGES/findutils.mo", "/usr/share/locale/ru/LC_MESSAGES/findutils.mo", "/usr/share/locale/sk/LC_MESSAGES/findutils.mo", "/usr/share/locale/sl/LC_MESSAGES/findutils.mo", "/usr/share/locale/sr/LC_MESSAGES/findutils.mo", "/usr/share/locale/sv/LC_MESSAGES/findutils.mo", "/usr/share/locale/tr/LC_MESSAGES/findutils.mo", "/usr/share/locale/uk/LC_MESSAGES/findutils.mo", "/usr/share/locale/vi/LC_MESSAGES/findutils.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/findutils.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/findutils.mo", "/usr/share/man/man1/find.1.gz", "/usr/share/man/man1/xargs.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "gcc-8-base@8.3.0-6", "Name": "gcc-8-base", "Identifier": { "PURL": "pkg:deb/debian/gcc-8-base@8.3.0-6?arch=amd64\u0026distro=debian-10.13", "UID": "58ea355d15f00ff2" }, "Version": "8.3.0", "Release": "6", "Arch": "amd64", "SrcName": "gcc-8", "SrcVersion": "8.3.0", "SrcRelease": "6", "Licenses": [ "GPL-2.0-or-later", "GPL-3.0-only", "GFDL-1.2-only", "GPL-2.0-only", "Artistic-2.0", "LGPL-2.0-or-later" ], "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/share/doc/gcc-8-base/README.Debian.amd64.gz", "/usr/share/doc/gcc-8-base/TODO.Debian", "/usr/share/doc/gcc-8-base/changelog.Debian.gz", "/usr/share/doc/gcc-8-base/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "gpgv@2.2.12-1+deb10u2", "Name": "gpgv", "Identifier": { "PURL": "pkg:deb/debian/gpgv@2.2.12-1%2Bdeb10u2?arch=amd64\u0026distro=debian-10.13", "UID": "1baf43469ae57985" }, "Version": "2.2.12", "Release": "1+deb10u2", "Arch": "amd64", "SrcName": "gnupg2", "SrcVersion": "2.2.12", "SrcRelease": "1+deb10u2", "Licenses": [ "GPL-3.0-or-later", "permissive", "LGPL-2.1-or-later", "MIT", "BSD-3-Clause", "LGPL-3.0-or-later", "RFC-Reference", "TinySCHEME", "CC0-1.0", "GPL-3.0-only", "LGPL-3.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian GnuPG Maintainers \u003cpkg-gnupg-maint@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libbz2-1.0@1.0.6-9.2~deb10u2", "libc6@2.28-10+deb10u3", "libgcrypt20@1.8.4-5+deb10u1", "libgpg-error0@1.35-1", "zlib1g@1:1.2.11.dfsg-1+deb10u2" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/bin/gpgv", "/usr/share/doc/gpgv/NEWS.Debian.gz", "/usr/share/doc/gpgv/changelog.Debian.gz", "/usr/share/doc/gpgv/changelog.gz", "/usr/share/doc/gpgv/copyright", "/usr/share/man/man1/gpgv.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "grep@3.3-1", "Name": "grep", "Identifier": { "PURL": "pkg:deb/debian/grep@3.3-1?arch=amd64\u0026distro=debian-10.13", "UID": "703095bc4f5b0f" }, "Version": "3.3", "Release": "1", "Arch": "amd64", "SrcName": "grep", "SrcVersion": "3.3", "SrcRelease": "1", "Licenses": [ "GPL-3.0-or-later", "GPL-3.0-only" ], "Maintainer": "Anibal Monsalve Salazar \u003canibal@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "dpkg@1.19.8" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/bin/egrep", "/bin/fgrep", "/bin/grep", "/usr/bin/rgrep", "/usr/share/doc/grep/AUTHORS", "/usr/share/doc/grep/NEWS.gz", "/usr/share/doc/grep/README", "/usr/share/doc/grep/THANKS.gz", "/usr/share/doc/grep/TODO.gz", "/usr/share/doc/grep/changelog.Debian.gz", "/usr/share/doc/grep/changelog.gz", "/usr/share/doc/grep/copyright", "/usr/share/info/grep.info.gz", "/usr/share/locale/af/LC_MESSAGES/grep.mo", "/usr/share/locale/be/LC_MESSAGES/grep.mo", "/usr/share/locale/bg/LC_MESSAGES/grep.mo", "/usr/share/locale/ca/LC_MESSAGES/grep.mo", "/usr/share/locale/cs/LC_MESSAGES/grep.mo", "/usr/share/locale/da/LC_MESSAGES/grep.mo", "/usr/share/locale/de/LC_MESSAGES/grep.mo", "/usr/share/locale/el/LC_MESSAGES/grep.mo", "/usr/share/locale/eo/LC_MESSAGES/grep.mo", "/usr/share/locale/es/LC_MESSAGES/grep.mo", "/usr/share/locale/et/LC_MESSAGES/grep.mo", "/usr/share/locale/eu/LC_MESSAGES/grep.mo", "/usr/share/locale/fi/LC_MESSAGES/grep.mo", "/usr/share/locale/fr/LC_MESSAGES/grep.mo", "/usr/share/locale/ga/LC_MESSAGES/grep.mo", "/usr/share/locale/gl/LC_MESSAGES/grep.mo", "/usr/share/locale/he/LC_MESSAGES/grep.mo", "/usr/share/locale/hr/LC_MESSAGES/grep.mo", "/usr/share/locale/hu/LC_MESSAGES/grep.mo", "/usr/share/locale/id/LC_MESSAGES/grep.mo", "/usr/share/locale/it/LC_MESSAGES/grep.mo", "/usr/share/locale/ja/LC_MESSAGES/grep.mo", "/usr/share/locale/ko/LC_MESSAGES/grep.mo", "/usr/share/locale/ky/LC_MESSAGES/grep.mo", "/usr/share/locale/lt/LC_MESSAGES/grep.mo", "/usr/share/locale/nb/LC_MESSAGES/grep.mo", "/usr/share/locale/nl/LC_MESSAGES/grep.mo", "/usr/share/locale/pa/LC_MESSAGES/grep.mo", "/usr/share/locale/pl/LC_MESSAGES/grep.mo", "/usr/share/locale/pt/LC_MESSAGES/grep.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/grep.mo", "/usr/share/locale/ro/LC_MESSAGES/grep.mo", "/usr/share/locale/ru/LC_MESSAGES/grep.mo", "/usr/share/locale/sk/LC_MESSAGES/grep.mo", "/usr/share/locale/sl/LC_MESSAGES/grep.mo", "/usr/share/locale/sr/LC_MESSAGES/grep.mo", "/usr/share/locale/sv/LC_MESSAGES/grep.mo", "/usr/share/locale/th/LC_MESSAGES/grep.mo", "/usr/share/locale/tr/LC_MESSAGES/grep.mo", "/usr/share/locale/uk/LC_MESSAGES/grep.mo", "/usr/share/locale/vi/LC_MESSAGES/grep.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/grep.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/grep.mo", "/usr/share/man/man1/grep.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "gzip@1.9-3+deb10u1", "Name": "gzip", "Identifier": { "PURL": "pkg:deb/debian/gzip@1.9-3%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "5dc26920b0fd354c" }, "Version": "1.9", "Release": "3+deb10u1", "Arch": "amd64", "SrcName": "gzip", "SrcVersion": "1.9", "SrcRelease": "3+deb10u1", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Bdale Garbee \u003cbdale@gag.com\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "dpkg@1.19.8" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/bin/gunzip", "/bin/gzexe", "/bin/gzip", "/bin/uncompress", "/bin/zcat", "/bin/zcmp", "/bin/zdiff", "/bin/zegrep", "/bin/zfgrep", "/bin/zforce", "/bin/zgrep", "/bin/zless", "/bin/zmore", "/bin/znew", "/usr/share/doc/gzip/NEWS.gz", "/usr/share/doc/gzip/README.gz", "/usr/share/doc/gzip/TODO", "/usr/share/doc/gzip/changelog.Debian.gz", "/usr/share/doc/gzip/changelog.gz", "/usr/share/doc/gzip/copyright", "/usr/share/info/gzip.info.gz", "/usr/share/man/man1/gzexe.1.gz", "/usr/share/man/man1/gzip.1.gz", "/usr/share/man/man1/zdiff.1.gz", "/usr/share/man/man1/zforce.1.gz", "/usr/share/man/man1/zgrep.1.gz", "/usr/share/man/man1/zless.1.gz", "/usr/share/man/man1/zmore.1.gz", "/usr/share/man/man1/znew.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "hostname@3.21", "Name": "hostname", "Identifier": { "PURL": "pkg:deb/debian/hostname@3.21?arch=amd64\u0026distro=debian-10.13", "UID": "122909ded18f9832" }, "Version": "3.21", "Arch": "amd64", "SrcName": "hostname", "SrcVersion": "3.21", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Michael Meskes \u003cmeskes@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/bin/hostname", "/usr/share/doc/hostname/changelog.gz", "/usr/share/doc/hostname/copyright", "/usr/share/man/man1/hostname.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "init-system-helpers@1.56+nmu1", "Name": "init-system-helpers", "Identifier": { "PURL": "pkg:deb/debian/init-system-helpers@1.56%2Bnmu1?arch=all\u0026distro=debian-10.13", "UID": "88dd9d55367fd18d" }, "Version": "1.56+nmu1", "Arch": "all", "SrcName": "init-system-helpers", "SrcVersion": "1.56+nmu1", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "perl-base@5.28.1-6+deb10u1" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/bin/deb-systemd-helper", "/usr/bin/deb-systemd-invoke", "/usr/sbin/invoke-rc.d", "/usr/sbin/service", "/usr/sbin/update-rc.d", "/usr/share/bug/init-system-helpers/control", "/usr/share/doc/init-system-helpers/README.invoke-rc.d.gz", "/usr/share/doc/init-system-helpers/README.policy-rc.d.gz", "/usr/share/doc/init-system-helpers/changelog.gz", "/usr/share/doc/init-system-helpers/copyright", "/usr/share/lintian/overrides/init-system-helpers", "/usr/share/man/man1/deb-systemd-helper.1p.gz", "/usr/share/man/man1/deb-systemd-invoke.1p.gz", "/usr/share/man/man8/invoke-rc.d.8.gz", "/usr/share/man/man8/service.8.gz", "/usr/share/man/man8/update-rc.d.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "iputils-ping@3:20180629-2+deb10u2", "Name": "iputils-ping", "Identifier": { "PURL": "pkg:deb/debian/iputils-ping@20180629-2%2Bdeb10u2?arch=amd64\u0026distro=debian-10.13\u0026epoch=3", "UID": "c206e1c817e7d675" }, "Version": "20180629", "Release": "2+deb10u2", "Epoch": 3, "Arch": "amd64", "SrcName": "iputils", "SrcVersion": "20180629", "SrcRelease": "2+deb10u2", "SrcEpoch": 3, "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Noah Meyerhans \u003cnoahm@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libcap2@1:2.25-2", "libidn2-0@2.0.5-1+deb10u1", "libnettle6@3.4.1-1+deb10u1" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/bin/ping", "/usr/share/doc/iputils-ping/NEWS.Debian.gz", "/usr/share/doc/iputils-ping/changelog.Debian.gz", "/usr/share/doc/iputils-ping/copyright", "/usr/share/lintian/overrides/iputils-ping", "/usr/share/man/man8/ping.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libacl1@2.2.53-4", "Name": "libacl1", "Identifier": { "PURL": "pkg:deb/debian/libacl1@2.2.53-4?arch=amd64\u0026distro=debian-10.13", "UID": "940119cddfd00fc4" }, "Version": "2.2.53", "Release": "4", "Arch": "amd64", "SrcName": "acl", "SrcVersion": "2.2.53", "SrcRelease": "4", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.0-or-later", "LGPL-2.1-only" ], "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libattr1@1:2.4.48-4", "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libacl.so.1.1.2253", "/usr/share/doc/libacl1/changelog.Debian.gz", "/usr/share/doc/libacl1/changelog.gz", "/usr/share/doc/libacl1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libapt-pkg5.0@1.8.2.3", "Name": "libapt-pkg5.0", "Identifier": { "PURL": "pkg:deb/debian/libapt-pkg5.0@1.8.2.3?arch=amd64\u0026distro=debian-10.13", "UID": "ee564177045ca76b" }, "Version": "1.8.2.3", "Arch": "amd64", "SrcName": "apt", "SrcVersion": "1.8.2.3", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "APT Development Team \u003cdeity@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libbz2-1.0@1.0.6-9.2~deb10u2", "libc6@2.28-10+deb10u3", "libgcc1@1:8.3.0-6", "liblz4-1@1.8.3-1+deb10u1", "liblzma5@5.2.4-1+deb10u1", "libstdc++6@8.3.0-6", "libsystemd0@241-7~deb10u10", "libudev1@241-7~deb10u10", "libzstd1@1.3.8+dfsg-3+deb10u2", "zlib1g@1:1.2.11.dfsg-1+deb10u2" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libapt-pkg.so.5.0.2", "/usr/share/doc/libapt-pkg5.0/NEWS.Debian.gz", "/usr/share/doc/libapt-pkg5.0/changelog.gz", "/usr/share/doc/libapt-pkg5.0/copyright", "/usr/share/locale/ar/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/ast/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/bg/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/bs/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/ca/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/cs/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/cy/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/da/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/de/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/dz/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/el/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/es/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/eu/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/fi/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/fr/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/gl/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/hu/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/it/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/ja/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/km/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/ko/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/ku/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/lt/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/mr/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/nb/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/ne/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/nl/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/nn/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/pl/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/pt/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/ro/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/ru/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/sk/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/sl/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/sv/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/th/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/tl/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/tr/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/uk/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/vi/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/libapt-pkg5.0.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/libapt-pkg5.0.mo" ], "AnalyzedBy": "dpkg" }, { "ID": "libattr1@1:2.4.48-4", "Name": "libattr1", "Identifier": { "PURL": "pkg:deb/debian/libattr1@2.4.48-4?arch=amd64\u0026distro=debian-10.13\u0026epoch=1", "UID": "cbb4639092863b4e" }, "Version": "2.4.48", "Release": "4", "Epoch": 1, "Arch": "amd64", "SrcName": "attr", "SrcVersion": "2.4.48", "SrcRelease": "4", "SrcEpoch": 1, "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.0-or-later", "LGPL-2.1-only" ], "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libattr.so.1.1.2448", "/usr/share/doc/libattr1/changelog.Debian.gz", "/usr/share/doc/libattr1/changelog.gz", "/usr/share/doc/libattr1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libaudit-common@1:2.8.4-3", "Name": "libaudit-common", "Identifier": { "PURL": "pkg:deb/debian/libaudit-common@2.8.4-3?arch=all\u0026distro=debian-10.13\u0026epoch=1", "UID": "f6b0aca2ad3c7394" }, "Version": "2.8.4", "Release": "3", "Epoch": 1, "Arch": "all", "SrcName": "audit", "SrcVersion": "2.8.4", "SrcRelease": "3", "SrcEpoch": 1, "Licenses": [ "GPL-2.0-only", "LGPL-2.1-only", "GPL-1.0-only" ], "Maintainer": "Laurent Bigonville \u003cbigon@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/share/doc/libaudit-common/changelog.Debian.gz", "/usr/share/doc/libaudit-common/changelog.gz", "/usr/share/doc/libaudit-common/copyright", "/usr/share/man/man5/libaudit.conf.5.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libaudit1@1:2.8.4-3", "Name": "libaudit1", "Identifier": { "PURL": "pkg:deb/debian/libaudit1@2.8.4-3?arch=amd64\u0026distro=debian-10.13\u0026epoch=1", "UID": "a6515101df1f0be7" }, "Version": "2.8.4", "Release": "3", "Epoch": 1, "Arch": "amd64", "SrcName": "audit", "SrcVersion": "2.8.4", "SrcRelease": "3", "SrcEpoch": 1, "Licenses": [ "GPL-2.0-only", "LGPL-2.1-only", "GPL-1.0-only" ], "Maintainer": "Laurent Bigonville \u003cbigon@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libaudit-common@1:2.8.4-3", "libc6@2.28-10+deb10u3", "libcap-ng0@0.7.9-2" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libaudit.so.1.0.0", "/usr/share/doc/libaudit1/changelog.Debian.gz", "/usr/share/doc/libaudit1/changelog.gz", "/usr/share/doc/libaudit1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libblkid1@2.33.1-0.1+deb10u1", "Name": "libblkid1", "Identifier": { "PURL": "pkg:deb/debian/libblkid1@2.33.1-0.1%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "12b8fc8072c6a035" }, "Version": "2.33.1", "Release": "0.1+deb10u1", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.33.1", "SrcRelease": "0.1+deb10u1", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "public-domain", "BSD-4-Clause", "MIT", "BSD-2-Clause", "BSD-3-Clause", "LGPL-2.0-or-later", "LGPL-2.1-or-later", "GPL-3.0-or-later", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "LaMont Jones \u003clamont@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libuuid1@2.33.1-0.1+deb10u1" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libblkid.so.1.1.0", "/usr/share/doc/libblkid1/changelog.Debian.gz", "/usr/share/doc/libblkid1/changelog.gz", "/usr/share/doc/libblkid1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libbz2-1.0@1.0.6-9.2~deb10u2", "Name": "libbz2-1.0", "Identifier": { "PURL": "pkg:deb/debian/libbz2-1.0@1.0.6-9.2~deb10u2?arch=amd64\u0026distro=debian-10.13", "UID": "3af3d86f5da94c00" }, "Version": "1.0.6", "Release": "9.2~deb10u2", "Arch": "amd64", "SrcName": "bzip2", "SrcVersion": "1.0.6", "SrcRelease": "9.2~deb10u2", "Licenses": [ "BSD-3-Clause", "GPL-2.0-only" ], "Maintainer": "Anibal Monsalve Salazar \u003canibal@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libbz2.so.1.0.4", "/usr/share/doc/libbz2-1.0/changelog.Debian.gz", "/usr/share/doc/libbz2-1.0/changelog.gz", "/usr/share/doc/libbz2-1.0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libc-bin@2.28-10+deb10u3", "Name": "libc-bin", "Identifier": { "PURL": "pkg:deb/debian/libc-bin@2.28-10%2Bdeb10u3?arch=amd64\u0026distro=debian-10.13", "UID": "8f6e1d8a417dc238" }, "Version": "2.28", "Release": "10+deb10u3", "Arch": "amd64", "SrcName": "glibc", "SrcVersion": "2.28", "SrcRelease": "10+deb10u3", "Licenses": [ "LGPL-2.1-only", "GPL-2.0-only" ], "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/sbin/ldconfig", "/usr/bin/catchsegv", "/usr/bin/getconf", "/usr/bin/getent", "/usr/bin/iconv", "/usr/bin/ldd", "/usr/bin/locale", "/usr/bin/localedef", "/usr/bin/pldd", "/usr/bin/tzselect", "/usr/bin/zdump", "/usr/lib/locale/C.UTF-8/LC_ADDRESS", "/usr/lib/locale/C.UTF-8/LC_COLLATE", "/usr/lib/locale/C.UTF-8/LC_CTYPE", "/usr/lib/locale/C.UTF-8/LC_IDENTIFICATION", "/usr/lib/locale/C.UTF-8/LC_MEASUREMENT", "/usr/lib/locale/C.UTF-8/LC_MESSAGES/SYS_LC_MESSAGES", "/usr/lib/locale/C.UTF-8/LC_MONETARY", "/usr/lib/locale/C.UTF-8/LC_NAME", "/usr/lib/locale/C.UTF-8/LC_NUMERIC", "/usr/lib/locale/C.UTF-8/LC_PAPER", "/usr/lib/locale/C.UTF-8/LC_TELEPHONE", "/usr/lib/locale/C.UTF-8/LC_TIME", "/usr/sbin/iconvconfig", "/usr/sbin/zic", "/usr/share/doc/libc-bin/changelog.Debian.gz", "/usr/share/doc/libc-bin/changelog.gz", "/usr/share/doc/libc-bin/copyright", "/usr/share/libc-bin/nsswitch.conf", "/usr/share/lintian/overrides/libc-bin", "/usr/share/man/man1/catchsegv.1.gz", "/usr/share/man/man1/getconf.1.gz", "/usr/share/man/man1/tzselect.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libc6@2.28-10+deb10u3", "Name": "libc6", "Identifier": { "PURL": "pkg:deb/debian/libc6@2.28-10%2Bdeb10u3?arch=amd64\u0026distro=debian-10.13", "UID": "202087dbc6a9c4cc" }, "Version": "2.28", "Release": "10+deb10u3", "Arch": "amd64", "SrcName": "glibc", "SrcVersion": "2.28", "SrcRelease": "10+deb10u3", "Licenses": [ "LGPL-2.1-only", "GPL-2.0-only" ], "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libgcc1@1:8.3.0-6" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/ld-2.28.so", "/lib/x86_64-linux-gnu/libBrokenLocale-2.28.so", "/lib/x86_64-linux-gnu/libSegFault.so", "/lib/x86_64-linux-gnu/libanl-2.28.so", "/lib/x86_64-linux-gnu/libc-2.28.so", "/lib/x86_64-linux-gnu/libcrypt-2.28.so", "/lib/x86_64-linux-gnu/libdl-2.28.so", "/lib/x86_64-linux-gnu/libm-2.28.so", "/lib/x86_64-linux-gnu/libmemusage.so", "/lib/x86_64-linux-gnu/libmvec-2.28.so", "/lib/x86_64-linux-gnu/libnsl-2.28.so", "/lib/x86_64-linux-gnu/libnss_compat-2.28.so", "/lib/x86_64-linux-gnu/libnss_dns-2.28.so", "/lib/x86_64-linux-gnu/libnss_files-2.28.so", "/lib/x86_64-linux-gnu/libnss_hesiod-2.28.so", "/lib/x86_64-linux-gnu/libnss_nis-2.28.so", "/lib/x86_64-linux-gnu/libnss_nisplus-2.28.so", "/lib/x86_64-linux-gnu/libpcprofile.so", "/lib/x86_64-linux-gnu/libpthread-2.28.so", "/lib/x86_64-linux-gnu/libresolv-2.28.so", "/lib/x86_64-linux-gnu/librt-2.28.so", "/lib/x86_64-linux-gnu/libthread_db-1.0.so", "/lib/x86_64-linux-gnu/libutil-2.28.so", "/usr/lib/x86_64-linux-gnu/audit/sotruss-lib.so", "/usr/lib/x86_64-linux-gnu/gconv/ANSI_X3.110.so", "/usr/lib/x86_64-linux-gnu/gconv/ARMSCII-8.so", "/usr/lib/x86_64-linux-gnu/gconv/ASMO_449.so", "/usr/lib/x86_64-linux-gnu/gconv/BIG5.so", "/usr/lib/x86_64-linux-gnu/gconv/BIG5HKSCS.so", "/usr/lib/x86_64-linux-gnu/gconv/BRF.so", "/usr/lib/x86_64-linux-gnu/gconv/CP10007.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1125.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1250.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1251.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1252.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1253.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1254.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1255.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1256.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1257.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1258.so", "/usr/lib/x86_64-linux-gnu/gconv/CP737.so", "/usr/lib/x86_64-linux-gnu/gconv/CP770.so", "/usr/lib/x86_64-linux-gnu/gconv/CP771.so", "/usr/lib/x86_64-linux-gnu/gconv/CP772.so", "/usr/lib/x86_64-linux-gnu/gconv/CP773.so", "/usr/lib/x86_64-linux-gnu/gconv/CP774.so", "/usr/lib/x86_64-linux-gnu/gconv/CP775.so", "/usr/lib/x86_64-linux-gnu/gconv/CP932.so", "/usr/lib/x86_64-linux-gnu/gconv/CSN_369103.so", "/usr/lib/x86_64-linux-gnu/gconv/CWI.so", "/usr/lib/x86_64-linux-gnu/gconv/DEC-MCS.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-AT-DE-A.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-AT-DE.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-CA-FR.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-DK-NO-A.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-DK-NO.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES-A.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES-S.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FI-SE-A.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FI-SE.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FR.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-IS-FRISS.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-IT.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-PT.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-UK.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-US.so", "/usr/lib/x86_64-linux-gnu/gconv/ECMA-CYRILLIC.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-CN.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-JISX0213.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-JP-MS.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-JP.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-KR.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-TW.so", "/usr/lib/x86_64-linux-gnu/gconv/GB18030.so", "/usr/lib/x86_64-linux-gnu/gconv/GBBIG5.so", "/usr/lib/x86_64-linux-gnu/gconv/GBGBK.so", "/usr/lib/x86_64-linux-gnu/gconv/GBK.so", "/usr/lib/x86_64-linux-gnu/gconv/GEORGIAN-ACADEMY.so", "/usr/lib/x86_64-linux-gnu/gconv/GEORGIAN-PS.so", "/usr/lib/x86_64-linux-gnu/gconv/GOST_19768-74.so", "/usr/lib/x86_64-linux-gnu/gconv/GREEK-CCITT.so", "/usr/lib/x86_64-linux-gnu/gconv/GREEK7-OLD.so", "/usr/lib/x86_64-linux-gnu/gconv/GREEK7.so", "/usr/lib/x86_64-linux-gnu/gconv/HP-GREEK8.so", "/usr/lib/x86_64-linux-gnu/gconv/HP-ROMAN8.so", "/usr/lib/x86_64-linux-gnu/gconv/HP-ROMAN9.so", "/usr/lib/x86_64-linux-gnu/gconv/HP-THAI8.so", "/usr/lib/x86_64-linux-gnu/gconv/HP-TURKISH8.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM037.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM038.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1004.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1008.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1008_420.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1025.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1026.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1046.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1047.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1097.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1112.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1122.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1123.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1124.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1129.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1130.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1132.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1133.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1137.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1140.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1141.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1142.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1143.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1144.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1145.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1146.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1147.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1148.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1149.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1153.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1154.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1155.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1156.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1157.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1158.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1160.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1161.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1162.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1163.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1164.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1166.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1167.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM12712.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1364.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1371.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1388.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1390.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1399.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM16804.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM256.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM273.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM274.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM275.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM277.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM278.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM280.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM281.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM284.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM285.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM290.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM297.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM420.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM423.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM424.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM437.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM4517.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM4899.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM4909.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM4971.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM500.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM5347.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM803.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM850.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM851.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM852.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM855.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM856.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM857.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM858.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM860.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM861.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM862.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM863.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM864.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM865.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM866.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM866NAV.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM868.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM869.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM870.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM871.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM874.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM875.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM880.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM891.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM901.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM902.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM903.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM9030.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM904.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM905.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM9066.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM918.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM921.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM922.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM930.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM932.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM933.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM935.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM937.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM939.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM943.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM9448.so", "/usr/lib/x86_64-linux-gnu/gconv/IEC_P27-1.so", "/usr/lib/x86_64-linux-gnu/gconv/INIS-8.so", "/usr/lib/x86_64-linux-gnu/gconv/INIS-CYRILLIC.so", "/usr/lib/x86_64-linux-gnu/gconv/INIS.so", "/usr/lib/x86_64-linux-gnu/gconv/ISIRI-3342.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-CN-EXT.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-CN.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-JP-3.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-JP.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-KR.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-IR-197.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-IR-209.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO646.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-1.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-10.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-11.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-13.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-14.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-15.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-16.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-2.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-3.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-4.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-5.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-6.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-7.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-8.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-9.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-9E.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_10367-BOX.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_11548-1.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_2033.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_5427-EXT.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_5427.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_5428.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_6937-2.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_6937.so", "/usr/lib/x86_64-linux-gnu/gconv/JOHAB.so", "/usr/lib/x86_64-linux-gnu/gconv/KOI-8.so", "/usr/lib/x86_64-linux-gnu/gconv/KOI8-R.so", "/usr/lib/x86_64-linux-gnu/gconv/KOI8-RU.so", "/usr/lib/x86_64-linux-gnu/gconv/KOI8-T.so", "/usr/lib/x86_64-linux-gnu/gconv/KOI8-U.so", "/usr/lib/x86_64-linux-gnu/gconv/LATIN-GREEK-1.so", "/usr/lib/x86_64-linux-gnu/gconv/LATIN-GREEK.so", "/usr/lib/x86_64-linux-gnu/gconv/MAC-CENTRALEUROPE.so", "/usr/lib/x86_64-linux-gnu/gconv/MAC-IS.so", "/usr/lib/x86_64-linux-gnu/gconv/MAC-SAMI.so", "/usr/lib/x86_64-linux-gnu/gconv/MAC-UK.so", "/usr/lib/x86_64-linux-gnu/gconv/MACINTOSH.so", "/usr/lib/x86_64-linux-gnu/gconv/MIK.so", "/usr/lib/x86_64-linux-gnu/gconv/NATS-DANO.so", "/usr/lib/x86_64-linux-gnu/gconv/NATS-SEFI.so", "/usr/lib/x86_64-linux-gnu/gconv/PT154.so", "/usr/lib/x86_64-linux-gnu/gconv/RK1048.so", "/usr/lib/x86_64-linux-gnu/gconv/SAMI-WS2.so", "/usr/lib/x86_64-linux-gnu/gconv/SHIFT_JISX0213.so", "/usr/lib/x86_64-linux-gnu/gconv/SJIS.so", "/usr/lib/x86_64-linux-gnu/gconv/T.61.so", "/usr/lib/x86_64-linux-gnu/gconv/TCVN5712-1.so", "/usr/lib/x86_64-linux-gnu/gconv/TIS-620.so", "/usr/lib/x86_64-linux-gnu/gconv/TSCII.so", "/usr/lib/x86_64-linux-gnu/gconv/UHC.so", "/usr/lib/x86_64-linux-gnu/gconv/UNICODE.so", "/usr/lib/x86_64-linux-gnu/gconv/UTF-16.so", "/usr/lib/x86_64-linux-gnu/gconv/UTF-32.so", "/usr/lib/x86_64-linux-gnu/gconv/UTF-7.so", "/usr/lib/x86_64-linux-gnu/gconv/VISCII.so", "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules", "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache", "/usr/lib/x86_64-linux-gnu/gconv/libCNS.so", "/usr/lib/x86_64-linux-gnu/gconv/libGB.so", "/usr/lib/x86_64-linux-gnu/gconv/libISOIR165.so", "/usr/lib/x86_64-linux-gnu/gconv/libJIS.so", "/usr/lib/x86_64-linux-gnu/gconv/libJISX0213.so", "/usr/lib/x86_64-linux-gnu/gconv/libKSC.so", "/usr/share/doc/libc6/NEWS.Debian.gz", "/usr/share/doc/libc6/NEWS.gz", "/usr/share/doc/libc6/README.Debian.gz", "/usr/share/doc/libc6/README.hesiod.gz", "/usr/share/doc/libc6/changelog.Debian.gz", "/usr/share/doc/libc6/changelog.gz", "/usr/share/doc/libc6/copyright", "/usr/share/lintian/overrides/libc6" ], "AnalyzedBy": "dpkg" }, { "ID": "libcap-ng0@0.7.9-2", "Name": "libcap-ng0", "Identifier": { "PURL": "pkg:deb/debian/libcap-ng0@0.7.9-2?arch=amd64\u0026distro=debian-10.13", "UID": "278bce08190fa935" }, "Version": "0.7.9", "Release": "2", "Arch": "amd64", "SrcName": "libcap-ng", "SrcVersion": "0.7.9", "SrcRelease": "2", "Licenses": [ "LGPL-2.1-only", "GPL-2.0-only", "GPL-3.0-only" ], "Maintainer": "Pierre Chifflier \u003cpollux@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libcap-ng.so.0.0.0", "/usr/share/doc/libcap-ng0/changelog.Debian.gz", "/usr/share/doc/libcap-ng0/changelog.gz", "/usr/share/doc/libcap-ng0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libcap2@1:2.25-2", "Name": "libcap2", "Identifier": { "PURL": "pkg:deb/debian/libcap2@2.25-2?arch=amd64\u0026distro=debian-10.13\u0026epoch=1", "UID": "b4165f44c04de7ff" }, "Version": "2.25", "Release": "2", "Epoch": 1, "Arch": "amd64", "SrcName": "libcap2", "SrcVersion": "2.25", "SrcRelease": "2", "SrcEpoch": 1, "Licenses": [ "BSD-3-Clause", "GPL-2.0-only", "GPL-2.0-or-later" ], "Maintainer": "Christian Kastner \u003cckk@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libcap.so.2.25", "/usr/share/doc/libcap2/changelog.Debian.gz", "/usr/share/doc/libcap2/changelog.gz", "/usr/share/doc/libcap2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libcom-err2@1.44.5-1+deb10u3", "Name": "libcom-err2", "Identifier": { "PURL": "pkg:deb/debian/libcom-err2@1.44.5-1%2Bdeb10u3?arch=amd64\u0026distro=debian-10.13", "UID": "46eeae54b7ed62de" }, "Version": "1.44.5", "Release": "1+deb10u3", "Arch": "amd64", "SrcName": "e2fsprogs", "SrcVersion": "1.44.5", "SrcRelease": "1+deb10u3", "Maintainer": "Theodore Y. Ts'o \u003ctytso@mit.edu\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libcom_err.so.2.1", "/usr/share/doc/libcom-err2/changelog.Debian.gz", "/usr/share/doc/libcom-err2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libcurl4@7.64.0-4+deb10u9", "Name": "libcurl4", "Identifier": { "PURL": "pkg:deb/debian/libcurl4@7.64.0-4%2Bdeb10u9?arch=amd64\u0026distro=debian-10.13", "UID": "acdfcaffc2c53eae" }, "Version": "7.64.0", "Release": "4+deb10u9", "Arch": "amd64", "SrcName": "curl", "SrcVersion": "7.64.0", "SrcRelease": "4+deb10u9", "Licenses": [ "curl", "ISC", "BSD-3-Clause", "public-domain", "BSD-4-Clause", "other" ], "Maintainer": "Alessandro Ghedini \u003cghedo@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libcom-err2@1.44.5-1+deb10u3", "libgssapi-krb5-2@1.17-3+deb10u6", "libidn2-0@2.0.5-1+deb10u1", "libk5crypto3@1.17-3+deb10u6", "libkrb5-3@1.17-3+deb10u6", "libldap-2.4-2@2.4.47+dfsg-3+deb10u7", "libnghttp2-14@1.36.0-2+deb10u3", "libpsl5@0.20.2-2", "librtmp1@2.4+20151223.gitfa8646d.1-2", "libssh2-1@1.8.0-2.1+deb10u1", "libssl1.1@1.1.1n-0+deb10u6", "zlib1g@1:1.2.11.dfsg-1+deb10u2" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcurl.so.4.5.0", "/usr/share/doc/libcurl4/NEWS.Debian.gz", "/usr/share/doc/libcurl4/changelog.Debian.gz", "/usr/share/doc/libcurl4/changelog.gz", "/usr/share/doc/libcurl4/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libdb5.3@5.3.28+dfsg1-0.5", "Name": "libdb5.3", "Identifier": { "PURL": "pkg:deb/debian/libdb5.3@5.3.28%2Bdfsg1-0.5?arch=amd64\u0026distro=debian-10.13", "UID": "adf8517bb84bd667" }, "Version": "5.3.28+dfsg1", "Release": "0.5", "Arch": "amd64", "SrcName": "db5.3", "SrcVersion": "5.3.28+dfsg1", "SrcRelease": "0.5", "Maintainer": "Debian Berkeley DB Team \u003cteam+bdb@tracker.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libdb-5.3.so", "/usr/share/doc/libdb5.3/build_signature_amd64.txt", "/usr/share/doc/libdb5.3/changelog.Debian.gz", "/usr/share/doc/libdb5.3/copyright", "/usr/share/lintian/overrides/libdb5.3" ], "AnalyzedBy": "dpkg" }, { "ID": "libdebconfclient0@0.249", "Name": "libdebconfclient0", "Identifier": { "PURL": "pkg:deb/debian/libdebconfclient0@0.249?arch=amd64\u0026distro=debian-10.13", "UID": "3c89f3a5e9627b76" }, "Version": "0.249", "Arch": "amd64", "SrcName": "cdebconf", "SrcVersion": "0.249", "Maintainer": "Debian Install System Team \u003cdebian-boot@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libdebconfclient.so.0.0.0", "/usr/share/doc/libdebconfclient0/changelog.gz", "/usr/share/doc/libdebconfclient0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libexpat1@2.2.6-2+deb10u7", "Name": "libexpat1", "Identifier": { "PURL": "pkg:deb/debian/libexpat1@2.2.6-2%2Bdeb10u7?arch=amd64\u0026distro=debian-10.13", "UID": "8ccfd2507dc84855" }, "Version": "2.2.6", "Release": "2+deb10u7", "Arch": "amd64", "SrcName": "expat", "SrcVersion": "2.2.6", "SrcRelease": "2+deb10u7", "Licenses": [ "MIT" ], "Maintainer": "Laszlo Boszormenyi (GCS) \u003cgcs@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libexpat.so.1.6.8", "/usr/lib/x86_64-linux-gnu/libexpatw.so.1.6.8", "/usr/share/doc/libexpat1/AUTHORS", "/usr/share/doc/libexpat1/changelog.Debian.gz", "/usr/share/doc/libexpat1/changelog.gz", "/usr/share/doc/libexpat1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libext2fs2@1.44.5-1+deb10u3", "Name": "libext2fs2", "Identifier": { "PURL": "pkg:deb/debian/libext2fs2@1.44.5-1%2Bdeb10u3?arch=amd64\u0026distro=debian-10.13", "UID": "bd5c77bae463e2e8" }, "Version": "1.44.5", "Release": "1+deb10u3", "Arch": "amd64", "SrcName": "e2fsprogs", "SrcVersion": "1.44.5", "SrcRelease": "1+deb10u3", "Licenses": [ "GPL-2.0-only", "LGPL-2.0-only" ], "Maintainer": "Theodore Y. Ts'o \u003ctytso@mit.edu\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libe2p.so.2.3", "/lib/x86_64-linux-gnu/libext2fs.so.2.4", "/usr/share/doc/libext2fs2/changelog.Debian.gz", "/usr/share/doc/libext2fs2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libfdisk1@2.33.1-0.1+deb10u1", "Name": "libfdisk1", "Identifier": { "PURL": "pkg:deb/debian/libfdisk1@2.33.1-0.1%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "84d5db7b49a0f89c" }, "Version": "2.33.1", "Release": "0.1+deb10u1", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.33.1", "SrcRelease": "0.1+deb10u1", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "public-domain", "BSD-4-Clause", "MIT", "BSD-2-Clause", "BSD-3-Clause", "LGPL-2.0-or-later", "LGPL-2.1-or-later", "GPL-3.0-or-later", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "LaMont Jones \u003clamont@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libblkid1@2.33.1-0.1+deb10u1", "libc6@2.28-10+deb10u3", "libuuid1@2.33.1-0.1+deb10u1" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libfdisk.so.1.1.0", "/usr/share/doc/libfdisk1/changelog.Debian.gz", "/usr/share/doc/libfdisk1/changelog.gz", "/usr/share/doc/libfdisk1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libffi6@3.2.1-9", "Name": "libffi6", "Identifier": { "PURL": "pkg:deb/debian/libffi6@3.2.1-9?arch=amd64\u0026distro=debian-10.13", "UID": "a488077c18aec70b" }, "Version": "3.2.1", "Release": "9", "Arch": "amd64", "SrcName": "libffi", "SrcVersion": "3.2.1", "SrcRelease": "9", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libffi.so.6.0.4", "/usr/share/doc/libffi6/changelog.Debian.gz", "/usr/share/doc/libffi6/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libgcc1@1:8.3.0-6", "Name": "libgcc1", "Identifier": { "PURL": "pkg:deb/debian/libgcc1@8.3.0-6?arch=amd64\u0026distro=debian-10.13\u0026epoch=1", "UID": "dd91de618ef2f1f3" }, "Version": "8.3.0", "Release": "6", "Epoch": 1, "Arch": "amd64", "SrcName": "gcc-8", "SrcVersion": "8.3.0", "SrcRelease": "6", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-8-base@8.3.0-6", "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libgcc_s.so.1", "/usr/share/lintian/overrides/libgcc1" ], "AnalyzedBy": "dpkg" }, { "ID": "libgcrypt20@1.8.4-5+deb10u1", "Name": "libgcrypt20", "Identifier": { "PURL": "pkg:deb/debian/libgcrypt20@1.8.4-5%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "9fa83d5237ab65ca" }, "Version": "1.8.4", "Release": "5+deb10u1", "Arch": "amd64", "SrcName": "libgcrypt20", "SrcVersion": "1.8.4", "SrcRelease": "5+deb10u1", "Licenses": [ "LGPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian GnuTLS Maintainers \u003cpkg-gnutls-maint@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libgpg-error0@1.35-1" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libgcrypt.so.20.2.4", "/usr/share/doc/libgcrypt20/AUTHORS.gz", "/usr/share/doc/libgcrypt20/NEWS.gz", "/usr/share/doc/libgcrypt20/README.gz", "/usr/share/doc/libgcrypt20/THANKS.gz", "/usr/share/doc/libgcrypt20/changelog.Debian.gz", "/usr/share/doc/libgcrypt20/changelog.gz", "/usr/share/doc/libgcrypt20/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libgmp10@2:6.1.2+dfsg-4+deb10u1", "Name": "libgmp10", "Identifier": { "PURL": "pkg:deb/debian/libgmp10@6.1.2%2Bdfsg-4%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13\u0026epoch=2", "UID": "8e9df87678880454" }, "Version": "6.1.2+dfsg", "Release": "4+deb10u1", "Epoch": 2, "Arch": "amd64", "SrcName": "gmp", "SrcVersion": "6.1.2+dfsg", "SrcRelease": "4+deb10u1", "SrcEpoch": 2, "Licenses": [ "LGPL-3.0-only", "GPL-2.0-only", "GPL-3.0-only", "GPL-2.0-or-later" ], "Maintainer": "Debian Science Team \u003cdebian-science-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgmp.so.10.3.2", "/usr/share/doc/libgmp10/README.Debian", "/usr/share/doc/libgmp10/changelog.Debian.gz", "/usr/share/doc/libgmp10/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libgnutls30@3.6.7-4+deb10u12", "Name": "libgnutls30", "Identifier": { "PURL": "pkg:deb/debian/libgnutls30@3.6.7-4%2Bdeb10u12?arch=amd64\u0026distro=debian-10.13", "UID": "85e71216f0927fb4" }, "Version": "3.6.7", "Release": "4+deb10u12", "Arch": "amd64", "SrcName": "gnutls28", "SrcVersion": "3.6.7", "SrcRelease": "4+deb10u12", "Licenses": [ "LGPL-2.1-only", "LGPL-2.0-or-later", "LGPL-3.0-only", "GPL-2.0-or-later", "GPL-3.0-only", "GFDL-1.3-only", "CC0-1.0", "MIT", "LGPL-3.0-or-later", "Apache-2.0", "GPL-3.0-or-later" ], "Maintainer": "Debian GnuTLS Maintainers \u003cpkg-gnutls-maint@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libgmp10@2:6.1.2+dfsg-4+deb10u1", "libhogweed4@3.4.1-1+deb10u1", "libidn2-0@2.0.5-1+deb10u1", "libnettle6@3.4.1-1+deb10u1", "libp11-kit0@0.23.15-2+deb10u1", "libtasn1-6@4.13-3+deb10u1", "libunistring2@0.9.10-1" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgnutls.so.30.23.2", "/usr/share/doc/libgnutls30/AUTHORS.gz", "/usr/share/doc/libgnutls30/NEWS.Debian.gz", "/usr/share/doc/libgnutls30/NEWS.gz", "/usr/share/doc/libgnutls30/README.md.gz", "/usr/share/doc/libgnutls30/THANKS.gz", "/usr/share/doc/libgnutls30/changelog.Debian.gz", "/usr/share/doc/libgnutls30/changelog.gz", "/usr/share/doc/libgnutls30/copyright", "/usr/share/doc/libgnutls30/license.AGPLv3.gz", "/usr/share/locale/cs/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/de/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/eo/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/es/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/fi/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/fr/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/it/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/ms/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/nl/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/pl/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/sr/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/sv/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/uk/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/vi/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/gnutls30.mo" ], "AnalyzedBy": "dpkg" }, { "ID": "libgpg-error0@1.35-1", "Name": "libgpg-error0", "Identifier": { "PURL": "pkg:deb/debian/libgpg-error0@1.35-1?arch=amd64\u0026distro=debian-10.13", "UID": "d624d07ae505e13a" }, "Version": "1.35", "Release": "1", "Arch": "amd64", "SrcName": "libgpg-error", "SrcVersion": "1.35", "SrcRelease": "1", "Licenses": [ "LGPL-2.1-or-later", "BSD-3-Clause", "g10-permissive", "GPL-3.0-or-later", "LGPL-2.1-only", "GPL-3.0-only" ], "Maintainer": "Debian GnuPG Maintainers \u003cpkg-gnupg-maint@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libgpg-error.so.0.26.1", "/usr/share/doc/libgpg-error0/README.gz", "/usr/share/doc/libgpg-error0/changelog.Debian.gz", "/usr/share/doc/libgpg-error0/changelog.gz", "/usr/share/doc/libgpg-error0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libgssapi-krb5-2@1.17-3+deb10u6", "Name": "libgssapi-krb5-2", "Identifier": { "PURL": "pkg:deb/debian/libgssapi-krb5-2@1.17-3%2Bdeb10u6?arch=amd64\u0026distro=debian-10.13", "UID": "ea0a755525675c2a" }, "Version": "1.17", "Release": "3+deb10u6", "Arch": "amd64", "SrcName": "krb5", "SrcVersion": "1.17", "SrcRelease": "3+deb10u6", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libcom-err2@1.44.5-1+deb10u3", "libk5crypto3@1.17-3+deb10u6", "libkeyutils1@1.6-6", "libkrb5-3@1.17-3+deb10u6", "libkrb5support0@1.17-3+deb10u6" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2", "/usr/share/doc/libgssapi-krb5-2/NEWS.Debian.gz", "/usr/share/doc/libgssapi-krb5-2/changelog.Debian.gz", "/usr/share/doc/libgssapi-krb5-2/copyright", "/usr/share/lintian/overrides/libgssapi-krb5-2" ], "AnalyzedBy": "dpkg" }, { "ID": "libhogweed4@3.4.1-1+deb10u1", "Name": "libhogweed4", "Identifier": { "PURL": "pkg:deb/debian/libhogweed4@3.4.1-1%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "9eb41d0c01e92b46" }, "Version": "3.4.1", "Release": "1+deb10u1", "Arch": "amd64", "SrcName": "nettle", "SrcVersion": "3.4.1", "SrcRelease": "1+deb10u1", "Maintainer": "Magnus Holmgren \u003cholmgren@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libgmp10@2:6.1.2+dfsg-4+deb10u1", "libnettle6@3.4.1-1+deb10u1" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libhogweed.so.4.5" ], "AnalyzedBy": "dpkg" }, { "ID": "libidn2-0@2.0.5-1+deb10u1", "Name": "libidn2-0", "Identifier": { "PURL": "pkg:deb/debian/libidn2-0@2.0.5-1%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "f2609d77e13b8623" }, "Version": "2.0.5", "Release": "1+deb10u1", "Arch": "amd64", "SrcName": "libidn2", "SrcVersion": "2.0.5", "SrcRelease": "1+deb10u1", "Licenses": [ "GPL-3.0-or-later", "LGPL-3.0-or-later", "GPL-2.0-or-later", "Unicode", "GPL-3.0-only", "GPL-2.0-only", "LGPL-3.0-only" ], "Maintainer": "Debian Libidn team \u003chelp-libidn@gnu.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libunistring2@0.9.10-1" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libidn2.so.0.3.4", "/usr/share/doc/libidn2-0/AUTHORS", "/usr/share/doc/libidn2-0/NEWS.gz", "/usr/share/doc/libidn2-0/README.md.gz", "/usr/share/doc/libidn2-0/changelog.Debian.gz", "/usr/share/doc/libidn2-0/changelog.gz", "/usr/share/doc/libidn2-0/copyright", "/usr/share/lintian/overrides/libidn2-0", "/usr/share/locale/cs/LC_MESSAGES/libidn2.mo", "/usr/share/locale/da/LC_MESSAGES/libidn2.mo", "/usr/share/locale/de/LC_MESSAGES/libidn2.mo", "/usr/share/locale/eo/LC_MESSAGES/libidn2.mo", "/usr/share/locale/es/LC_MESSAGES/libidn2.mo", "/usr/share/locale/fi/LC_MESSAGES/libidn2.mo", "/usr/share/locale/fr/LC_MESSAGES/libidn2.mo", "/usr/share/locale/fur/LC_MESSAGES/libidn2.mo", "/usr/share/locale/hr/LC_MESSAGES/libidn2.mo", "/usr/share/locale/hu/LC_MESSAGES/libidn2.mo", "/usr/share/locale/id/LC_MESSAGES/libidn2.mo", "/usr/share/locale/it/LC_MESSAGES/libidn2.mo", "/usr/share/locale/ja/LC_MESSAGES/libidn2.mo", "/usr/share/locale/nl/LC_MESSAGES/libidn2.mo", "/usr/share/locale/pl/LC_MESSAGES/libidn2.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/libidn2.mo", "/usr/share/locale/ro/LC_MESSAGES/libidn2.mo", "/usr/share/locale/sr/LC_MESSAGES/libidn2.mo", "/usr/share/locale/sv/LC_MESSAGES/libidn2.mo", "/usr/share/locale/uk/LC_MESSAGES/libidn2.mo", "/usr/share/locale/vi/LC_MESSAGES/libidn2.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/libidn2.mo" ], "AnalyzedBy": "dpkg" }, { "ID": "libk5crypto3@1.17-3+deb10u6", "Name": "libk5crypto3", "Identifier": { "PURL": "pkg:deb/debian/libk5crypto3@1.17-3%2Bdeb10u6?arch=amd64\u0026distro=debian-10.13", "UID": "71acb0326dbcd0a0" }, "Version": "1.17", "Release": "3+deb10u6", "Arch": "amd64", "SrcName": "krb5", "SrcVersion": "1.17", "SrcRelease": "3+deb10u6", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libkeyutils1@1.6-6", "libkrb5support0@1.17-3+deb10u6" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1", "/usr/share/doc/libk5crypto3/NEWS.Debian.gz", "/usr/share/doc/libk5crypto3/changelog.Debian.gz", "/usr/share/doc/libk5crypto3/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libkeyutils1@1.6-6", "Name": "libkeyutils1", "Identifier": { "PURL": "pkg:deb/debian/libkeyutils1@1.6-6?arch=amd64\u0026distro=debian-10.13", "UID": "419e58e7d37beed0" }, "Version": "1.6", "Release": "6", "Arch": "amd64", "SrcName": "keyutils", "SrcVersion": "1.6", "SrcRelease": "6", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.0-only" ], "Maintainer": "Christian Kastner \u003cckk@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libkeyutils.so.1.8", "/usr/share/doc/libkeyutils1/changelog.Debian.gz", "/usr/share/doc/libkeyutils1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libkrb5-3@1.17-3+deb10u6", "Name": "libkrb5-3", "Identifier": { "PURL": "pkg:deb/debian/libkrb5-3@1.17-3%2Bdeb10u6?arch=amd64\u0026distro=debian-10.13", "UID": "21148122a1e238a6" }, "Version": "1.17", "Release": "3+deb10u6", "Arch": "amd64", "SrcName": "krb5", "SrcVersion": "1.17", "SrcRelease": "3+deb10u6", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libcom-err2@1.44.5-1+deb10u3", "libk5crypto3@1.17-3+deb10u6", "libkeyutils1@1.6-6", "libkrb5support0@1.17-3+deb10u6", "libssl1.1@1.1.1n-0+deb10u6" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so", "/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3", "/usr/share/doc/libkrb5-3/NEWS.Debian.gz", "/usr/share/doc/libkrb5-3/README.Debian", "/usr/share/doc/libkrb5-3/README.gz", "/usr/share/doc/libkrb5-3/changelog.Debian.gz", "/usr/share/doc/libkrb5-3/copyright", "/usr/share/lintian/overrides/libkrb5-3" ], "AnalyzedBy": "dpkg" }, { "ID": "libkrb5support0@1.17-3+deb10u6", "Name": "libkrb5support0", "Identifier": { "PURL": "pkg:deb/debian/libkrb5support0@1.17-3%2Bdeb10u6?arch=amd64\u0026distro=debian-10.13", "UID": "966d481bbc0bd0f5" }, "Version": "1.17", "Release": "3+deb10u6", "Arch": "amd64", "SrcName": "krb5", "SrcVersion": "1.17", "SrcRelease": "3+deb10u6", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libkeyutils1@1.6-6" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1", "/usr/share/doc/libkrb5support0/NEWS.Debian.gz", "/usr/share/doc/libkrb5support0/changelog.Debian.gz", "/usr/share/doc/libkrb5support0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libldap-2.4-2@2.4.47+dfsg-3+deb10u7", "Name": "libldap-2.4-2", "Identifier": { "PURL": "pkg:deb/debian/libldap-2.4-2@2.4.47%2Bdfsg-3%2Bdeb10u7?arch=amd64\u0026distro=debian-10.13", "UID": "90ac6f194795d9c5" }, "Version": "2.4.47+dfsg", "Release": "3+deb10u7", "Arch": "amd64", "SrcName": "openldap", "SrcVersion": "2.4.47+dfsg", "SrcRelease": "3+deb10u7", "Maintainer": "Debian OpenLDAP Maintainers \u003cpkg-openldap-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libgnutls30@3.6.7-4+deb10u12", "libldap-common@2.4.47+dfsg-3+deb10u7", "libsasl2-2@2.1.27+dfsg-1+deb10u2" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/liblber-2.4.so.2.10.10", "/usr/lib/x86_64-linux-gnu/libldap_r-2.4.so.2.10.10", "/usr/share/doc/libldap-2.4-2/README.Debian", "/usr/share/doc/libldap-2.4-2/changelog.Debian.gz", "/usr/share/doc/libldap-2.4-2/changelog.gz", "/usr/share/doc/libldap-2.4-2/copyright", "/usr/share/lintian/overrides/libldap-2.4-2" ], "AnalyzedBy": "dpkg" }, { "ID": "libldap-common@2.4.47+dfsg-3+deb10u7", "Name": "libldap-common", "Identifier": { "PURL": "pkg:deb/debian/libldap-common@2.4.47%2Bdfsg-3%2Bdeb10u7?arch=all\u0026distro=debian-10.13", "UID": "72cfc72012eabcbd" }, "Version": "2.4.47+dfsg", "Release": "3+deb10u7", "Arch": "all", "SrcName": "openldap", "SrcVersion": "2.4.47+dfsg", "SrcRelease": "3+deb10u7", "Maintainer": "Debian OpenLDAP Maintainers \u003cpkg-openldap-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/share/doc/libldap-common/changelog.Debian.gz", "/usr/share/doc/libldap-common/changelog.gz", "/usr/share/doc/libldap-common/copyright", "/usr/share/man/man5/ldap.conf.5.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "liblz4-1@1.8.3-1+deb10u1", "Name": "liblz4-1", "Identifier": { "PURL": "pkg:deb/debian/liblz4-1@1.8.3-1%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "da793e11e619c38b" }, "Version": "1.8.3", "Release": "1+deb10u1", "Arch": "amd64", "SrcName": "lz4", "SrcVersion": "1.8.3", "SrcRelease": "1+deb10u1", "Licenses": [ "BSD-2-Clause", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Nobuhiro Iwamatsu \u003ciwamatsu@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/liblz4.so.1.8.3", "/usr/share/doc/liblz4-1/changelog.Debian.gz", "/usr/share/doc/liblz4-1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "liblzma5@5.2.4-1+deb10u1", "Name": "liblzma5", "Identifier": { "PURL": "pkg:deb/debian/liblzma5@5.2.4-1%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "d85f69fb5d2397e4" }, "Version": "5.2.4", "Release": "1+deb10u1", "Arch": "amd64", "SrcName": "xz-utils", "SrcVersion": "5.2.4", "SrcRelease": "1+deb10u1", "Licenses": [ "PD", "probably-PD", "GPL-2.0-or-later", "LGPL-2.1-or-later", "permissive-fsf", "Autoconf", "permissive-nowarranty", "GPL-2.0-only", "none", "config-h", "LGPL-2.0-only", "LGPL-2.1-only", "noderivs", "PD-debian", "GPL-3.0-only" ], "Maintainer": "Jonathan Nieder \u003cjrnieder@gmail.com\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/liblzma.so.5.2.4", "/usr/share/doc/liblzma5/AUTHORS", "/usr/share/doc/liblzma5/NEWS.gz", "/usr/share/doc/liblzma5/THANKS", "/usr/share/doc/liblzma5/changelog.Debian.gz", "/usr/share/doc/liblzma5/changelog.gz", "/usr/share/doc/liblzma5/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libmount1@2.33.1-0.1+deb10u1", "Name": "libmount1", "Identifier": { "PURL": "pkg:deb/debian/libmount1@2.33.1-0.1%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "f49ffd7c056ad2f5" }, "Version": "2.33.1", "Release": "0.1+deb10u1", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.33.1", "SrcRelease": "0.1+deb10u1", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "public-domain", "BSD-4-Clause", "MIT", "BSD-2-Clause", "BSD-3-Clause", "LGPL-2.0-or-later", "LGPL-2.1-or-later", "GPL-3.0-or-later", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "LaMont Jones \u003clamont@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libblkid1@2.33.1-0.1+deb10u1", "libc6@2.28-10+deb10u3", "libselinux1@2.8-1+b1" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libmount.so.1.1.0", "/usr/share/doc/libmount1/changelog.Debian.gz", "/usr/share/doc/libmount1/changelog.gz", "/usr/share/doc/libmount1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libmpdec2@2.4.2-2", "Name": "libmpdec2", "Identifier": { "PURL": "pkg:deb/debian/libmpdec2@2.4.2-2?arch=amd64\u0026distro=debian-10.13", "UID": "4e1b8a35411a0668" }, "Version": "2.4.2", "Release": "2", "Arch": "amd64", "SrcName": "mpdecimal", "SrcVersion": "2.4.2", "SrcRelease": "2", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libmpdec.so.2.4.2", "/usr/share/doc/libmpdec2/changelog.Debian.gz", "/usr/share/doc/libmpdec2/changelog.gz", "/usr/share/doc/libmpdec2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libncursesw6@6.1+20181013-2+deb10u5", "Name": "libncursesw6", "Identifier": { "PURL": "pkg:deb/debian/libncursesw6@6.1%2B20181013-2%2Bdeb10u5?arch=amd64\u0026distro=debian-10.13", "UID": "9939b496589d5e7a" }, "Version": "6.1+20181013", "Release": "2+deb10u5", "Arch": "amd64", "SrcName": "ncurses", "SrcVersion": "6.1+20181013", "SrcRelease": "2+deb10u5", "Maintainer": "Craig Small \u003ccsmall@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libtinfo6@6.1+20181013-2+deb10u5" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libncursesw.so.6.1", "/usr/lib/x86_64-linux-gnu/libformw.so.6.1", "/usr/lib/x86_64-linux-gnu/libmenuw.so.6.1", "/usr/lib/x86_64-linux-gnu/libpanelw.so.6.1" ], "AnalyzedBy": "dpkg" }, { "ID": "libnettle6@3.4.1-1+deb10u1", "Name": "libnettle6", "Identifier": { "PURL": "pkg:deb/debian/libnettle6@3.4.1-1%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "427f272dae7a2108" }, "Version": "3.4.1", "Release": "1+deb10u1", "Arch": "amd64", "SrcName": "nettle", "SrcVersion": "3.4.1", "SrcRelease": "1+deb10u1", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.0-or-later", "LGPL-2.0-only", "other", "GPL-2.0-or-later", "GPL-2.0-with-autoconf-exception+", "public-domain", "GPL-2.0-only", "GAP" ], "Maintainer": "Magnus Holmgren \u003cholmgren@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libnettle.so.6.5", "/usr/share/doc/libnettle6/NEWS.gz", "/usr/share/doc/libnettle6/README", "/usr/share/doc/libnettle6/changelog.Debian.gz", "/usr/share/doc/libnettle6/changelog.gz", "/usr/share/doc/libnettle6/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libnghttp2-14@1.36.0-2+deb10u3", "Name": "libnghttp2-14", "Identifier": { "PURL": "pkg:deb/debian/libnghttp2-14@1.36.0-2%2Bdeb10u3?arch=amd64\u0026distro=debian-10.13", "UID": "52aa14cdd1da8465" }, "Version": "1.36.0", "Release": "2+deb10u3", "Arch": "amd64", "SrcName": "nghttp2", "SrcVersion": "1.36.0", "SrcRelease": "2+deb10u3", "Licenses": [ "MIT", "all-permissive", "GPL-3.0-with-autoconf-exception+", "BSD-2-Clause", "SIL-OFL-1.1", "GPL-3.0-only" ], "Maintainer": "Tomasz Buchert \u003ctomasz@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libnghttp2.so.14.17.1", "/usr/share/doc/libnghttp2-14/AUTHORS", "/usr/share/doc/libnghttp2-14/README.rst.gz", "/usr/share/doc/libnghttp2-14/changelog.Debian.gz", "/usr/share/doc/libnghttp2-14/changelog.gz", "/usr/share/doc/libnghttp2-14/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libp11-kit0@0.23.15-2+deb10u1", "Name": "libp11-kit0", "Identifier": { "PURL": "pkg:deb/debian/libp11-kit0@0.23.15-2%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "42bc8656f7be3a19" }, "Version": "0.23.15", "Release": "2+deb10u1", "Arch": "amd64", "SrcName": "p11-kit", "SrcVersion": "0.23.15", "SrcRelease": "2+deb10u1", "Licenses": [ "BSD-3-Clause", "permissive-like-automake-output", "ISC", "ISC+IBM", "same-as-rest-of-p11kit" ], "Maintainer": "Debian GnuTLS Maintainers \u003cpkg-gnutls-maint@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libffi6@3.2.1-9" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libp11-kit.so.0.3.0", "/usr/share/doc/libp11-kit0/changelog.Debian.gz", "/usr/share/doc/libp11-kit0/changelog.gz", "/usr/share/doc/libp11-kit0/copyright", "/usr/share/doc/libp11-kit0/examples/pkcs11.conf.example" ], "AnalyzedBy": "dpkg" }, { "ID": "libpam-modules@1.3.1-5", "Name": "libpam-modules", "Identifier": { "PURL": "pkg:deb/debian/libpam-modules@1.3.1-5?arch=amd64\u0026distro=debian-10.13", "UID": "48e5a261fd47a785" }, "Version": "1.3.1", "Release": "5", "Arch": "amd64", "SrcName": "pam", "SrcVersion": "1.3.1", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Steve Langasek \u003cvorlon@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/security/pam_access.so", "/lib/x86_64-linux-gnu/security/pam_debug.so", "/lib/x86_64-linux-gnu/security/pam_deny.so", "/lib/x86_64-linux-gnu/security/pam_echo.so", "/lib/x86_64-linux-gnu/security/pam_env.so", "/lib/x86_64-linux-gnu/security/pam_exec.so", "/lib/x86_64-linux-gnu/security/pam_faildelay.so", "/lib/x86_64-linux-gnu/security/pam_filter.so", "/lib/x86_64-linux-gnu/security/pam_ftp.so", "/lib/x86_64-linux-gnu/security/pam_group.so", "/lib/x86_64-linux-gnu/security/pam_issue.so", "/lib/x86_64-linux-gnu/security/pam_keyinit.so", "/lib/x86_64-linux-gnu/security/pam_lastlog.so", "/lib/x86_64-linux-gnu/security/pam_limits.so", "/lib/x86_64-linux-gnu/security/pam_listfile.so", "/lib/x86_64-linux-gnu/security/pam_localuser.so", "/lib/x86_64-linux-gnu/security/pam_loginuid.so", "/lib/x86_64-linux-gnu/security/pam_mail.so", "/lib/x86_64-linux-gnu/security/pam_mkhomedir.so", "/lib/x86_64-linux-gnu/security/pam_motd.so", "/lib/x86_64-linux-gnu/security/pam_namespace.so", "/lib/x86_64-linux-gnu/security/pam_nologin.so", "/lib/x86_64-linux-gnu/security/pam_permit.so", "/lib/x86_64-linux-gnu/security/pam_pwhistory.so", "/lib/x86_64-linux-gnu/security/pam_rhosts.so", "/lib/x86_64-linux-gnu/security/pam_rootok.so", "/lib/x86_64-linux-gnu/security/pam_securetty.so", "/lib/x86_64-linux-gnu/security/pam_selinux.so", "/lib/x86_64-linux-gnu/security/pam_sepermit.so", "/lib/x86_64-linux-gnu/security/pam_shells.so", "/lib/x86_64-linux-gnu/security/pam_stress.so", "/lib/x86_64-linux-gnu/security/pam_succeed_if.so", "/lib/x86_64-linux-gnu/security/pam_tally.so", "/lib/x86_64-linux-gnu/security/pam_tally2.so", "/lib/x86_64-linux-gnu/security/pam_time.so", "/lib/x86_64-linux-gnu/security/pam_timestamp.so", "/lib/x86_64-linux-gnu/security/pam_tty_audit.so", "/lib/x86_64-linux-gnu/security/pam_umask.so", "/lib/x86_64-linux-gnu/security/pam_unix.so", "/lib/x86_64-linux-gnu/security/pam_userdb.so", "/lib/x86_64-linux-gnu/security/pam_warn.so", "/lib/x86_64-linux-gnu/security/pam_wheel.so", "/lib/x86_64-linux-gnu/security/pam_xauth.so", "/usr/share/doc/libpam-modules/NEWS.Debian.gz", "/usr/share/doc/libpam-modules/changelog.Debian.gz", "/usr/share/doc/libpam-modules/changelog.gz", "/usr/share/doc/libpam-modules/copyright", "/usr/share/doc/libpam-modules/examples/upperLOWER.c", "/usr/share/lintian/overrides/libpam-modules", "/usr/share/man/man5/access.conf.5.gz", "/usr/share/man/man5/group.conf.5.gz", "/usr/share/man/man5/limits.conf.5.gz", "/usr/share/man/man5/namespace.conf.5.gz", "/usr/share/man/man5/pam_env.conf.5.gz", "/usr/share/man/man5/sepermit.conf.5.gz", "/usr/share/man/man5/time.conf.5.gz", "/usr/share/man/man7/pam_env.7.gz", "/usr/share/man/man7/pam_selinux.7.gz", "/usr/share/man/man8/pam_access.8.gz", "/usr/share/man/man8/pam_debug.8.gz", "/usr/share/man/man8/pam_deny.8.gz", "/usr/share/man/man8/pam_echo.8.gz", "/usr/share/man/man8/pam_exec.8.gz", "/usr/share/man/man8/pam_faildelay.8.gz", "/usr/share/man/man8/pam_filter.8.gz", "/usr/share/man/man8/pam_ftp.8.gz", "/usr/share/man/man8/pam_group.8.gz", "/usr/share/man/man8/pam_issue.8.gz", "/usr/share/man/man8/pam_keyinit.8.gz", "/usr/share/man/man8/pam_lastlog.8.gz", "/usr/share/man/man8/pam_limits.8.gz", "/usr/share/man/man8/pam_listfile.8.gz", "/usr/share/man/man8/pam_localuser.8.gz", "/usr/share/man/man8/pam_loginuid.8.gz", "/usr/share/man/man8/pam_mail.8.gz", "/usr/share/man/man8/pam_mkhomedir.8.gz", "/usr/share/man/man8/pam_motd.8.gz", "/usr/share/man/man8/pam_namespace.8.gz", "/usr/share/man/man8/pam_nologin.8.gz", "/usr/share/man/man8/pam_permit.8.gz", "/usr/share/man/man8/pam_pwhistory.8.gz", "/usr/share/man/man8/pam_rhosts.8.gz", "/usr/share/man/man8/pam_rootok.8.gz", "/usr/share/man/man8/pam_securetty.8.gz", "/usr/share/man/man8/pam_sepermit.8.gz", "/usr/share/man/man8/pam_shells.8.gz", "/usr/share/man/man8/pam_succeed_if.8.gz", "/usr/share/man/man8/pam_tally.8.gz", "/usr/share/man/man8/pam_tally2.8.gz", "/usr/share/man/man8/pam_time.8.gz", "/usr/share/man/man8/pam_timestamp.8.gz", "/usr/share/man/man8/pam_tty_audit.8.gz", "/usr/share/man/man8/pam_umask.8.gz", "/usr/share/man/man8/pam_unix.8.gz", "/usr/share/man/man8/pam_userdb.8.gz", "/usr/share/man/man8/pam_warn.8.gz", "/usr/share/man/man8/pam_wheel.8.gz", "/usr/share/man/man8/pam_xauth.8.gz", "/usr/share/pam-configs/mkhomedir" ], "AnalyzedBy": "dpkg" }, { "ID": "libpam-modules-bin@1.3.1-5", "Name": "libpam-modules-bin", "Identifier": { "PURL": "pkg:deb/debian/libpam-modules-bin@1.3.1-5?arch=amd64\u0026distro=debian-10.13", "UID": "dd93d983545add5a" }, "Version": "1.3.1", "Release": "5", "Arch": "amd64", "SrcName": "pam", "SrcVersion": "1.3.1", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Steve Langasek \u003cvorlon@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libaudit1@1:2.8.4-3", "libc6@2.28-10+deb10u3", "libpam0g@1.3.1-5", "libselinux1@2.8-1+b1" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/sbin/mkhomedir_helper", "/sbin/pam_tally", "/sbin/pam_tally2", "/sbin/unix_chkpwd", "/sbin/unix_update", "/usr/sbin/pam_timestamp_check", "/usr/share/doc/libpam-modules-bin/NEWS.Debian.gz", "/usr/share/doc/libpam-modules-bin/changelog.Debian.gz", "/usr/share/doc/libpam-modules-bin/changelog.gz", "/usr/share/doc/libpam-modules-bin/copyright", "/usr/share/lintian/overrides/libpam-modules-bin", "/usr/share/man/man8/mkhomedir_helper.8.gz", "/usr/share/man/man8/pam_timestamp_check.8.gz", "/usr/share/man/man8/unix_chkpwd.8.gz", "/usr/share/man/man8/unix_update.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libpam-runtime@1.3.1-5", "Name": "libpam-runtime", "Identifier": { "PURL": "pkg:deb/debian/libpam-runtime@1.3.1-5?arch=all\u0026distro=debian-10.13", "UID": "5c823ccb0ef1b964" }, "Version": "1.3.1", "Release": "5", "Arch": "all", "SrcName": "pam", "SrcVersion": "1.3.1", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Steve Langasek \u003cvorlon@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debconf@1.5.71+deb10u1", "libpam-modules@1.3.1-5" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/sbin/pam-auth-update", "/usr/sbin/pam_getenv", "/usr/share/doc/libpam-runtime/NEWS.Debian.gz", "/usr/share/doc/libpam-runtime/changelog.Debian.gz", "/usr/share/doc/libpam-runtime/changelog.gz", "/usr/share/doc/libpam-runtime/copyright", "/usr/share/lintian/overrides/libpam-runtime", "/usr/share/locale/af/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/am/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/anp/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ar/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/as/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ast/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/bal/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/be/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/bg/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/bn/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/bn_IN/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/bo/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/br/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/brx/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/bs/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ca/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/cs/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/cy/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/da/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/de/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/de_CH/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/el/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/en_GB/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/eo/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/es/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/et/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/eu/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/fa/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/fi/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/fr/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ga/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/gl/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/gu/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/he/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/hi/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/hr/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/hu/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ia/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/id/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ilo/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/is/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/it/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ja/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ka/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/kk/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/km/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/kn/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ko/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/kw/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/kw@kkcor/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/kw@uccor/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/kw_GB/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ky/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/lt/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/lv/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/mai/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/mk/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ml/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/mn/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/mr/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ms/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/my/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/nb/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/nds/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ne/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/nl/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/nn/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/nso/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/or/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/pa/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/pl/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/pt/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ro/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ru/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/si/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sk/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sl/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sq/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sr/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sr@latin/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sv/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ta/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/te/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/tg/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/th/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/tr/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/tw/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/uk/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ur/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/vi/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/wba/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/yo/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/zh_HK/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/zu/LC_MESSAGES/Linux-PAM.mo", "/usr/share/man/man5/pam.conf.5.gz", "/usr/share/man/man7/PAM.7.gz", "/usr/share/man/man8/pam-auth-update.8.gz", "/usr/share/man/man8/pam_getenv.8.gz", "/usr/share/pam-configs/unix", "/usr/share/pam/common-account", "/usr/share/pam/common-account.md5sums", "/usr/share/pam/common-auth", "/usr/share/pam/common-auth.md5sums", "/usr/share/pam/common-password", "/usr/share/pam/common-password.md5sums", "/usr/share/pam/common-session", "/usr/share/pam/common-session-noninteractive", "/usr/share/pam/common-session-noninteractive.md5sums", "/usr/share/pam/common-session.md5sums" ], "AnalyzedBy": "dpkg" }, { "ID": "libpam0g@1.3.1-5", "Name": "libpam0g", "Identifier": { "PURL": "pkg:deb/debian/libpam0g@1.3.1-5?arch=amd64\u0026distro=debian-10.13", "UID": "ed8df5af7c4f5814" }, "Version": "1.3.1", "Release": "5", "Arch": "amd64", "SrcName": "pam", "SrcVersion": "1.3.1", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Steve Langasek \u003cvorlon@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debconf@1.5.71+deb10u1", "libaudit1@1:2.8.4-3", "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libpam.so.0.84.2", "/lib/x86_64-linux-gnu/libpam_misc.so.0.82.1", "/lib/x86_64-linux-gnu/libpamc.so.0.82.1", "/usr/share/doc/libpam0g/Debian-PAM-MiniPolicy.gz", "/usr/share/doc/libpam0g/NEWS.Debian.gz", "/usr/share/doc/libpam0g/README", "/usr/share/doc/libpam0g/README.Debian", "/usr/share/doc/libpam0g/TODO.Debian", "/usr/share/doc/libpam0g/changelog.Debian.gz", "/usr/share/doc/libpam0g/changelog.gz", "/usr/share/doc/libpam0g/copyright", "/usr/share/lintian/overrides/libpam0g" ], "AnalyzedBy": "dpkg" }, { "ID": "libpcre3@2:8.39-12", "Name": "libpcre3", "Identifier": { "PURL": "pkg:deb/debian/libpcre3@8.39-12?arch=amd64\u0026distro=debian-10.13\u0026epoch=2", "UID": "b40d77c10d076f2d" }, "Version": "8.39", "Release": "12", "Epoch": 2, "Arch": "amd64", "SrcName": "pcre3", "SrcVersion": "8.39", "SrcRelease": "12", "SrcEpoch": 2, "Maintainer": "Matthew Vernon \u003cmatthew@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libpcre.so.3.13.3", "/usr/lib/x86_64-linux-gnu/libpcreposix.so.3.13.3", "/usr/share/doc/libpcre3/AUTHORS", "/usr/share/doc/libpcre3/NEWS.gz", "/usr/share/doc/libpcre3/README.Debian", "/usr/share/doc/libpcre3/README.gz", "/usr/share/doc/libpcre3/changelog.Debian.gz", "/usr/share/doc/libpcre3/changelog.gz", "/usr/share/doc/libpcre3/copyright", "/usr/share/man/man3/pcrepattern.3.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libpsl5@0.20.2-2", "Name": "libpsl5", "Identifier": { "PURL": "pkg:deb/debian/libpsl5@0.20.2-2?arch=amd64\u0026distro=debian-10.13", "UID": "568af68f2cabbf6a" }, "Version": "0.20.2", "Release": "2", "Arch": "amd64", "SrcName": "libpsl", "SrcVersion": "0.20.2", "SrcRelease": "2", "Licenses": [ "MIT", "Chromium" ], "Maintainer": "Tim Rühsen \u003ctim.ruehsen@gmx.de\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libidn2-0@2.0.5-1+deb10u1", "libunistring2@0.9.10-1" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libpsl.so.5.3.1", "/usr/share/doc/libpsl5/changelog.Debian.gz", "/usr/share/doc/libpsl5/changelog.gz", "/usr/share/doc/libpsl5/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libpython3-stdlib@3.7.3-1", "Name": "libpython3-stdlib", "Identifier": { "PURL": "pkg:deb/debian/libpython3-stdlib@3.7.3-1?arch=amd64\u0026distro=debian-10.13", "UID": "a096b7609a26dc6c" }, "Version": "3.7.3", "Release": "1", "Arch": "amd64", "SrcName": "python3-defaults", "SrcVersion": "3.7.3", "SrcRelease": "1", "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libpython3.7-stdlib@3.7.3-2+deb10u7" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/share/doc/libpython3-stdlib/README.Debian", "/usr/share/doc/libpython3-stdlib/changelog.Debian.gz", "/usr/share/doc/libpython3-stdlib/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libpython3.7-minimal@3.7.3-2+deb10u7", "Name": "libpython3.7-minimal", "Identifier": { "PURL": "pkg:deb/debian/libpython3.7-minimal@3.7.3-2%2Bdeb10u7?arch=amd64\u0026distro=debian-10.13", "UID": "39ee42d008675d41" }, "Version": "3.7.3", "Release": "2+deb10u7", "Arch": "amd64", "SrcName": "python3.7", "SrcVersion": "3.7.3", "SrcRelease": "2+deb10u7", "Licenses": [ "GPL-2.0-only", "text://Redistribution and use in source and binary forms, with or without", "text://By obtaining, using, and/or copying this software and/or its", "text://Permission to use, copy, modify, and distribute this software and", "text://This software is provided 'as-is', without any express or implied", "text://Permission is hereby granted, free of charge, to any person", "text://Permission is hereby granted, free of charge, to any person obtaining", "text://Permission to use, copy, modify, and distribute this software and its", "text://This software is provided as-is, without express or implied", "text://Permission to use, copy, modify, and distribute this software for any", "text://* Permission to use this software in any way is granted without" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libssl1.1@1.1.1n-0+deb10u6" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/python3.7/__future__.py", "/usr/lib/python3.7/_bootlocale.py", "/usr/lib/python3.7/_collections_abc.py", "/usr/lib/python3.7/_compat_pickle.py", "/usr/lib/python3.7/_py_abc.py", "/usr/lib/python3.7/_sitebuiltins.py", "/usr/lib/python3.7/_strptime.py", "/usr/lib/python3.7/_sysconfigdata_m_linux_x86_64-linux-gnu.py", "/usr/lib/python3.7/_threading_local.py", "/usr/lib/python3.7/_weakrefset.py", "/usr/lib/python3.7/abc.py", "/usr/lib/python3.7/argparse.py", "/usr/lib/python3.7/ast.py", "/usr/lib/python3.7/base64.py", "/usr/lib/python3.7/bisect.py", "/usr/lib/python3.7/calendar.py", "/usr/lib/python3.7/codecs.py", "/usr/lib/python3.7/collections/__init__.py", "/usr/lib/python3.7/collections/abc.py", "/usr/lib/python3.7/compileall.py", "/usr/lib/python3.7/configparser.py", "/usr/lib/python3.7/contextlib.py", "/usr/lib/python3.7/copy.py", "/usr/lib/python3.7/copyreg.py", "/usr/lib/python3.7/datetime.py", "/usr/lib/python3.7/dis.py", "/usr/lib/python3.7/encodings/__init__.py", "/usr/lib/python3.7/encodings/aliases.py", "/usr/lib/python3.7/encodings/ascii.py", "/usr/lib/python3.7/encodings/base64_codec.py", "/usr/lib/python3.7/encodings/big5.py", "/usr/lib/python3.7/encodings/big5hkscs.py", "/usr/lib/python3.7/encodings/bz2_codec.py", "/usr/lib/python3.7/encodings/charmap.py", "/usr/lib/python3.7/encodings/cp037.py", "/usr/lib/python3.7/encodings/cp1006.py", "/usr/lib/python3.7/encodings/cp1026.py", "/usr/lib/python3.7/encodings/cp1125.py", "/usr/lib/python3.7/encodings/cp1140.py", "/usr/lib/python3.7/encodings/cp1250.py", "/usr/lib/python3.7/encodings/cp1251.py", "/usr/lib/python3.7/encodings/cp1252.py", "/usr/lib/python3.7/encodings/cp1253.py", "/usr/lib/python3.7/encodings/cp1254.py", "/usr/lib/python3.7/encodings/cp1255.py", "/usr/lib/python3.7/encodings/cp1256.py", "/usr/lib/python3.7/encodings/cp1257.py", "/usr/lib/python3.7/encodings/cp1258.py", "/usr/lib/python3.7/encodings/cp273.py", "/usr/lib/python3.7/encodings/cp424.py", "/usr/lib/python3.7/encodings/cp437.py", "/usr/lib/python3.7/encodings/cp500.py", "/usr/lib/python3.7/encodings/cp65001.py", "/usr/lib/python3.7/encodings/cp720.py", "/usr/lib/python3.7/encodings/cp737.py", "/usr/lib/python3.7/encodings/cp775.py", "/usr/lib/python3.7/encodings/cp850.py", "/usr/lib/python3.7/encodings/cp852.py", "/usr/lib/python3.7/encodings/cp855.py", "/usr/lib/python3.7/encodings/cp856.py", "/usr/lib/python3.7/encodings/cp857.py", "/usr/lib/python3.7/encodings/cp858.py", "/usr/lib/python3.7/encodings/cp860.py", "/usr/lib/python3.7/encodings/cp861.py", "/usr/lib/python3.7/encodings/cp862.py", "/usr/lib/python3.7/encodings/cp863.py", "/usr/lib/python3.7/encodings/cp864.py", "/usr/lib/python3.7/encodings/cp865.py", "/usr/lib/python3.7/encodings/cp866.py", "/usr/lib/python3.7/encodings/cp869.py", "/usr/lib/python3.7/encodings/cp874.py", "/usr/lib/python3.7/encodings/cp875.py", "/usr/lib/python3.7/encodings/cp932.py", "/usr/lib/python3.7/encodings/cp949.py", "/usr/lib/python3.7/encodings/cp950.py", "/usr/lib/python3.7/encodings/euc_jis_2004.py", "/usr/lib/python3.7/encodings/euc_jisx0213.py", "/usr/lib/python3.7/encodings/euc_jp.py", "/usr/lib/python3.7/encodings/euc_kr.py", "/usr/lib/python3.7/encodings/gb18030.py", "/usr/lib/python3.7/encodings/gb2312.py", "/usr/lib/python3.7/encodings/gbk.py", "/usr/lib/python3.7/encodings/hex_codec.py", "/usr/lib/python3.7/encodings/hp_roman8.py", "/usr/lib/python3.7/encodings/hz.py", "/usr/lib/python3.7/encodings/idna.py", "/usr/lib/python3.7/encodings/iso2022_jp.py", "/usr/lib/python3.7/encodings/iso2022_jp_1.py", "/usr/lib/python3.7/encodings/iso2022_jp_2.py", "/usr/lib/python3.7/encodings/iso2022_jp_2004.py", "/usr/lib/python3.7/encodings/iso2022_jp_3.py", "/usr/lib/python3.7/encodings/iso2022_jp_ext.py", "/usr/lib/python3.7/encodings/iso2022_kr.py", "/usr/lib/python3.7/encodings/iso8859_1.py", "/usr/lib/python3.7/encodings/iso8859_10.py", "/usr/lib/python3.7/encodings/iso8859_11.py", "/usr/lib/python3.7/encodings/iso8859_13.py", "/usr/lib/python3.7/encodings/iso8859_14.py", "/usr/lib/python3.7/encodings/iso8859_15.py", "/usr/lib/python3.7/encodings/iso8859_16.py", "/usr/lib/python3.7/encodings/iso8859_2.py", "/usr/lib/python3.7/encodings/iso8859_3.py", "/usr/lib/python3.7/encodings/iso8859_4.py", "/usr/lib/python3.7/encodings/iso8859_5.py", "/usr/lib/python3.7/encodings/iso8859_6.py", "/usr/lib/python3.7/encodings/iso8859_7.py", "/usr/lib/python3.7/encodings/iso8859_8.py", "/usr/lib/python3.7/encodings/iso8859_9.py", "/usr/lib/python3.7/encodings/johab.py", "/usr/lib/python3.7/encodings/koi8_r.py", "/usr/lib/python3.7/encodings/koi8_t.py", "/usr/lib/python3.7/encodings/koi8_u.py", "/usr/lib/python3.7/encodings/kz1048.py", "/usr/lib/python3.7/encodings/latin_1.py", "/usr/lib/python3.7/encodings/mac_arabic.py", "/usr/lib/python3.7/encodings/mac_centeuro.py", "/usr/lib/python3.7/encodings/mac_croatian.py", "/usr/lib/python3.7/encodings/mac_cyrillic.py", "/usr/lib/python3.7/encodings/mac_farsi.py", "/usr/lib/python3.7/encodings/mac_greek.py", "/usr/lib/python3.7/encodings/mac_iceland.py", "/usr/lib/python3.7/encodings/mac_latin2.py", "/usr/lib/python3.7/encodings/mac_roman.py", "/usr/lib/python3.7/encodings/mac_romanian.py", "/usr/lib/python3.7/encodings/mac_turkish.py", "/usr/lib/python3.7/encodings/mbcs.py", "/usr/lib/python3.7/encodings/oem.py", "/usr/lib/python3.7/encodings/palmos.py", "/usr/lib/python3.7/encodings/ptcp154.py", "/usr/lib/python3.7/encodings/punycode.py", "/usr/lib/python3.7/encodings/quopri_codec.py", "/usr/lib/python3.7/encodings/raw_unicode_escape.py", "/usr/lib/python3.7/encodings/rot_13.py", "/usr/lib/python3.7/encodings/shift_jis.py", "/usr/lib/python3.7/encodings/shift_jis_2004.py", "/usr/lib/python3.7/encodings/shift_jisx0213.py", "/usr/lib/python3.7/encodings/tis_620.py", "/usr/lib/python3.7/encodings/undefined.py", "/usr/lib/python3.7/encodings/unicode_escape.py", "/usr/lib/python3.7/encodings/unicode_internal.py", "/usr/lib/python3.7/encodings/utf_16.py", "/usr/lib/python3.7/encodings/utf_16_be.py", "/usr/lib/python3.7/encodings/utf_16_le.py", "/usr/lib/python3.7/encodings/utf_32.py", "/usr/lib/python3.7/encodings/utf_32_be.py", "/usr/lib/python3.7/encodings/utf_32_le.py", "/usr/lib/python3.7/encodings/utf_7.py", "/usr/lib/python3.7/encodings/utf_8.py", "/usr/lib/python3.7/encodings/utf_8_sig.py", "/usr/lib/python3.7/encodings/uu_codec.py", "/usr/lib/python3.7/encodings/zlib_codec.py", "/usr/lib/python3.7/enum.py", "/usr/lib/python3.7/fnmatch.py", "/usr/lib/python3.7/functools.py", "/usr/lib/python3.7/genericpath.py", "/usr/lib/python3.7/getopt.py", "/usr/lib/python3.7/glob.py", "/usr/lib/python3.7/hashlib.py", "/usr/lib/python3.7/heapq.py", "/usr/lib/python3.7/imp.py", "/usr/lib/python3.7/importlib/__init__.py", "/usr/lib/python3.7/importlib/_bootstrap.py", "/usr/lib/python3.7/importlib/_bootstrap_external.py", "/usr/lib/python3.7/importlib/abc.py", "/usr/lib/python3.7/importlib/machinery.py", "/usr/lib/python3.7/importlib/resources.py", "/usr/lib/python3.7/importlib/util.py", "/usr/lib/python3.7/inspect.py", "/usr/lib/python3.7/io.py", "/usr/lib/python3.7/ipaddress.py", "/usr/lib/python3.7/keyword.py", "/usr/lib/python3.7/lib-dynload/_hashlib.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_opcode.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_ssl.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/linecache.py", "/usr/lib/python3.7/locale.py", "/usr/lib/python3.7/logging/__init__.py", "/usr/lib/python3.7/logging/config.py", "/usr/lib/python3.7/logging/handlers.py", "/usr/lib/python3.7/opcode.py", "/usr/lib/python3.7/operator.py", "/usr/lib/python3.7/optparse.py", "/usr/lib/python3.7/os.py", "/usr/lib/python3.7/pickle.py", "/usr/lib/python3.7/pkgutil.py", "/usr/lib/python3.7/platform.py", "/usr/lib/python3.7/posixpath.py", "/usr/lib/python3.7/py_compile.py", "/usr/lib/python3.7/random.py", "/usr/lib/python3.7/re.py", "/usr/lib/python3.7/reprlib.py", "/usr/lib/python3.7/runpy.py", "/usr/lib/python3.7/selectors.py", "/usr/lib/python3.7/signal.py", "/usr/lib/python3.7/site.py", "/usr/lib/python3.7/socket.py", "/usr/lib/python3.7/sre_compile.py", "/usr/lib/python3.7/sre_constants.py", "/usr/lib/python3.7/sre_parse.py", "/usr/lib/python3.7/ssl.py", "/usr/lib/python3.7/stat.py", "/usr/lib/python3.7/string.py", "/usr/lib/python3.7/stringprep.py", "/usr/lib/python3.7/struct.py", "/usr/lib/python3.7/subprocess.py", "/usr/lib/python3.7/sysconfig.py", "/usr/lib/python3.7/tempfile.py", "/usr/lib/python3.7/textwrap.py", "/usr/lib/python3.7/threading.py", "/usr/lib/python3.7/token.py", "/usr/lib/python3.7/tokenize.py", "/usr/lib/python3.7/traceback.py", "/usr/lib/python3.7/tracemalloc.py", "/usr/lib/python3.7/types.py", "/usr/lib/python3.7/warnings.py", "/usr/lib/python3.7/weakref.py", "/usr/share/doc/libpython3.7-minimal/README.Debian", "/usr/share/doc/libpython3.7-minimal/changelog.Debian.gz", "/usr/share/doc/libpython3.7-minimal/copyright", "/usr/share/lintian/overrides/libpython3.7-minimal" ], "AnalyzedBy": "dpkg" }, { "ID": "libpython3.7-stdlib@3.7.3-2+deb10u7", "Name": "libpython3.7-stdlib", "Identifier": { "PURL": "pkg:deb/debian/libpython3.7-stdlib@3.7.3-2%2Bdeb10u7?arch=amd64\u0026distro=debian-10.13", "UID": "920667a651416dfe" }, "Version": "3.7.3", "Release": "2+deb10u7", "Arch": "amd64", "SrcName": "python3.7", "SrcVersion": "3.7.3", "SrcRelease": "2+deb10u7", "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libbz2-1.0@1.0.6-9.2~deb10u2", "libc6@2.28-10+deb10u3", "libdb5.3@5.3.28+dfsg1-0.5", "libffi6@3.2.1-9", "liblzma5@5.2.4-1+deb10u1", "libmpdec2@2.4.2-2", "libncursesw6@6.1+20181013-2+deb10u5", "libpython3.7-minimal@3.7.3-2+deb10u7", "libreadline7@7.0-5", "libsqlite3-0@3.27.2-3+deb10u2", "libtinfo6@6.1+20181013-2+deb10u5", "libuuid1@2.33.1-0.1+deb10u1", "mime-support@3.62" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/python3.7/LICENSE.txt", "/usr/lib/python3.7/__phello__.foo.py", "/usr/lib/python3.7/_compression.py", "/usr/lib/python3.7/_dummy_thread.py", "/usr/lib/python3.7/_markupbase.py", "/usr/lib/python3.7/_osx_support.py", "/usr/lib/python3.7/_pydecimal.py", "/usr/lib/python3.7/_pyio.py", "/usr/lib/python3.7/aifc.py", "/usr/lib/python3.7/antigravity.py", "/usr/lib/python3.7/asynchat.py", "/usr/lib/python3.7/asyncio/__init__.py", "/usr/lib/python3.7/asyncio/base_events.py", "/usr/lib/python3.7/asyncio/base_futures.py", "/usr/lib/python3.7/asyncio/base_subprocess.py", "/usr/lib/python3.7/asyncio/base_tasks.py", "/usr/lib/python3.7/asyncio/constants.py", "/usr/lib/python3.7/asyncio/coroutines.py", "/usr/lib/python3.7/asyncio/events.py", "/usr/lib/python3.7/asyncio/format_helpers.py", "/usr/lib/python3.7/asyncio/futures.py", "/usr/lib/python3.7/asyncio/locks.py", "/usr/lib/python3.7/asyncio/log.py", "/usr/lib/python3.7/asyncio/proactor_events.py", "/usr/lib/python3.7/asyncio/protocols.py", "/usr/lib/python3.7/asyncio/queues.py", "/usr/lib/python3.7/asyncio/runners.py", "/usr/lib/python3.7/asyncio/selector_events.py", "/usr/lib/python3.7/asyncio/sslproto.py", "/usr/lib/python3.7/asyncio/streams.py", "/usr/lib/python3.7/asyncio/subprocess.py", "/usr/lib/python3.7/asyncio/tasks.py", "/usr/lib/python3.7/asyncio/transports.py", "/usr/lib/python3.7/asyncio/unix_events.py", "/usr/lib/python3.7/asyncio/windows_events.py", "/usr/lib/python3.7/asyncio/windows_utils.py", "/usr/lib/python3.7/asyncore.py", "/usr/lib/python3.7/bdb.py", "/usr/lib/python3.7/binhex.py", "/usr/lib/python3.7/bz2.py", "/usr/lib/python3.7/cProfile.py", "/usr/lib/python3.7/cgi.py", "/usr/lib/python3.7/cgitb.py", "/usr/lib/python3.7/chunk.py", "/usr/lib/python3.7/cmd.py", "/usr/lib/python3.7/code.py", "/usr/lib/python3.7/codeop.py", "/usr/lib/python3.7/colorsys.py", "/usr/lib/python3.7/concurrent/__init__.py", "/usr/lib/python3.7/concurrent/futures/__init__.py", "/usr/lib/python3.7/concurrent/futures/_base.py", "/usr/lib/python3.7/concurrent/futures/process.py", "/usr/lib/python3.7/concurrent/futures/thread.py", "/usr/lib/python3.7/contextvars.py", "/usr/lib/python3.7/crypt.py", "/usr/lib/python3.7/csv.py", "/usr/lib/python3.7/ctypes/__init__.py", "/usr/lib/python3.7/ctypes/_aix.py", "/usr/lib/python3.7/ctypes/_endian.py", "/usr/lib/python3.7/ctypes/util.py", "/usr/lib/python3.7/ctypes/wintypes.py", "/usr/lib/python3.7/curses/__init__.py", "/usr/lib/python3.7/curses/ascii.py", "/usr/lib/python3.7/curses/has_key.py", "/usr/lib/python3.7/curses/panel.py", "/usr/lib/python3.7/curses/textpad.py", "/usr/lib/python3.7/dataclasses.py", "/usr/lib/python3.7/dbm/__init__.py", "/usr/lib/python3.7/dbm/dumb.py", "/usr/lib/python3.7/dbm/gnu.py", "/usr/lib/python3.7/dbm/ndbm.py", "/usr/lib/python3.7/decimal.py", "/usr/lib/python3.7/difflib.py", "/usr/lib/python3.7/distutils/__init__.py", "/usr/lib/python3.7/distutils/version.py", "/usr/lib/python3.7/doctest.py", "/usr/lib/python3.7/dummy_threading.py", "/usr/lib/python3.7/email/__init__.py", "/usr/lib/python3.7/email/_encoded_words.py", "/usr/lib/python3.7/email/_header_value_parser.py", "/usr/lib/python3.7/email/_parseaddr.py", "/usr/lib/python3.7/email/_policybase.py", "/usr/lib/python3.7/email/architecture.rst", "/usr/lib/python3.7/email/base64mime.py", "/usr/lib/python3.7/email/charset.py", "/usr/lib/python3.7/email/contentmanager.py", "/usr/lib/python3.7/email/encoders.py", "/usr/lib/python3.7/email/errors.py", "/usr/lib/python3.7/email/feedparser.py", "/usr/lib/python3.7/email/generator.py", "/usr/lib/python3.7/email/header.py", "/usr/lib/python3.7/email/headerregistry.py", "/usr/lib/python3.7/email/iterators.py", "/usr/lib/python3.7/email/message.py", "/usr/lib/python3.7/email/mime/__init__.py", "/usr/lib/python3.7/email/mime/application.py", "/usr/lib/python3.7/email/mime/audio.py", "/usr/lib/python3.7/email/mime/base.py", "/usr/lib/python3.7/email/mime/image.py", "/usr/lib/python3.7/email/mime/message.py", "/usr/lib/python3.7/email/mime/multipart.py", "/usr/lib/python3.7/email/mime/nonmultipart.py", "/usr/lib/python3.7/email/mime/text.py", "/usr/lib/python3.7/email/parser.py", "/usr/lib/python3.7/email/policy.py", "/usr/lib/python3.7/email/quoprimime.py", "/usr/lib/python3.7/email/utils.py", "/usr/lib/python3.7/filecmp.py", "/usr/lib/python3.7/fileinput.py", "/usr/lib/python3.7/formatter.py", "/usr/lib/python3.7/fractions.py", "/usr/lib/python3.7/ftplib.py", "/usr/lib/python3.7/getpass.py", "/usr/lib/python3.7/gettext.py", "/usr/lib/python3.7/gzip.py", "/usr/lib/python3.7/hmac.py", "/usr/lib/python3.7/html/__init__.py", "/usr/lib/python3.7/html/entities.py", "/usr/lib/python3.7/html/parser.py", "/usr/lib/python3.7/http/__init__.py", "/usr/lib/python3.7/http/client.py", "/usr/lib/python3.7/http/cookiejar.py", "/usr/lib/python3.7/http/cookies.py", "/usr/lib/python3.7/http/server.py", "/usr/lib/python3.7/imaplib.py", "/usr/lib/python3.7/imghdr.py", "/usr/lib/python3.7/json/__init__.py", "/usr/lib/python3.7/json/decoder.py", "/usr/lib/python3.7/json/encoder.py", "/usr/lib/python3.7/json/scanner.py", "/usr/lib/python3.7/json/tool.py", "/usr/lib/python3.7/lib-dynload/_asyncio.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_bz2.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_codecs_cn.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_codecs_hk.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_codecs_iso2022.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_codecs_jp.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_codecs_kr.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_codecs_tw.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_contextvars.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_crypt.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_csv.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_ctypes.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_ctypes_test.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_curses.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_curses_panel.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_dbm.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_decimal.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_json.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_lsprof.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_lzma.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_multibytecodec.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_multiprocessing.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_queue.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_sqlite3.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_testbuffer.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_testcapi.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_testimportmultiple.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_testmultiphase.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_uuid.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/_xxtestfuzz.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/audioop.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/mmap.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/nis.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/ossaudiodev.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/parser.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/readline.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/resource.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/termios.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lib-dynload/xxlimited.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3.7/lzma.py", "/usr/lib/python3.7/macpath.py", "/usr/lib/python3.7/mailbox.py", "/usr/lib/python3.7/mailcap.py", "/usr/lib/python3.7/mimetypes.py", "/usr/lib/python3.7/modulefinder.py", "/usr/lib/python3.7/multiprocessing/__init__.py", "/usr/lib/python3.7/multiprocessing/connection.py", "/usr/lib/python3.7/multiprocessing/context.py", "/usr/lib/python3.7/multiprocessing/dummy/__init__.py", "/usr/lib/python3.7/multiprocessing/dummy/connection.py", "/usr/lib/python3.7/multiprocessing/forkserver.py", "/usr/lib/python3.7/multiprocessing/heap.py", "/usr/lib/python3.7/multiprocessing/managers.py", "/usr/lib/python3.7/multiprocessing/pool.py", "/usr/lib/python3.7/multiprocessing/popen_fork.py", "/usr/lib/python3.7/multiprocessing/popen_forkserver.py", "/usr/lib/python3.7/multiprocessing/popen_spawn_posix.py", "/usr/lib/python3.7/multiprocessing/popen_spawn_win32.py", "/usr/lib/python3.7/multiprocessing/process.py", "/usr/lib/python3.7/multiprocessing/queues.py", "/usr/lib/python3.7/multiprocessing/reduction.py", "/usr/lib/python3.7/multiprocessing/resource_sharer.py", "/usr/lib/python3.7/multiprocessing/semaphore_tracker.py", "/usr/lib/python3.7/multiprocessing/sharedctypes.py", "/usr/lib/python3.7/multiprocessing/spawn.py", "/usr/lib/python3.7/multiprocessing/synchronize.py", "/usr/lib/python3.7/multiprocessing/util.py", "/usr/lib/python3.7/netrc.py", "/usr/lib/python3.7/nntplib.py", "/usr/lib/python3.7/ntpath.py", "/usr/lib/python3.7/nturl2path.py", "/usr/lib/python3.7/numbers.py", "/usr/lib/python3.7/pathlib.py", "/usr/lib/python3.7/pdb.py", "/usr/lib/python3.7/pickletools.py", "/usr/lib/python3.7/pipes.py", "/usr/lib/python3.7/plistlib.py", "/usr/lib/python3.7/poplib.py", "/usr/lib/python3.7/pprint.py", "/usr/lib/python3.7/profile.py", "/usr/lib/python3.7/pstats.py", "/usr/lib/python3.7/pty.py", "/usr/lib/python3.7/pyclbr.py", "/usr/lib/python3.7/pydoc.py", "/usr/lib/python3.7/pydoc_data/__init__.py", "/usr/lib/python3.7/pydoc_data/_pydoc.css", "/usr/lib/python3.7/pydoc_data/topics.py", "/usr/lib/python3.7/queue.py", "/usr/lib/python3.7/quopri.py", "/usr/lib/python3.7/rlcompleter.py", "/usr/lib/python3.7/sched.py", "/usr/lib/python3.7/secrets.py", "/usr/lib/python3.7/shelve.py", "/usr/lib/python3.7/shlex.py", "/usr/lib/python3.7/shutil.py", "/usr/lib/python3.7/smtpd.py", "/usr/lib/python3.7/smtplib.py", "/usr/lib/python3.7/sndhdr.py", "/usr/lib/python3.7/socketserver.py", "/usr/lib/python3.7/sqlite3/__init__.py", "/usr/lib/python3.7/sqlite3/dbapi2.py", "/usr/lib/python3.7/sqlite3/dump.py", "/usr/lib/python3.7/statistics.py", "/usr/lib/python3.7/sunau.py", "/usr/lib/python3.7/symbol.py", "/usr/lib/python3.7/symtable.py", "/usr/lib/python3.7/tabnanny.py", "/usr/lib/python3.7/tarfile.py", "/usr/lib/python3.7/telnetlib.py", "/usr/lib/python3.7/test/__init__.py", "/usr/lib/python3.7/test/__main__.py", "/usr/lib/python3.7/test/ann_module.py", "/usr/lib/python3.7/test/ann_module2.py", "/usr/lib/python3.7/test/ann_module3.py", "/usr/lib/python3.7/test/libregrtest/__init__.py", "/usr/lib/python3.7/test/libregrtest/cmdline.py", "/usr/lib/python3.7/test/libregrtest/main.py", "/usr/lib/python3.7/test/libregrtest/refleak.py", "/usr/lib/python3.7/test/libregrtest/runtest.py", "/usr/lib/python3.7/test/libregrtest/runtest_mp.py", "/usr/lib/python3.7/test/libregrtest/save_env.py", "/usr/lib/python3.7/test/libregrtest/setup.py", "/usr/lib/python3.7/test/libregrtest/utils.py", "/usr/lib/python3.7/test/regrtest.py", "/usr/lib/python3.7/test/support/__init__.py", "/usr/lib/python3.7/test/support/script_helper.py", "/usr/lib/python3.7/test/support/testresult.py", "/usr/lib/python3.7/test/test_support.py", "/usr/lib/python3.7/this.py", "/usr/lib/python3.7/timeit.py", "/usr/lib/python3.7/trace.py", "/usr/lib/python3.7/tty.py", "/usr/lib/python3.7/turtle.py", "/usr/lib/python3.7/typing.py", "/usr/lib/python3.7/unittest/__init__.py", "/usr/lib/python3.7/unittest/__main__.py", "/usr/lib/python3.7/unittest/case.py", "/usr/lib/python3.7/unittest/loader.py", "/usr/lib/python3.7/unittest/main.py", "/usr/lib/python3.7/unittest/mock.py", "/usr/lib/python3.7/unittest/result.py", "/usr/lib/python3.7/unittest/runner.py", "/usr/lib/python3.7/unittest/signals.py", "/usr/lib/python3.7/unittest/suite.py", "/usr/lib/python3.7/unittest/util.py", "/usr/lib/python3.7/urllib/__init__.py", "/usr/lib/python3.7/urllib/error.py", "/usr/lib/python3.7/urllib/parse.py", "/usr/lib/python3.7/urllib/request.py", "/usr/lib/python3.7/urllib/response.py", "/usr/lib/python3.7/urllib/robotparser.py", "/usr/lib/python3.7/uu.py", "/usr/lib/python3.7/uuid.py", "/usr/lib/python3.7/venv/__init__.py", "/usr/lib/python3.7/venv/__main__.py", "/usr/lib/python3.7/venv/scripts/common/activate", "/usr/lib/python3.7/venv/scripts/posix/activate.csh", "/usr/lib/python3.7/venv/scripts/posix/activate.fish", "/usr/lib/python3.7/wave.py", "/usr/lib/python3.7/webbrowser.py", "/usr/lib/python3.7/wsgiref/__init__.py", "/usr/lib/python3.7/wsgiref/handlers.py", "/usr/lib/python3.7/wsgiref/headers.py", "/usr/lib/python3.7/wsgiref/simple_server.py", "/usr/lib/python3.7/wsgiref/util.py", "/usr/lib/python3.7/wsgiref/validate.py", "/usr/lib/python3.7/xdrlib.py", "/usr/lib/python3.7/xml/__init__.py", "/usr/lib/python3.7/xml/dom/NodeFilter.py", "/usr/lib/python3.7/xml/dom/__init__.py", "/usr/lib/python3.7/xml/dom/domreg.py", "/usr/lib/python3.7/xml/dom/expatbuilder.py", "/usr/lib/python3.7/xml/dom/minicompat.py", "/usr/lib/python3.7/xml/dom/minidom.py", "/usr/lib/python3.7/xml/dom/pulldom.py", "/usr/lib/python3.7/xml/dom/xmlbuilder.py", "/usr/lib/python3.7/xml/etree/ElementInclude.py", "/usr/lib/python3.7/xml/etree/ElementPath.py", "/usr/lib/python3.7/xml/etree/ElementTree.py", "/usr/lib/python3.7/xml/etree/__init__.py", "/usr/lib/python3.7/xml/etree/cElementTree.py", "/usr/lib/python3.7/xml/parsers/__init__.py", "/usr/lib/python3.7/xml/parsers/expat.py", "/usr/lib/python3.7/xml/sax/__init__.py", "/usr/lib/python3.7/xml/sax/_exceptions.py", "/usr/lib/python3.7/xml/sax/expatreader.py", "/usr/lib/python3.7/xml/sax/handler.py", "/usr/lib/python3.7/xml/sax/saxutils.py", "/usr/lib/python3.7/xml/sax/xmlreader.py", "/usr/lib/python3.7/xmlrpc/__init__.py", "/usr/lib/python3.7/xmlrpc/client.py", "/usr/lib/python3.7/xmlrpc/server.py", "/usr/lib/python3.7/zipapp.py", "/usr/lib/python3.7/zipfile.py", "/usr/share/lintian/overrides/libpython3.7-stdlib" ], "AnalyzedBy": "dpkg" }, { "ID": "libreadline7@7.0-5", "Name": "libreadline7", "Identifier": { "PURL": "pkg:deb/debian/libreadline7@7.0-5?arch=amd64\u0026distro=debian-10.13", "UID": "5c8123b03edcaeee" }, "Version": "7.0", "Release": "5", "Arch": "amd64", "SrcName": "readline", "SrcVersion": "7.0", "SrcRelease": "5", "Licenses": [ "GPL-3.0-only", "GFDL-1.3-or-later" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libtinfo6@6.1+20181013-2+deb10u5", "readline-common@7.0-5" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libhistory.so.7.0", "/lib/x86_64-linux-gnu/libreadline.so.7.0", "/usr/share/doc/libreadline7/README.Debian", "/usr/share/doc/libreadline7/USAGE", "/usr/share/doc/libreadline7/changelog.Debian.gz", "/usr/share/doc/libreadline7/changelog.gz", "/usr/share/doc/libreadline7/copyright", "/usr/share/doc/libreadline7/examples/Inputrc", "/usr/share/doc/libreadline7/inputrc.arrows" ], "AnalyzedBy": "dpkg" }, { "ID": "librtmp1@2.4+20151223.gitfa8646d.1-2", "Name": "librtmp1", "Identifier": { "PURL": "pkg:deb/debian/librtmp1@2.4%2B20151223.gitfa8646d.1-2?arch=amd64\u0026distro=debian-10.13", "UID": "daf26e46820e6e41" }, "Version": "2.4+20151223.gitfa8646d.1", "Release": "2", "Arch": "amd64", "SrcName": "rtmpdump", "SrcVersion": "2.4+20151223.gitfa8646d.1", "SrcRelease": "2", "Licenses": [ "GPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libgmp10@2:6.1.2+dfsg-4+deb10u1", "libgnutls30@3.6.7-4+deb10u12", "libhogweed4@3.4.1-1+deb10u1", "libnettle6@3.4.1-1+deb10u1", "zlib1g@1:1.2.11.dfsg-1+deb10u2" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/librtmp.so.1", "/usr/share/doc/librtmp1/changelog.Debian.gz", "/usr/share/doc/librtmp1/changelog.gz", "/usr/share/doc/librtmp1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsasl2-2@2.1.27+dfsg-1+deb10u2", "Name": "libsasl2-2", "Identifier": { "PURL": "pkg:deb/debian/libsasl2-2@2.1.27%2Bdfsg-1%2Bdeb10u2?arch=amd64\u0026distro=debian-10.13", "UID": "30a4335425b9d" }, "Version": "2.1.27+dfsg", "Release": "1+deb10u2", "Arch": "amd64", "SrcName": "cyrus-sasl2", "SrcVersion": "2.1.27+dfsg", "SrcRelease": "1+deb10u2", "Licenses": [ "BSD-4-Clause", "GPL-3.0-or-later", "GPL-3.0-only" ], "Maintainer": "Debian Cyrus Team \u003cteam+cyrus@tracker.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libsasl2-modules-db@2.1.27+dfsg-1+deb10u2" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25", "/usr/share/doc/libsasl2-2/NEWS.Debian.gz", "/usr/share/doc/libsasl2-2/README.Debian", "/usr/share/doc/libsasl2-2/README.configure-options", "/usr/share/doc/libsasl2-2/changelog.Debian.gz", "/usr/share/doc/libsasl2-2/changelog.gz", "/usr/share/doc/libsasl2-2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsasl2-modules-db@2.1.27+dfsg-1+deb10u2", "Name": "libsasl2-modules-db", "Identifier": { "PURL": "pkg:deb/debian/libsasl2-modules-db@2.1.27%2Bdfsg-1%2Bdeb10u2?arch=amd64\u0026distro=debian-10.13", "UID": "a88b20bad8c4eebe" }, "Version": "2.1.27+dfsg", "Release": "1+deb10u2", "Arch": "amd64", "SrcName": "cyrus-sasl2", "SrcVersion": "2.1.27+dfsg", "SrcRelease": "1+deb10u2", "Licenses": [ "BSD-4-Clause", "GPL-3.0-or-later", "GPL-3.0-only" ], "Maintainer": "Debian Cyrus Team \u003cteam+cyrus@tracker.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libdb5.3@5.3.28+dfsg1-0.5" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/sasl2/libsasldb.so.2.0.25", "/usr/share/doc/libsasl2-modules-db/NEWS.Debian.gz", "/usr/share/doc/libsasl2-modules-db/changelog.Debian.gz", "/usr/share/doc/libsasl2-modules-db/changelog.gz", "/usr/share/doc/libsasl2-modules-db/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libseccomp2@2.3.3-4", "Name": "libseccomp2", "Identifier": { "PURL": "pkg:deb/debian/libseccomp2@2.3.3-4?arch=amd64\u0026distro=debian-10.13", "UID": "60f7febcf769534d" }, "Version": "2.3.3", "Release": "4", "Arch": "amd64", "SrcName": "libseccomp", "SrcVersion": "2.3.3", "SrcRelease": "4", "Licenses": [ "LGPL-2.1-only" ], "Maintainer": "Kees Cook \u003ckees@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libseccomp.so.2.3.3", "/usr/share/doc/libseccomp2/changelog.Debian.gz", "/usr/share/doc/libseccomp2/changelog.gz", "/usr/share/doc/libseccomp2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libselinux1@2.8-1+b1", "Name": "libselinux1", "Identifier": { "PURL": "pkg:deb/debian/libselinux1@2.8-1%2Bb1?arch=amd64\u0026distro=debian-10.13", "UID": "291e8bfc829c53b6" }, "Version": "2.8", "Release": "1+b1", "Arch": "amd64", "SrcName": "libselinux", "SrcVersion": "2.8", "SrcRelease": "1", "Licenses": [ "LGPL-2.1-only", "GPL-2.0-only" ], "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libpcre3@2:8.39-12" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libselinux.so.1", "/usr/share/doc/libselinux1/changelog.Debian.amd64.gz", "/usr/share/doc/libselinux1/changelog.Debian.gz", "/usr/share/doc/libselinux1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsemanage-common@2.8-2", "Name": "libsemanage-common", "Identifier": { "PURL": "pkg:deb/debian/libsemanage-common@2.8-2?arch=all\u0026distro=debian-10.13", "UID": "5723d5cf90890435" }, "Version": "2.8", "Release": "2", "Arch": "all", "SrcName": "libsemanage", "SrcVersion": "2.8", "SrcRelease": "2", "Licenses": [ "LGPL-2.0-or-later", "GPL-2.0-or-later" ], "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/share/doc/libsemanage-common/changelog.Debian.gz", "/usr/share/doc/libsemanage-common/copyright", "/usr/share/man/man5/semanage.conf.5.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libsemanage1@2.8-2", "Name": "libsemanage1", "Identifier": { "PURL": "pkg:deb/debian/libsemanage1@2.8-2?arch=amd64\u0026distro=debian-10.13", "UID": "53e77b2a7321136b" }, "Version": "2.8", "Release": "2", "Arch": "amd64", "SrcName": "libsemanage", "SrcVersion": "2.8", "SrcRelease": "2", "Licenses": [ "LGPL-2.0-or-later", "GPL-2.0-or-later" ], "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libaudit1@1:2.8.4-3", "libbz2-1.0@1.0.6-9.2~deb10u2", "libc6@2.28-10+deb10u3", "libselinux1@2.8-1+b1", "libsemanage-common@2.8-2", "libsepol1@2.8-1" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsemanage.so.1", "/usr/share/doc/libsemanage1/changelog.Debian.gz", "/usr/share/doc/libsemanage1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsepol1@2.8-1", "Name": "libsepol1", "Identifier": { "PURL": "pkg:deb/debian/libsepol1@2.8-1?arch=amd64\u0026distro=debian-10.13", "UID": "6f2f1b94202a598d" }, "Version": "2.8", "Release": "1", "Arch": "amd64", "SrcName": "libsepol", "SrcVersion": "2.8", "SrcRelease": "1", "Licenses": [ "LGPL-2.0-or-later", "GPL-2.0-or-later" ], "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libsepol.so.1", "/usr/share/doc/libsepol1/changelog.Debian.gz", "/usr/share/doc/libsepol1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsmartcols1@2.33.1-0.1+deb10u1", "Name": "libsmartcols1", "Identifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.33.1-0.1%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "71452b7f0da99813" }, "Version": "2.33.1", "Release": "0.1+deb10u1", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.33.1", "SrcRelease": "0.1+deb10u1", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "public-domain", "BSD-4-Clause", "MIT", "BSD-2-Clause", "BSD-3-Clause", "LGPL-2.0-or-later", "LGPL-2.1-or-later", "GPL-3.0-or-later", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "LaMont Jones \u003clamont@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libsmartcols.so.1.1.0", "/usr/share/doc/libsmartcols1/changelog.Debian.gz", "/usr/share/doc/libsmartcols1/changelog.gz", "/usr/share/doc/libsmartcols1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsqlite3-0@3.27.2-3+deb10u2", "Name": "libsqlite3-0", "Identifier": { "PURL": "pkg:deb/debian/libsqlite3-0@3.27.2-3%2Bdeb10u2?arch=amd64\u0026distro=debian-10.13", "UID": "dda7d8af2c36206a" }, "Version": "3.27.2", "Release": "3+deb10u2", "Arch": "amd64", "SrcName": "sqlite3", "SrcVersion": "3.27.2", "SrcRelease": "3+deb10u2", "Licenses": [ "public-domain", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Laszlo Boszormenyi (GCS) \u003cgcs@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6", "/usr/share/doc/libsqlite3-0/README.Debian", "/usr/share/doc/libsqlite3-0/changelog.Debian.gz", "/usr/share/doc/libsqlite3-0/changelog.gz", "/usr/share/doc/libsqlite3-0/changelog.html.gz", "/usr/share/doc/libsqlite3-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libss2@1.44.5-1+deb10u3", "Name": "libss2", "Identifier": { "PURL": "pkg:deb/debian/libss2@1.44.5-1%2Bdeb10u3?arch=amd64\u0026distro=debian-10.13", "UID": "666ec9751dceff27" }, "Version": "1.44.5", "Release": "1+deb10u3", "Arch": "amd64", "SrcName": "e2fsprogs", "SrcVersion": "1.44.5", "SrcRelease": "1+deb10u3", "Maintainer": "Theodore Y. Ts'o \u003ctytso@mit.edu\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libcom-err2@1.44.5-1+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libss.so.2.0", "/usr/share/doc/libss2/changelog.Debian.gz", "/usr/share/doc/libss2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libssh2-1@1.8.0-2.1+deb10u1", "Name": "libssh2-1", "Identifier": { "PURL": "pkg:deb/debian/libssh2-1@1.8.0-2.1%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "9ee1d9d9c6f52d03" }, "Version": "1.8.0", "Release": "2.1+deb10u1", "Arch": "amd64", "SrcName": "libssh2", "SrcVersion": "1.8.0", "SrcRelease": "2.1+deb10u1", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Mikhail Gusarov \u003cdottedmag@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libgcrypt20@1.8.4-5+deb10u1", "zlib1g@1:1.2.11.dfsg-1+deb10u2" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libssh2.so.1.0.1", "/usr/share/doc/libssh2-1/AUTHORS", "/usr/share/doc/libssh2-1/RELEASE-NOTES", "/usr/share/doc/libssh2-1/changelog.Debian.gz", "/usr/share/doc/libssh2-1/changelog.gz", "/usr/share/doc/libssh2-1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libssl1.1@1.1.1n-0+deb10u6", "Name": "libssl1.1", "Identifier": { "PURL": "pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb10u6?arch=amd64\u0026distro=debian-10.13", "UID": "945e66aa563dd616" }, "Version": "1.1.1n", "Release": "0+deb10u6", "Arch": "amd64", "SrcName": "openssl", "SrcVersion": "1.1.1n", "SrcRelease": "0+deb10u6", "Maintainer": "Debian OpenSSL Team \u003cpkg-openssl-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debconf@1.5.71+deb10u1", "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/engines-1.1/afalg.so", "/usr/lib/x86_64-linux-gnu/engines-1.1/capi.so", "/usr/lib/x86_64-linux-gnu/engines-1.1/padlock.so", "/usr/lib/x86_64-linux-gnu/libcrypto.so.1.1", "/usr/lib/x86_64-linux-gnu/libssl.so.1.1", "/usr/share/doc/libssl1.1/NEWS.Debian.gz", "/usr/share/doc/libssl1.1/changelog.Debian.gz", "/usr/share/doc/libssl1.1/changelog.gz", "/usr/share/doc/libssl1.1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libstdc++6@8.3.0-6", "Name": "libstdc++6", "Identifier": { "PURL": "pkg:deb/debian/libstdc%2B%2B6@8.3.0-6?arch=amd64\u0026distro=debian-10.13", "UID": "20c560b6f31895f6" }, "Version": "8.3.0", "Release": "6", "Arch": "amd64", "SrcName": "gcc-8", "SrcVersion": "8.3.0", "SrcRelease": "6", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-8-base@8.3.0-6", "libc6@2.28-10+deb10u3", "libgcc1@1:8.3.0-6" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.25", "/usr/share/gcc-8/python/libstdcxx/__init__.py", "/usr/share/gcc-8/python/libstdcxx/v6/__init__.py", "/usr/share/gcc-8/python/libstdcxx/v6/printers.py", "/usr/share/gcc-8/python/libstdcxx/v6/xmethods.py", "/usr/share/gdb/auto-load/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.25-gdb.py" ], "AnalyzedBy": "dpkg" }, { "ID": "libsystemd0@241-7~deb10u10", "Name": "libsystemd0", "Identifier": { "PURL": "pkg:deb/debian/libsystemd0@241-7~deb10u10?arch=amd64\u0026distro=debian-10.13", "UID": "ca42dde3178fe4eb" }, "Version": "241", "Release": "7~deb10u10", "Arch": "amd64", "SrcName": "systemd", "SrcVersion": "241", "SrcRelease": "7~deb10u10", "Licenses": [ "LGPL-2.1-or-later", "CC0-1.0", "GPL-2.0-only", "GPL-2.0-or-later", "MIT", "public-domain", "LGPL-2.1-only" ], "Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libsystemd.so.0.25.0", "/usr/share/doc/libsystemd0/changelog.Debian.gz", "/usr/share/doc/libsystemd0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libtasn1-6@4.13-3+deb10u1", "Name": "libtasn1-6", "Identifier": { "PURL": "pkg:deb/debian/libtasn1-6@4.13-3%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "fdccdcf7dce1e4ff" }, "Version": "4.13", "Release": "3+deb10u1", "Arch": "amd64", "SrcName": "libtasn1-6", "SrcVersion": "4.13", "SrcRelease": "3+deb10u1", "Licenses": [ "LGPL-2.0-or-later", "LGPL-2.1-only", "GPL-3.0-only", "GFDL-1.3-only" ], "Maintainer": "Debian GnuTLS Maintainers \u003cpkg-gnutls-maint@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libtasn1.so.6.5.5", "/usr/share/doc/libtasn1-6/AUTHORS", "/usr/share/doc/libtasn1-6/README", "/usr/share/doc/libtasn1-6/THANKS", "/usr/share/doc/libtasn1-6/changelog.Debian.gz", "/usr/share/doc/libtasn1-6/changelog.gz", "/usr/share/doc/libtasn1-6/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libtinfo6@6.1+20181013-2+deb10u5", "Name": "libtinfo6", "Identifier": { "PURL": "pkg:deb/debian/libtinfo6@6.1%2B20181013-2%2Bdeb10u5?arch=amd64\u0026distro=debian-10.13", "UID": "ce14adda08fdc6cd" }, "Version": "6.1+20181013", "Release": "2+deb10u5", "Arch": "amd64", "SrcName": "ncurses", "SrcVersion": "6.1+20181013", "SrcRelease": "2+deb10u5", "Maintainer": "Craig Small \u003ccsmall@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libtinfo.so.6.1", "/usr/lib/x86_64-linux-gnu/libtic.so.6.1", "/usr/share/doc/libtinfo6/FAQ", "/usr/share/doc/libtinfo6/TODO.Debian", "/usr/share/doc/libtinfo6/changelog.Debian.gz", "/usr/share/doc/libtinfo6/changelog.gz", "/usr/share/doc/libtinfo6/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libudev1@241-7~deb10u10", "Name": "libudev1", "Identifier": { "PURL": "pkg:deb/debian/libudev1@241-7~deb10u10?arch=amd64\u0026distro=debian-10.13", "UID": "1a0a0d6046211982" }, "Version": "241", "Release": "7~deb10u10", "Arch": "amd64", "SrcName": "systemd", "SrcVersion": "241", "SrcRelease": "7~deb10u10", "Licenses": [ "LGPL-2.1-or-later", "CC0-1.0", "GPL-2.0-only", "GPL-2.0-or-later", "MIT", "public-domain", "LGPL-2.1-only" ], "Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libudev.so.1.6.13", "/usr/share/doc/libudev1/changelog.Debian.gz", "/usr/share/doc/libudev1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libunistring2@0.9.10-1", "Name": "libunistring2", "Identifier": { "PURL": "pkg:deb/debian/libunistring2@0.9.10-1?arch=amd64\u0026distro=debian-10.13", "UID": "c958b1e79bb72454" }, "Version": "0.9.10", "Release": "1", "Arch": "amd64", "SrcName": "libunistring", "SrcVersion": "0.9.10", "SrcRelease": "1", "Licenses": [ "LGPL-3.0-or-later", "GPL-2.0-or-later", "FreeSoftware", "GPL-2+ with distribution exception", "GPL-3.0-or-later", "GFDL-1.2-or-later", "MIT", "LGPL-3.0-only", "GPL-3.0-only", "GPL-2.0-only", "GFDL-1.2-only" ], "Maintainer": "Jörg Frings-Fürst \u003cdebian@jff.email\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libunistring.so.2.1.0", "/usr/share/doc/libunistring2/changelog.Debian.gz", "/usr/share/doc/libunistring2/changelog.gz", "/usr/share/doc/libunistring2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libuuid1@2.33.1-0.1+deb10u1", "Name": "libuuid1", "Identifier": { "PURL": "pkg:deb/debian/libuuid1@2.33.1-0.1%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "ebb929a66a1049d" }, "Version": "2.33.1", "Release": "0.1+deb10u1", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.33.1", "SrcRelease": "0.1+deb10u1", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "public-domain", "BSD-4-Clause", "MIT", "BSD-2-Clause", "BSD-3-Clause", "LGPL-2.0-or-later", "LGPL-2.1-or-later", "GPL-3.0-or-later", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "LaMont Jones \u003clamont@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libuuid.so.1.3.0", "/usr/share/doc/libuuid1/changelog.Debian.gz", "/usr/share/doc/libuuid1/changelog.gz", "/usr/share/doc/libuuid1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libyaml-0-2@0.2.1-1", "Name": "libyaml-0-2", "Identifier": { "PURL": "pkg:deb/debian/libyaml-0-2@0.2.1-1?arch=amd64\u0026distro=debian-10.13", "UID": "e4e9c6acc6c1d3e9" }, "Version": "0.2.1", "Release": "1", "Arch": "amd64", "SrcName": "libyaml", "SrcVersion": "0.2.1", "SrcRelease": "1", "Licenses": [ "MIT", "permissive" ], "Maintainer": "Anders Kaseorg \u003candersk@mit.edu\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libyaml-0.so.2.0.5", "/usr/share/doc/libyaml-0-2/changelog.Debian.gz", "/usr/share/doc/libyaml-0-2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libzstd1@1.3.8+dfsg-3+deb10u2", "Name": "libzstd1", "Identifier": { "PURL": "pkg:deb/debian/libzstd1@1.3.8%2Bdfsg-3%2Bdeb10u2?arch=amd64\u0026distro=debian-10.13", "UID": "5397202c32248ddc" }, "Version": "1.3.8+dfsg", "Release": "3+deb10u2", "Arch": "amd64", "SrcName": "libzstd", "SrcVersion": "1.3.8+dfsg", "SrcRelease": "3+deb10u2", "Licenses": [ "BSD-3-Clause", "GPL-2.0-only", "Zlib", "GPL-2.0-or-later", "MIT" ], "Maintainer": "Debian Med Packaging Team \u003cdebian-med-packaging@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libzstd.so.1.3.8", "/usr/share/doc/libzstd1/changelog.Debian.gz", "/usr/share/doc/libzstd1/changelog.gz", "/usr/share/doc/libzstd1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "login@1:4.5-1.1", "Name": "login", "Identifier": { "PURL": "pkg:deb/debian/login@4.5-1.1?arch=amd64\u0026distro=debian-10.13\u0026epoch=1", "UID": "38d8768f0bd639e8" }, "Version": "4.5", "Release": "1.1", "Epoch": 1, "Arch": "amd64", "SrcName": "shadow", "SrcVersion": "4.5", "SrcRelease": "1.1", "SrcEpoch": 1, "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Shadow package maintainers \u003cpkg-shadow-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/bin/login", "/usr/bin/faillog", "/usr/bin/lastlog", "/usr/bin/newgrp", "/usr/sbin/nologin", "/usr/share/doc/login/NEWS.Debian.gz", "/usr/share/doc/login/NEWS.gz", "/usr/share/doc/login/README", "/usr/share/doc/login/TODO.gz", "/usr/share/doc/login/changelog.Debian.gz", "/usr/share/doc/login/changelog.gz", "/usr/share/doc/login/copyright", "/usr/share/lintian/overrides/login", "/usr/share/locale/bs/LC_MESSAGES/shadow.mo", "/usr/share/locale/ca/LC_MESSAGES/shadow.mo", "/usr/share/locale/cs/LC_MESSAGES/shadow.mo", "/usr/share/locale/da/LC_MESSAGES/shadow.mo", "/usr/share/locale/de/LC_MESSAGES/shadow.mo", "/usr/share/locale/dz/LC_MESSAGES/shadow.mo", "/usr/share/locale/el/LC_MESSAGES/shadow.mo", "/usr/share/locale/es/LC_MESSAGES/shadow.mo", "/usr/share/locale/eu/LC_MESSAGES/shadow.mo", "/usr/share/locale/fi/LC_MESSAGES/shadow.mo", "/usr/share/locale/fr/LC_MESSAGES/shadow.mo", "/usr/share/locale/gl/LC_MESSAGES/shadow.mo", "/usr/share/locale/he/LC_MESSAGES/shadow.mo", "/usr/share/locale/hu/LC_MESSAGES/shadow.mo", "/usr/share/locale/id/LC_MESSAGES/shadow.mo", "/usr/share/locale/it/LC_MESSAGES/shadow.mo", "/usr/share/locale/ja/LC_MESSAGES/shadow.mo", "/usr/share/locale/kk/LC_MESSAGES/shadow.mo", "/usr/share/locale/km/LC_MESSAGES/shadow.mo", "/usr/share/locale/ko/LC_MESSAGES/shadow.mo", "/usr/share/locale/nb/LC_MESSAGES/shadow.mo", "/usr/share/locale/ne/LC_MESSAGES/shadow.mo", "/usr/share/locale/nl/LC_MESSAGES/shadow.mo", "/usr/share/locale/nn/LC_MESSAGES/shadow.mo", "/usr/share/locale/pl/LC_MESSAGES/shadow.mo", "/usr/share/locale/pt/LC_MESSAGES/shadow.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/shadow.mo", "/usr/share/locale/ro/LC_MESSAGES/shadow.mo", "/usr/share/locale/ru/LC_MESSAGES/shadow.mo", "/usr/share/locale/sk/LC_MESSAGES/shadow.mo", "/usr/share/locale/sq/LC_MESSAGES/shadow.mo", "/usr/share/locale/sv/LC_MESSAGES/shadow.mo", "/usr/share/locale/tl/LC_MESSAGES/shadow.mo", "/usr/share/locale/tr/LC_MESSAGES/shadow.mo", "/usr/share/locale/uk/LC_MESSAGES/shadow.mo", "/usr/share/locale/vi/LC_MESSAGES/shadow.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/shadow.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/shadow.mo", "/usr/share/man/cs/man5/faillog.5.gz", "/usr/share/man/cs/man8/faillog.8.gz", "/usr/share/man/cs/man8/lastlog.8.gz", "/usr/share/man/cs/man8/nologin.8.gz", "/usr/share/man/da/man1/newgrp.1.gz", "/usr/share/man/da/man1/sg.1.gz", "/usr/share/man/da/man8/nologin.8.gz", "/usr/share/man/de/man1/login.1.gz", "/usr/share/man/de/man1/newgrp.1.gz", "/usr/share/man/de/man1/sg.1.gz", "/usr/share/man/de/man5/faillog.5.gz", "/usr/share/man/de/man5/login.defs.5.gz", "/usr/share/man/de/man8/faillog.8.gz", "/usr/share/man/de/man8/lastlog.8.gz", "/usr/share/man/de/man8/nologin.8.gz", "/usr/share/man/fr/man1/login.1.gz", "/usr/share/man/fr/man1/newgrp.1.gz", "/usr/share/man/fr/man1/sg.1.gz", "/usr/share/man/fr/man5/faillog.5.gz", "/usr/share/man/fr/man5/login.defs.5.gz", "/usr/share/man/fr/man8/faillog.8.gz", "/usr/share/man/fr/man8/lastlog.8.gz", "/usr/share/man/fr/man8/nologin.8.gz", "/usr/share/man/hu/man1/login.1.gz", "/usr/share/man/hu/man1/newgrp.1.gz", "/usr/share/man/hu/man1/sg.1.gz", "/usr/share/man/hu/man8/lastlog.8.gz", "/usr/share/man/id/man1/login.1.gz", "/usr/share/man/it/man1/login.1.gz", "/usr/share/man/it/man1/newgrp.1.gz", "/usr/share/man/it/man1/sg.1.gz", "/usr/share/man/it/man5/faillog.5.gz", "/usr/share/man/it/man5/login.defs.5.gz", "/usr/share/man/it/man8/faillog.8.gz", "/usr/share/man/it/man8/lastlog.8.gz", "/usr/share/man/it/man8/nologin.8.gz", "/usr/share/man/ja/man1/login.1.gz", "/usr/share/man/ja/man1/newgrp.1.gz", "/usr/share/man/ja/man1/sg.1.gz", "/usr/share/man/ja/man5/faillog.5.gz", "/usr/share/man/ja/man5/login.defs.5.gz", "/usr/share/man/ja/man8/faillog.8.gz", "/usr/share/man/ja/man8/lastlog.8.gz", "/usr/share/man/ko/man1/login.1.gz", "/usr/share/man/man1/login.1.gz", "/usr/share/man/man1/newgrp.1.gz", "/usr/share/man/man1/sg.1.gz", "/usr/share/man/man5/faillog.5.gz", "/usr/share/man/man5/login.defs.5.gz", "/usr/share/man/man8/faillog.8.gz", "/usr/share/man/man8/lastlog.8.gz", "/usr/share/man/man8/nologin.8.gz", "/usr/share/man/pl/man1/newgrp.1.gz", "/usr/share/man/pl/man1/sg.1.gz", "/usr/share/man/pl/man5/faillog.5.gz", "/usr/share/man/pl/man8/faillog.8.gz", "/usr/share/man/pl/man8/lastlog.8.gz", "/usr/share/man/ru/man1/login.1.gz", "/usr/share/man/ru/man1/newgrp.1.gz", "/usr/share/man/ru/man1/sg.1.gz", "/usr/share/man/ru/man5/faillog.5.gz", "/usr/share/man/ru/man5/login.defs.5.gz", "/usr/share/man/ru/man8/faillog.8.gz", "/usr/share/man/ru/man8/lastlog.8.gz", "/usr/share/man/ru/man8/nologin.8.gz", "/usr/share/man/sv/man1/newgrp.1.gz", "/usr/share/man/sv/man1/sg.1.gz", "/usr/share/man/sv/man5/faillog.5.gz", "/usr/share/man/sv/man8/faillog.8.gz", "/usr/share/man/sv/man8/lastlog.8.gz", "/usr/share/man/sv/man8/nologin.8.gz", "/usr/share/man/tr/man1/login.1.gz", "/usr/share/man/zh_CN/man1/login.1.gz", "/usr/share/man/zh_CN/man1/newgrp.1.gz", "/usr/share/man/zh_CN/man1/sg.1.gz", "/usr/share/man/zh_CN/man5/faillog.5.gz", "/usr/share/man/zh_CN/man5/login.defs.5.gz", "/usr/share/man/zh_CN/man8/faillog.8.gz", "/usr/share/man/zh_CN/man8/lastlog.8.gz", "/usr/share/man/zh_CN/man8/nologin.8.gz", "/usr/share/man/zh_TW/man1/newgrp.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "lsb-base@10.2019051400", "Name": "lsb-base", "Identifier": { "PURL": "pkg:deb/debian/lsb-base@10.2019051400?arch=all\u0026distro=debian-10.13", "UID": "2006d4674f736742" }, "Version": "10.2019051400", "Arch": "all", "SrcName": "lsb", "SrcVersion": "10.2019051400", "Licenses": [ "GPL-2.0-only", "BSD-3-Clause" ], "Maintainer": "Debian LSB Team \u003cdebian-lsb@lists.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "InstalledFiles": [ "/lib/lsb/init-functions", "/lib/lsb/init-functions.d/20-left-info-blocks", "/usr/share/doc/lsb-base/NEWS.Debian.gz", "/usr/share/doc/lsb-base/README.Debian.gz", "/usr/share/doc/lsb-base/changelog.gz", "/usr/share/doc/lsb-base/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "mawk@1.3.3-17+b3", "Name": "mawk", "Identifier": { "PURL": "pkg:deb/debian/mawk@1.3.3-17%2Bb3?arch=amd64\u0026distro=debian-10.13", "UID": "66420c8bd8f83c9f" }, "Version": "1.3.3", "Release": "17+b3", "Arch": "amd64", "SrcName": "mawk", "SrcVersion": "1.3.3", "SrcRelease": "17", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Steve Langasek \u003cvorlon@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/bin/mawk", "/usr/share/doc/mawk/ACKNOWLEDGMENT", "/usr/share/doc/mawk/README", "/usr/share/doc/mawk/changelog.Debian.amd64.gz", "/usr/share/doc/mawk/changelog.Debian.gz", "/usr/share/doc/mawk/changelog.gz", "/usr/share/doc/mawk/copyright", "/usr/share/doc/mawk/examples/ct_length.awk", "/usr/share/doc/mawk/examples/decl.awk", "/usr/share/doc/mawk/examples/deps.awk", "/usr/share/doc/mawk/examples/eatc.awk", "/usr/share/doc/mawk/examples/gdecl.awk", "/usr/share/doc/mawk/examples/hcal.gz", "/usr/share/doc/mawk/examples/hical", "/usr/share/doc/mawk/examples/nocomment.awk", "/usr/share/doc/mawk/examples/primes.awk", "/usr/share/doc/mawk/examples/qsort.awk", "/usr/share/man/man1/mawk.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "mime-support@3.62", "Name": "mime-support", "Identifier": { "PURL": "pkg:deb/debian/mime-support@3.62?arch=all\u0026distro=debian-10.13", "UID": "e92ec07a7ad24cc8" }, "Version": "3.62", "Arch": "all", "SrcName": "mime-support", "SrcVersion": "3.62", "Licenses": [ "ad-hoc", "Bellcore" ], "Maintainer": "Mime-Support Packagers \u003cteam+debian-mimesupport-packagers@tracker.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/bin/run-mailcap", "/usr/lib/mime/debian-view", "/usr/lib/mime/mailcap", "/usr/lib/mime/packages/mime-support", "/usr/sbin/update-mime", "/usr/share/bug/mime-support/presubj", "/usr/share/doc/mime-support/changelog.gz", "/usr/share/doc/mime-support/copyright", "/usr/share/man/man1/run-mailcap.1.gz", "/usr/share/man/man5/mailcap.5.gz", "/usr/share/man/man5/mailcap.order.5.gz", "/usr/share/man/man8/update-mime.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "mount@2.33.1-0.1+deb10u1", "Name": "mount", "Identifier": { "PURL": "pkg:deb/debian/mount@2.33.1-0.1%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "3c8ea428e8ace3ab" }, "Version": "2.33.1", "Release": "0.1+deb10u1", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.33.1", "SrcRelease": "0.1+deb10u1", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "public-domain", "BSD-4-Clause", "MIT", "BSD-2-Clause", "BSD-3-Clause", "LGPL-2.0-or-later", "LGPL-2.1-or-later", "GPL-3.0-or-later", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "LaMont Jones \u003clamont@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "util-linux@2.33.1-0.1+deb10u1" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/bin/mount", "/bin/umount", "/sbin/losetup", "/sbin/swapoff", "/sbin/swapon", "/usr/share/bash-completion/completions/losetup", "/usr/share/bash-completion/completions/mount", "/usr/share/bash-completion/completions/swapoff", "/usr/share/bash-completion/completions/swapon", "/usr/share/bash-completion/completions/umount", "/usr/share/doc/mount/NEWS.Debian.gz", "/usr/share/doc/mount/changelog.Debian.gz", "/usr/share/doc/mount/changelog.gz", "/usr/share/doc/mount/copyright", "/usr/share/doc/mount/examples/fstab", "/usr/share/doc/mount/examples/mount.fstab", "/usr/share/doc/mount/mount.txt", "/usr/share/lintian/overrides/mount", "/usr/share/man/man5/fstab.5.gz", "/usr/share/man/man8/losetup.8.gz", "/usr/share/man/man8/mount.8.gz", "/usr/share/man/man8/swapon.8.gz", "/usr/share/man/man8/umount.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "ncurses-base@6.1+20181013-2+deb10u5", "Name": "ncurses-base", "Identifier": { "PURL": "pkg:deb/debian/ncurses-base@6.1%2B20181013-2%2Bdeb10u5?arch=all\u0026distro=debian-10.13", "UID": "6896f7e0b4b7f36d" }, "Version": "6.1+20181013", "Release": "2+deb10u5", "Arch": "all", "SrcName": "ncurses", "SrcVersion": "6.1+20181013", "SrcRelease": "2+deb10u5", "Maintainer": "Craig Small \u003ccsmall@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/terminfo/E/Eterm", "/lib/terminfo/a/ansi", "/lib/terminfo/c/cons25", "/lib/terminfo/c/cons25-debian", "/lib/terminfo/c/cygwin", "/lib/terminfo/d/dumb", "/lib/terminfo/h/hurd", "/lib/terminfo/l/linux", "/lib/terminfo/m/mach", "/lib/terminfo/m/mach-bold", "/lib/terminfo/m/mach-color", "/lib/terminfo/m/mach-gnu", "/lib/terminfo/m/mach-gnu-color", "/lib/terminfo/p/pcansi", "/lib/terminfo/r/rxvt", "/lib/terminfo/r/rxvt-basic", "/lib/terminfo/r/rxvt-unicode", "/lib/terminfo/r/rxvt-unicode-256color", "/lib/terminfo/s/screen", "/lib/terminfo/s/screen-256color", "/lib/terminfo/s/screen-256color-bce", "/lib/terminfo/s/screen-bce", "/lib/terminfo/s/screen-s", "/lib/terminfo/s/screen-w", "/lib/terminfo/s/screen.xterm-256color", "/lib/terminfo/s/sun", "/lib/terminfo/v/vt100", "/lib/terminfo/v/vt102", "/lib/terminfo/v/vt220", "/lib/terminfo/v/vt52", "/lib/terminfo/w/wsvt25", "/lib/terminfo/w/wsvt25m", "/lib/terminfo/x/xterm", "/lib/terminfo/x/xterm-256color", "/lib/terminfo/x/xterm-color", "/lib/terminfo/x/xterm-mono", "/lib/terminfo/x/xterm-r5", "/lib/terminfo/x/xterm-r6", "/lib/terminfo/x/xterm-vt220", "/lib/terminfo/x/xterm-xfree86", "/usr/share/doc/ncurses-base/changelog.Debian.gz", "/usr/share/doc/ncurses-base/changelog.gz", "/usr/share/doc/ncurses-base/copyright", "/usr/share/lintian/overrides/ncurses-base", "/usr/share/tabset/std", "/usr/share/tabset/stdcrt", "/usr/share/tabset/vt100", "/usr/share/tabset/vt300" ], "AnalyzedBy": "dpkg" }, { "ID": "ncurses-bin@6.1+20181013-2+deb10u5", "Name": "ncurses-bin", "Identifier": { "PURL": "pkg:deb/debian/ncurses-bin@6.1%2B20181013-2%2Bdeb10u5?arch=amd64\u0026distro=debian-10.13", "UID": "42df7185ce3e53a" }, "Version": "6.1+20181013", "Release": "2+deb10u5", "Arch": "amd64", "SrcName": "ncurses", "SrcVersion": "6.1+20181013", "SrcRelease": "2+deb10u5", "Maintainer": "Craig Small \u003ccsmall@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/bin/clear", "/usr/bin/infocmp", "/usr/bin/tabs", "/usr/bin/tic", "/usr/bin/toe", "/usr/bin/tput", "/usr/bin/tset", "/usr/share/doc/ncurses-bin/changelog.Debian.gz", "/usr/share/doc/ncurses-bin/changelog.gz", "/usr/share/doc/ncurses-bin/copyright", "/usr/share/man/man1/captoinfo.1.gz", "/usr/share/man/man1/clear.1.gz", "/usr/share/man/man1/infocmp.1.gz", "/usr/share/man/man1/infotocap.1.gz", "/usr/share/man/man1/tabs.1.gz", "/usr/share/man/man1/tic.1.gz", "/usr/share/man/man1/toe.1.gz", "/usr/share/man/man1/tput.1.gz", "/usr/share/man/man1/tset.1.gz", "/usr/share/man/man5/scr_dump.5.gz", "/usr/share/man/man5/term.5.gz", "/usr/share/man/man5/terminfo.5.gz", "/usr/share/man/man5/user_caps.5.gz", "/usr/share/man/man7/term.7.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "nscd@2.28-10+deb10u4", "Name": "nscd", "Identifier": { "PURL": "pkg:deb/debian/nscd@2.28-10%2Bdeb10u4?arch=amd64\u0026distro=debian-10.13", "UID": "b9917cfcda34fe55" }, "Version": "2.28", "Release": "10+deb10u4", "Arch": "amd64", "SrcName": "glibc", "SrcVersion": "2.28", "SrcRelease": "10+deb10u4", "Licenses": [ "LGPL-2.1-only", "GPL-2.0-only" ], "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libaudit1@1:2.8.4-3", "libc6@2.28-10+deb10u3", "libcap2@1:2.25-2", "libselinux1@2.8-1+b1", "lsb-base@10.2019051400" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/lib/systemd/system/nscd.service", "/usr/lib/tmpfiles.d/nscd.conf", "/usr/sbin/nscd", "/usr/share/doc/nscd/changelog.Debian.gz", "/usr/share/doc/nscd/changelog.gz", "/usr/share/doc/nscd/copyright", "/usr/share/man/man5/nscd.conf.5.gz", "/usr/share/man/man8/nscd.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "openssl@1.1.1n-0+deb10u6", "Name": "openssl", "Identifier": { "PURL": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u6?arch=amd64\u0026distro=debian-10.13", "UID": "cb569d311a49adca" }, "Version": "1.1.1n", "Release": "0+deb10u6", "Arch": "amd64", "SrcName": "openssl", "SrcVersion": "1.1.1n", "SrcRelease": "0+deb10u6", "Maintainer": "Debian OpenSSL Team \u003cpkg-openssl-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libssl1.1@1.1.1n-0+deb10u6" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/bin/c_rehash", "/usr/bin/openssl", "/usr/lib/ssl/misc/CA.pl", "/usr/lib/ssl/misc/tsget.pl", "/usr/share/doc/openssl/FAQ", "/usr/share/doc/openssl/HOWTO/certificates.txt.gz", "/usr/share/doc/openssl/HOWTO/keys.txt", "/usr/share/doc/openssl/NEWS.Debian.gz", "/usr/share/doc/openssl/NEWS.gz", "/usr/share/doc/openssl/README", "/usr/share/doc/openssl/README.Debian", "/usr/share/doc/openssl/README.ENGINE.gz", "/usr/share/doc/openssl/README.optimization", "/usr/share/doc/openssl/changelog.Debian.gz", "/usr/share/doc/openssl/changelog.gz", "/usr/share/doc/openssl/copyright", "/usr/share/doc/openssl/fingerprints.txt", "/usr/share/lintian/overrides/openssl", "/usr/share/man/man1/CA.pl.1ssl.gz", "/usr/share/man/man1/asn1parse.1ssl.gz", "/usr/share/man/man1/ca.1ssl.gz", "/usr/share/man/man1/ciphers.1ssl.gz", "/usr/share/man/man1/cms.1ssl.gz", "/usr/share/man/man1/crl.1ssl.gz", "/usr/share/man/man1/crl2pkcs7.1ssl.gz", "/usr/share/man/man1/dgst.1ssl.gz", "/usr/share/man/man1/dhparam.1ssl.gz", "/usr/share/man/man1/dsa.1ssl.gz", "/usr/share/man/man1/dsaparam.1ssl.gz", "/usr/share/man/man1/ec.1ssl.gz", "/usr/share/man/man1/ecparam.1ssl.gz", "/usr/share/man/man1/enc.1ssl.gz", "/usr/share/man/man1/engine.1ssl.gz", "/usr/share/man/man1/errstr.1ssl.gz", "/usr/share/man/man1/gendsa.1ssl.gz", "/usr/share/man/man1/genpkey.1ssl.gz", "/usr/share/man/man1/genrsa.1ssl.gz", "/usr/share/man/man1/list.1ssl.gz", "/usr/share/man/man1/nseq.1ssl.gz", "/usr/share/man/man1/ocsp.1ssl.gz", "/usr/share/man/man1/openssl.1ssl.gz", "/usr/share/man/man1/passwd.1ssl.gz", "/usr/share/man/man1/pkcs12.1ssl.gz", "/usr/share/man/man1/pkcs7.1ssl.gz", "/usr/share/man/man1/pkcs8.1ssl.gz", "/usr/share/man/man1/pkey.1ssl.gz", "/usr/share/man/man1/pkeyparam.1ssl.gz", "/usr/share/man/man1/pkeyutl.1ssl.gz", "/usr/share/man/man1/prime.1ssl.gz", "/usr/share/man/man1/rand.1ssl.gz", "/usr/share/man/man1/rehash.1ssl.gz", "/usr/share/man/man1/req.1ssl.gz", "/usr/share/man/man1/rsa.1ssl.gz", "/usr/share/man/man1/rsautl.1ssl.gz", "/usr/share/man/man1/s_client.1ssl.gz", "/usr/share/man/man1/s_server.1ssl.gz", "/usr/share/man/man1/s_time.1ssl.gz", "/usr/share/man/man1/sess_id.1ssl.gz", "/usr/share/man/man1/smime.1ssl.gz", "/usr/share/man/man1/speed.1ssl.gz", "/usr/share/man/man1/spkac.1ssl.gz", "/usr/share/man/man1/srp.1ssl.gz", "/usr/share/man/man1/storeutl.1ssl.gz", "/usr/share/man/man1/ts.1ssl.gz", "/usr/share/man/man1/tsget.1ssl.gz", "/usr/share/man/man1/verify.1ssl.gz", "/usr/share/man/man1/version.1ssl.gz", "/usr/share/man/man1/x509.1ssl.gz", "/usr/share/man/man5/config.5ssl.gz", "/usr/share/man/man5/x509v3_config.5ssl.gz", "/usr/share/man/man7/Ed25519.7ssl.gz", "/usr/share/man/man7/RAND.7ssl.gz", "/usr/share/man/man7/RAND_DRBG.7ssl.gz", "/usr/share/man/man7/RSA-PSS.7ssl.gz", "/usr/share/man/man7/SM2.7ssl.gz", "/usr/share/man/man7/X25519.7ssl.gz", "/usr/share/man/man7/bio.7ssl.gz", "/usr/share/man/man7/crypto.7ssl.gz", "/usr/share/man/man7/ct.7ssl.gz", "/usr/share/man/man7/des_modes.7ssl.gz", "/usr/share/man/man7/evp.7ssl.gz", "/usr/share/man/man7/ossl_store-file.7ssl.gz", "/usr/share/man/man7/ossl_store.7ssl.gz", "/usr/share/man/man7/passphrase-encoding.7ssl.gz", "/usr/share/man/man7/proxy-certificates.7ssl.gz", "/usr/share/man/man7/scrypt.7ssl.gz", "/usr/share/man/man7/ssl.7ssl.gz", "/usr/share/man/man7/x509.7ssl.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "passwd@1:4.5-1.1", "Name": "passwd", "Identifier": { "PURL": "pkg:deb/debian/passwd@4.5-1.1?arch=amd64\u0026distro=debian-10.13\u0026epoch=1", "UID": "c0d8f9a0ae9b83cf" }, "Version": "4.5", "Release": "1.1", "Epoch": 1, "Arch": "amd64", "SrcName": "shadow", "SrcVersion": "4.5", "SrcRelease": "1.1", "SrcEpoch": 1, "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Shadow package maintainers \u003cpkg-shadow-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libaudit1@1:2.8.4-3", "libc6@2.28-10+deb10u3", "libpam-modules@1.3.1-5", "libpam0g@1.3.1-5", "libselinux1@2.8-1+b1", "libsemanage1@2.8-2" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/sbin/shadowconfig", "/usr/bin/chage", "/usr/bin/chfn", "/usr/bin/chsh", "/usr/bin/expiry", "/usr/bin/gpasswd", "/usr/bin/passwd", "/usr/lib/tmpfiles.d/passwd.conf", "/usr/sbin/chgpasswd", "/usr/sbin/chpasswd", "/usr/sbin/cppw", "/usr/sbin/groupadd", "/usr/sbin/groupdel", "/usr/sbin/groupmems", "/usr/sbin/groupmod", "/usr/sbin/grpck", "/usr/sbin/grpconv", "/usr/sbin/grpunconv", "/usr/sbin/newusers", "/usr/sbin/pwck", "/usr/sbin/pwconv", "/usr/sbin/pwunconv", "/usr/sbin/useradd", "/usr/sbin/userdel", "/usr/sbin/usermod", "/usr/sbin/vipw", "/usr/share/doc/passwd/NEWS.Debian.gz", "/usr/share/doc/passwd/NEWS.gz", "/usr/share/doc/passwd/README", "/usr/share/doc/passwd/README.Debian", "/usr/share/doc/passwd/TODO.Debian", "/usr/share/doc/passwd/TODO.gz", "/usr/share/doc/passwd/changelog.Debian.gz", "/usr/share/doc/passwd/changelog.gz", "/usr/share/doc/passwd/copyright", "/usr/share/doc/passwd/examples/passwd.expire.cron", "/usr/share/lintian/overrides/passwd", "/usr/share/man/cs/man1/expiry.1.gz", "/usr/share/man/cs/man1/gpasswd.1.gz", "/usr/share/man/cs/man5/gshadow.5.gz", "/usr/share/man/cs/man5/passwd.5.gz", "/usr/share/man/cs/man5/shadow.5.gz", "/usr/share/man/cs/man8/groupadd.8.gz", "/usr/share/man/cs/man8/groupdel.8.gz", "/usr/share/man/cs/man8/groupmod.8.gz", "/usr/share/man/cs/man8/grpck.8.gz", "/usr/share/man/cs/man8/vipw.8.gz", "/usr/share/man/da/man1/chfn.1.gz", "/usr/share/man/da/man5/gshadow.5.gz", "/usr/share/man/da/man8/groupdel.8.gz", "/usr/share/man/da/man8/vigr.8.gz", "/usr/share/man/da/man8/vipw.8.gz", "/usr/share/man/de/man1/chage.1.gz", "/usr/share/man/de/man1/chfn.1.gz", "/usr/share/man/de/man1/chsh.1.gz", "/usr/share/man/de/man1/expiry.1.gz", "/usr/share/man/de/man1/gpasswd.1.gz", "/usr/share/man/de/man1/passwd.1.gz", "/usr/share/man/de/man5/gshadow.5.gz", "/usr/share/man/de/man5/passwd.5.gz", "/usr/share/man/de/man5/shadow.5.gz", "/usr/share/man/de/man8/chpasswd.8.gz", "/usr/share/man/de/man8/groupadd.8.gz", "/usr/share/man/de/man8/groupdel.8.gz", "/usr/share/man/de/man8/groupmems.8.gz", "/usr/share/man/de/man8/groupmod.8.gz", "/usr/share/man/de/man8/grpck.8.gz", "/usr/share/man/de/man8/grpconv.8.gz", "/usr/share/man/de/man8/grpunconv.8.gz", "/usr/share/man/de/man8/newusers.8.gz", "/usr/share/man/de/man8/pwck.8.gz", "/usr/share/man/de/man8/pwconv.8.gz", "/usr/share/man/de/man8/pwunconv.8.gz", "/usr/share/man/de/man8/useradd.8.gz", "/usr/share/man/de/man8/userdel.8.gz", "/usr/share/man/de/man8/usermod.8.gz", "/usr/share/man/de/man8/vigr.8.gz", "/usr/share/man/de/man8/vipw.8.gz", "/usr/share/man/fi/man1/chfn.1.gz", "/usr/share/man/fi/man1/chsh.1.gz", "/usr/share/man/fr/man1/chage.1.gz", "/usr/share/man/fr/man1/chfn.1.gz", "/usr/share/man/fr/man1/chsh.1.gz", "/usr/share/man/fr/man1/expiry.1.gz", "/usr/share/man/fr/man1/gpasswd.1.gz", "/usr/share/man/fr/man1/passwd.1.gz", "/usr/share/man/fr/man5/gshadow.5.gz", "/usr/share/man/fr/man5/passwd.5.gz", "/usr/share/man/fr/man5/shadow.5.gz", "/usr/share/man/fr/man8/chpasswd.8.gz", "/usr/share/man/fr/man8/groupadd.8.gz", "/usr/share/man/fr/man8/groupdel.8.gz", "/usr/share/man/fr/man8/groupmems.8.gz", "/usr/share/man/fr/man8/groupmod.8.gz", "/usr/share/man/fr/man8/grpck.8.gz", "/usr/share/man/fr/man8/grpconv.8.gz", "/usr/share/man/fr/man8/grpunconv.8.gz", "/usr/share/man/fr/man8/newusers.8.gz", "/usr/share/man/fr/man8/pwck.8.gz", "/usr/share/man/fr/man8/pwconv.8.gz", "/usr/share/man/fr/man8/pwunconv.8.gz", "/usr/share/man/fr/man8/shadowconfig.8.gz", "/usr/share/man/fr/man8/useradd.8.gz", "/usr/share/man/fr/man8/userdel.8.gz", "/usr/share/man/fr/man8/usermod.8.gz", "/usr/share/man/fr/man8/vigr.8.gz", "/usr/share/man/fr/man8/vipw.8.gz", "/usr/share/man/hu/man1/chsh.1.gz", "/usr/share/man/hu/man1/gpasswd.1.gz", "/usr/share/man/hu/man1/passwd.1.gz", "/usr/share/man/hu/man5/passwd.5.gz", "/usr/share/man/id/man1/chsh.1.gz", "/usr/share/man/id/man8/useradd.8.gz", "/usr/share/man/it/man1/chage.1.gz", "/usr/share/man/it/man1/chfn.1.gz", "/usr/share/man/it/man1/chsh.1.gz", "/usr/share/man/it/man1/expiry.1.gz", "/usr/share/man/it/man1/gpasswd.1.gz", "/usr/share/man/it/man1/passwd.1.gz", "/usr/share/man/it/man5/gshadow.5.gz", "/usr/share/man/it/man5/passwd.5.gz", "/usr/share/man/it/man5/shadow.5.gz", "/usr/share/man/it/man8/chpasswd.8.gz", "/usr/share/man/it/man8/groupadd.8.gz", "/usr/share/man/it/man8/groupdel.8.gz", "/usr/share/man/it/man8/groupmems.8.gz", "/usr/share/man/it/man8/groupmod.8.gz", "/usr/share/man/it/man8/grpck.8.gz", "/usr/share/man/it/man8/grpconv.8.gz", "/usr/share/man/it/man8/grpunconv.8.gz", "/usr/share/man/it/man8/newusers.8.gz", "/usr/share/man/it/man8/pwck.8.gz", "/usr/share/man/it/man8/pwconv.8.gz", "/usr/share/man/it/man8/pwunconv.8.gz", "/usr/share/man/it/man8/useradd.8.gz", "/usr/share/man/it/man8/userdel.8.gz", "/usr/share/man/it/man8/usermod.8.gz", "/usr/share/man/it/man8/vigr.8.gz", "/usr/share/man/it/man8/vipw.8.gz", "/usr/share/man/ja/man1/chage.1.gz", "/usr/share/man/ja/man1/chfn.1.gz", "/usr/share/man/ja/man1/chsh.1.gz", "/usr/share/man/ja/man1/expiry.1.gz", "/usr/share/man/ja/man1/gpasswd.1.gz", "/usr/share/man/ja/man1/passwd.1.gz", "/usr/share/man/ja/man5/passwd.5.gz", "/usr/share/man/ja/man5/shadow.5.gz", "/usr/share/man/ja/man8/chpasswd.8.gz", "/usr/share/man/ja/man8/groupadd.8.gz", "/usr/share/man/ja/man8/groupdel.8.gz", "/usr/share/man/ja/man8/groupmod.8.gz", "/usr/share/man/ja/man8/grpck.8.gz", "/usr/share/man/ja/man8/grpconv.8.gz", "/usr/share/man/ja/man8/grpunconv.8.gz", "/usr/share/man/ja/man8/newusers.8.gz", "/usr/share/man/ja/man8/pwck.8.gz", "/usr/share/man/ja/man8/pwconv.8.gz", "/usr/share/man/ja/man8/pwunconv.8.gz", "/usr/share/man/ja/man8/shadowconfig.8.gz", "/usr/share/man/ja/man8/useradd.8.gz", "/usr/share/man/ja/man8/userdel.8.gz", "/usr/share/man/ja/man8/usermod.8.gz", "/usr/share/man/ja/man8/vigr.8.gz", "/usr/share/man/ja/man8/vipw.8.gz", "/usr/share/man/ko/man1/chfn.1.gz", "/usr/share/man/ko/man1/chsh.1.gz", "/usr/share/man/ko/man5/passwd.5.gz", "/usr/share/man/ko/man8/vigr.8.gz", "/usr/share/man/ko/man8/vipw.8.gz", "/usr/share/man/man1/chage.1.gz", "/usr/share/man/man1/chfn.1.gz", "/usr/share/man/man1/chsh.1.gz", "/usr/share/man/man1/expiry.1.gz", "/usr/share/man/man1/gpasswd.1.gz", "/usr/share/man/man1/passwd.1.gz", "/usr/share/man/man5/gshadow.5.gz", "/usr/share/man/man5/passwd.5.gz", "/usr/share/man/man5/shadow.5.gz", "/usr/share/man/man5/subgid.5.gz", "/usr/share/man/man5/subuid.5.gz", "/usr/share/man/man8/chgpasswd.8.gz", "/usr/share/man/man8/chpasswd.8.gz", "/usr/share/man/man8/cpgr.8.gz", "/usr/share/man/man8/cppw.8.gz", "/usr/share/man/man8/groupadd.8.gz", "/usr/share/man/man8/groupdel.8.gz", "/usr/share/man/man8/groupmod.8.gz", "/usr/share/man/man8/grpck.8.gz", "/usr/share/man/man8/grpconv.8.gz", "/usr/share/man/man8/grpunconv.8.gz", "/usr/share/man/man8/newusers.8.gz", "/usr/share/man/man8/pwck.8.gz", "/usr/share/man/man8/pwconv.8.gz", "/usr/share/man/man8/pwunconv.8.gz", "/usr/share/man/man8/shadowconfig.8.gz", "/usr/share/man/man8/useradd.8.gz", "/usr/share/man/man8/userdel.8.gz", "/usr/share/man/man8/usermod.8.gz", "/usr/share/man/man8/vigr.8.gz", "/usr/share/man/man8/vipw.8.gz", "/usr/share/man/pl/man1/chage.1.gz", "/usr/share/man/pl/man1/chsh.1.gz", "/usr/share/man/pl/man1/expiry.1.gz", "/usr/share/man/pl/man8/groupadd.8.gz", "/usr/share/man/pl/man8/groupdel.8.gz", "/usr/share/man/pl/man8/groupmems.8.gz", "/usr/share/man/pl/man8/groupmod.8.gz", "/usr/share/man/pl/man8/grpck.8.gz", "/usr/share/man/pl/man8/shadowconfig.8.gz", "/usr/share/man/pl/man8/userdel.8.gz", "/usr/share/man/pl/man8/usermod.8.gz", "/usr/share/man/pl/man8/vigr.8.gz", "/usr/share/man/pl/man8/vipw.8.gz", "/usr/share/man/pt_BR/man1/gpasswd.1.gz", "/usr/share/man/pt_BR/man5/passwd.5.gz", "/usr/share/man/pt_BR/man5/shadow.5.gz", "/usr/share/man/pt_BR/man8/groupadd.8.gz", "/usr/share/man/pt_BR/man8/groupdel.8.gz", "/usr/share/man/pt_BR/man8/groupmod.8.gz", "/usr/share/man/ru/man1/chage.1.gz", "/usr/share/man/ru/man1/chfn.1.gz", "/usr/share/man/ru/man1/chsh.1.gz", "/usr/share/man/ru/man1/expiry.1.gz", "/usr/share/man/ru/man1/gpasswd.1.gz", "/usr/share/man/ru/man1/passwd.1.gz", "/usr/share/man/ru/man5/gshadow.5.gz", "/usr/share/man/ru/man5/passwd.5.gz", "/usr/share/man/ru/man5/shadow.5.gz", "/usr/share/man/ru/man8/chpasswd.8.gz", "/usr/share/man/ru/man8/groupadd.8.gz", "/usr/share/man/ru/man8/groupdel.8.gz", "/usr/share/man/ru/man8/groupmems.8.gz", "/usr/share/man/ru/man8/groupmod.8.gz", "/usr/share/man/ru/man8/grpck.8.gz", "/usr/share/man/ru/man8/grpconv.8.gz", "/usr/share/man/ru/man8/grpunconv.8.gz", "/usr/share/man/ru/man8/newusers.8.gz", "/usr/share/man/ru/man8/pwck.8.gz", "/usr/share/man/ru/man8/pwconv.8.gz", "/usr/share/man/ru/man8/pwunconv.8.gz", "/usr/share/man/ru/man8/useradd.8.gz", "/usr/share/man/ru/man8/userdel.8.gz", "/usr/share/man/ru/man8/usermod.8.gz", "/usr/share/man/ru/man8/vigr.8.gz", "/usr/share/man/ru/man8/vipw.8.gz", "/usr/share/man/sv/man1/chage.1.gz", "/usr/share/man/sv/man1/chsh.1.gz", "/usr/share/man/sv/man1/expiry.1.gz", "/usr/share/man/sv/man1/passwd.1.gz", "/usr/share/man/sv/man5/gshadow.5.gz", "/usr/share/man/sv/man5/passwd.5.gz", "/usr/share/man/sv/man8/groupadd.8.gz", "/usr/share/man/sv/man8/groupdel.8.gz", "/usr/share/man/sv/man8/groupmems.8.gz", "/usr/share/man/sv/man8/groupmod.8.gz", "/usr/share/man/sv/man8/grpck.8.gz", "/usr/share/man/sv/man8/pwck.8.gz", "/usr/share/man/sv/man8/userdel.8.gz", "/usr/share/man/sv/man8/vigr.8.gz", "/usr/share/man/sv/man8/vipw.8.gz", "/usr/share/man/tr/man1/chage.1.gz", "/usr/share/man/tr/man1/chfn.1.gz", "/usr/share/man/tr/man1/passwd.1.gz", "/usr/share/man/tr/man5/passwd.5.gz", "/usr/share/man/tr/man5/shadow.5.gz", "/usr/share/man/tr/man8/groupadd.8.gz", "/usr/share/man/tr/man8/groupdel.8.gz", "/usr/share/man/tr/man8/groupmod.8.gz", "/usr/share/man/tr/man8/useradd.8.gz", "/usr/share/man/tr/man8/userdel.8.gz", "/usr/share/man/tr/man8/usermod.8.gz", "/usr/share/man/zh_CN/man1/chage.1.gz", "/usr/share/man/zh_CN/man1/chfn.1.gz", "/usr/share/man/zh_CN/man1/chsh.1.gz", "/usr/share/man/zh_CN/man1/expiry.1.gz", "/usr/share/man/zh_CN/man1/gpasswd.1.gz", "/usr/share/man/zh_CN/man1/passwd.1.gz", "/usr/share/man/zh_CN/man5/gshadow.5.gz", "/usr/share/man/zh_CN/man5/passwd.5.gz", "/usr/share/man/zh_CN/man5/shadow.5.gz", "/usr/share/man/zh_CN/man8/chpasswd.8.gz", "/usr/share/man/zh_CN/man8/groupadd.8.gz", "/usr/share/man/zh_CN/man8/groupdel.8.gz", "/usr/share/man/zh_CN/man8/groupmems.8.gz", "/usr/share/man/zh_CN/man8/groupmod.8.gz", "/usr/share/man/zh_CN/man8/grpck.8.gz", "/usr/share/man/zh_CN/man8/grpconv.8.gz", "/usr/share/man/zh_CN/man8/grpunconv.8.gz", "/usr/share/man/zh_CN/man8/newusers.8.gz", "/usr/share/man/zh_CN/man8/pwck.8.gz", "/usr/share/man/zh_CN/man8/pwconv.8.gz", "/usr/share/man/zh_CN/man8/pwunconv.8.gz", "/usr/share/man/zh_CN/man8/useradd.8.gz", "/usr/share/man/zh_CN/man8/userdel.8.gz", "/usr/share/man/zh_CN/man8/usermod.8.gz", "/usr/share/man/zh_CN/man8/vigr.8.gz", "/usr/share/man/zh_CN/man8/vipw.8.gz", "/usr/share/man/zh_TW/man1/chfn.1.gz", "/usr/share/man/zh_TW/man1/chsh.1.gz", "/usr/share/man/zh_TW/man5/passwd.5.gz", "/usr/share/man/zh_TW/man8/chpasswd.8.gz", "/usr/share/man/zh_TW/man8/groupadd.8.gz", "/usr/share/man/zh_TW/man8/groupdel.8.gz", "/usr/share/man/zh_TW/man8/groupmod.8.gz", "/usr/share/man/zh_TW/man8/useradd.8.gz", "/usr/share/man/zh_TW/man8/userdel.8.gz", "/usr/share/man/zh_TW/man8/usermod.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "perl-base@5.28.1-6+deb10u1", "Name": "perl-base", "Identifier": { "PURL": "pkg:deb/debian/perl-base@5.28.1-6%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "bd20e325fcbd32e6" }, "Version": "5.28.1", "Release": "6+deb10u1", "Arch": "amd64", "SrcName": "perl", "SrcVersion": "5.28.1", "SrcRelease": "6+deb10u1", "Maintainer": "Niko Tyni \u003cntyni@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/bin/perl", "/usr/bin/perl5.28.1", "/usr/lib/x86_64-linux-gnu/perl-base/AutoLoader.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Carp.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Carp/Heavy.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Config.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Config_git.pl", "/usr/lib/x86_64-linux-gnu/perl-base/Config_heavy.pl", "/usr/lib/x86_64-linux-gnu/perl-base/Cwd.pm", "/usr/lib/x86_64-linux-gnu/perl-base/DynaLoader.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Errno.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Exporter.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Exporter/Heavy.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Fcntl.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Basename.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Glob.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Path.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Spec.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Spec/Unix.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Temp.pm", "/usr/lib/x86_64-linux-gnu/perl-base/FileHandle.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Getopt/Long.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Hash/Util.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/File.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Handle.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Pipe.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Seekable.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Select.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket/INET.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket/IP.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket/UNIX.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IPC/Open2.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IPC/Open3.pm", "/usr/lib/x86_64-linux-gnu/perl-base/List/Util.pm", "/usr/lib/x86_64-linux-gnu/perl-base/POSIX.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Scalar/Util.pm", "/usr/lib/x86_64-linux-gnu/perl-base/SelectSaver.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Socket.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Symbol.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Text/ParseWords.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Text/Tabs.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Text/Wrap.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Tie/Hash.pm", "/usr/lib/x86_64-linux-gnu/perl-base/XSLoader.pm", "/usr/lib/x86_64-linux-gnu/perl-base/attributes.pm", "/usr/lib/x86_64-linux-gnu/perl-base/auto/Cwd/Cwd.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/Fcntl/Fcntl.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/File/Glob/Glob.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/Hash/Util/Util.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/IO/IO.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/List/Util/Util.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/POSIX/POSIX.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/Socket/Socket.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/attributes/attributes.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/re/re.so", "/usr/lib/x86_64-linux-gnu/perl-base/base.pm", "/usr/lib/x86_64-linux-gnu/perl-base/bytes.pm", "/usr/lib/x86_64-linux-gnu/perl-base/bytes_heavy.pl", "/usr/lib/x86_64-linux-gnu/perl-base/constant.pm", "/usr/lib/x86_64-linux-gnu/perl-base/feature.pm", "/usr/lib/x86_64-linux-gnu/perl-base/fields.pm", "/usr/lib/x86_64-linux-gnu/perl-base/integer.pm", "/usr/lib/x86_64-linux-gnu/perl-base/lib.pm", "/usr/lib/x86_64-linux-gnu/perl-base/locale.pm", "/usr/lib/x86_64-linux-gnu/perl-base/overload.pm", "/usr/lib/x86_64-linux-gnu/perl-base/overloading.pm", "/usr/lib/x86_64-linux-gnu/perl-base/parent.pm", "/usr/lib/x86_64-linux-gnu/perl-base/re.pm", "/usr/lib/x86_64-linux-gnu/perl-base/strict.pm", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/Heavy.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Age.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bmg.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bpb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bpt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Cf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Digit.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Ea.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Fold.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/GCB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Gc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Hst.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/InPC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/InSC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Isc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Jg.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Jt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Lb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Lc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Lower.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFCQC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFDQC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFKCCF.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFKCQC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFKDQC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Na1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NameAlia.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Nt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Nv.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/PerlDeci.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/SB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Sc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Scx.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Tc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Title.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Uc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Upper.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Vo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/WB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/_PerlLB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/_PerlSCX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/_PerlWB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/NA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V100.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V11.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V20.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V30.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V31.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V32.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V40.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V41.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V50.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V51.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V52.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V60.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V61.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V70.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V80.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V90.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Alpha/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/AL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/AN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/B.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/BN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/CS.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/EN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/ES.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/ET.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/L.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/NSM.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/ON.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/R.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/WS.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/BidiC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/BidiM/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Blk/NB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bpt/C.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bpt/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bpt/O.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CE/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CI/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWCF/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWCM/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWKCF/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWL/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWT/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWU/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Cased/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/A.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/AL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/AR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/ATAR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/B.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/BR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/DB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/NK.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/NR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/OV.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/VR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CompEx/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/DI/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dash/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dep/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dia/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Com.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Enc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Fin.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Font.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Init.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Iso.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Med.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Nar.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Nb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/NonCanon.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Sqr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Sub.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Sup.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Vert.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/A.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/H.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/Na.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/W.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ext/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/CN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/EB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/EX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/GAZ.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/LV.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/LVT.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/PP.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/SM.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/XX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/C.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Cf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Cn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/L.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/LC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Ll.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Lm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Lo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Lu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/M.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Mc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Me.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Mn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Nd.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Nl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/No.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/P.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pd.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pe.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Po.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Ps.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/S.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Sc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Sk.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Sm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/So.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Z.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Zs.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GrBase/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Hex/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Hst/NA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Hyphen/T.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IDC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IDS/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ideo/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/10_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/2_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/2_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/3_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/3_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/3_2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/4_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/4_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/5_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/5_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/5_2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_3.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/7_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/8_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/9_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Bottom.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Left.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/LeftAndR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/NA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Overstru.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Right.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Top.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndBo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndL2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndLe.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndRi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/VisualOr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Avagraha.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Bindu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Cantilla.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona3.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona4.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona5.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona6.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consonan.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Invisibl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Nukta.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Number.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Other.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/PureKill.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Syllable.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/ToneMark.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Virama.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Visarga.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Vowel.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/VowelDep.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/VowelInd.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Ain.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Alef.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Beh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Dal.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/FarsiYeh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Feh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Gaf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Hah.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Kaf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Lam.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/NoJoinin.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Qaf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Reh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Sad.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Seen.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Waw.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Yeh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/C.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/D.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/R.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/T.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/U.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/AI.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/AL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/BA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/BB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/CJ.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/CL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/CM.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/EB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/EX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/GL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/ID.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/IN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/IS.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/NS.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/OP.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/PO.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/PR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/QU.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/SA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/XX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lower/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Math/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFCQC/M.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFCQC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFDQC/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFDQC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKCQC/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKCQC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKDQC/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKDQC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nt/Di.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nt/None.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nt/Nu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/10.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/100.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/10000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/11.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/12.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/13.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/14.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/15.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/16.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/17.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/18.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/19.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_16.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_3.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_4.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_8.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/20.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/200.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/2_3.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/30.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/300.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3_16.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3_4.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/4.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/40.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/400.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/5.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/50.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/500.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/5000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/50000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/6.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/60.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/600.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/7.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/70.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/700.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/8.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/80.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/800.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/9.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/90.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/900.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/PCM/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/PatSyn/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Alnum.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Assigned.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Blank.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Graph.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/PerlWord.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/PosixPun.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Print.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/SpacePer.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Title.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Word.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/XPosixPu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlAny.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlCh2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlCha.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlFol.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlIDC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlIDS.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlNch.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPat.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPr2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPro.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlQuo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/QMark/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/AT.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/CL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/EX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/FO.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/LE.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/LO.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/NU.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/SC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/ST.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/Sp.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/UP.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/XX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SD/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/STerm/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Arab.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Armn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Beng.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Cprt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Cyrl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Deva.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Dupl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Geor.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Glag.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gran.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Grek.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gujr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Guru.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Han.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Hang.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Hira.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Kana.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Knda.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Latn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Limb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Linb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Mlym.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Mong.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Mult.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Orya.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Sinh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Syrc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Taml.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Telu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Zinh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Zyyy.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Adlm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Arab.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Armn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Beng.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Bhks.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Bopo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cakm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cham.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Copt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cprt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cyrl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Deva.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Dupl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Ethi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Geor.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Glag.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gonm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gran.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Grek.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gujr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Guru.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Han.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hang.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hebr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hira.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hmng.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Kana.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Khar.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Khmr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Knda.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Lana.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Lao.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Latn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Limb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Lina.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Linb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mlym.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mong.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mult.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mymr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Orya.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Phlp.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Shrd.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Sind.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Sinh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Syrc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tagb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Takr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Talu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Taml.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Telu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Thaa.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tibt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tirh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Xsux.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Yi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Zinh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Zyyy.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Zzzz.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Term/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/UIdeo/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Upper/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/R.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/Tr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/Tu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/U.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/EX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/Extend.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/FO.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/HL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/KA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/LE.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/MB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/ML.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/MN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/NU.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/XX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/XIDC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/XIDS/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/utf8.pm", "/usr/lib/x86_64-linux-gnu/perl-base/utf8_heavy.pl", "/usr/lib/x86_64-linux-gnu/perl-base/vars.pm", "/usr/lib/x86_64-linux-gnu/perl-base/warnings.pm", "/usr/lib/x86_64-linux-gnu/perl-base/warnings/register.pm", "/usr/share/doc/perl/AUTHORS.gz", "/usr/share/doc/perl/Documentation", "/usr/share/doc/perl/README.Debian", "/usr/share/doc/perl/changelog.Debian.gz", "/usr/share/doc/perl/copyright", "/usr/share/lintian/overrides/perl-base", "/usr/share/man/man1/perl.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "python-pip-whl@18.1-5", "Name": "python-pip-whl", "Identifier": { "PURL": "pkg:deb/debian/python-pip-whl@18.1-5?arch=all\u0026distro=debian-10.13", "UID": "6caa5325c39f44dc" }, "Version": "18.1", "Release": "5", "Arch": "all", "SrcName": "python-pip", "SrcVersion": "18.1", "SrcRelease": "5", "Licenses": [ "MIT", "public-domain" ], "Maintainer": "Debian Python Modules Team \u003cpython-modules-team@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "ca-certificates@20200601~deb10u2" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/share/doc/python-pip-whl/changelog.Debian.gz", "/usr/share/doc/python-pip-whl/changelog.gz", "/usr/share/doc/python-pip-whl/copyright", "/usr/share/python-wheels/CacheControl-0.11.7-py2.py3-none-any.whl", "/usr/share/python-wheels/appdirs-1.4.3-py2.py3-none-any.whl", "/usr/share/python-wheels/certifi-2018.8.24-py2.py3-none-any.whl", "/usr/share/python-wheels/chardet-3.0.4-py2.py3-none-any.whl", "/usr/share/python-wheels/colorama-0.3.7-py2.py3-none-any.whl", "/usr/share/python-wheels/distlib-0.2.8-py2.py3-none-any.whl", "/usr/share/python-wheels/distro-1.3.0-py2.py3-none-any.whl", "/usr/share/python-wheels/html5lib-1.0.1-py2.py3-none-any.whl", "/usr/share/python-wheels/idna-2.6-py2.py3-none-any.whl", "/usr/share/python-wheels/ipaddress-0.0.0-py2.py3-none-any.whl", "/usr/share/python-wheels/lockfile-0.12.2-py2.py3-none-any.whl", "/usr/share/python-wheels/packaging-19.0-py2.py3-none-any.whl", "/usr/share/python-wheels/pip-18.1-py2.py3-none-any.whl", "/usr/share/python-wheels/pkg_resources-0.0.0-py2.py3-none-any.whl", "/usr/share/python-wheels/progress-1.2-py2.py3-none-any.whl", "/usr/share/python-wheels/pyparsing-2.2.0-py2.py3-none-any.whl", "/usr/share/python-wheels/pytoml-0.1.2-py2.py3-none-any.whl", "/usr/share/python-wheels/requests-2.21.0-py2.py3-none-any.whl", "/usr/share/python-wheels/retrying-1.3.3-py2.py3-none-any.whl", "/usr/share/python-wheels/setuptools-40.8.0-py2.py3-none-any.whl", "/usr/share/python-wheels/six-1.12.0-py2.py3-none-any.whl", "/usr/share/python-wheels/urllib3-1.24.1-py2.py3-none-any.whl", "/usr/share/python-wheels/webencodings-0.5.1-py2.py3-none-any.whl", "/usr/share/python-wheels/wheel-0.32.3-py2.py3-none-any.whl" ], "AnalyzedBy": "dpkg" }, { "ID": "python3@3.7.3-1", "Name": "python3", "Identifier": { "PURL": "pkg:deb/debian/python3@3.7.3-1?arch=amd64\u0026distro=debian-10.13", "UID": "44c2eee12de9cd6b" }, "Version": "3.7.3", "Release": "1", "Arch": "amd64", "SrcName": "python3-defaults", "SrcVersion": "3.7.3", "SrcRelease": "1", "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libpython3-stdlib@3.7.3-1", "python3.7@3.7.3-2+deb10u7" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/valgrind/python3.supp", "/usr/share/doc/python3/README.Debian", "/usr/share/doc/python3/changelog.Debian.gz", "/usr/share/doc/python3/copyright", "/usr/share/doc/python3/python-policy.dbk.gz", "/usr/share/doc/python3/python-policy.html/build_dependencies.html", "/usr/share/doc/python3/python-policy.html/embed.html", "/usr/share/doc/python3/python-policy.html/index.html", "/usr/share/doc/python3/python-policy.html/module_packages.html", "/usr/share/doc/python3/python-policy.html/other.html", "/usr/share/doc/python3/python-policy.html/packaging_tools.html", "/usr/share/doc/python3/python-policy.html/programs.html", "/usr/share/doc/python3/python-policy.html/python.html", "/usr/share/doc/python3/python-policy.html/python3.html", "/usr/share/doc/python3/python-policy.html/upgrade.html", "/usr/share/doc/python3/python-policy.txt.gz", "/usr/share/lintian/overrides/python3", "/usr/share/python3/python.mk", "/usr/share/python3/runtime.d/public_modules.rtinstall", "/usr/share/python3/runtime.d/public_modules.rtremove" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-asn1crypto@0.24.0-1", "Name": "python3-asn1crypto", "Identifier": { "PURL": "pkg:deb/debian/python3-asn1crypto@0.24.0-1?arch=all\u0026distro=debian-10.13", "UID": "6e3d4f7f8293b45f" }, "Version": "0.24.0", "Release": "1", "Arch": "all", "SrcName": "asn1crypto", "SrcVersion": "0.24.0", "SrcRelease": "1", "Licenses": [ "MIT" ], "Maintainer": "Tristan Seligmann \u003cmithrandi@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/python3/dist-packages/asn1crypto-0.24.0.egg-info/PKG-INFO", "/usr/lib/python3/dist-packages/asn1crypto-0.24.0.egg-info/dependency_links.txt", "/usr/lib/python3/dist-packages/asn1crypto-0.24.0.egg-info/top_level.txt", "/usr/lib/python3/dist-packages/asn1crypto/__init__.py", "/usr/lib/python3/dist-packages/asn1crypto/_elliptic_curve.py", "/usr/lib/python3/dist-packages/asn1crypto/_errors.py", "/usr/lib/python3/dist-packages/asn1crypto/_ffi.py", "/usr/lib/python3/dist-packages/asn1crypto/_inet.py", "/usr/lib/python3/dist-packages/asn1crypto/_int.py", "/usr/lib/python3/dist-packages/asn1crypto/_iri.py", "/usr/lib/python3/dist-packages/asn1crypto/_ordereddict.py", "/usr/lib/python3/dist-packages/asn1crypto/_perf/__init__.py", "/usr/lib/python3/dist-packages/asn1crypto/_perf/_big_num_ctypes.py", "/usr/lib/python3/dist-packages/asn1crypto/_teletex_codec.py", "/usr/lib/python3/dist-packages/asn1crypto/_types.py", "/usr/lib/python3/dist-packages/asn1crypto/algos.py", "/usr/lib/python3/dist-packages/asn1crypto/cms.py", "/usr/lib/python3/dist-packages/asn1crypto/core.py", "/usr/lib/python3/dist-packages/asn1crypto/crl.py", "/usr/lib/python3/dist-packages/asn1crypto/csr.py", "/usr/lib/python3/dist-packages/asn1crypto/keys.py", "/usr/lib/python3/dist-packages/asn1crypto/ocsp.py", "/usr/lib/python3/dist-packages/asn1crypto/parser.py", "/usr/lib/python3/dist-packages/asn1crypto/pdf.py", "/usr/lib/python3/dist-packages/asn1crypto/pem.py", "/usr/lib/python3/dist-packages/asn1crypto/pkcs12.py", "/usr/lib/python3/dist-packages/asn1crypto/tsp.py", "/usr/lib/python3/dist-packages/asn1crypto/util.py", "/usr/lib/python3/dist-packages/asn1crypto/version.py", "/usr/lib/python3/dist-packages/asn1crypto/x509.py", "/usr/share/doc/python3-asn1crypto/changelog.Debian.gz", "/usr/share/doc/python3-asn1crypto/changelog.gz", "/usr/share/doc/python3-asn1crypto/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-blinker@1.4+dfsg1-0.2", "Name": "python3-blinker", "Identifier": { "PURL": "pkg:deb/debian/python3-blinker@1.4%2Bdfsg1-0.2?arch=all\u0026distro=debian-10.13", "UID": "8130a86370d9235c" }, "Version": "1.4+dfsg1", "Release": "0.2", "Arch": "all", "SrcName": "blinker", "SrcVersion": "1.4+dfsg1", "SrcRelease": "0.2", "Licenses": [ "MIT", "BSD-3-Clause" ], "Maintainer": "Debian Python Modules Team \u003cpython-modules-team@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/python3/dist-packages/blinker-1.4.egg-info", "/usr/lib/python3/dist-packages/blinker/__init__.py", "/usr/lib/python3/dist-packages/blinker/_saferef.py", "/usr/lib/python3/dist-packages/blinker/_utilities.py", "/usr/lib/python3/dist-packages/blinker/base.py", "/usr/share/doc/python3-blinker/changelog.Debian.gz", "/usr/share/doc/python3-blinker/changelog.gz", "/usr/share/doc/python3-blinker/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-certifi@2018.8.24-1", "Name": "python3-certifi", "Identifier": { "PURL": "pkg:deb/debian/python3-certifi@2018.8.24-1?arch=all\u0026distro=debian-10.13", "UID": "e6101aaf666517b1" }, "Version": "2018.8.24", "Release": "1", "Arch": "all", "SrcName": "python-certifi", "SrcVersion": "2018.8.24", "SrcRelease": "1", "Licenses": [ "MPL-2.0", "GPL-2.0-only" ], "Maintainer": "Sebastien Delafond \u003cseb@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "ca-certificates@20200601~deb10u2" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/python3/dist-packages/certifi-2018.8.24.egg-info/PKG-INFO", "/usr/lib/python3/dist-packages/certifi-2018.8.24.egg-info/dependency_links.txt", "/usr/lib/python3/dist-packages/certifi-2018.8.24.egg-info/not-zip-safe", "/usr/lib/python3/dist-packages/certifi-2018.8.24.egg-info/top_level.txt", "/usr/lib/python3/dist-packages/certifi/__init__.py", "/usr/lib/python3/dist-packages/certifi/__main__.py", "/usr/lib/python3/dist-packages/certifi/cacert.pem", "/usr/lib/python3/dist-packages/certifi/core.py", "/usr/share/doc/python3-certifi/changelog.Debian.gz", "/usr/share/doc/python3-certifi/copyright", "/usr/share/lintian/overrides/python3-certifi" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-cffi-backend@1.12.2-1", "Name": "python3-cffi-backend", "Identifier": { "PURL": "pkg:deb/debian/python3-cffi-backend@1.12.2-1?arch=amd64\u0026distro=debian-10.13", "UID": "88aa7af26de624ef" }, "Version": "1.12.2", "Release": "1", "Arch": "amd64", "SrcName": "python-cffi", "SrcVersion": "1.12.2", "SrcRelease": "1", "Licenses": [ "MIT" ], "Maintainer": "Debian Python Modules Team \u003cpython-modules-team@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libffi6@3.2.1-9", "python3@3.7.3-1" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/python3/dist-packages/_cffi_backend.cpython-37m-x86_64-linux-gnu.so", "/usr/share/doc/python3-cffi-backend/changelog.Debian.gz", "/usr/share/doc/python3-cffi-backend/changelog.gz", "/usr/share/doc/python3-cffi-backend/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-chardet@3.0.4-3", "Name": "python3-chardet", "Identifier": { "PURL": "pkg:deb/debian/python3-chardet@3.0.4-3?arch=all\u0026distro=debian-10.13", "UID": "87b50bd35866c2e5" }, "Version": "3.0.4", "Release": "3", "Arch": "all", "SrcName": "chardet", "SrcVersion": "3.0.4", "SrcRelease": "3", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.1-only" ], "Maintainer": "Piotr Ożarowski \u003cpiotr@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "python3-pkg-resources@40.8.0-1" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/bin/chardetect3", "/usr/lib/python3/dist-packages/chardet-3.0.4.egg-info/PKG-INFO", "/usr/lib/python3/dist-packages/chardet-3.0.4.egg-info/dependency_links.txt", "/usr/lib/python3/dist-packages/chardet-3.0.4.egg-info/entry_points.txt", "/usr/lib/python3/dist-packages/chardet-3.0.4.egg-info/top_level.txt", "/usr/lib/python3/dist-packages/chardet/__init__.py", "/usr/lib/python3/dist-packages/chardet/big5freq.py", "/usr/lib/python3/dist-packages/chardet/big5prober.py", "/usr/lib/python3/dist-packages/chardet/chardistribution.py", "/usr/lib/python3/dist-packages/chardet/charsetgroupprober.py", "/usr/lib/python3/dist-packages/chardet/charsetprober.py", "/usr/lib/python3/dist-packages/chardet/cli/__init__.py", "/usr/lib/python3/dist-packages/chardet/cli/chardetect.py", "/usr/lib/python3/dist-packages/chardet/codingstatemachine.py", "/usr/lib/python3/dist-packages/chardet/compat.py", "/usr/lib/python3/dist-packages/chardet/cp949prober.py", "/usr/lib/python3/dist-packages/chardet/enums.py", "/usr/lib/python3/dist-packages/chardet/escprober.py", "/usr/lib/python3/dist-packages/chardet/escsm.py", "/usr/lib/python3/dist-packages/chardet/eucjpprober.py", "/usr/lib/python3/dist-packages/chardet/euckrfreq.py", "/usr/lib/python3/dist-packages/chardet/euckrprober.py", "/usr/lib/python3/dist-packages/chardet/euctwfreq.py", "/usr/lib/python3/dist-packages/chardet/euctwprober.py", "/usr/lib/python3/dist-packages/chardet/gb2312freq.py", "/usr/lib/python3/dist-packages/chardet/gb2312prober.py", "/usr/lib/python3/dist-packages/chardet/hebrewprober.py", "/usr/lib/python3/dist-packages/chardet/jisfreq.py", "/usr/lib/python3/dist-packages/chardet/jpcntx.py", "/usr/lib/python3/dist-packages/chardet/langbulgarianmodel.py", "/usr/lib/python3/dist-packages/chardet/langcyrillicmodel.py", "/usr/lib/python3/dist-packages/chardet/langgreekmodel.py", "/usr/lib/python3/dist-packages/chardet/langhebrewmodel.py", "/usr/lib/python3/dist-packages/chardet/langhungarianmodel.py", "/usr/lib/python3/dist-packages/chardet/langthaimodel.py", "/usr/lib/python3/dist-packages/chardet/langturkishmodel.py", "/usr/lib/python3/dist-packages/chardet/latin1prober.py", "/usr/lib/python3/dist-packages/chardet/mbcharsetprober.py", "/usr/lib/python3/dist-packages/chardet/mbcsgroupprober.py", "/usr/lib/python3/dist-packages/chardet/mbcssm.py", "/usr/lib/python3/dist-packages/chardet/sbcharsetprober.py", "/usr/lib/python3/dist-packages/chardet/sbcsgroupprober.py", "/usr/lib/python3/dist-packages/chardet/sjisprober.py", "/usr/lib/python3/dist-packages/chardet/universaldetector.py", "/usr/lib/python3/dist-packages/chardet/utf8prober.py", "/usr/lib/python3/dist-packages/chardet/version.py", "/usr/share/doc/python3-chardet/changelog.Debian.gz", "/usr/share/doc/python3-chardet/copyright", "/usr/share/man/man1/chardet3.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-click@7.0-1", "Name": "python3-click", "Identifier": { "PURL": "pkg:deb/debian/python3-click@7.0-1?arch=all\u0026distro=debian-10.13", "UID": "d0145f53e302a736" }, "Version": "7.0", "Release": "1", "Arch": "all", "SrcName": "python-click", "SrcVersion": "7.0", "SrcRelease": "1", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Alexandre Viau \u003caviau@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "python3-colorama@0.3.7-1" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/python3/dist-packages/Click-7.0.egg-info/PKG-INFO", "/usr/lib/python3/dist-packages/Click-7.0.egg-info/dependency_links.txt", "/usr/lib/python3/dist-packages/Click-7.0.egg-info/top_level.txt", "/usr/lib/python3/dist-packages/click/__init__.py", "/usr/lib/python3/dist-packages/click/_bashcomplete.py", "/usr/lib/python3/dist-packages/click/_compat.py", "/usr/lib/python3/dist-packages/click/_termui_impl.py", "/usr/lib/python3/dist-packages/click/_textwrap.py", "/usr/lib/python3/dist-packages/click/_unicodefun.py", "/usr/lib/python3/dist-packages/click/_winconsole.py", "/usr/lib/python3/dist-packages/click/core.py", "/usr/lib/python3/dist-packages/click/decorators.py", "/usr/lib/python3/dist-packages/click/exceptions.py", "/usr/lib/python3/dist-packages/click/formatting.py", "/usr/lib/python3/dist-packages/click/globals.py", "/usr/lib/python3/dist-packages/click/parser.py", "/usr/lib/python3/dist-packages/click/termui.py", "/usr/lib/python3/dist-packages/click/testing.py", "/usr/lib/python3/dist-packages/click/types.py", "/usr/lib/python3/dist-packages/click/utils.py", "/usr/share/doc/python3-click/changelog.Debian.gz", "/usr/share/doc/python3-click/changelog.gz", "/usr/share/doc/python3-click/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-colorama@0.3.7-1", "Name": "python3-colorama", "Identifier": { "PURL": "pkg:deb/debian/python3-colorama@0.3.7-1?arch=all\u0026distro=debian-10.13", "UID": "cb2cf0856e66f3a4" }, "Version": "0.3.7", "Release": "1", "Arch": "all", "SrcName": "python-colorama", "SrcVersion": "0.3.7", "SrcRelease": "1", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Khalid El Fathi \u003ckhalid@elfathi.fr\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/python3/dist-packages/colorama-0.3.7.egg-info/PKG-INFO", "/usr/lib/python3/dist-packages/colorama-0.3.7.egg-info/dependency_links.txt", "/usr/lib/python3/dist-packages/colorama-0.3.7.egg-info/top_level.txt", "/usr/lib/python3/dist-packages/colorama/__init__.py", "/usr/lib/python3/dist-packages/colorama/ansi.py", "/usr/lib/python3/dist-packages/colorama/ansitowin32.py", "/usr/lib/python3/dist-packages/colorama/initialise.py", "/usr/lib/python3/dist-packages/colorama/win32.py", "/usr/lib/python3/dist-packages/colorama/winterm.py", "/usr/share/doc/python3-colorama/changelog.Debian.gz", "/usr/share/doc/python3-colorama/changelog.gz", "/usr/share/doc/python3-colorama/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-cryptography@2.6.1-3+deb10u4", "Name": "python3-cryptography", "Identifier": { "PURL": "pkg:deb/debian/python3-cryptography@2.6.1-3%2Bdeb10u4?arch=amd64\u0026distro=debian-10.13", "UID": "bfe892ec22459f00" }, "Version": "2.6.1", "Release": "3+deb10u4", "Arch": "amd64", "SrcName": "python-cryptography", "SrcVersion": "2.6.1", "SrcRelease": "3+deb10u4", "Licenses": [ "Apache-2.0", "MIT" ], "Maintainer": "Tristan Seligmann \u003cmithrandi@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libssl1.1@1.1.1n-0+deb10u6", "python3-asn1crypto@0.24.0-1", "python3-six@1.12.0-1", "python3@3.7.3-1" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/python3/dist-packages/cryptography-2.6.1.egg-info/PKG-INFO", "/usr/lib/python3/dist-packages/cryptography-2.6.1.egg-info/dependency_links.txt", "/usr/lib/python3/dist-packages/cryptography-2.6.1.egg-info/not-zip-safe", "/usr/lib/python3/dist-packages/cryptography-2.6.1.egg-info/requires.txt", "/usr/lib/python3/dist-packages/cryptography-2.6.1.egg-info/top_level.txt", "/usr/lib/python3/dist-packages/cryptography/__about__.py", "/usr/lib/python3/dist-packages/cryptography/__init__.py", "/usr/lib/python3/dist-packages/cryptography/exceptions.py", "/usr/lib/python3/dist-packages/cryptography/fernet.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/__init__.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/_oid.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/__init__.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/interfaces.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/__init__.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/aead.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/backend.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/ciphers.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/cmac.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/decode_asn1.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/dh.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/dsa.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/ec.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/ed25519.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/ed448.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/encode_asn1.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/hashes.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/hmac.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/ocsp.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/rsa.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/utils.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/x25519.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/x448.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/x509.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/bindings/__init__.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/bindings/_constant_time.abi3.so", "/usr/lib/python3/dist-packages/cryptography/hazmat/bindings/_openssl.abi3.so", "/usr/lib/python3/dist-packages/cryptography/hazmat/bindings/_padding.abi3.so", "/usr/lib/python3/dist-packages/cryptography/hazmat/bindings/openssl/__init__.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/bindings/openssl/_conditional.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/bindings/openssl/binding.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/__init__.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/asymmetric/__init__.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/asymmetric/dh.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/asymmetric/dsa.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/asymmetric/ec.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/asymmetric/ed25519.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/asymmetric/ed448.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/asymmetric/padding.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/asymmetric/rsa.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/asymmetric/utils.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/asymmetric/x25519.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/asymmetric/x448.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/ciphers/__init__.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/ciphers/aead.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/ciphers/algorithms.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/ciphers/base.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/ciphers/modes.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/cmac.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/constant_time.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/hashes.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/hmac.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/kdf/__init__.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/kdf/concatkdf.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/kdf/hkdf.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/kdf/kbkdf.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/kdf/pbkdf2.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/kdf/scrypt.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/kdf/x963kdf.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/keywrap.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/mac.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/padding.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/serialization/__init__.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/serialization/base.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/serialization/pkcs12.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/serialization/ssh.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/twofactor/__init__.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/twofactor/hotp.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/twofactor/totp.py", "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/twofactor/utils.py", "/usr/lib/python3/dist-packages/cryptography/utils.py", "/usr/lib/python3/dist-packages/cryptography/x509/__init__.py", "/usr/lib/python3/dist-packages/cryptography/x509/base.py", "/usr/lib/python3/dist-packages/cryptography/x509/certificate_transparency.py", "/usr/lib/python3/dist-packages/cryptography/x509/extensions.py", "/usr/lib/python3/dist-packages/cryptography/x509/general_name.py", "/usr/lib/python3/dist-packages/cryptography/x509/name.py", "/usr/lib/python3/dist-packages/cryptography/x509/ocsp.py", "/usr/lib/python3/dist-packages/cryptography/x509/oid.py", "/usr/share/doc/python3-cryptography/changelog.Debian.gz", "/usr/share/doc/python3-cryptography/changelog.gz", "/usr/share/doc/python3-cryptography/copyright", "/usr/share/python3/dist/python3-cryptography" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-distutils@3.7.3-1", "Name": "python3-distutils", "Identifier": { "PURL": "pkg:deb/debian/python3-distutils@3.7.3-1?arch=all\u0026distro=debian-10.13", "UID": "4ee5bc9b91d602ff" }, "Version": "3.7.3", "Release": "1", "Arch": "all", "SrcName": "python3-stdlib-extensions", "SrcVersion": "3.7.3", "SrcRelease": "1", "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "python3-lib2to3@3.7.3-1", "python3@3.7.3-1" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/python3.7/distutils/README", "/usr/lib/python3.7/distutils/_msvccompiler.py", "/usr/lib/python3.7/distutils/archive_util.py", "/usr/lib/python3.7/distutils/bcppcompiler.py", "/usr/lib/python3.7/distutils/ccompiler.py", "/usr/lib/python3.7/distutils/cmd.py", "/usr/lib/python3.7/distutils/command/__init__.py", "/usr/lib/python3.7/distutils/command/bdist.py", "/usr/lib/python3.7/distutils/command/bdist_dumb.py", "/usr/lib/python3.7/distutils/command/bdist_msi.py", "/usr/lib/python3.7/distutils/command/bdist_rpm.py", "/usr/lib/python3.7/distutils/command/bdist_wininst.py", "/usr/lib/python3.7/distutils/command/build.py", "/usr/lib/python3.7/distutils/command/build_clib.py", "/usr/lib/python3.7/distutils/command/build_ext.py", "/usr/lib/python3.7/distutils/command/build_py.py", "/usr/lib/python3.7/distutils/command/build_scripts.py", "/usr/lib/python3.7/distutils/command/check.py", "/usr/lib/python3.7/distutils/command/clean.py", "/usr/lib/python3.7/distutils/command/command_template", "/usr/lib/python3.7/distutils/command/config.py", "/usr/lib/python3.7/distutils/command/install.py", "/usr/lib/python3.7/distutils/command/install_data.py", "/usr/lib/python3.7/distutils/command/install_egg_info.py", "/usr/lib/python3.7/distutils/command/install_headers.py", "/usr/lib/python3.7/distutils/command/install_lib.py", "/usr/lib/python3.7/distutils/command/install_scripts.py", "/usr/lib/python3.7/distutils/command/register.py", "/usr/lib/python3.7/distutils/command/sdist.py", "/usr/lib/python3.7/distutils/command/upload.py", "/usr/lib/python3.7/distutils/config.py", "/usr/lib/python3.7/distutils/core.py", "/usr/lib/python3.7/distutils/cygwinccompiler.py", "/usr/lib/python3.7/distutils/debug.py", "/usr/lib/python3.7/distutils/dep_util.py", "/usr/lib/python3.7/distutils/dir_util.py", "/usr/lib/python3.7/distutils/dist.py", "/usr/lib/python3.7/distutils/errors.py", "/usr/lib/python3.7/distutils/extension.py", "/usr/lib/python3.7/distutils/fancy_getopt.py", "/usr/lib/python3.7/distutils/file_util.py", "/usr/lib/python3.7/distutils/filelist.py", "/usr/lib/python3.7/distutils/log.py", "/usr/lib/python3.7/distutils/msvc9compiler.py", "/usr/lib/python3.7/distutils/msvccompiler.py", "/usr/lib/python3.7/distutils/spawn.py", "/usr/lib/python3.7/distutils/sysconfig.py", "/usr/lib/python3.7/distutils/text_file.py", "/usr/lib/python3.7/distutils/unixccompiler.py", "/usr/lib/python3.7/distutils/util.py", "/usr/lib/python3.7/distutils/versionpredicate.py", "/usr/share/doc/python3-distutils/README.Debian", "/usr/share/doc/python3-distutils/changelog.Debian.gz", "/usr/share/doc/python3-distutils/copyright", "/usr/share/lintian/overrides/python3-distutils" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-idna@2.6-1+deb10u1", "Name": "python3-idna", "Identifier": { "PURL": "pkg:deb/debian/python3-idna@2.6-1%2Bdeb10u1?arch=all\u0026distro=debian-10.13", "UID": "81c6179c442f7907" }, "Version": "2.6", "Release": "1+deb10u1", "Arch": "all", "SrcName": "python-idna", "SrcVersion": "2.6", "SrcRelease": "1+deb10u1", "Licenses": [ "BSD-3-Clause", "PSF-2", "Unicode" ], "Maintainer": "Debian Python Modules Team \u003cpython-modules-team@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/python3/dist-packages/idna-2.6.egg-info/PKG-INFO", "/usr/lib/python3/dist-packages/idna-2.6.egg-info/dependency_links.txt", "/usr/lib/python3/dist-packages/idna-2.6.egg-info/top_level.txt", "/usr/lib/python3/dist-packages/idna/__init__.py", "/usr/lib/python3/dist-packages/idna/codec.py", "/usr/lib/python3/dist-packages/idna/compat.py", "/usr/lib/python3/dist-packages/idna/core.py", "/usr/lib/python3/dist-packages/idna/idnadata.py", "/usr/lib/python3/dist-packages/idna/intranges.py", "/usr/lib/python3/dist-packages/idna/package_data.py", "/usr/lib/python3/dist-packages/idna/uts46data.py", "/usr/share/doc/python3-idna/changelog.Debian.gz", "/usr/share/doc/python3-idna/changelog.gz", "/usr/share/doc/python3-idna/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-jwt@1.7.0-2", "Name": "python3-jwt", "Identifier": { "PURL": "pkg:deb/debian/python3-jwt@1.7.0-2?arch=all\u0026distro=debian-10.13", "UID": "f334bfa9ac874e" }, "Version": "1.7.0", "Release": "2", "Arch": "all", "SrcName": "pyjwt", "SrcVersion": "1.7.0", "SrcRelease": "2", "Licenses": [ "MIT" ], "Maintainer": "Debian Python Modules Team \u003cpython-modules-team@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/bin/pyjwt3", "/usr/lib/python3/dist-packages/PyJWT-1.7.0.egg-info/PKG-INFO", "/usr/lib/python3/dist-packages/PyJWT-1.7.0.egg-info/dependency_links.txt", "/usr/lib/python3/dist-packages/PyJWT-1.7.0.egg-info/entry_points.txt", "/usr/lib/python3/dist-packages/PyJWT-1.7.0.egg-info/requires.txt", "/usr/lib/python3/dist-packages/PyJWT-1.7.0.egg-info/top_level.txt", "/usr/lib/python3/dist-packages/jwt/__init__.py", "/usr/lib/python3/dist-packages/jwt/__main__.py", "/usr/lib/python3/dist-packages/jwt/algorithms.py", "/usr/lib/python3/dist-packages/jwt/api_jws.py", "/usr/lib/python3/dist-packages/jwt/api_jwt.py", "/usr/lib/python3/dist-packages/jwt/compat.py", "/usr/lib/python3/dist-packages/jwt/contrib/__init__.py", "/usr/lib/python3/dist-packages/jwt/contrib/algorithms/__init__.py", "/usr/lib/python3/dist-packages/jwt/contrib/algorithms/py_ecdsa.py", "/usr/lib/python3/dist-packages/jwt/contrib/algorithms/pycrypto.py", "/usr/lib/python3/dist-packages/jwt/exceptions.py", "/usr/lib/python3/dist-packages/jwt/help.py", "/usr/lib/python3/dist-packages/jwt/utils.py", "/usr/share/doc/python3-jwt/NEWS.Debian.gz", "/usr/share/doc/python3-jwt/changelog.Debian.gz", "/usr/share/doc/python3-jwt/changelog.gz", "/usr/share/doc/python3-jwt/copyright", "/usr/share/man/man1/pyjwt3.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-lib2to3@3.7.3-1", "Name": "python3-lib2to3", "Identifier": { "PURL": "pkg:deb/debian/python3-lib2to3@3.7.3-1?arch=all\u0026distro=debian-10.13", "UID": "c0cc6035e72d75dc" }, "Version": "3.7.3", "Release": "1", "Arch": "all", "SrcName": "python3-stdlib-extensions", "SrcVersion": "3.7.3", "SrcRelease": "1", "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "python3@3.7.3-1" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/python3.7/lib2to3/Grammar.txt", "/usr/lib/python3.7/lib2to3/PatternGrammar.txt", "/usr/lib/python3.7/lib2to3/__init__.py", "/usr/lib/python3.7/lib2to3/__main__.py", "/usr/lib/python3.7/lib2to3/btm_matcher.py", "/usr/lib/python3.7/lib2to3/btm_utils.py", "/usr/lib/python3.7/lib2to3/fixer_base.py", "/usr/lib/python3.7/lib2to3/fixer_util.py", "/usr/lib/python3.7/lib2to3/fixes/__init__.py", "/usr/lib/python3.7/lib2to3/fixes/fix_apply.py", "/usr/lib/python3.7/lib2to3/fixes/fix_asserts.py", "/usr/lib/python3.7/lib2to3/fixes/fix_basestring.py", "/usr/lib/python3.7/lib2to3/fixes/fix_buffer.py", "/usr/lib/python3.7/lib2to3/fixes/fix_dict.py", "/usr/lib/python3.7/lib2to3/fixes/fix_except.py", "/usr/lib/python3.7/lib2to3/fixes/fix_exec.py", "/usr/lib/python3.7/lib2to3/fixes/fix_execfile.py", "/usr/lib/python3.7/lib2to3/fixes/fix_exitfunc.py", "/usr/lib/python3.7/lib2to3/fixes/fix_filter.py", "/usr/lib/python3.7/lib2to3/fixes/fix_funcattrs.py", "/usr/lib/python3.7/lib2to3/fixes/fix_future.py", "/usr/lib/python3.7/lib2to3/fixes/fix_getcwdu.py", "/usr/lib/python3.7/lib2to3/fixes/fix_has_key.py", "/usr/lib/python3.7/lib2to3/fixes/fix_idioms.py", "/usr/lib/python3.7/lib2to3/fixes/fix_import.py", "/usr/lib/python3.7/lib2to3/fixes/fix_imports.py", "/usr/lib/python3.7/lib2to3/fixes/fix_imports2.py", "/usr/lib/python3.7/lib2to3/fixes/fix_input.py", "/usr/lib/python3.7/lib2to3/fixes/fix_intern.py", "/usr/lib/python3.7/lib2to3/fixes/fix_isinstance.py", "/usr/lib/python3.7/lib2to3/fixes/fix_itertools.py", "/usr/lib/python3.7/lib2to3/fixes/fix_itertools_imports.py", "/usr/lib/python3.7/lib2to3/fixes/fix_long.py", "/usr/lib/python3.7/lib2to3/fixes/fix_map.py", "/usr/lib/python3.7/lib2to3/fixes/fix_metaclass.py", "/usr/lib/python3.7/lib2to3/fixes/fix_methodattrs.py", "/usr/lib/python3.7/lib2to3/fixes/fix_ne.py", "/usr/lib/python3.7/lib2to3/fixes/fix_next.py", "/usr/lib/python3.7/lib2to3/fixes/fix_nonzero.py", "/usr/lib/python3.7/lib2to3/fixes/fix_numliterals.py", "/usr/lib/python3.7/lib2to3/fixes/fix_operator.py", "/usr/lib/python3.7/lib2to3/fixes/fix_paren.py", "/usr/lib/python3.7/lib2to3/fixes/fix_print.py", "/usr/lib/python3.7/lib2to3/fixes/fix_raise.py", "/usr/lib/python3.7/lib2to3/fixes/fix_raw_input.py", "/usr/lib/python3.7/lib2to3/fixes/fix_reduce.py", "/usr/lib/python3.7/lib2to3/fixes/fix_reload.py", "/usr/lib/python3.7/lib2to3/fixes/fix_renames.py", "/usr/lib/python3.7/lib2to3/fixes/fix_repr.py", "/usr/lib/python3.7/lib2to3/fixes/fix_set_literal.py", "/usr/lib/python3.7/lib2to3/fixes/fix_standarderror.py", "/usr/lib/python3.7/lib2to3/fixes/fix_sys_exc.py", "/usr/lib/python3.7/lib2to3/fixes/fix_throw.py", "/usr/lib/python3.7/lib2to3/fixes/fix_tuple_params.py", "/usr/lib/python3.7/lib2to3/fixes/fix_types.py", "/usr/lib/python3.7/lib2to3/fixes/fix_unicode.py", "/usr/lib/python3.7/lib2to3/fixes/fix_urllib.py", "/usr/lib/python3.7/lib2to3/fixes/fix_ws_comma.py", "/usr/lib/python3.7/lib2to3/fixes/fix_xrange.py", "/usr/lib/python3.7/lib2to3/fixes/fix_xreadlines.py", "/usr/lib/python3.7/lib2to3/fixes/fix_zip.py", "/usr/lib/python3.7/lib2to3/main.py", "/usr/lib/python3.7/lib2to3/patcomp.py", "/usr/lib/python3.7/lib2to3/pgen2/__init__.py", "/usr/lib/python3.7/lib2to3/pgen2/conv.py", "/usr/lib/python3.7/lib2to3/pgen2/driver.py", "/usr/lib/python3.7/lib2to3/pgen2/grammar.py", "/usr/lib/python3.7/lib2to3/pgen2/literals.py", "/usr/lib/python3.7/lib2to3/pgen2/parse.py", "/usr/lib/python3.7/lib2to3/pgen2/pgen.py", "/usr/lib/python3.7/lib2to3/pgen2/token.py", "/usr/lib/python3.7/lib2to3/pgen2/tokenize.py", "/usr/lib/python3.7/lib2to3/pygram.py", "/usr/lib/python3.7/lib2to3/pytree.py", "/usr/lib/python3.7/lib2to3/refactor.py", "/usr/share/doc/python3-lib2to3/changelog.Debian.gz", "/usr/share/doc/python3-lib2to3/copyright", "/usr/share/lintian/overrides/python3-lib2to3" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-markdown@3.0.1-3", "Name": "python3-markdown", "Identifier": { "PURL": "pkg:deb/debian/python3-markdown@3.0.1-3?arch=all\u0026distro=debian-10.13", "UID": "8e37095633d6aaac" }, "Version": "3.0.1", "Release": "3", "Arch": "all", "SrcName": "python-markdown", "SrcVersion": "3.0.1", "SrcRelease": "3", "Licenses": [ "BSD-3-Clause", "etree13" ], "Maintainer": "Debian Python Modules Team \u003cpython-modules-team@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "python3-pkg-resources@40.8.0-1" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/python3/dist-packages/Markdown-3.0.1.egg-info/PKG-INFO", "/usr/lib/python3/dist-packages/Markdown-3.0.1.egg-info/dependency_links.txt", "/usr/lib/python3/dist-packages/Markdown-3.0.1.egg-info/entry_points.txt", "/usr/lib/python3/dist-packages/Markdown-3.0.1.egg-info/top_level.txt", "/usr/lib/python3/dist-packages/markdown/__init__.py", "/usr/lib/python3/dist-packages/markdown/__main__.py", "/usr/lib/python3/dist-packages/markdown/blockparser.py", "/usr/lib/python3/dist-packages/markdown/blockprocessors.py", "/usr/lib/python3/dist-packages/markdown/core.py", "/usr/lib/python3/dist-packages/markdown/extensions/__init__.py", "/usr/lib/python3/dist-packages/markdown/extensions/abbr.py", "/usr/lib/python3/dist-packages/markdown/extensions/admonition.py", "/usr/lib/python3/dist-packages/markdown/extensions/attr_list.py", "/usr/lib/python3/dist-packages/markdown/extensions/codehilite.py", "/usr/lib/python3/dist-packages/markdown/extensions/def_list.py", "/usr/lib/python3/dist-packages/markdown/extensions/extra.py", "/usr/lib/python3/dist-packages/markdown/extensions/fenced_code.py", "/usr/lib/python3/dist-packages/markdown/extensions/footnotes.py", "/usr/lib/python3/dist-packages/markdown/extensions/legacy_attrs.py", "/usr/lib/python3/dist-packages/markdown/extensions/legacy_em.py", "/usr/lib/python3/dist-packages/markdown/extensions/meta.py", "/usr/lib/python3/dist-packages/markdown/extensions/nl2br.py", "/usr/lib/python3/dist-packages/markdown/extensions/sane_lists.py", "/usr/lib/python3/dist-packages/markdown/extensions/smarty.py", "/usr/lib/python3/dist-packages/markdown/extensions/tables.py", "/usr/lib/python3/dist-packages/markdown/extensions/toc.py", "/usr/lib/python3/dist-packages/markdown/extensions/wikilinks.py", "/usr/lib/python3/dist-packages/markdown/inlinepatterns.py", "/usr/lib/python3/dist-packages/markdown/postprocessors.py", "/usr/lib/python3/dist-packages/markdown/preprocessors.py", "/usr/lib/python3/dist-packages/markdown/serializers.py", "/usr/lib/python3/dist-packages/markdown/test_tools.py", "/usr/lib/python3/dist-packages/markdown/treeprocessors.py", "/usr/lib/python3/dist-packages/markdown/util.py", "/usr/share/doc/python3-markdown/changelog.Debian.gz", "/usr/share/doc/python3-markdown/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-minimal@3.7.3-1", "Name": "python3-minimal", "Identifier": { "PURL": "pkg:deb/debian/python3-minimal@3.7.3-1?arch=amd64\u0026distro=debian-10.13", "UID": "80522636d048b366" }, "Version": "3.7.3", "Release": "1", "Arch": "amd64", "SrcName": "python3-defaults", "SrcVersion": "3.7.3", "SrcRelease": "1", "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "dpkg@1.19.8" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/bin/py3clean", "/usr/bin/py3compile", "/usr/share/doc/python3-minimal/README.Debian", "/usr/share/doc/python3-minimal/changelog.Debian.gz", "/usr/share/doc/python3-minimal/copyright", "/usr/share/man/man1/py3clean.1.gz", "/usr/share/man/man1/py3compile.1.gz", "/usr/share/man/man1/py3versions.1.gz", "/usr/share/python3/debian_defaults", "/usr/share/python3/debpython/__init__.py", "/usr/share/python3/debpython/files.py", "/usr/share/python3/debpython/interpreter.py", "/usr/share/python3/debpython/option.py", "/usr/share/python3/debpython/version.py", "/usr/share/python3/py3versions.py" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-oauthlib@2.1.0-1", "Name": "python3-oauthlib", "Identifier": { "PURL": "pkg:deb/debian/python3-oauthlib@2.1.0-1?arch=all\u0026distro=debian-10.13", "UID": "fa7ca1c9e1e270a1" }, "Version": "2.1.0", "Release": "1", "Arch": "all", "SrcName": "python-oauthlib", "SrcVersion": "2.1.0", "SrcRelease": "1", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Debian Python Modules Team \u003cpython-modules-team@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "python3-blinker@1.4+dfsg1-0.2", "python3-cryptography@2.6.1-3+deb10u4", "python3-jwt@1.7.0-2" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/python3/dist-packages/oauthlib-2.1.0.egg-info/PKG-INFO", "/usr/lib/python3/dist-packages/oauthlib-2.1.0.egg-info/dependency_links.txt", "/usr/lib/python3/dist-packages/oauthlib-2.1.0.egg-info/requires.txt", "/usr/lib/python3/dist-packages/oauthlib-2.1.0.egg-info/top_level.txt", "/usr/lib/python3/dist-packages/oauthlib/__init__.py", "/usr/lib/python3/dist-packages/oauthlib/common.py", "/usr/lib/python3/dist-packages/oauthlib/oauth1/__init__.py", "/usr/lib/python3/dist-packages/oauthlib/oauth1/rfc5849/__init__.py", "/usr/lib/python3/dist-packages/oauthlib/oauth1/rfc5849/endpoints/__init__.py", "/usr/lib/python3/dist-packages/oauthlib/oauth1/rfc5849/endpoints/access_token.py", "/usr/lib/python3/dist-packages/oauthlib/oauth1/rfc5849/endpoints/authorization.py", "/usr/lib/python3/dist-packages/oauthlib/oauth1/rfc5849/endpoints/base.py", "/usr/lib/python3/dist-packages/oauthlib/oauth1/rfc5849/endpoints/pre_configured.py", "/usr/lib/python3/dist-packages/oauthlib/oauth1/rfc5849/endpoints/request_token.py", "/usr/lib/python3/dist-packages/oauthlib/oauth1/rfc5849/endpoints/resource.py", "/usr/lib/python3/dist-packages/oauthlib/oauth1/rfc5849/endpoints/signature_only.py", "/usr/lib/python3/dist-packages/oauthlib/oauth1/rfc5849/errors.py", "/usr/lib/python3/dist-packages/oauthlib/oauth1/rfc5849/parameters.py", "/usr/lib/python3/dist-packages/oauthlib/oauth1/rfc5849/request_validator.py", "/usr/lib/python3/dist-packages/oauthlib/oauth1/rfc5849/signature.py", "/usr/lib/python3/dist-packages/oauthlib/oauth1/rfc5849/utils.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/__init__.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/__init__.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/clients/__init__.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/clients/backend_application.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/clients/base.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/clients/legacy_application.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/clients/mobile_application.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/clients/service_application.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/clients/web_application.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/endpoints/__init__.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/endpoints/authorization.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/endpoints/base.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/endpoints/pre_configured.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/endpoints/resource.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/endpoints/revocation.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/endpoints/token.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/errors.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/grant_types/__init__.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/grant_types/authorization_code.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/grant_types/base.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/grant_types/client_credentials.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/grant_types/implicit.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/grant_types/openid_connect.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/grant_types/refresh_token.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/grant_types/resource_owner_password_credentials.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/parameters.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/request_validator.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/tokens.py", "/usr/lib/python3/dist-packages/oauthlib/oauth2/rfc6749/utils.py", "/usr/lib/python3/dist-packages/oauthlib/signals.py", "/usr/lib/python3/dist-packages/oauthlib/uri_validate.py", "/usr/share/doc/python3-oauthlib/changelog.Debian.gz", "/usr/share/doc/python3-oauthlib/changelog.gz", "/usr/share/doc/python3-oauthlib/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-pip@18.1-5", "Name": "python3-pip", "Identifier": { "PURL": "pkg:deb/debian/python3-pip@18.1-5?arch=all\u0026distro=debian-10.13", "UID": "cdf6fe8eb9576f55" }, "Version": "18.1", "Release": "5", "Arch": "all", "SrcName": "python-pip", "SrcVersion": "18.1", "SrcRelease": "5", "Licenses": [ "MIT", "public-domain" ], "Maintainer": "Debian Python Modules Team \u003cpython-modules-team@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "ca-certificates@20200601~deb10u2", "python-pip-whl@18.1-5", "python3-distutils@3.7.3-1" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/bin/pip3", "/usr/lib/python3/dist-packages/pip-18.1.egg-info/PKG-INFO", "/usr/lib/python3/dist-packages/pip-18.1.egg-info/dependency_links.txt", "/usr/lib/python3/dist-packages/pip-18.1.egg-info/entry_points.txt", "/usr/lib/python3/dist-packages/pip-18.1.egg-info/not-zip-safe", "/usr/lib/python3/dist-packages/pip-18.1.egg-info/top_level.txt", "/usr/lib/python3/dist-packages/pip/__init__.py", "/usr/lib/python3/dist-packages/pip/__main__.py", "/usr/lib/python3/dist-packages/pip/_internal/__init__.py", "/usr/lib/python3/dist-packages/pip/_internal/build_env.py", "/usr/lib/python3/dist-packages/pip/_internal/cache.py", "/usr/lib/python3/dist-packages/pip/_internal/cli/__init__.py", "/usr/lib/python3/dist-packages/pip/_internal/cli/autocompletion.py", "/usr/lib/python3/dist-packages/pip/_internal/cli/base_command.py", "/usr/lib/python3/dist-packages/pip/_internal/cli/cmdoptions.py", "/usr/lib/python3/dist-packages/pip/_internal/cli/main_parser.py", "/usr/lib/python3/dist-packages/pip/_internal/cli/parser.py", "/usr/lib/python3/dist-packages/pip/_internal/cli/status_codes.py", "/usr/lib/python3/dist-packages/pip/_internal/commands/__init__.py", "/usr/lib/python3/dist-packages/pip/_internal/commands/check.py", "/usr/lib/python3/dist-packages/pip/_internal/commands/completion.py", "/usr/lib/python3/dist-packages/pip/_internal/commands/configuration.py", "/usr/lib/python3/dist-packages/pip/_internal/commands/download.py", "/usr/lib/python3/dist-packages/pip/_internal/commands/freeze.py", "/usr/lib/python3/dist-packages/pip/_internal/commands/hash.py", "/usr/lib/python3/dist-packages/pip/_internal/commands/help.py", "/usr/lib/python3/dist-packages/pip/_internal/commands/install.py", "/usr/lib/python3/dist-packages/pip/_internal/commands/list.py", "/usr/lib/python3/dist-packages/pip/_internal/commands/search.py", "/usr/lib/python3/dist-packages/pip/_internal/commands/show.py", "/usr/lib/python3/dist-packages/pip/_internal/commands/uninstall.py", "/usr/lib/python3/dist-packages/pip/_internal/commands/wheel.py", "/usr/lib/python3/dist-packages/pip/_internal/configuration.py", "/usr/lib/python3/dist-packages/pip/_internal/download.py", "/usr/lib/python3/dist-packages/pip/_internal/exceptions.py", "/usr/lib/python3/dist-packages/pip/_internal/index.py", "/usr/lib/python3/dist-packages/pip/_internal/locations.py", "/usr/lib/python3/dist-packages/pip/_internal/models/__init__.py", "/usr/lib/python3/dist-packages/pip/_internal/models/candidate.py", "/usr/lib/python3/dist-packages/pip/_internal/models/format_control.py", "/usr/lib/python3/dist-packages/pip/_internal/models/index.py", "/usr/lib/python3/dist-packages/pip/_internal/models/link.py", "/usr/lib/python3/dist-packages/pip/_internal/operations/__init__.py", "/usr/lib/python3/dist-packages/pip/_internal/operations/check.py", "/usr/lib/python3/dist-packages/pip/_internal/operations/freeze.py", "/usr/lib/python3/dist-packages/pip/_internal/operations/prepare.py", "/usr/lib/python3/dist-packages/pip/_internal/pep425tags.py", "/usr/lib/python3/dist-packages/pip/_internal/pyproject.py", "/usr/lib/python3/dist-packages/pip/_internal/req/__init__.py", "/usr/lib/python3/dist-packages/pip/_internal/req/constructors.py", "/usr/lib/python3/dist-packages/pip/_internal/req/req_file.py", "/usr/lib/python3/dist-packages/pip/_internal/req/req_install.py", "/usr/lib/python3/dist-packages/pip/_internal/req/req_set.py", "/usr/lib/python3/dist-packages/pip/_internal/req/req_tracker.py", "/usr/lib/python3/dist-packages/pip/_internal/req/req_uninstall.py", "/usr/lib/python3/dist-packages/pip/_internal/resolve.py", "/usr/lib/python3/dist-packages/pip/_internal/utils/__init__.py", "/usr/lib/python3/dist-packages/pip/_internal/utils/appdirs.py", "/usr/lib/python3/dist-packages/pip/_internal/utils/compat.py", "/usr/lib/python3/dist-packages/pip/_internal/utils/deprecation.py", "/usr/lib/python3/dist-packages/pip/_internal/utils/encoding.py", "/usr/lib/python3/dist-packages/pip/_internal/utils/filesystem.py", "/usr/lib/python3/dist-packages/pip/_internal/utils/glibc.py", "/usr/lib/python3/dist-packages/pip/_internal/utils/hashes.py", "/usr/lib/python3/dist-packages/pip/_internal/utils/logging.py", "/usr/lib/python3/dist-packages/pip/_internal/utils/misc.py", "/usr/lib/python3/dist-packages/pip/_internal/utils/models.py", "/usr/lib/python3/dist-packages/pip/_internal/utils/outdated.py", "/usr/lib/python3/dist-packages/pip/_internal/utils/packaging.py", "/usr/lib/python3/dist-packages/pip/_internal/utils/setuptools_build.py", "/usr/lib/python3/dist-packages/pip/_internal/utils/temp_dir.py", "/usr/lib/python3/dist-packages/pip/_internal/utils/typing.py", "/usr/lib/python3/dist-packages/pip/_internal/utils/ui.py", "/usr/lib/python3/dist-packages/pip/_internal/vcs/__init__.py", "/usr/lib/python3/dist-packages/pip/_internal/vcs/bazaar.py", "/usr/lib/python3/dist-packages/pip/_internal/vcs/git.py", "/usr/lib/python3/dist-packages/pip/_internal/vcs/mercurial.py", "/usr/lib/python3/dist-packages/pip/_internal/vcs/subversion.py", "/usr/lib/python3/dist-packages/pip/_internal/wheel.py", "/usr/lib/python3/dist-packages/pip/_vendor/__init__.py", "/usr/lib/python3/dist-packages/pip/_vendor/pep517/__init__.py", "/usr/lib/python3/dist-packages/pip/_vendor/pep517/_in_process.py", "/usr/lib/python3/dist-packages/pip/_vendor/pep517/check.py", "/usr/lib/python3/dist-packages/pip/_vendor/pep517/colorlog.py", "/usr/lib/python3/dist-packages/pip/_vendor/pep517/compat.py", "/usr/lib/python3/dist-packages/pip/_vendor/pep517/envbuild.py", "/usr/lib/python3/dist-packages/pip/_vendor/pep517/wrappers.py", "/usr/share/doc/python3-pip/changelog.Debian.gz", "/usr/share/doc/python3-pip/changelog.gz", "/usr/share/doc/python3-pip/copyright", "/usr/share/man/man1/pip3.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-pkg-resources@40.8.0-1", "Name": "python3-pkg-resources", "Identifier": { "PURL": "pkg:deb/debian/python3-pkg-resources@40.8.0-1?arch=all\u0026distro=debian-10.13", "UID": "ee2e8def99e802d3" }, "Version": "40.8.0", "Release": "1", "Arch": "all", "SrcName": "python-setuptools", "SrcVersion": "40.8.0", "SrcRelease": "1", "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/python3/dist-packages/pkg_resources/__init__.py", "/usr/lib/python3/dist-packages/pkg_resources/_vendor/__init__.py", "/usr/lib/python3/dist-packages/pkg_resources/_vendor/appdirs.py", "/usr/lib/python3/dist-packages/pkg_resources/_vendor/packaging/__about__.py", "/usr/lib/python3/dist-packages/pkg_resources/_vendor/packaging/__init__.py", "/usr/lib/python3/dist-packages/pkg_resources/_vendor/packaging/_compat.py", "/usr/lib/python3/dist-packages/pkg_resources/_vendor/packaging/_structures.py", "/usr/lib/python3/dist-packages/pkg_resources/_vendor/packaging/markers.py", "/usr/lib/python3/dist-packages/pkg_resources/_vendor/packaging/requirements.py", "/usr/lib/python3/dist-packages/pkg_resources/_vendor/packaging/specifiers.py", "/usr/lib/python3/dist-packages/pkg_resources/_vendor/packaging/utils.py", "/usr/lib/python3/dist-packages/pkg_resources/_vendor/packaging/version.py", "/usr/lib/python3/dist-packages/pkg_resources/_vendor/pyparsing.py", "/usr/lib/python3/dist-packages/pkg_resources/_vendor/six.py", "/usr/lib/python3/dist-packages/pkg_resources/extern/__init__.py", "/usr/lib/python3/dist-packages/pkg_resources/py31compat.py", "/usr/share/doc/python3-pkg-resources/changelog.Debian.gz", "/usr/share/doc/python3-pkg-resources/changelog.gz", "/usr/share/doc/python3-pkg-resources/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-requests@2.21.0-1+deb10u1", "Name": "python3-requests", "Identifier": { "PURL": "pkg:deb/debian/python3-requests@2.21.0-1%2Bdeb10u1?arch=all\u0026distro=debian-10.13", "UID": "a039860c2b8e7396" }, "Version": "2.21.0", "Release": "1+deb10u1", "Arch": "all", "SrcName": "requests", "SrcVersion": "2.21.0", "SrcRelease": "1+deb10u1", "Licenses": [ "Apache-2.0" ], "Maintainer": "Debian Python Modules Team \u003cpython-modules-team@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "ca-certificates@20200601~deb10u2", "python3-certifi@2018.8.24-1", "python3-chardet@3.0.4-3", "python3-idna@2.6-1+deb10u1", "python3-urllib3@1.24.1-1+deb10u2" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/python3/dist-packages/requests-2.21.0.egg-info/PKG-INFO", "/usr/lib/python3/dist-packages/requests-2.21.0.egg-info/dependency_links.txt", "/usr/lib/python3/dist-packages/requests-2.21.0.egg-info/not-zip-safe", "/usr/lib/python3/dist-packages/requests-2.21.0.egg-info/requires.txt", "/usr/lib/python3/dist-packages/requests-2.21.0.egg-info/top_level.txt", "/usr/lib/python3/dist-packages/requests/__init__.py", "/usr/lib/python3/dist-packages/requests/__version__.py", "/usr/lib/python3/dist-packages/requests/_internal_utils.py", "/usr/lib/python3/dist-packages/requests/adapters.py", "/usr/lib/python3/dist-packages/requests/api.py", "/usr/lib/python3/dist-packages/requests/auth.py", "/usr/lib/python3/dist-packages/requests/certs.py", "/usr/lib/python3/dist-packages/requests/compat.py", "/usr/lib/python3/dist-packages/requests/cookies.py", "/usr/lib/python3/dist-packages/requests/exceptions.py", "/usr/lib/python3/dist-packages/requests/help.py", "/usr/lib/python3/dist-packages/requests/hooks.py", "/usr/lib/python3/dist-packages/requests/models.py", "/usr/lib/python3/dist-packages/requests/packages.py", "/usr/lib/python3/dist-packages/requests/sessions.py", "/usr/lib/python3/dist-packages/requests/status_codes.py", "/usr/lib/python3/dist-packages/requests/structures.py", "/usr/lib/python3/dist-packages/requests/utils.py", "/usr/share/doc/python3-requests/changelog.Debian.gz", "/usr/share/doc/python3-requests/changelog.gz", "/usr/share/doc/python3-requests/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-requests-oauthlib@1.0.0-0.1", "Name": "python3-requests-oauthlib", "Identifier": { "PURL": "pkg:deb/debian/python3-requests-oauthlib@1.0.0-0.1?arch=all\u0026distro=debian-10.13", "UID": "acc0dff10277f04d" }, "Version": "1.0.0", "Release": "0.1", "Arch": "all", "SrcName": "python-requests-oauthlib", "SrcVersion": "1.0.0", "SrcRelease": "0.1", "Licenses": [ "ISC", "GPL-3.0-or-later", "GPL-3.0-only" ], "Maintainer": "Simon Fondrie-Teitler \u003csimonft@riseup.net\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "python3-oauthlib@2.1.0-1", "python3-requests@2.21.0-1+deb10u1" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/python3/dist-packages/requests_oauthlib-1.0.0.egg-info/PKG-INFO", "/usr/lib/python3/dist-packages/requests_oauthlib-1.0.0.egg-info/dependency_links.txt", "/usr/lib/python3/dist-packages/requests_oauthlib-1.0.0.egg-info/not-zip-safe", "/usr/lib/python3/dist-packages/requests_oauthlib-1.0.0.egg-info/requires.txt", "/usr/lib/python3/dist-packages/requests_oauthlib-1.0.0.egg-info/top_level.txt", "/usr/lib/python3/dist-packages/requests_oauthlib/__init__.py", "/usr/lib/python3/dist-packages/requests_oauthlib/compliance_fixes/__init__.py", "/usr/lib/python3/dist-packages/requests_oauthlib/compliance_fixes/douban.py", "/usr/lib/python3/dist-packages/requests_oauthlib/compliance_fixes/facebook.py", "/usr/lib/python3/dist-packages/requests_oauthlib/compliance_fixes/fitbit.py", "/usr/lib/python3/dist-packages/requests_oauthlib/compliance_fixes/linkedin.py", "/usr/lib/python3/dist-packages/requests_oauthlib/compliance_fixes/mailchimp.py", "/usr/lib/python3/dist-packages/requests_oauthlib/compliance_fixes/plentymarkets.py", "/usr/lib/python3/dist-packages/requests_oauthlib/compliance_fixes/slack.py", "/usr/lib/python3/dist-packages/requests_oauthlib/compliance_fixes/weibo.py", "/usr/lib/python3/dist-packages/requests_oauthlib/oauth1_auth.py", "/usr/lib/python3/dist-packages/requests_oauthlib/oauth1_session.py", "/usr/lib/python3/dist-packages/requests_oauthlib/oauth2_auth.py", "/usr/lib/python3/dist-packages/requests_oauthlib/oauth2_session.py", "/usr/share/doc/python3-requests-oauthlib/changelog.Debian.gz", "/usr/share/doc/python3-requests-oauthlib/changelog.gz", "/usr/share/doc/python3-requests-oauthlib/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-six@1.12.0-1", "Name": "python3-six", "Identifier": { "PURL": "pkg:deb/debian/python3-six@1.12.0-1?arch=all\u0026distro=debian-10.13", "UID": "448aec05c1b631c0" }, "Version": "1.12.0", "Release": "1", "Arch": "all", "SrcName": "six", "SrcVersion": "1.12.0", "SrcRelease": "1", "Licenses": [ "MIT" ], "Maintainer": "Debian Python Modules Team \u003cpython-modules-team@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/python3/dist-packages/six-1.12.0.egg-info/PKG-INFO", "/usr/lib/python3/dist-packages/six-1.12.0.egg-info/dependency_links.txt", "/usr/lib/python3/dist-packages/six-1.12.0.egg-info/top_level.txt", "/usr/lib/python3/dist-packages/six.py", "/usr/share/doc/python3-six/changelog.Debian.gz", "/usr/share/doc/python3-six/changelog.gz", "/usr/share/doc/python3-six/copyright", "/usr/share/python3/dist/python3-six" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-urllib3@1.24.1-1+deb10u2", "Name": "python3-urllib3", "Identifier": { "PURL": "pkg:deb/debian/python3-urllib3@1.24.1-1%2Bdeb10u2?arch=all\u0026distro=debian-10.13", "UID": "d6cbe2860ce83da2" }, "Version": "1.24.1", "Release": "1+deb10u2", "Arch": "all", "SrcName": "python-urllib3", "SrcVersion": "1.24.1", "SrcRelease": "1+deb10u2", "Licenses": [ "MIT", "PSF-2" ], "Maintainer": "Debian Python Modules Team \u003cpython-modules-team@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "python3-six@1.12.0-1" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/python3/dist-packages/urllib3-1.24.1.egg-info/PKG-INFO", "/usr/lib/python3/dist-packages/urllib3-1.24.1.egg-info/dependency_links.txt", "/usr/lib/python3/dist-packages/urllib3-1.24.1.egg-info/requires.txt", "/usr/lib/python3/dist-packages/urllib3-1.24.1.egg-info/top_level.txt", "/usr/lib/python3/dist-packages/urllib3/__init__.py", "/usr/lib/python3/dist-packages/urllib3/_collections.py", "/usr/lib/python3/dist-packages/urllib3/connection.py", "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", "/usr/lib/python3/dist-packages/urllib3/contrib/__init__.py", "/usr/lib/python3/dist-packages/urllib3/contrib/_appengine_environ.py", "/usr/lib/python3/dist-packages/urllib3/contrib/_securetransport/__init__.py", "/usr/lib/python3/dist-packages/urllib3/contrib/_securetransport/bindings.py", "/usr/lib/python3/dist-packages/urllib3/contrib/_securetransport/low_level.py", "/usr/lib/python3/dist-packages/urllib3/contrib/appengine.py", "/usr/lib/python3/dist-packages/urllib3/contrib/ntlmpool.py", "/usr/lib/python3/dist-packages/urllib3/contrib/pyopenssl.py", "/usr/lib/python3/dist-packages/urllib3/contrib/securetransport.py", "/usr/lib/python3/dist-packages/urllib3/contrib/socks.py", "/usr/lib/python3/dist-packages/urllib3/exceptions.py", "/usr/lib/python3/dist-packages/urllib3/fields.py", "/usr/lib/python3/dist-packages/urllib3/filepost.py", "/usr/lib/python3/dist-packages/urllib3/packages/__init__.py", "/usr/lib/python3/dist-packages/urllib3/packages/backports/__init__.py", "/usr/lib/python3/dist-packages/urllib3/packages/backports/makefile.py", "/usr/lib/python3/dist-packages/urllib3/packages/ssl_match_hostname/__init__.py", "/usr/lib/python3/dist-packages/urllib3/packages/ssl_match_hostname/_implementation.py", "/usr/lib/python3/dist-packages/urllib3/poolmanager.py", "/usr/lib/python3/dist-packages/urllib3/request.py", "/usr/lib/python3/dist-packages/urllib3/response.py", "/usr/lib/python3/dist-packages/urllib3/util/__init__.py", "/usr/lib/python3/dist-packages/urllib3/util/connection.py", "/usr/lib/python3/dist-packages/urllib3/util/queue.py", "/usr/lib/python3/dist-packages/urllib3/util/request.py", "/usr/lib/python3/dist-packages/urllib3/util/response.py", "/usr/lib/python3/dist-packages/urllib3/util/retry.py", "/usr/lib/python3/dist-packages/urllib3/util/ssl_.py", "/usr/lib/python3/dist-packages/urllib3/util/timeout.py", "/usr/lib/python3/dist-packages/urllib3/util/url.py", "/usr/lib/python3/dist-packages/urllib3/util/wait.py", "/usr/share/doc/python3-urllib3/changelog.Debian.gz", "/usr/share/doc/python3-urllib3/changelog.gz", "/usr/share/doc/python3-urllib3/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "python3-yaml@3.13-2", "Name": "python3-yaml", "Identifier": { "PURL": "pkg:deb/debian/python3-yaml@3.13-2?arch=amd64\u0026distro=debian-10.13", "UID": "8647e85f23e9f6a8" }, "Version": "3.13", "Release": "2", "Arch": "amd64", "SrcName": "pyyaml", "SrcVersion": "3.13", "SrcRelease": "2", "Maintainer": "Debian Python Modules Team \u003cpython-modules-team@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libyaml-0-2@0.2.1-1", "python3@3.7.3-1" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/lib/python3/dist-packages/PyYAML-3.13.egg-info", "/usr/lib/python3/dist-packages/_yaml.cpython-37m-x86_64-linux-gnu.so", "/usr/lib/python3/dist-packages/yaml/__init__.py", "/usr/lib/python3/dist-packages/yaml/composer.py", "/usr/lib/python3/dist-packages/yaml/constructor.py", "/usr/lib/python3/dist-packages/yaml/cyaml.py", "/usr/lib/python3/dist-packages/yaml/dumper.py", "/usr/lib/python3/dist-packages/yaml/emitter.py", "/usr/lib/python3/dist-packages/yaml/error.py", "/usr/lib/python3/dist-packages/yaml/events.py", "/usr/lib/python3/dist-packages/yaml/loader.py", "/usr/lib/python3/dist-packages/yaml/nodes.py", "/usr/lib/python3/dist-packages/yaml/parser.py", "/usr/lib/python3/dist-packages/yaml/reader.py", "/usr/lib/python3/dist-packages/yaml/representer.py", "/usr/lib/python3/dist-packages/yaml/resolver.py", "/usr/lib/python3/dist-packages/yaml/scanner.py", "/usr/lib/python3/dist-packages/yaml/serializer.py", "/usr/lib/python3/dist-packages/yaml/tokens.py", "/usr/share/doc/python3-yaml/README", "/usr/share/doc/python3-yaml/changelog.Debian.gz", "/usr/share/doc/python3-yaml/changelog.gz", "/usr/share/doc/python3-yaml/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "python3.7@3.7.3-2+deb10u7", "Name": "python3.7", "Identifier": { "PURL": "pkg:deb/debian/python3.7@3.7.3-2%2Bdeb10u7?arch=amd64\u0026distro=debian-10.13", "UID": "1724fa86a0cd088d" }, "Version": "3.7.3", "Release": "2+deb10u7", "Arch": "amd64", "SrcName": "python3.7", "SrcVersion": "3.7.3", "SrcRelease": "2+deb10u7", "Licenses": [ "GPL-2.0-only", "text://Redistribution and use in source and binary forms, with or without", "text://By obtaining, using, and/or copying this software and/or its", "text://Permission to use, copy, modify, and distribute this software and", "text://This software is provided 'as-is', without any express or implied", "text://Permission is hereby granted, free of charge, to any person", "text://Permission is hereby granted, free of charge, to any person obtaining", "text://Permission to use, copy, modify, and distribute this software and its", "text://This software is provided as-is, without express or implied", "text://Permission to use, copy, modify, and distribute this software for any", "text://* Permission to use this software in any way is granted without" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libpython3.7-stdlib@3.7.3-2+deb10u7", "mime-support@3.62", "python3.7-minimal@3.7.3-2+deb10u7" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/bin/pydoc3.7", "/usr/bin/pygettext3.7", "/usr/share/applications/python3.7.desktop", "/usr/share/doc/python3.7/ACKS.gz", "/usr/share/doc/python3.7/NEWS.gz", "/usr/share/doc/python3.7/README.Debian", "/usr/share/doc/python3.7/README.rst.gz", "/usr/share/doc/python3.7/changelog.Debian.gz", "/usr/share/doc/python3.7/copyright", "/usr/share/lintian/overrides/python3.7", "/usr/share/man/man1/pdb3.7.1.gz", "/usr/share/man/man1/pydoc3.7.1.gz", "/usr/share/man/man1/pygettext3.7.1.gz", "/usr/share/man/man1/pysetup3.7.1.gz", "/usr/share/pixmaps/python3.7.xpm" ], "AnalyzedBy": "dpkg" }, { "ID": "python3.7-minimal@3.7.3-2+deb10u7", "Name": "python3.7-minimal", "Identifier": { "PURL": "pkg:deb/debian/python3.7-minimal@3.7.3-2%2Bdeb10u7?arch=amd64\u0026distro=debian-10.13", "UID": "ef82f827b25ff588" }, "Version": "3.7.3", "Release": "2+deb10u7", "Arch": "amd64", "SrcName": "python3.7", "SrcVersion": "3.7.3", "SrcRelease": "2+deb10u7", "Licenses": [ "GPL-2.0-only", "text://Redistribution and use in source and binary forms, with or without", "text://By obtaining, using, and/or copying this software and/or its", "text://Permission to use, copy, modify, and distribute this software and", "text://This software is provided 'as-is', without any express or implied", "text://Permission is hereby granted, free of charge, to any person", "text://Permission is hereby granted, free of charge, to any person obtaining", "text://Permission to use, copy, modify, and distribute this software and its", "text://This software is provided as-is, without express or implied", "text://Permission to use, copy, modify, and distribute this software for any", "text://* Permission to use this software in any way is granted without" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libexpat1@2.2.6-2+deb10u7", "libpython3.7-minimal@3.7.3-2+deb10u7", "zlib1g@1:1.2.11.dfsg-1+deb10u2" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/bin/python3.7", "/usr/bin/python3.7m", "/usr/share/binfmts/python3.7", "/usr/share/doc/python3.7-minimal/README.Debian", "/usr/share/doc/python3.7-minimal/changelog.Debian.gz", "/usr/share/doc/python3.7-minimal/copyright", "/usr/share/lintian/overrides/python3.7-minimal", "/usr/share/man/man1/python3.7.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "readline-common@7.0-5", "Name": "readline-common", "Identifier": { "PURL": "pkg:deb/debian/readline-common@7.0-5?arch=all\u0026distro=debian-10.13", "UID": "26112de729cb4705" }, "Version": "7.0", "Release": "5", "Arch": "all", "SrcName": "readline", "SrcVersion": "7.0", "SrcRelease": "5", "Licenses": [ "GPL-3.0-only", "GFDL-1.3-or-later" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "dpkg@1.19.8" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/share/doc/readline-common/changelog.Debian.gz", "/usr/share/doc/readline-common/changelog.gz", "/usr/share/doc/readline-common/copyright", "/usr/share/doc/readline-common/inputrc.arrows", "/usr/share/info/rluserman.info.gz", "/usr/share/lintian/overrides/readline-common", "/usr/share/man/man3/history.3readline.gz", "/usr/share/man/man3/readline.3readline.gz", "/usr/share/readline/inputrc" ], "AnalyzedBy": "dpkg" }, { "ID": "sed@4.7-1", "Name": "sed", "Identifier": { "PURL": "pkg:deb/debian/sed@4.7-1?arch=amd64\u0026distro=debian-10.13", "UID": "6bbe705ef55045f1" }, "Version": "4.7", "Release": "1", "Arch": "amd64", "SrcName": "sed", "SrcVersion": "4.7", "SrcRelease": "1", "Licenses": [ "GPL-3.0-only" ], "Maintainer": "Clint Adams \u003cclint@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/bin/sed", "/usr/share/doc/sed/AUTHORS", "/usr/share/doc/sed/BUGS.gz", "/usr/share/doc/sed/NEWS.gz", "/usr/share/doc/sed/README", "/usr/share/doc/sed/THANKS.gz", "/usr/share/doc/sed/changelog.Debian.gz", "/usr/share/doc/sed/changelog.gz", "/usr/share/doc/sed/copyright", "/usr/share/doc/sed/examples/dc.sed.gz", "/usr/share/doc/sed/sedfaq.txt.gz", "/usr/share/info/sed.info.gz", "/usr/share/locale/af/LC_MESSAGES/sed.mo", "/usr/share/locale/ast/LC_MESSAGES/sed.mo", "/usr/share/locale/bg/LC_MESSAGES/sed.mo", "/usr/share/locale/ca/LC_MESSAGES/sed.mo", "/usr/share/locale/cs/LC_MESSAGES/sed.mo", "/usr/share/locale/da/LC_MESSAGES/sed.mo", "/usr/share/locale/de/LC_MESSAGES/sed.mo", "/usr/share/locale/el/LC_MESSAGES/sed.mo", "/usr/share/locale/eo/LC_MESSAGES/sed.mo", "/usr/share/locale/es/LC_MESSAGES/sed.mo", "/usr/share/locale/et/LC_MESSAGES/sed.mo", "/usr/share/locale/eu/LC_MESSAGES/sed.mo", "/usr/share/locale/fi/LC_MESSAGES/sed.mo", "/usr/share/locale/fr/LC_MESSAGES/sed.mo", "/usr/share/locale/ga/LC_MESSAGES/sed.mo", "/usr/share/locale/gl/LC_MESSAGES/sed.mo", "/usr/share/locale/he/LC_MESSAGES/sed.mo", "/usr/share/locale/hr/LC_MESSAGES/sed.mo", "/usr/share/locale/hu/LC_MESSAGES/sed.mo", "/usr/share/locale/id/LC_MESSAGES/sed.mo", "/usr/share/locale/it/LC_MESSAGES/sed.mo", "/usr/share/locale/ja/LC_MESSAGES/sed.mo", "/usr/share/locale/ko/LC_MESSAGES/sed.mo", "/usr/share/locale/nb/LC_MESSAGES/sed.mo", "/usr/share/locale/nl/LC_MESSAGES/sed.mo", "/usr/share/locale/pl/LC_MESSAGES/sed.mo", "/usr/share/locale/pt/LC_MESSAGES/sed.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/sed.mo", "/usr/share/locale/ro/LC_MESSAGES/sed.mo", "/usr/share/locale/ru/LC_MESSAGES/sed.mo", "/usr/share/locale/sk/LC_MESSAGES/sed.mo", "/usr/share/locale/sl/LC_MESSAGES/sed.mo", "/usr/share/locale/sr/LC_MESSAGES/sed.mo", "/usr/share/locale/sv/LC_MESSAGES/sed.mo", "/usr/share/locale/tr/LC_MESSAGES/sed.mo", "/usr/share/locale/uk/LC_MESSAGES/sed.mo", "/usr/share/locale/vi/LC_MESSAGES/sed.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/sed.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/sed.mo", "/usr/share/man/man1/sed.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "sqlite3@3.27.2-3+deb10u2", "Name": "sqlite3", "Identifier": { "PURL": "pkg:deb/debian/sqlite3@3.27.2-3%2Bdeb10u2?arch=amd64\u0026distro=debian-10.13", "UID": "1726dfbe6ece555a" }, "Version": "3.27.2", "Release": "3+deb10u2", "Arch": "amd64", "SrcName": "sqlite3", "SrcVersion": "3.27.2", "SrcRelease": "3+deb10u2", "Licenses": [ "public-domain", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Laszlo Boszormenyi (GCS) \u003cgcs@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3", "libreadline7@7.0-5", "libsqlite3-0@3.27.2-3+deb10u2", "zlib1g@1:1.2.11.dfsg-1+deb10u2" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/bin/sqldiff", "/usr/bin/sqlite3", "/usr/share/doc/sqlite3/changelog.Debian.gz", "/usr/share/doc/sqlite3/changelog.gz", "/usr/share/doc/sqlite3/changelog.html.gz", "/usr/share/doc/sqlite3/copyright", "/usr/share/man/man1/sqlite3.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "sudo@1.8.27-1+deb10u6", "Name": "sudo", "Identifier": { "PURL": "pkg:deb/debian/sudo@1.8.27-1%2Bdeb10u6?arch=amd64\u0026distro=debian-10.13", "UID": "e3ea830ef3426447" }, "Version": "1.8.27", "Release": "1+deb10u6", "Arch": "amd64", "SrcName": "sudo", "SrcVersion": "1.8.27", "SrcRelease": "1+deb10u6", "Maintainer": "Bdale Garbee \u003cbdale@gag.com\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libaudit1@1:2.8.4-3", "libc6@2.28-10+deb10u3", "libpam-modules@1.3.1-5", "libpam0g@1.3.1-5", "libselinux1@2.8-1+b1", "lsb-base@10.2019051400" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "InstalledFiles": [ "/usr/bin/cvtsudoers", "/usr/bin/sudo", "/usr/bin/sudoreplay", "/usr/include/sudo_plugin.h", "/usr/lib/sudo/group_file.la", "/usr/lib/sudo/group_file.so", "/usr/lib/sudo/libsudo_util.la", "/usr/lib/sudo/libsudo_util.so.0.0.0", "/usr/lib/sudo/sesh", "/usr/lib/sudo/sudo_noexec.la", "/usr/lib/sudo/sudo_noexec.so", "/usr/lib/sudo/sudoers.la", "/usr/lib/sudo/sudoers.so", "/usr/lib/sudo/system_group.la", "/usr/lib/sudo/system_group.so", "/usr/lib/tmpfiles.d/sudo.conf", "/usr/sbin/visudo", "/usr/share/doc/sudo/CONTRIBUTORS.gz", "/usr/share/doc/sudo/HISTORY", "/usr/share/doc/sudo/NEWS.Debian.gz", "/usr/share/doc/sudo/NEWS.gz", "/usr/share/doc/sudo/OPTIONS", "/usr/share/doc/sudo/README", "/usr/share/doc/sudo/README.Debian", "/usr/share/doc/sudo/TROUBLESHOOTING.gz", "/usr/share/doc/sudo/UPGRADE.gz", "/usr/share/doc/sudo/changelog.Debian.gz", "/usr/share/doc/sudo/changelog.gz", "/usr/share/doc/sudo/copyright", "/usr/share/doc/sudo/examples/pam.conf", "/usr/share/doc/sudo/examples/sudo.conf", "/usr/share/doc/sudo/examples/sudoers.dist", "/usr/share/doc/sudo/examples/sudoers.gz", "/usr/share/doc/sudo/examples/syslog.conf", "/usr/share/lintian/overrides/sudo", "/usr/share/locale/ast/LC_MESSAGES/sudo.mo", "/usr/share/locale/ca/LC_MESSAGES/sudo.mo", "/usr/share/locale/ca/LC_MESSAGES/sudoers.mo", "/usr/share/locale/cs/LC_MESSAGES/sudo.mo", "/usr/share/locale/cs/LC_MESSAGES/sudoers.mo", "/usr/share/locale/da/LC_MESSAGES/sudo.mo", "/usr/share/locale/da/LC_MESSAGES/sudoers.mo", "/usr/share/locale/de/LC_MESSAGES/sudo.mo", "/usr/share/locale/de/LC_MESSAGES/sudoers.mo", "/usr/share/locale/el/LC_MESSAGES/sudoers.mo", "/usr/share/locale/eo/LC_MESSAGES/sudo.mo", "/usr/share/locale/eo/LC_MESSAGES/sudoers.mo", "/usr/share/locale/es/LC_MESSAGES/sudo.mo", "/usr/share/locale/eu/LC_MESSAGES/sudo.mo", "/usr/share/locale/eu/LC_MESSAGES/sudoers.mo", "/usr/share/locale/fi/LC_MESSAGES/sudo.mo", "/usr/share/locale/fi/LC_MESSAGES/sudoers.mo", "/usr/share/locale/fr/LC_MESSAGES/sudo.mo", "/usr/share/locale/fr/LC_MESSAGES/sudoers.mo", "/usr/share/locale/fur/LC_MESSAGES/sudo.mo", "/usr/share/locale/fur/LC_MESSAGES/sudoers.mo", "/usr/share/locale/gl/LC_MESSAGES/sudo.mo", "/usr/share/locale/hr/LC_MESSAGES/sudo.mo", "/usr/share/locale/hr/LC_MESSAGES/sudoers.mo", "/usr/share/locale/hu/LC_MESSAGES/sudo.mo", "/usr/share/locale/hu/LC_MESSAGES/sudoers.mo", "/usr/share/locale/it/LC_MESSAGES/sudo.mo", "/usr/share/locale/it/LC_MESSAGES/sudoers.mo", "/usr/share/locale/ja/LC_MESSAGES/sudo.mo", "/usr/share/locale/ja/LC_MESSAGES/sudoers.mo", "/usr/share/locale/ko/LC_MESSAGES/sudo.mo", "/usr/share/locale/ko/LC_MESSAGES/sudoers.mo", "/usr/share/locale/lt/LC_MESSAGES/sudoers.mo", "/usr/share/locale/nb/LC_MESSAGES/sudo.mo", "/usr/share/locale/nb/LC_MESSAGES/sudoers.mo", "/usr/share/locale/nl/LC_MESSAGES/sudo.mo", "/usr/share/locale/nl/LC_MESSAGES/sudoers.mo", "/usr/share/locale/nn/LC_MESSAGES/sudo.mo", "/usr/share/locale/pl/LC_MESSAGES/sudo.mo", "/usr/share/locale/pl/LC_MESSAGES/sudoers.mo", "/usr/share/locale/pt/LC_MESSAGES/sudo.mo", "/usr/share/locale/pt/LC_MESSAGES/sudoers.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/sudo.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/sudoers.mo", "/usr/share/locale/ru/LC_MESSAGES/sudo.mo", "/usr/share/locale/ru/LC_MESSAGES/sudoers.mo", "/usr/share/locale/sk/LC_MESSAGES/sudo.mo", "/usr/share/locale/sk/LC_MESSAGES/sudoers.mo", "/usr/share/locale/sl/LC_MESSAGES/sudo.mo", "/usr/share/locale/sl/LC_MESSAGES/sudoers.mo", "/usr/share/locale/sr/LC_MESSAGES/sudo.mo", "/usr/share/locale/sr/LC_MESSAGES/sudoers.mo", "/usr/share/locale/sv/LC_MESSAGES/sudo.mo", "/usr/share/locale/sv/LC_MESSAGES/sudoers.mo", "/usr/share/locale/tr/LC_MESSAGES/sudo.mo", "/usr/share/locale/tr/LC_MESSAGES/sudoers.mo", "/usr/share/locale/uk/LC_MESSAGES/sudo.mo", "/usr/share/locale/uk/LC_MESSAGES/sudoers.mo", "/usr/share/locale/vi/LC_MESSAGES/sudo.mo", "/usr/share/locale/vi/LC_MESSAGES/sudoers.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/sudo.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/sudoers.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/sudo.mo", "/usr/share/man/man1/cvtsudoers.1.gz", "/usr/share/man/man5/sudo.conf.5.gz", "/usr/share/man/man5/sudoers.5.gz", "/usr/share/man/man5/sudoers_timestamp.5.gz", "/usr/share/man/man8/sudo.8.gz", "/usr/share/man/man8/sudo_plugin.8.gz", "/usr/share/man/man8/sudoreplay.8.gz", "/usr/share/man/man8/visudo.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "sysvinit-utils@2.93-8", "Name": "sysvinit-utils", "Identifier": { "PURL": "pkg:deb/debian/sysvinit-utils@2.93-8?arch=amd64\u0026distro=debian-10.13", "UID": "ed63b2b24283e0a2" }, "Version": "2.93", "Release": "8", "Arch": "amd64", "SrcName": "sysvinit", "SrcVersion": "2.93", "SrcRelease": "8", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian sysvinit maintainers \u003cdebian-init-diversity@chiark.greenend.org.uk\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "init-system-helpers@1.56+nmu1", "libc6@2.28-10+deb10u3", "util-linux@2.33.1-0.1+deb10u1" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/init/init-d-script", "/lib/init/vars.sh", "/sbin/fstab-decode", "/sbin/killall5", "/usr/share/doc/sysvinit-utils/NEWS.Debian.gz", "/usr/share/doc/sysvinit-utils/changelog.Debian.gz", "/usr/share/doc/sysvinit-utils/changelog.gz", "/usr/share/doc/sysvinit-utils/copyright", "/usr/share/man/man5/init-d-script.5.gz", "/usr/share/man/man8/fstab-decode.8.gz", "/usr/share/man/man8/killall5.8.gz", "/usr/share/man/man8/pidof.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "tar@1.30+dfsg-6+deb10u1", "Name": "tar", "Identifier": { "PURL": "pkg:deb/debian/tar@1.30%2Bdfsg-6%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "cfaf7001a0552471" }, "Version": "1.30+dfsg", "Release": "6+deb10u1", "Arch": "amd64", "SrcName": "tar", "SrcVersion": "1.30+dfsg", "SrcRelease": "6+deb10u1", "Licenses": [ "GPL-3.0-only", "GPL-2.0-only" ], "Maintainer": "Bdale Garbee \u003cbdale@gag.com\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/bin/tar", "/usr/lib/mime/packages/tar", "/usr/sbin/rmt-tar", "/usr/sbin/tarcat", "/usr/share/doc/tar/AUTHORS", "/usr/share/doc/tar/NEWS.gz", "/usr/share/doc/tar/README.Debian", "/usr/share/doc/tar/THANKS.gz", "/usr/share/doc/tar/changelog.1.gz", "/usr/share/doc/tar/changelog.Debian.gz", "/usr/share/doc/tar/changelog.gz", "/usr/share/doc/tar/copyright", "/usr/share/locale/bg/LC_MESSAGES/tar.mo", "/usr/share/locale/ca/LC_MESSAGES/tar.mo", "/usr/share/locale/cs/LC_MESSAGES/tar.mo", "/usr/share/locale/da/LC_MESSAGES/tar.mo", "/usr/share/locale/de/LC_MESSAGES/tar.mo", "/usr/share/locale/el/LC_MESSAGES/tar.mo", "/usr/share/locale/eo/LC_MESSAGES/tar.mo", "/usr/share/locale/es/LC_MESSAGES/tar.mo", "/usr/share/locale/et/LC_MESSAGES/tar.mo", "/usr/share/locale/eu/LC_MESSAGES/tar.mo", "/usr/share/locale/fi/LC_MESSAGES/tar.mo", "/usr/share/locale/fr/LC_MESSAGES/tar.mo", "/usr/share/locale/ga/LC_MESSAGES/tar.mo", "/usr/share/locale/gl/LC_MESSAGES/tar.mo", "/usr/share/locale/hr/LC_MESSAGES/tar.mo", "/usr/share/locale/hu/LC_MESSAGES/tar.mo", "/usr/share/locale/id/LC_MESSAGES/tar.mo", "/usr/share/locale/it/LC_MESSAGES/tar.mo", "/usr/share/locale/ja/LC_MESSAGES/tar.mo", "/usr/share/locale/ko/LC_MESSAGES/tar.mo", "/usr/share/locale/ky/LC_MESSAGES/tar.mo", "/usr/share/locale/ms/LC_MESSAGES/tar.mo", "/usr/share/locale/nb/LC_MESSAGES/tar.mo", "/usr/share/locale/nl/LC_MESSAGES/tar.mo", "/usr/share/locale/pl/LC_MESSAGES/tar.mo", "/usr/share/locale/pt/LC_MESSAGES/tar.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/tar.mo", "/usr/share/locale/ro/LC_MESSAGES/tar.mo", "/usr/share/locale/ru/LC_MESSAGES/tar.mo", "/usr/share/locale/sk/LC_MESSAGES/tar.mo", "/usr/share/locale/sl/LC_MESSAGES/tar.mo", "/usr/share/locale/sr/LC_MESSAGES/tar.mo", "/usr/share/locale/sv/LC_MESSAGES/tar.mo", "/usr/share/locale/tr/LC_MESSAGES/tar.mo", "/usr/share/locale/uk/LC_MESSAGES/tar.mo", "/usr/share/locale/vi/LC_MESSAGES/tar.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/tar.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/tar.mo", "/usr/share/man/man1/tar.1.gz", "/usr/share/man/man1/tarcat.1.gz", "/usr/share/man/man8/rmt-tar.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "tzdata@2024a-0+deb10u1", "Name": "tzdata", "Identifier": { "PURL": "pkg:deb/debian/tzdata@2024a-0%2Bdeb10u1?arch=all\u0026distro=debian-10.13", "UID": "7b5910060ba02257" }, "Version": "2024a", "Release": "0+deb10u1", "Arch": "all", "SrcName": "tzdata", "SrcVersion": "2024a", "SrcRelease": "0+deb10u1", "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debconf@1.5.71+deb10u1" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/usr/sbin/tzconfig", "/usr/share/doc/tzdata/README.Debian", "/usr/share/doc/tzdata/changelog.Debian.gz", "/usr/share/doc/tzdata/changelog.gz", "/usr/share/doc/tzdata/copyright", "/usr/share/zoneinfo/Africa/Abidjan", "/usr/share/zoneinfo/Africa/Accra", "/usr/share/zoneinfo/Africa/Addis_Ababa", "/usr/share/zoneinfo/Africa/Algiers", "/usr/share/zoneinfo/Africa/Asmara", "/usr/share/zoneinfo/Africa/Bamako", "/usr/share/zoneinfo/Africa/Bangui", "/usr/share/zoneinfo/Africa/Banjul", "/usr/share/zoneinfo/Africa/Bissau", "/usr/share/zoneinfo/Africa/Blantyre", "/usr/share/zoneinfo/Africa/Brazzaville", "/usr/share/zoneinfo/Africa/Bujumbura", "/usr/share/zoneinfo/Africa/Cairo", "/usr/share/zoneinfo/Africa/Casablanca", "/usr/share/zoneinfo/Africa/Ceuta", "/usr/share/zoneinfo/Africa/Conakry", "/usr/share/zoneinfo/Africa/Dakar", "/usr/share/zoneinfo/Africa/Dar_es_Salaam", "/usr/share/zoneinfo/Africa/Djibouti", "/usr/share/zoneinfo/Africa/Douala", "/usr/share/zoneinfo/Africa/El_Aaiun", "/usr/share/zoneinfo/Africa/Freetown", "/usr/share/zoneinfo/Africa/Gaborone", "/usr/share/zoneinfo/Africa/Harare", "/usr/share/zoneinfo/Africa/Johannesburg", "/usr/share/zoneinfo/Africa/Juba", "/usr/share/zoneinfo/Africa/Kampala", "/usr/share/zoneinfo/Africa/Khartoum", "/usr/share/zoneinfo/Africa/Kigali", "/usr/share/zoneinfo/Africa/Kinshasa", "/usr/share/zoneinfo/Africa/Lagos", "/usr/share/zoneinfo/Africa/Libreville", "/usr/share/zoneinfo/Africa/Lome", "/usr/share/zoneinfo/Africa/Luanda", "/usr/share/zoneinfo/Africa/Lubumbashi", "/usr/share/zoneinfo/Africa/Lusaka", "/usr/share/zoneinfo/Africa/Malabo", "/usr/share/zoneinfo/Africa/Maputo", "/usr/share/zoneinfo/Africa/Maseru", "/usr/share/zoneinfo/Africa/Mbabane", "/usr/share/zoneinfo/Africa/Mogadishu", "/usr/share/zoneinfo/Africa/Monrovia", "/usr/share/zoneinfo/Africa/Nairobi", "/usr/share/zoneinfo/Africa/Ndjamena", "/usr/share/zoneinfo/Africa/Niamey", "/usr/share/zoneinfo/Africa/Nouakchott", "/usr/share/zoneinfo/Africa/Ouagadougou", "/usr/share/zoneinfo/Africa/Porto-Novo", "/usr/share/zoneinfo/Africa/Sao_Tome", "/usr/share/zoneinfo/Africa/Tripoli", "/usr/share/zoneinfo/Africa/Tunis", "/usr/share/zoneinfo/Africa/Windhoek", "/usr/share/zoneinfo/America/Adak", "/usr/share/zoneinfo/America/Anchorage", "/usr/share/zoneinfo/America/Anguilla", "/usr/share/zoneinfo/America/Antigua", "/usr/share/zoneinfo/America/Araguaina", "/usr/share/zoneinfo/America/Argentina/Buenos_Aires", "/usr/share/zoneinfo/America/Argentina/Catamarca", "/usr/share/zoneinfo/America/Argentina/Cordoba", "/usr/share/zoneinfo/America/Argentina/Jujuy", "/usr/share/zoneinfo/America/Argentina/La_Rioja", "/usr/share/zoneinfo/America/Argentina/Mendoza", "/usr/share/zoneinfo/America/Argentina/Rio_Gallegos", "/usr/share/zoneinfo/America/Argentina/Salta", "/usr/share/zoneinfo/America/Argentina/San_Juan", "/usr/share/zoneinfo/America/Argentina/San_Luis", "/usr/share/zoneinfo/America/Argentina/Tucuman", "/usr/share/zoneinfo/America/Argentina/Ushuaia", "/usr/share/zoneinfo/America/Aruba", "/usr/share/zoneinfo/America/Asuncion", "/usr/share/zoneinfo/America/Atikokan", "/usr/share/zoneinfo/America/Bahia", "/usr/share/zoneinfo/America/Bahia_Banderas", "/usr/share/zoneinfo/America/Barbados", "/usr/share/zoneinfo/America/Belem", "/usr/share/zoneinfo/America/Belize", "/usr/share/zoneinfo/America/Blanc-Sablon", "/usr/share/zoneinfo/America/Boa_Vista", "/usr/share/zoneinfo/America/Bogota", "/usr/share/zoneinfo/America/Boise", "/usr/share/zoneinfo/America/Cambridge_Bay", "/usr/share/zoneinfo/America/Campo_Grande", "/usr/share/zoneinfo/America/Cancun", "/usr/share/zoneinfo/America/Caracas", "/usr/share/zoneinfo/America/Cayenne", "/usr/share/zoneinfo/America/Cayman", "/usr/share/zoneinfo/America/Chicago", "/usr/share/zoneinfo/America/Chihuahua", "/usr/share/zoneinfo/America/Ciudad_Juarez", "/usr/share/zoneinfo/America/Costa_Rica", "/usr/share/zoneinfo/America/Creston", "/usr/share/zoneinfo/America/Cuiaba", "/usr/share/zoneinfo/America/Curacao", "/usr/share/zoneinfo/America/Danmarkshavn", "/usr/share/zoneinfo/America/Dawson", "/usr/share/zoneinfo/America/Dawson_Creek", "/usr/share/zoneinfo/America/Denver", "/usr/share/zoneinfo/America/Detroit", "/usr/share/zoneinfo/America/Dominica", "/usr/share/zoneinfo/America/Edmonton", "/usr/share/zoneinfo/America/Eirunepe", "/usr/share/zoneinfo/America/El_Salvador", "/usr/share/zoneinfo/America/Fort_Nelson", "/usr/share/zoneinfo/America/Fortaleza", "/usr/share/zoneinfo/America/Glace_Bay", "/usr/share/zoneinfo/America/Goose_Bay", "/usr/share/zoneinfo/America/Grand_Turk", "/usr/share/zoneinfo/America/Grenada", "/usr/share/zoneinfo/America/Guadeloupe", "/usr/share/zoneinfo/America/Guatemala", "/usr/share/zoneinfo/America/Guayaquil", "/usr/share/zoneinfo/America/Guyana", "/usr/share/zoneinfo/America/Halifax", "/usr/share/zoneinfo/America/Havana", "/usr/share/zoneinfo/America/Hermosillo", "/usr/share/zoneinfo/America/Indiana/Indianapolis", "/usr/share/zoneinfo/America/Indiana/Knox", "/usr/share/zoneinfo/America/Indiana/Marengo", "/usr/share/zoneinfo/America/Indiana/Petersburg", "/usr/share/zoneinfo/America/Indiana/Tell_City", "/usr/share/zoneinfo/America/Indiana/Vevay", "/usr/share/zoneinfo/America/Indiana/Vincennes", "/usr/share/zoneinfo/America/Indiana/Winamac", "/usr/share/zoneinfo/America/Inuvik", "/usr/share/zoneinfo/America/Iqaluit", "/usr/share/zoneinfo/America/Jamaica", "/usr/share/zoneinfo/America/Juneau", "/usr/share/zoneinfo/America/Kentucky/Louisville", "/usr/share/zoneinfo/America/Kentucky/Monticello", "/usr/share/zoneinfo/America/La_Paz", "/usr/share/zoneinfo/America/Lima", "/usr/share/zoneinfo/America/Los_Angeles", "/usr/share/zoneinfo/America/Maceio", "/usr/share/zoneinfo/America/Managua", "/usr/share/zoneinfo/America/Manaus", "/usr/share/zoneinfo/America/Martinique", "/usr/share/zoneinfo/America/Matamoros", "/usr/share/zoneinfo/America/Mazatlan", "/usr/share/zoneinfo/America/Menominee", "/usr/share/zoneinfo/America/Merida", "/usr/share/zoneinfo/America/Metlakatla", "/usr/share/zoneinfo/America/Mexico_City", "/usr/share/zoneinfo/America/Miquelon", "/usr/share/zoneinfo/America/Moncton", "/usr/share/zoneinfo/America/Monterrey", "/usr/share/zoneinfo/America/Montevideo", "/usr/share/zoneinfo/America/Montserrat", "/usr/share/zoneinfo/America/Nassau", "/usr/share/zoneinfo/America/New_York", "/usr/share/zoneinfo/America/Nome", "/usr/share/zoneinfo/America/Noronha", "/usr/share/zoneinfo/America/North_Dakota/Beulah", "/usr/share/zoneinfo/America/North_Dakota/Center", "/usr/share/zoneinfo/America/North_Dakota/New_Salem", "/usr/share/zoneinfo/America/Nuuk", "/usr/share/zoneinfo/America/Ojinaga", "/usr/share/zoneinfo/America/Panama", "/usr/share/zoneinfo/America/Paramaribo", "/usr/share/zoneinfo/America/Phoenix", "/usr/share/zoneinfo/America/Port-au-Prince", "/usr/share/zoneinfo/America/Port_of_Spain", "/usr/share/zoneinfo/America/Porto_Velho", "/usr/share/zoneinfo/America/Puerto_Rico", "/usr/share/zoneinfo/America/Punta_Arenas", "/usr/share/zoneinfo/America/Rankin_Inlet", "/usr/share/zoneinfo/America/Recife", "/usr/share/zoneinfo/America/Regina", "/usr/share/zoneinfo/America/Resolute", "/usr/share/zoneinfo/America/Rio_Branco", "/usr/share/zoneinfo/America/Santarem", "/usr/share/zoneinfo/America/Santiago", "/usr/share/zoneinfo/America/Santo_Domingo", "/usr/share/zoneinfo/America/Sao_Paulo", "/usr/share/zoneinfo/America/Scoresbysund", "/usr/share/zoneinfo/America/Sitka", "/usr/share/zoneinfo/America/St_Johns", "/usr/share/zoneinfo/America/St_Kitts", "/usr/share/zoneinfo/America/St_Lucia", "/usr/share/zoneinfo/America/St_Thomas", "/usr/share/zoneinfo/America/St_Vincent", "/usr/share/zoneinfo/America/Swift_Current", "/usr/share/zoneinfo/America/Tegucigalpa", "/usr/share/zoneinfo/America/Thule", "/usr/share/zoneinfo/America/Tijuana", "/usr/share/zoneinfo/America/Toronto", "/usr/share/zoneinfo/America/Tortola", "/usr/share/zoneinfo/America/Vancouver", "/usr/share/zoneinfo/America/Whitehorse", "/usr/share/zoneinfo/America/Winnipeg", "/usr/share/zoneinfo/America/Yakutat", "/usr/share/zoneinfo/Antarctica/Casey", "/usr/share/zoneinfo/Antarctica/Davis", "/usr/share/zoneinfo/Antarctica/DumontDUrville", "/usr/share/zoneinfo/Antarctica/Macquarie", "/usr/share/zoneinfo/Antarctica/Mawson", "/usr/share/zoneinfo/Antarctica/McMurdo", "/usr/share/zoneinfo/Antarctica/Palmer", "/usr/share/zoneinfo/Antarctica/Rothera", "/usr/share/zoneinfo/Antarctica/Syowa", "/usr/share/zoneinfo/Antarctica/Troll", "/usr/share/zoneinfo/Antarctica/Vostok", "/usr/share/zoneinfo/Asia/Aden", "/usr/share/zoneinfo/Asia/Almaty", "/usr/share/zoneinfo/Asia/Amman", "/usr/share/zoneinfo/Asia/Anadyr", "/usr/share/zoneinfo/Asia/Aqtau", "/usr/share/zoneinfo/Asia/Aqtobe", "/usr/share/zoneinfo/Asia/Ashgabat", "/usr/share/zoneinfo/Asia/Atyrau", "/usr/share/zoneinfo/Asia/Baghdad", "/usr/share/zoneinfo/Asia/Bahrain", "/usr/share/zoneinfo/Asia/Baku", "/usr/share/zoneinfo/Asia/Bangkok", "/usr/share/zoneinfo/Asia/Barnaul", "/usr/share/zoneinfo/Asia/Beirut", "/usr/share/zoneinfo/Asia/Bishkek", "/usr/share/zoneinfo/Asia/Brunei", "/usr/share/zoneinfo/Asia/Chita", "/usr/share/zoneinfo/Asia/Choibalsan", "/usr/share/zoneinfo/Asia/Colombo", "/usr/share/zoneinfo/Asia/Damascus", "/usr/share/zoneinfo/Asia/Dhaka", "/usr/share/zoneinfo/Asia/Dili", "/usr/share/zoneinfo/Asia/Dubai", "/usr/share/zoneinfo/Asia/Dushanbe", "/usr/share/zoneinfo/Asia/Famagusta", "/usr/share/zoneinfo/Asia/Gaza", "/usr/share/zoneinfo/Asia/Hebron", "/usr/share/zoneinfo/Asia/Ho_Chi_Minh", "/usr/share/zoneinfo/Asia/Hong_Kong", "/usr/share/zoneinfo/Asia/Hovd", "/usr/share/zoneinfo/Asia/Irkutsk", "/usr/share/zoneinfo/Asia/Jakarta", "/usr/share/zoneinfo/Asia/Jayapura", "/usr/share/zoneinfo/Asia/Jerusalem", "/usr/share/zoneinfo/Asia/Kabul", "/usr/share/zoneinfo/Asia/Kamchatka", "/usr/share/zoneinfo/Asia/Karachi", "/usr/share/zoneinfo/Asia/Kathmandu", "/usr/share/zoneinfo/Asia/Khandyga", "/usr/share/zoneinfo/Asia/Kolkata", "/usr/share/zoneinfo/Asia/Krasnoyarsk", "/usr/share/zoneinfo/Asia/Kuala_Lumpur", "/usr/share/zoneinfo/Asia/Kuching", "/usr/share/zoneinfo/Asia/Kuwait", "/usr/share/zoneinfo/Asia/Macau", "/usr/share/zoneinfo/Asia/Magadan", "/usr/share/zoneinfo/Asia/Makassar", "/usr/share/zoneinfo/Asia/Manila", "/usr/share/zoneinfo/Asia/Muscat", "/usr/share/zoneinfo/Asia/Nicosia", "/usr/share/zoneinfo/Asia/Novokuznetsk", "/usr/share/zoneinfo/Asia/Novosibirsk", "/usr/share/zoneinfo/Asia/Omsk", "/usr/share/zoneinfo/Asia/Oral", "/usr/share/zoneinfo/Asia/Phnom_Penh", "/usr/share/zoneinfo/Asia/Pontianak", "/usr/share/zoneinfo/Asia/Pyongyang", "/usr/share/zoneinfo/Asia/Qatar", "/usr/share/zoneinfo/Asia/Qostanay", "/usr/share/zoneinfo/Asia/Qyzylorda", "/usr/share/zoneinfo/Asia/Riyadh", "/usr/share/zoneinfo/Asia/Sakhalin", "/usr/share/zoneinfo/Asia/Samarkand", "/usr/share/zoneinfo/Asia/Seoul", "/usr/share/zoneinfo/Asia/Shanghai", "/usr/share/zoneinfo/Asia/Singapore", "/usr/share/zoneinfo/Asia/Srednekolymsk", "/usr/share/zoneinfo/Asia/Taipei", "/usr/share/zoneinfo/Asia/Tashkent", "/usr/share/zoneinfo/Asia/Tbilisi", "/usr/share/zoneinfo/Asia/Tehran", "/usr/share/zoneinfo/Asia/Thimphu", "/usr/share/zoneinfo/Asia/Tokyo", "/usr/share/zoneinfo/Asia/Tomsk", "/usr/share/zoneinfo/Asia/Ulaanbaatar", "/usr/share/zoneinfo/Asia/Urumqi", "/usr/share/zoneinfo/Asia/Ust-Nera", "/usr/share/zoneinfo/Asia/Vientiane", "/usr/share/zoneinfo/Asia/Vladivostok", "/usr/share/zoneinfo/Asia/Yakutsk", "/usr/share/zoneinfo/Asia/Yangon", "/usr/share/zoneinfo/Asia/Yekaterinburg", "/usr/share/zoneinfo/Asia/Yerevan", "/usr/share/zoneinfo/Atlantic/Azores", "/usr/share/zoneinfo/Atlantic/Bermuda", "/usr/share/zoneinfo/Atlantic/Canary", "/usr/share/zoneinfo/Atlantic/Cape_Verde", "/usr/share/zoneinfo/Atlantic/Faroe", "/usr/share/zoneinfo/Atlantic/Madeira", "/usr/share/zoneinfo/Atlantic/Reykjavik", "/usr/share/zoneinfo/Atlantic/South_Georgia", "/usr/share/zoneinfo/Atlantic/St_Helena", "/usr/share/zoneinfo/Atlantic/Stanley", "/usr/share/zoneinfo/Australia/Adelaide", "/usr/share/zoneinfo/Australia/Brisbane", "/usr/share/zoneinfo/Australia/Broken_Hill", "/usr/share/zoneinfo/Australia/Darwin", "/usr/share/zoneinfo/Australia/Eucla", "/usr/share/zoneinfo/Australia/Hobart", "/usr/share/zoneinfo/Australia/Lindeman", "/usr/share/zoneinfo/Australia/Lord_Howe", "/usr/share/zoneinfo/Australia/Melbourne", "/usr/share/zoneinfo/Australia/Perth", "/usr/share/zoneinfo/Australia/Sydney", "/usr/share/zoneinfo/CET", "/usr/share/zoneinfo/CST6CDT", "/usr/share/zoneinfo/EET", "/usr/share/zoneinfo/EST", "/usr/share/zoneinfo/EST5EDT", "/usr/share/zoneinfo/Etc/GMT", "/usr/share/zoneinfo/Etc/GMT+1", "/usr/share/zoneinfo/Etc/GMT+10", "/usr/share/zoneinfo/Etc/GMT+11", "/usr/share/zoneinfo/Etc/GMT+12", "/usr/share/zoneinfo/Etc/GMT+2", "/usr/share/zoneinfo/Etc/GMT+3", "/usr/share/zoneinfo/Etc/GMT+4", "/usr/share/zoneinfo/Etc/GMT+5", "/usr/share/zoneinfo/Etc/GMT+6", "/usr/share/zoneinfo/Etc/GMT+7", "/usr/share/zoneinfo/Etc/GMT+8", "/usr/share/zoneinfo/Etc/GMT+9", "/usr/share/zoneinfo/Etc/GMT-1", "/usr/share/zoneinfo/Etc/GMT-10", "/usr/share/zoneinfo/Etc/GMT-11", "/usr/share/zoneinfo/Etc/GMT-12", "/usr/share/zoneinfo/Etc/GMT-13", "/usr/share/zoneinfo/Etc/GMT-14", "/usr/share/zoneinfo/Etc/GMT-2", "/usr/share/zoneinfo/Etc/GMT-3", "/usr/share/zoneinfo/Etc/GMT-4", "/usr/share/zoneinfo/Etc/GMT-5", "/usr/share/zoneinfo/Etc/GMT-6", "/usr/share/zoneinfo/Etc/GMT-7", "/usr/share/zoneinfo/Etc/GMT-8", "/usr/share/zoneinfo/Etc/GMT-9", "/usr/share/zoneinfo/Etc/UTC", "/usr/share/zoneinfo/Europe/Amsterdam", "/usr/share/zoneinfo/Europe/Andorra", "/usr/share/zoneinfo/Europe/Astrakhan", "/usr/share/zoneinfo/Europe/Athens", "/usr/share/zoneinfo/Europe/Belgrade", "/usr/share/zoneinfo/Europe/Berlin", "/usr/share/zoneinfo/Europe/Brussels", "/usr/share/zoneinfo/Europe/Bucharest", "/usr/share/zoneinfo/Europe/Budapest", "/usr/share/zoneinfo/Europe/Chisinau", "/usr/share/zoneinfo/Europe/Copenhagen", "/usr/share/zoneinfo/Europe/Dublin", "/usr/share/zoneinfo/Europe/Gibraltar", "/usr/share/zoneinfo/Europe/Guernsey", "/usr/share/zoneinfo/Europe/Helsinki", "/usr/share/zoneinfo/Europe/Isle_of_Man", "/usr/share/zoneinfo/Europe/Istanbul", "/usr/share/zoneinfo/Europe/Jersey", "/usr/share/zoneinfo/Europe/Kaliningrad", "/usr/share/zoneinfo/Europe/Kirov", "/usr/share/zoneinfo/Europe/Kyiv", "/usr/share/zoneinfo/Europe/Lisbon", "/usr/share/zoneinfo/Europe/Ljubljana", "/usr/share/zoneinfo/Europe/London", "/usr/share/zoneinfo/Europe/Luxembourg", "/usr/share/zoneinfo/Europe/Madrid", "/usr/share/zoneinfo/Europe/Malta", "/usr/share/zoneinfo/Europe/Minsk", "/usr/share/zoneinfo/Europe/Monaco", "/usr/share/zoneinfo/Europe/Moscow", "/usr/share/zoneinfo/Europe/Oslo", "/usr/share/zoneinfo/Europe/Paris", "/usr/share/zoneinfo/Europe/Prague", "/usr/share/zoneinfo/Europe/Riga", "/usr/share/zoneinfo/Europe/Rome", "/usr/share/zoneinfo/Europe/Samara", "/usr/share/zoneinfo/Europe/Sarajevo", "/usr/share/zoneinfo/Europe/Saratov", "/usr/share/zoneinfo/Europe/Simferopol", "/usr/share/zoneinfo/Europe/Skopje", "/usr/share/zoneinfo/Europe/Sofia", "/usr/share/zoneinfo/Europe/Stockholm", "/usr/share/zoneinfo/Europe/Tallinn", "/usr/share/zoneinfo/Europe/Tirane", "/usr/share/zoneinfo/Europe/Ulyanovsk", "/usr/share/zoneinfo/Europe/Vaduz", "/usr/share/zoneinfo/Europe/Vienna", "/usr/share/zoneinfo/Europe/Vilnius", "/usr/share/zoneinfo/Europe/Volgograd", "/usr/share/zoneinfo/Europe/Warsaw", "/usr/share/zoneinfo/Europe/Zagreb", "/usr/share/zoneinfo/Europe/Zurich", "/usr/share/zoneinfo/Factory", "/usr/share/zoneinfo/HST", "/usr/share/zoneinfo/Indian/Antananarivo", "/usr/share/zoneinfo/Indian/Chagos", "/usr/share/zoneinfo/Indian/Christmas", "/usr/share/zoneinfo/Indian/Cocos", "/usr/share/zoneinfo/Indian/Comoro", "/usr/share/zoneinfo/Indian/Kerguelen", "/usr/share/zoneinfo/Indian/Mahe", "/usr/share/zoneinfo/Indian/Maldives", "/usr/share/zoneinfo/Indian/Mauritius", "/usr/share/zoneinfo/Indian/Mayotte", "/usr/share/zoneinfo/Indian/Reunion", "/usr/share/zoneinfo/MET", "/usr/share/zoneinfo/MST", "/usr/share/zoneinfo/MST7MDT", "/usr/share/zoneinfo/PST8PDT", "/usr/share/zoneinfo/Pacific/Apia", "/usr/share/zoneinfo/Pacific/Auckland", "/usr/share/zoneinfo/Pacific/Bougainville", "/usr/share/zoneinfo/Pacific/Chatham", "/usr/share/zoneinfo/Pacific/Chuuk", "/usr/share/zoneinfo/Pacific/Easter", "/usr/share/zoneinfo/Pacific/Efate", "/usr/share/zoneinfo/Pacific/Fakaofo", "/usr/share/zoneinfo/Pacific/Fiji", "/usr/share/zoneinfo/Pacific/Funafuti", "/usr/share/zoneinfo/Pacific/Galapagos", "/usr/share/zoneinfo/Pacific/Gambier", "/usr/share/zoneinfo/Pacific/Guadalcanal", "/usr/share/zoneinfo/Pacific/Guam", "/usr/share/zoneinfo/Pacific/Honolulu", "/usr/share/zoneinfo/Pacific/Kanton", "/usr/share/zoneinfo/Pacific/Kiritimati", "/usr/share/zoneinfo/Pacific/Kosrae", "/usr/share/zoneinfo/Pacific/Kwajalein", "/usr/share/zoneinfo/Pacific/Majuro", "/usr/share/zoneinfo/Pacific/Marquesas", "/usr/share/zoneinfo/Pacific/Midway", "/usr/share/zoneinfo/Pacific/Nauru", "/usr/share/zoneinfo/Pacific/Niue", "/usr/share/zoneinfo/Pacific/Norfolk", "/usr/share/zoneinfo/Pacific/Noumea", "/usr/share/zoneinfo/Pacific/Pago_Pago", "/usr/share/zoneinfo/Pacific/Palau", "/usr/share/zoneinfo/Pacific/Pitcairn", "/usr/share/zoneinfo/Pacific/Pohnpei", "/usr/share/zoneinfo/Pacific/Port_Moresby", "/usr/share/zoneinfo/Pacific/Rarotonga", "/usr/share/zoneinfo/Pacific/Saipan", "/usr/share/zoneinfo/Pacific/Tahiti", "/usr/share/zoneinfo/Pacific/Tarawa", "/usr/share/zoneinfo/Pacific/Tongatapu", "/usr/share/zoneinfo/Pacific/Wake", "/usr/share/zoneinfo/Pacific/Wallis", "/usr/share/zoneinfo/US/Pacific-New", "/usr/share/zoneinfo/WET", "/usr/share/zoneinfo/iso3166.tab", "/usr/share/zoneinfo/leap-seconds.list", "/usr/share/zoneinfo/posix/Africa/Abidjan", "/usr/share/zoneinfo/posix/Africa/Accra", "/usr/share/zoneinfo/posix/Africa/Addis_Ababa", "/usr/share/zoneinfo/posix/Africa/Algiers", "/usr/share/zoneinfo/posix/Africa/Asmara", "/usr/share/zoneinfo/posix/Africa/Bamako", "/usr/share/zoneinfo/posix/Africa/Bangui", "/usr/share/zoneinfo/posix/Africa/Banjul", "/usr/share/zoneinfo/posix/Africa/Bissau", "/usr/share/zoneinfo/posix/Africa/Blantyre", "/usr/share/zoneinfo/posix/Africa/Brazzaville", "/usr/share/zoneinfo/posix/Africa/Bujumbura", "/usr/share/zoneinfo/posix/Africa/Cairo", "/usr/share/zoneinfo/posix/Africa/Casablanca", "/usr/share/zoneinfo/posix/Africa/Ceuta", "/usr/share/zoneinfo/posix/Africa/Conakry", "/usr/share/zoneinfo/posix/Africa/Dakar", "/usr/share/zoneinfo/posix/Africa/Dar_es_Salaam", "/usr/share/zoneinfo/posix/Africa/Djibouti", "/usr/share/zoneinfo/posix/Africa/Douala", "/usr/share/zoneinfo/posix/Africa/El_Aaiun", "/usr/share/zoneinfo/posix/Africa/Freetown", "/usr/share/zoneinfo/posix/Africa/Gaborone", "/usr/share/zoneinfo/posix/Africa/Harare", "/usr/share/zoneinfo/posix/Africa/Johannesburg", "/usr/share/zoneinfo/posix/Africa/Juba", "/usr/share/zoneinfo/posix/Africa/Kampala", "/usr/share/zoneinfo/posix/Africa/Khartoum", "/usr/share/zoneinfo/posix/Africa/Kigali", "/usr/share/zoneinfo/posix/Africa/Kinshasa", "/usr/share/zoneinfo/posix/Africa/Lagos", "/usr/share/zoneinfo/posix/Africa/Libreville", "/usr/share/zoneinfo/posix/Africa/Lome", "/usr/share/zoneinfo/posix/Africa/Luanda", "/usr/share/zoneinfo/posix/Africa/Lubumbashi", "/usr/share/zoneinfo/posix/Africa/Lusaka", "/usr/share/zoneinfo/posix/Africa/Malabo", "/usr/share/zoneinfo/posix/Africa/Maputo", "/usr/share/zoneinfo/posix/Africa/Maseru", "/usr/share/zoneinfo/posix/Africa/Mbabane", "/usr/share/zoneinfo/posix/Africa/Mogadishu", "/usr/share/zoneinfo/posix/Africa/Monrovia", "/usr/share/zoneinfo/posix/Africa/Nairobi", "/usr/share/zoneinfo/posix/Africa/Ndjamena", "/usr/share/zoneinfo/posix/Africa/Niamey", "/usr/share/zoneinfo/posix/Africa/Nouakchott", "/usr/share/zoneinfo/posix/Africa/Ouagadougou", "/usr/share/zoneinfo/posix/Africa/Porto-Novo", "/usr/share/zoneinfo/posix/Africa/Sao_Tome", "/usr/share/zoneinfo/posix/Africa/Tripoli", "/usr/share/zoneinfo/posix/Africa/Tunis", "/usr/share/zoneinfo/posix/Africa/Windhoek", "/usr/share/zoneinfo/posix/America/Adak", "/usr/share/zoneinfo/posix/America/Anchorage", "/usr/share/zoneinfo/posix/America/Anguilla", "/usr/share/zoneinfo/posix/America/Antigua", "/usr/share/zoneinfo/posix/America/Araguaina", "/usr/share/zoneinfo/posix/America/Argentina/Buenos_Aires", "/usr/share/zoneinfo/posix/America/Argentina/Catamarca", "/usr/share/zoneinfo/posix/America/Argentina/Cordoba", "/usr/share/zoneinfo/posix/America/Argentina/Jujuy", "/usr/share/zoneinfo/posix/America/Argentina/La_Rioja", "/usr/share/zoneinfo/posix/America/Argentina/Mendoza", "/usr/share/zoneinfo/posix/America/Argentina/Rio_Gallegos", "/usr/share/zoneinfo/posix/America/Argentina/Salta", "/usr/share/zoneinfo/posix/America/Argentina/San_Juan", "/usr/share/zoneinfo/posix/America/Argentina/San_Luis", "/usr/share/zoneinfo/posix/America/Argentina/Tucuman", "/usr/share/zoneinfo/posix/America/Argentina/Ushuaia", "/usr/share/zoneinfo/posix/America/Aruba", "/usr/share/zoneinfo/posix/America/Asuncion", "/usr/share/zoneinfo/posix/America/Atikokan", "/usr/share/zoneinfo/posix/America/Bahia", "/usr/share/zoneinfo/posix/America/Bahia_Banderas", "/usr/share/zoneinfo/posix/America/Barbados", "/usr/share/zoneinfo/posix/America/Belem", "/usr/share/zoneinfo/posix/America/Belize", "/usr/share/zoneinfo/posix/America/Blanc-Sablon", "/usr/share/zoneinfo/posix/America/Boa_Vista", "/usr/share/zoneinfo/posix/America/Bogota", "/usr/share/zoneinfo/posix/America/Boise", "/usr/share/zoneinfo/posix/America/Cambridge_Bay", "/usr/share/zoneinfo/posix/America/Campo_Grande", "/usr/share/zoneinfo/posix/America/Cancun", "/usr/share/zoneinfo/posix/America/Caracas", "/usr/share/zoneinfo/posix/America/Cayenne", "/usr/share/zoneinfo/posix/America/Cayman", "/usr/share/zoneinfo/posix/America/Chicago", "/usr/share/zoneinfo/posix/America/Chihuahua", "/usr/share/zoneinfo/posix/America/Ciudad_Juarez", "/usr/share/zoneinfo/posix/America/Costa_Rica", "/usr/share/zoneinfo/posix/America/Creston", "/usr/share/zoneinfo/posix/America/Cuiaba", "/usr/share/zoneinfo/posix/America/Curacao", "/usr/share/zoneinfo/posix/America/Danmarkshavn", "/usr/share/zoneinfo/posix/America/Dawson", "/usr/share/zoneinfo/posix/America/Dawson_Creek", "/usr/share/zoneinfo/posix/America/Denver", "/usr/share/zoneinfo/posix/America/Detroit", "/usr/share/zoneinfo/posix/America/Dominica", "/usr/share/zoneinfo/posix/America/Edmonton", "/usr/share/zoneinfo/posix/America/Eirunepe", "/usr/share/zoneinfo/posix/America/El_Salvador", "/usr/share/zoneinfo/posix/America/Fort_Nelson", "/usr/share/zoneinfo/posix/America/Fortaleza", "/usr/share/zoneinfo/posix/America/Glace_Bay", "/usr/share/zoneinfo/posix/America/Goose_Bay", "/usr/share/zoneinfo/posix/America/Grand_Turk", "/usr/share/zoneinfo/posix/America/Grenada", "/usr/share/zoneinfo/posix/America/Guadeloupe", "/usr/share/zoneinfo/posix/America/Guatemala", "/usr/share/zoneinfo/posix/America/Guayaquil", "/usr/share/zoneinfo/posix/America/Guyana", "/usr/share/zoneinfo/posix/America/Halifax", "/usr/share/zoneinfo/posix/America/Havana", "/usr/share/zoneinfo/posix/America/Hermosillo", "/usr/share/zoneinfo/posix/America/Indiana/Indianapolis", "/usr/share/zoneinfo/posix/America/Indiana/Knox", "/usr/share/zoneinfo/posix/America/Indiana/Marengo", "/usr/share/zoneinfo/posix/America/Indiana/Petersburg", "/usr/share/zoneinfo/posix/America/Indiana/Tell_City", "/usr/share/zoneinfo/posix/America/Indiana/Vevay", "/usr/share/zoneinfo/posix/America/Indiana/Vincennes", "/usr/share/zoneinfo/posix/America/Indiana/Winamac", "/usr/share/zoneinfo/posix/America/Inuvik", "/usr/share/zoneinfo/posix/America/Iqaluit", "/usr/share/zoneinfo/posix/America/Jamaica", "/usr/share/zoneinfo/posix/America/Juneau", "/usr/share/zoneinfo/posix/America/Kentucky/Louisville", "/usr/share/zoneinfo/posix/America/Kentucky/Monticello", "/usr/share/zoneinfo/posix/America/La_Paz", "/usr/share/zoneinfo/posix/America/Lima", "/usr/share/zoneinfo/posix/America/Los_Angeles", "/usr/share/zoneinfo/posix/America/Maceio", "/usr/share/zoneinfo/posix/America/Managua", "/usr/share/zoneinfo/posix/America/Manaus", "/usr/share/zoneinfo/posix/America/Martinique", "/usr/share/zoneinfo/posix/America/Matamoros", "/usr/share/zoneinfo/posix/America/Mazatlan", "/usr/share/zoneinfo/posix/America/Menominee", "/usr/share/zoneinfo/posix/America/Merida", "/usr/share/zoneinfo/posix/America/Metlakatla", "/usr/share/zoneinfo/posix/America/Mexico_City", "/usr/share/zoneinfo/posix/America/Miquelon", "/usr/share/zoneinfo/posix/America/Moncton", "/usr/share/zoneinfo/posix/America/Monterrey", "/usr/share/zoneinfo/posix/America/Montevideo", "/usr/share/zoneinfo/posix/America/Montserrat", "/usr/share/zoneinfo/posix/America/Nassau", "/usr/share/zoneinfo/posix/America/New_York", "/usr/share/zoneinfo/posix/America/Nome", "/usr/share/zoneinfo/posix/America/Noronha", "/usr/share/zoneinfo/posix/America/North_Dakota/Beulah", "/usr/share/zoneinfo/posix/America/North_Dakota/Center", "/usr/share/zoneinfo/posix/America/North_Dakota/New_Salem", "/usr/share/zoneinfo/posix/America/Nuuk", "/usr/share/zoneinfo/posix/America/Ojinaga", "/usr/share/zoneinfo/posix/America/Panama", "/usr/share/zoneinfo/posix/America/Paramaribo", "/usr/share/zoneinfo/posix/America/Phoenix", "/usr/share/zoneinfo/posix/America/Port-au-Prince", "/usr/share/zoneinfo/posix/America/Port_of_Spain", "/usr/share/zoneinfo/posix/America/Porto_Velho", "/usr/share/zoneinfo/posix/America/Puerto_Rico", "/usr/share/zoneinfo/posix/America/Punta_Arenas", "/usr/share/zoneinfo/posix/America/Rankin_Inlet", "/usr/share/zoneinfo/posix/America/Recife", "/usr/share/zoneinfo/posix/America/Regina", "/usr/share/zoneinfo/posix/America/Resolute", "/usr/share/zoneinfo/posix/America/Rio_Branco", "/usr/share/zoneinfo/posix/America/Santarem", "/usr/share/zoneinfo/posix/America/Santiago", "/usr/share/zoneinfo/posix/America/Santo_Domingo", "/usr/share/zoneinfo/posix/America/Sao_Paulo", "/usr/share/zoneinfo/posix/America/Scoresbysund", "/usr/share/zoneinfo/posix/America/Sitka", "/usr/share/zoneinfo/posix/America/St_Johns", "/usr/share/zoneinfo/posix/America/St_Kitts", "/usr/share/zoneinfo/posix/America/St_Lucia", "/usr/share/zoneinfo/posix/America/St_Thomas", "/usr/share/zoneinfo/posix/America/St_Vincent", "/usr/share/zoneinfo/posix/America/Swift_Current", "/usr/share/zoneinfo/posix/America/Tegucigalpa", "/usr/share/zoneinfo/posix/America/Thule", "/usr/share/zoneinfo/posix/America/Tijuana", "/usr/share/zoneinfo/posix/America/Toronto", "/usr/share/zoneinfo/posix/America/Tortola", "/usr/share/zoneinfo/posix/America/Vancouver", "/usr/share/zoneinfo/posix/America/Whitehorse", "/usr/share/zoneinfo/posix/America/Winnipeg", "/usr/share/zoneinfo/posix/America/Yakutat", "/usr/share/zoneinfo/posix/Antarctica/Casey", "/usr/share/zoneinfo/posix/Antarctica/Davis", "/usr/share/zoneinfo/posix/Antarctica/DumontDUrville", "/usr/share/zoneinfo/posix/Antarctica/Macquarie", "/usr/share/zoneinfo/posix/Antarctica/Mawson", "/usr/share/zoneinfo/posix/Antarctica/McMurdo", "/usr/share/zoneinfo/posix/Antarctica/Palmer", "/usr/share/zoneinfo/posix/Antarctica/Rothera", "/usr/share/zoneinfo/posix/Antarctica/Syowa", "/usr/share/zoneinfo/posix/Antarctica/Troll", "/usr/share/zoneinfo/posix/Antarctica/Vostok", "/usr/share/zoneinfo/posix/Asia/Aden", "/usr/share/zoneinfo/posix/Asia/Almaty", "/usr/share/zoneinfo/posix/Asia/Amman", "/usr/share/zoneinfo/posix/Asia/Anadyr", "/usr/share/zoneinfo/posix/Asia/Aqtau", "/usr/share/zoneinfo/posix/Asia/Aqtobe", "/usr/share/zoneinfo/posix/Asia/Ashgabat", "/usr/share/zoneinfo/posix/Asia/Atyrau", "/usr/share/zoneinfo/posix/Asia/Baghdad", "/usr/share/zoneinfo/posix/Asia/Bahrain", "/usr/share/zoneinfo/posix/Asia/Baku", "/usr/share/zoneinfo/posix/Asia/Bangkok", "/usr/share/zoneinfo/posix/Asia/Barnaul", "/usr/share/zoneinfo/posix/Asia/Beirut", "/usr/share/zoneinfo/posix/Asia/Bishkek", "/usr/share/zoneinfo/posix/Asia/Brunei", "/usr/share/zoneinfo/posix/Asia/Chita", "/usr/share/zoneinfo/posix/Asia/Choibalsan", "/usr/share/zoneinfo/posix/Asia/Colombo", "/usr/share/zoneinfo/posix/Asia/Damascus", "/usr/share/zoneinfo/posix/Asia/Dhaka", "/usr/share/zoneinfo/posix/Asia/Dili", "/usr/share/zoneinfo/posix/Asia/Dubai", "/usr/share/zoneinfo/posix/Asia/Dushanbe", "/usr/share/zoneinfo/posix/Asia/Famagusta", "/usr/share/zoneinfo/posix/Asia/Gaza", "/usr/share/zoneinfo/posix/Asia/Hebron", "/usr/share/zoneinfo/posix/Asia/Ho_Chi_Minh", "/usr/share/zoneinfo/posix/Asia/Hong_Kong", "/usr/share/zoneinfo/posix/Asia/Hovd", "/usr/share/zoneinfo/posix/Asia/Irkutsk", "/usr/share/zoneinfo/posix/Asia/Jakarta", "/usr/share/zoneinfo/posix/Asia/Jayapura", "/usr/share/zoneinfo/posix/Asia/Jerusalem", "/usr/share/zoneinfo/posix/Asia/Kabul", "/usr/share/zoneinfo/posix/Asia/Kamchatka", "/usr/share/zoneinfo/posix/Asia/Karachi", "/usr/share/zoneinfo/posix/Asia/Kathmandu", "/usr/share/zoneinfo/posix/Asia/Khandyga", "/usr/share/zoneinfo/posix/Asia/Kolkata", "/usr/share/zoneinfo/posix/Asia/Krasnoyarsk", "/usr/share/zoneinfo/posix/Asia/Kuala_Lumpur", "/usr/share/zoneinfo/posix/Asia/Kuching", "/usr/share/zoneinfo/posix/Asia/Kuwait", "/usr/share/zoneinfo/posix/Asia/Macau", "/usr/share/zoneinfo/posix/Asia/Magadan", "/usr/share/zoneinfo/posix/Asia/Makassar", "/usr/share/zoneinfo/posix/Asia/Manila", "/usr/share/zoneinfo/posix/Asia/Muscat", "/usr/share/zoneinfo/posix/Asia/Nicosia", "/usr/share/zoneinfo/posix/Asia/Novokuznetsk", "/usr/share/zoneinfo/posix/Asia/Novosibirsk", "/usr/share/zoneinfo/posix/Asia/Omsk", "/usr/share/zoneinfo/posix/Asia/Oral", "/usr/share/zoneinfo/posix/Asia/Phnom_Penh", "/usr/share/zoneinfo/posix/Asia/Pontianak", "/usr/share/zoneinfo/posix/Asia/Pyongyang", "/usr/share/zoneinfo/posix/Asia/Qatar", "/usr/share/zoneinfo/posix/Asia/Qostanay", "/usr/share/zoneinfo/posix/Asia/Qyzylorda", "/usr/share/zoneinfo/posix/Asia/Riyadh", "/usr/share/zoneinfo/posix/Asia/Sakhalin", "/usr/share/zoneinfo/posix/Asia/Samarkand", "/usr/share/zoneinfo/posix/Asia/Seoul", "/usr/share/zoneinfo/posix/Asia/Shanghai", "/usr/share/zoneinfo/posix/Asia/Singapore", "/usr/share/zoneinfo/posix/Asia/Srednekolymsk", "/usr/share/zoneinfo/posix/Asia/Taipei", "/usr/share/zoneinfo/posix/Asia/Tashkent", "/usr/share/zoneinfo/posix/Asia/Tbilisi", "/usr/share/zoneinfo/posix/Asia/Tehran", "/usr/share/zoneinfo/posix/Asia/Thimphu", "/usr/share/zoneinfo/posix/Asia/Tokyo", "/usr/share/zoneinfo/posix/Asia/Tomsk", "/usr/share/zoneinfo/posix/Asia/Ulaanbaatar", "/usr/share/zoneinfo/posix/Asia/Urumqi", "/usr/share/zoneinfo/posix/Asia/Ust-Nera", "/usr/share/zoneinfo/posix/Asia/Vientiane", "/usr/share/zoneinfo/posix/Asia/Vladivostok", "/usr/share/zoneinfo/posix/Asia/Yakutsk", "/usr/share/zoneinfo/posix/Asia/Yangon", "/usr/share/zoneinfo/posix/Asia/Yekaterinburg", "/usr/share/zoneinfo/posix/Asia/Yerevan", "/usr/share/zoneinfo/posix/Atlantic/Azores", "/usr/share/zoneinfo/posix/Atlantic/Bermuda", "/usr/share/zoneinfo/posix/Atlantic/Canary", "/usr/share/zoneinfo/posix/Atlantic/Cape_Verde", "/usr/share/zoneinfo/posix/Atlantic/Faroe", "/usr/share/zoneinfo/posix/Atlantic/Madeira", "/usr/share/zoneinfo/posix/Atlantic/Reykjavik", "/usr/share/zoneinfo/posix/Atlantic/South_Georgia", "/usr/share/zoneinfo/posix/Atlantic/St_Helena", "/usr/share/zoneinfo/posix/Atlantic/Stanley", "/usr/share/zoneinfo/posix/Australia/Adelaide", "/usr/share/zoneinfo/posix/Australia/Brisbane", "/usr/share/zoneinfo/posix/Australia/Broken_Hill", "/usr/share/zoneinfo/posix/Australia/Darwin", "/usr/share/zoneinfo/posix/Australia/Eucla", "/usr/share/zoneinfo/posix/Australia/Hobart", "/usr/share/zoneinfo/posix/Australia/Lindeman", "/usr/share/zoneinfo/posix/Australia/Lord_Howe", "/usr/share/zoneinfo/posix/Australia/Melbourne", "/usr/share/zoneinfo/posix/Australia/Perth", "/usr/share/zoneinfo/posix/Australia/Sydney", "/usr/share/zoneinfo/posix/CET", "/usr/share/zoneinfo/posix/CST6CDT", "/usr/share/zoneinfo/posix/EET", "/usr/share/zoneinfo/posix/EST", "/usr/share/zoneinfo/posix/EST5EDT", "/usr/share/zoneinfo/posix/Etc/GMT", "/usr/share/zoneinfo/posix/Etc/GMT+1", "/usr/share/zoneinfo/posix/Etc/GMT+10", "/usr/share/zoneinfo/posix/Etc/GMT+11", "/usr/share/zoneinfo/posix/Etc/GMT+12", "/usr/share/zoneinfo/posix/Etc/GMT+2", "/usr/share/zoneinfo/posix/Etc/GMT+3", "/usr/share/zoneinfo/posix/Etc/GMT+4", "/usr/share/zoneinfo/posix/Etc/GMT+5", "/usr/share/zoneinfo/posix/Etc/GMT+6", "/usr/share/zoneinfo/posix/Etc/GMT+7", "/usr/share/zoneinfo/posix/Etc/GMT+8", "/usr/share/zoneinfo/posix/Etc/GMT+9", "/usr/share/zoneinfo/posix/Etc/GMT-1", "/usr/share/zoneinfo/posix/Etc/GMT-10", "/usr/share/zoneinfo/posix/Etc/GMT-11", "/usr/share/zoneinfo/posix/Etc/GMT-12", "/usr/share/zoneinfo/posix/Etc/GMT-13", "/usr/share/zoneinfo/posix/Etc/GMT-14", "/usr/share/zoneinfo/posix/Etc/GMT-2", "/usr/share/zoneinfo/posix/Etc/GMT-3", "/usr/share/zoneinfo/posix/Etc/GMT-4", "/usr/share/zoneinfo/posix/Etc/GMT-5", "/usr/share/zoneinfo/posix/Etc/GMT-6", "/usr/share/zoneinfo/posix/Etc/GMT-7", "/usr/share/zoneinfo/posix/Etc/GMT-8", "/usr/share/zoneinfo/posix/Etc/GMT-9", "/usr/share/zoneinfo/posix/Etc/UTC", "/usr/share/zoneinfo/posix/Europe/Amsterdam", "/usr/share/zoneinfo/posix/Europe/Andorra", "/usr/share/zoneinfo/posix/Europe/Astrakhan", "/usr/share/zoneinfo/posix/Europe/Athens", "/usr/share/zoneinfo/posix/Europe/Belgrade", "/usr/share/zoneinfo/posix/Europe/Berlin", "/usr/share/zoneinfo/posix/Europe/Brussels", "/usr/share/zoneinfo/posix/Europe/Bucharest", "/usr/share/zoneinfo/posix/Europe/Budapest", "/usr/share/zoneinfo/posix/Europe/Chisinau", "/usr/share/zoneinfo/posix/Europe/Copenhagen", "/usr/share/zoneinfo/posix/Europe/Dublin", "/usr/share/zoneinfo/posix/Europe/Gibraltar", "/usr/share/zoneinfo/posix/Europe/Guernsey", "/usr/share/zoneinfo/posix/Europe/Helsinki", "/usr/share/zoneinfo/posix/Europe/Isle_of_Man", "/usr/share/zoneinfo/posix/Europe/Istanbul", "/usr/share/zoneinfo/posix/Europe/Jersey", "/usr/share/zoneinfo/posix/Europe/Kaliningrad", "/usr/share/zoneinfo/posix/Europe/Kirov", "/usr/share/zoneinfo/posix/Europe/Kyiv", "/usr/share/zoneinfo/posix/Europe/Lisbon", "/usr/share/zoneinfo/posix/Europe/Ljubljana", "/usr/share/zoneinfo/posix/Europe/London", "/usr/share/zoneinfo/posix/Europe/Luxembourg", "/usr/share/zoneinfo/posix/Europe/Madrid", "/usr/share/zoneinfo/posix/Europe/Malta", "/usr/share/zoneinfo/posix/Europe/Minsk", "/usr/share/zoneinfo/posix/Europe/Monaco", "/usr/share/zoneinfo/posix/Europe/Moscow", "/usr/share/zoneinfo/posix/Europe/Oslo", "/usr/share/zoneinfo/posix/Europe/Paris", "/usr/share/zoneinfo/posix/Europe/Prague", "/usr/share/zoneinfo/posix/Europe/Riga", "/usr/share/zoneinfo/posix/Europe/Rome", "/usr/share/zoneinfo/posix/Europe/Samara", "/usr/share/zoneinfo/posix/Europe/Sarajevo", "/usr/share/zoneinfo/posix/Europe/Saratov", "/usr/share/zoneinfo/posix/Europe/Simferopol", "/usr/share/zoneinfo/posix/Europe/Skopje", "/usr/share/zoneinfo/posix/Europe/Sofia", "/usr/share/zoneinfo/posix/Europe/Stockholm", "/usr/share/zoneinfo/posix/Europe/Tallinn", "/usr/share/zoneinfo/posix/Europe/Tirane", "/usr/share/zoneinfo/posix/Europe/Ulyanovsk", "/usr/share/zoneinfo/posix/Europe/Vaduz", "/usr/share/zoneinfo/posix/Europe/Vienna", "/usr/share/zoneinfo/posix/Europe/Vilnius", "/usr/share/zoneinfo/posix/Europe/Volgograd", "/usr/share/zoneinfo/posix/Europe/Warsaw", "/usr/share/zoneinfo/posix/Europe/Zagreb", "/usr/share/zoneinfo/posix/Europe/Zurich", "/usr/share/zoneinfo/posix/Factory", "/usr/share/zoneinfo/posix/HST", "/usr/share/zoneinfo/posix/Indian/Antananarivo", "/usr/share/zoneinfo/posix/Indian/Chagos", "/usr/share/zoneinfo/posix/Indian/Christmas", "/usr/share/zoneinfo/posix/Indian/Cocos", "/usr/share/zoneinfo/posix/Indian/Comoro", "/usr/share/zoneinfo/posix/Indian/Kerguelen", "/usr/share/zoneinfo/posix/Indian/Mahe", "/usr/share/zoneinfo/posix/Indian/Maldives", "/usr/share/zoneinfo/posix/Indian/Mauritius", "/usr/share/zoneinfo/posix/Indian/Mayotte", "/usr/share/zoneinfo/posix/Indian/Reunion", "/usr/share/zoneinfo/posix/MET", "/usr/share/zoneinfo/posix/MST", "/usr/share/zoneinfo/posix/MST7MDT", "/usr/share/zoneinfo/posix/PST8PDT", "/usr/share/zoneinfo/posix/Pacific/Apia", "/usr/share/zoneinfo/posix/Pacific/Auckland", "/usr/share/zoneinfo/posix/Pacific/Bougainville", "/usr/share/zoneinfo/posix/Pacific/Chatham", "/usr/share/zoneinfo/posix/Pacific/Chuuk", "/usr/share/zoneinfo/posix/Pacific/Easter", "/usr/share/zoneinfo/posix/Pacific/Efate", "/usr/share/zoneinfo/posix/Pacific/Fakaofo", "/usr/share/zoneinfo/posix/Pacific/Fiji", "/usr/share/zoneinfo/posix/Pacific/Funafuti", "/usr/share/zoneinfo/posix/Pacific/Galapagos", "/usr/share/zoneinfo/posix/Pacific/Gambier", "/usr/share/zoneinfo/posix/Pacific/Guadalcanal", "/usr/share/zoneinfo/posix/Pacific/Guam", "/usr/share/zoneinfo/posix/Pacific/Honolulu", "/usr/share/zoneinfo/posix/Pacific/Kanton", "/usr/share/zoneinfo/posix/Pacific/Kiritimati", "/usr/share/zoneinfo/posix/Pacific/Kosrae", "/usr/share/zoneinfo/posix/Pacific/Kwajalein", "/usr/share/zoneinfo/posix/Pacific/Majuro", "/usr/share/zoneinfo/posix/Pacific/Marquesas", "/usr/share/zoneinfo/posix/Pacific/Midway", "/usr/share/zoneinfo/posix/Pacific/Nauru", "/usr/share/zoneinfo/posix/Pacific/Niue", "/usr/share/zoneinfo/posix/Pacific/Norfolk", "/usr/share/zoneinfo/posix/Pacific/Noumea", "/usr/share/zoneinfo/posix/Pacific/Pago_Pago", "/usr/share/zoneinfo/posix/Pacific/Palau", "/usr/share/zoneinfo/posix/Pacific/Pitcairn", "/usr/share/zoneinfo/posix/Pacific/Pohnpei", "/usr/share/zoneinfo/posix/Pacific/Port_Moresby", "/usr/share/zoneinfo/posix/Pacific/Rarotonga", "/usr/share/zoneinfo/posix/Pacific/Saipan", "/usr/share/zoneinfo/posix/Pacific/Tahiti", "/usr/share/zoneinfo/posix/Pacific/Tarawa", "/usr/share/zoneinfo/posix/Pacific/Tongatapu", "/usr/share/zoneinfo/posix/Pacific/Wake", "/usr/share/zoneinfo/posix/Pacific/Wallis", "/usr/share/zoneinfo/posix/US/Pacific-New", "/usr/share/zoneinfo/posix/WET", "/usr/share/zoneinfo/right/Africa/Abidjan", "/usr/share/zoneinfo/right/Africa/Accra", "/usr/share/zoneinfo/right/Africa/Addis_Ababa", "/usr/share/zoneinfo/right/Africa/Algiers", "/usr/share/zoneinfo/right/Africa/Asmara", "/usr/share/zoneinfo/right/Africa/Bamako", "/usr/share/zoneinfo/right/Africa/Bangui", "/usr/share/zoneinfo/right/Africa/Banjul", "/usr/share/zoneinfo/right/Africa/Bissau", "/usr/share/zoneinfo/right/Africa/Blantyre", "/usr/share/zoneinfo/right/Africa/Brazzaville", "/usr/share/zoneinfo/right/Africa/Bujumbura", "/usr/share/zoneinfo/right/Africa/Cairo", "/usr/share/zoneinfo/right/Africa/Casablanca", "/usr/share/zoneinfo/right/Africa/Ceuta", "/usr/share/zoneinfo/right/Africa/Conakry", "/usr/share/zoneinfo/right/Africa/Dakar", "/usr/share/zoneinfo/right/Africa/Dar_es_Salaam", "/usr/share/zoneinfo/right/Africa/Djibouti", "/usr/share/zoneinfo/right/Africa/Douala", "/usr/share/zoneinfo/right/Africa/El_Aaiun", "/usr/share/zoneinfo/right/Africa/Freetown", "/usr/share/zoneinfo/right/Africa/Gaborone", "/usr/share/zoneinfo/right/Africa/Harare", "/usr/share/zoneinfo/right/Africa/Johannesburg", "/usr/share/zoneinfo/right/Africa/Juba", "/usr/share/zoneinfo/right/Africa/Kampala", "/usr/share/zoneinfo/right/Africa/Khartoum", "/usr/share/zoneinfo/right/Africa/Kigali", "/usr/share/zoneinfo/right/Africa/Kinshasa", "/usr/share/zoneinfo/right/Africa/Lagos", "/usr/share/zoneinfo/right/Africa/Libreville", "/usr/share/zoneinfo/right/Africa/Lome", "/usr/share/zoneinfo/right/Africa/Luanda", "/usr/share/zoneinfo/right/Africa/Lubumbashi", "/usr/share/zoneinfo/right/Africa/Lusaka", "/usr/share/zoneinfo/right/Africa/Malabo", "/usr/share/zoneinfo/right/Africa/Maputo", "/usr/share/zoneinfo/right/Africa/Maseru", "/usr/share/zoneinfo/right/Africa/Mbabane", "/usr/share/zoneinfo/right/Africa/Mogadishu", "/usr/share/zoneinfo/right/Africa/Monrovia", "/usr/share/zoneinfo/right/Africa/Nairobi", "/usr/share/zoneinfo/right/Africa/Ndjamena", "/usr/share/zoneinfo/right/Africa/Niamey", "/usr/share/zoneinfo/right/Africa/Nouakchott", "/usr/share/zoneinfo/right/Africa/Ouagadougou", "/usr/share/zoneinfo/right/Africa/Porto-Novo", "/usr/share/zoneinfo/right/Africa/Sao_Tome", "/usr/share/zoneinfo/right/Africa/Tripoli", "/usr/share/zoneinfo/right/Africa/Tunis", "/usr/share/zoneinfo/right/Africa/Windhoek", "/usr/share/zoneinfo/right/America/Adak", "/usr/share/zoneinfo/right/America/Anchorage", "/usr/share/zoneinfo/right/America/Anguilla", "/usr/share/zoneinfo/right/America/Antigua", "/usr/share/zoneinfo/right/America/Araguaina", "/usr/share/zoneinfo/right/America/Argentina/Buenos_Aires", "/usr/share/zoneinfo/right/America/Argentina/Catamarca", "/usr/share/zoneinfo/right/America/Argentina/Cordoba", "/usr/share/zoneinfo/right/America/Argentina/Jujuy", "/usr/share/zoneinfo/right/America/Argentina/La_Rioja", "/usr/share/zoneinfo/right/America/Argentina/Mendoza", "/usr/share/zoneinfo/right/America/Argentina/Rio_Gallegos", "/usr/share/zoneinfo/right/America/Argentina/Salta", "/usr/share/zoneinfo/right/America/Argentina/San_Juan", "/usr/share/zoneinfo/right/America/Argentina/San_Luis", "/usr/share/zoneinfo/right/America/Argentina/Tucuman", "/usr/share/zoneinfo/right/America/Argentina/Ushuaia", "/usr/share/zoneinfo/right/America/Aruba", "/usr/share/zoneinfo/right/America/Asuncion", "/usr/share/zoneinfo/right/America/Atikokan", "/usr/share/zoneinfo/right/America/Bahia", "/usr/share/zoneinfo/right/America/Bahia_Banderas", "/usr/share/zoneinfo/right/America/Barbados", "/usr/share/zoneinfo/right/America/Belem", "/usr/share/zoneinfo/right/America/Belize", "/usr/share/zoneinfo/right/America/Blanc-Sablon", "/usr/share/zoneinfo/right/America/Boa_Vista", "/usr/share/zoneinfo/right/America/Bogota", "/usr/share/zoneinfo/right/America/Boise", "/usr/share/zoneinfo/right/America/Cambridge_Bay", "/usr/share/zoneinfo/right/America/Campo_Grande", "/usr/share/zoneinfo/right/America/Cancun", "/usr/share/zoneinfo/right/America/Caracas", "/usr/share/zoneinfo/right/America/Cayenne", "/usr/share/zoneinfo/right/America/Cayman", "/usr/share/zoneinfo/right/America/Chicago", "/usr/share/zoneinfo/right/America/Chihuahua", "/usr/share/zoneinfo/right/America/Ciudad_Juarez", "/usr/share/zoneinfo/right/America/Costa_Rica", "/usr/share/zoneinfo/right/America/Creston", "/usr/share/zoneinfo/right/America/Cuiaba", "/usr/share/zoneinfo/right/America/Curacao", "/usr/share/zoneinfo/right/America/Danmarkshavn", "/usr/share/zoneinfo/right/America/Dawson", "/usr/share/zoneinfo/right/America/Dawson_Creek", "/usr/share/zoneinfo/right/America/Denver", "/usr/share/zoneinfo/right/America/Detroit", "/usr/share/zoneinfo/right/America/Dominica", "/usr/share/zoneinfo/right/America/Edmonton", "/usr/share/zoneinfo/right/America/Eirunepe", "/usr/share/zoneinfo/right/America/El_Salvador", "/usr/share/zoneinfo/right/America/Fort_Nelson", "/usr/share/zoneinfo/right/America/Fortaleza", "/usr/share/zoneinfo/right/America/Glace_Bay", "/usr/share/zoneinfo/right/America/Goose_Bay", "/usr/share/zoneinfo/right/America/Grand_Turk", "/usr/share/zoneinfo/right/America/Grenada", "/usr/share/zoneinfo/right/America/Guadeloupe", "/usr/share/zoneinfo/right/America/Guatemala", "/usr/share/zoneinfo/right/America/Guayaquil", "/usr/share/zoneinfo/right/America/Guyana", "/usr/share/zoneinfo/right/America/Halifax", "/usr/share/zoneinfo/right/America/Havana", "/usr/share/zoneinfo/right/America/Hermosillo", "/usr/share/zoneinfo/right/America/Indiana/Indianapolis", "/usr/share/zoneinfo/right/America/Indiana/Knox", "/usr/share/zoneinfo/right/America/Indiana/Marengo", "/usr/share/zoneinfo/right/America/Indiana/Petersburg", "/usr/share/zoneinfo/right/America/Indiana/Tell_City", "/usr/share/zoneinfo/right/America/Indiana/Vevay", "/usr/share/zoneinfo/right/America/Indiana/Vincennes", "/usr/share/zoneinfo/right/America/Indiana/Winamac", "/usr/share/zoneinfo/right/America/Inuvik", "/usr/share/zoneinfo/right/America/Iqaluit", "/usr/share/zoneinfo/right/America/Jamaica", "/usr/share/zoneinfo/right/America/Juneau", "/usr/share/zoneinfo/right/America/Kentucky/Louisville", "/usr/share/zoneinfo/right/America/Kentucky/Monticello", "/usr/share/zoneinfo/right/America/La_Paz", "/usr/share/zoneinfo/right/America/Lima", "/usr/share/zoneinfo/right/America/Los_Angeles", "/usr/share/zoneinfo/right/America/Maceio", "/usr/share/zoneinfo/right/America/Managua", "/usr/share/zoneinfo/right/America/Manaus", "/usr/share/zoneinfo/right/America/Martinique", "/usr/share/zoneinfo/right/America/Matamoros", "/usr/share/zoneinfo/right/America/Mazatlan", "/usr/share/zoneinfo/right/America/Menominee", "/usr/share/zoneinfo/right/America/Merida", "/usr/share/zoneinfo/right/America/Metlakatla", "/usr/share/zoneinfo/right/America/Mexico_City", "/usr/share/zoneinfo/right/America/Miquelon", "/usr/share/zoneinfo/right/America/Moncton", "/usr/share/zoneinfo/right/America/Monterrey", "/usr/share/zoneinfo/right/America/Montevideo", "/usr/share/zoneinfo/right/America/Montserrat", "/usr/share/zoneinfo/right/America/Nassau", "/usr/share/zoneinfo/right/America/New_York", "/usr/share/zoneinfo/right/America/Nome", "/usr/share/zoneinfo/right/America/Noronha", "/usr/share/zoneinfo/right/America/North_Dakota/Beulah", "/usr/share/zoneinfo/right/America/North_Dakota/Center", "/usr/share/zoneinfo/right/America/North_Dakota/New_Salem", "/usr/share/zoneinfo/right/America/Nuuk", "/usr/share/zoneinfo/right/America/Ojinaga", "/usr/share/zoneinfo/right/America/Panama", "/usr/share/zoneinfo/right/America/Paramaribo", "/usr/share/zoneinfo/right/America/Phoenix", "/usr/share/zoneinfo/right/America/Port-au-Prince", "/usr/share/zoneinfo/right/America/Port_of_Spain", "/usr/share/zoneinfo/right/America/Porto_Velho", "/usr/share/zoneinfo/right/America/Puerto_Rico", "/usr/share/zoneinfo/right/America/Punta_Arenas", "/usr/share/zoneinfo/right/America/Rankin_Inlet", "/usr/share/zoneinfo/right/America/Recife", "/usr/share/zoneinfo/right/America/Regina", "/usr/share/zoneinfo/right/America/Resolute", "/usr/share/zoneinfo/right/America/Rio_Branco", "/usr/share/zoneinfo/right/America/Santarem", "/usr/share/zoneinfo/right/America/Santiago", "/usr/share/zoneinfo/right/America/Santo_Domingo", "/usr/share/zoneinfo/right/America/Sao_Paulo", "/usr/share/zoneinfo/right/America/Scoresbysund", "/usr/share/zoneinfo/right/America/Sitka", "/usr/share/zoneinfo/right/America/St_Johns", "/usr/share/zoneinfo/right/America/St_Kitts", "/usr/share/zoneinfo/right/America/St_Lucia", "/usr/share/zoneinfo/right/America/St_Thomas", "/usr/share/zoneinfo/right/America/St_Vincent", "/usr/share/zoneinfo/right/America/Swift_Current", "/usr/share/zoneinfo/right/America/Tegucigalpa", "/usr/share/zoneinfo/right/America/Thule", "/usr/share/zoneinfo/right/America/Tijuana", "/usr/share/zoneinfo/right/America/Toronto", "/usr/share/zoneinfo/right/America/Tortola", "/usr/share/zoneinfo/right/America/Vancouver", "/usr/share/zoneinfo/right/America/Whitehorse", "/usr/share/zoneinfo/right/America/Winnipeg", "/usr/share/zoneinfo/right/America/Yakutat", "/usr/share/zoneinfo/right/Antarctica/Casey", "/usr/share/zoneinfo/right/Antarctica/Davis", "/usr/share/zoneinfo/right/Antarctica/DumontDUrville", "/usr/share/zoneinfo/right/Antarctica/Macquarie", "/usr/share/zoneinfo/right/Antarctica/Mawson", "/usr/share/zoneinfo/right/Antarctica/McMurdo", "/usr/share/zoneinfo/right/Antarctica/Palmer", "/usr/share/zoneinfo/right/Antarctica/Rothera", "/usr/share/zoneinfo/right/Antarctica/Syowa", "/usr/share/zoneinfo/right/Antarctica/Troll", "/usr/share/zoneinfo/right/Antarctica/Vostok", "/usr/share/zoneinfo/right/Asia/Aden", "/usr/share/zoneinfo/right/Asia/Almaty", "/usr/share/zoneinfo/right/Asia/Amman", "/usr/share/zoneinfo/right/Asia/Anadyr", "/usr/share/zoneinfo/right/Asia/Aqtau", "/usr/share/zoneinfo/right/Asia/Aqtobe", "/usr/share/zoneinfo/right/Asia/Ashgabat", "/usr/share/zoneinfo/right/Asia/Atyrau", "/usr/share/zoneinfo/right/Asia/Baghdad", "/usr/share/zoneinfo/right/Asia/Bahrain", "/usr/share/zoneinfo/right/Asia/Baku", "/usr/share/zoneinfo/right/Asia/Bangkok", "/usr/share/zoneinfo/right/Asia/Barnaul", "/usr/share/zoneinfo/right/Asia/Beirut", "/usr/share/zoneinfo/right/Asia/Bishkek", "/usr/share/zoneinfo/right/Asia/Brunei", "/usr/share/zoneinfo/right/Asia/Chita", "/usr/share/zoneinfo/right/Asia/Choibalsan", "/usr/share/zoneinfo/right/Asia/Colombo", "/usr/share/zoneinfo/right/Asia/Damascus", "/usr/share/zoneinfo/right/Asia/Dhaka", "/usr/share/zoneinfo/right/Asia/Dili", "/usr/share/zoneinfo/right/Asia/Dubai", "/usr/share/zoneinfo/right/Asia/Dushanbe", "/usr/share/zoneinfo/right/Asia/Famagusta", "/usr/share/zoneinfo/right/Asia/Gaza", "/usr/share/zoneinfo/right/Asia/Hebron", "/usr/share/zoneinfo/right/Asia/Ho_Chi_Minh", "/usr/share/zoneinfo/right/Asia/Hong_Kong", "/usr/share/zoneinfo/right/Asia/Hovd", "/usr/share/zoneinfo/right/Asia/Irkutsk", "/usr/share/zoneinfo/right/Asia/Jakarta", "/usr/share/zoneinfo/right/Asia/Jayapura", "/usr/share/zoneinfo/right/Asia/Jerusalem", "/usr/share/zoneinfo/right/Asia/Kabul", "/usr/share/zoneinfo/right/Asia/Kamchatka", "/usr/share/zoneinfo/right/Asia/Karachi", "/usr/share/zoneinfo/right/Asia/Kathmandu", "/usr/share/zoneinfo/right/Asia/Khandyga", "/usr/share/zoneinfo/right/Asia/Kolkata", "/usr/share/zoneinfo/right/Asia/Krasnoyarsk", "/usr/share/zoneinfo/right/Asia/Kuala_Lumpur", "/usr/share/zoneinfo/right/Asia/Kuching", "/usr/share/zoneinfo/right/Asia/Kuwait", "/usr/share/zoneinfo/right/Asia/Macau", "/usr/share/zoneinfo/right/Asia/Magadan", "/usr/share/zoneinfo/right/Asia/Makassar", "/usr/share/zoneinfo/right/Asia/Manila", "/usr/share/zoneinfo/right/Asia/Muscat", "/usr/share/zoneinfo/right/Asia/Nicosia", "/usr/share/zoneinfo/right/Asia/Novokuznetsk", "/usr/share/zoneinfo/right/Asia/Novosibirsk", "/usr/share/zoneinfo/right/Asia/Omsk", "/usr/share/zoneinfo/right/Asia/Oral", "/usr/share/zoneinfo/right/Asia/Phnom_Penh", "/usr/share/zoneinfo/right/Asia/Pontianak", "/usr/share/zoneinfo/right/Asia/Pyongyang", "/usr/share/zoneinfo/right/Asia/Qatar", "/usr/share/zoneinfo/right/Asia/Qostanay", "/usr/share/zoneinfo/right/Asia/Qyzylorda", "/usr/share/zoneinfo/right/Asia/Riyadh", "/usr/share/zoneinfo/right/Asia/Sakhalin", "/usr/share/zoneinfo/right/Asia/Samarkand", "/usr/share/zoneinfo/right/Asia/Seoul", "/usr/share/zoneinfo/right/Asia/Shanghai", "/usr/share/zoneinfo/right/Asia/Singapore", "/usr/share/zoneinfo/right/Asia/Srednekolymsk", "/usr/share/zoneinfo/right/Asia/Taipei", "/usr/share/zoneinfo/right/Asia/Tashkent", "/usr/share/zoneinfo/right/Asia/Tbilisi", "/usr/share/zoneinfo/right/Asia/Tehran", "/usr/share/zoneinfo/right/Asia/Thimphu", "/usr/share/zoneinfo/right/Asia/Tokyo", "/usr/share/zoneinfo/right/Asia/Tomsk", "/usr/share/zoneinfo/right/Asia/Ulaanbaatar", "/usr/share/zoneinfo/right/Asia/Urumqi", "/usr/share/zoneinfo/right/Asia/Ust-Nera", "/usr/share/zoneinfo/right/Asia/Vientiane", "/usr/share/zoneinfo/right/Asia/Vladivostok", "/usr/share/zoneinfo/right/Asia/Yakutsk", "/usr/share/zoneinfo/right/Asia/Yangon", "/usr/share/zoneinfo/right/Asia/Yekaterinburg", "/usr/share/zoneinfo/right/Asia/Yerevan", "/usr/share/zoneinfo/right/Atlantic/Azores", "/usr/share/zoneinfo/right/Atlantic/Bermuda", "/usr/share/zoneinfo/right/Atlantic/Canary", "/usr/share/zoneinfo/right/Atlantic/Cape_Verde", "/usr/share/zoneinfo/right/Atlantic/Faroe", "/usr/share/zoneinfo/right/Atlantic/Madeira", "/usr/share/zoneinfo/right/Atlantic/Reykjavik", "/usr/share/zoneinfo/right/Atlantic/South_Georgia", "/usr/share/zoneinfo/right/Atlantic/St_Helena", "/usr/share/zoneinfo/right/Atlantic/Stanley", "/usr/share/zoneinfo/right/Australia/Adelaide", "/usr/share/zoneinfo/right/Australia/Brisbane", "/usr/share/zoneinfo/right/Australia/Broken_Hill", "/usr/share/zoneinfo/right/Australia/Darwin", "/usr/share/zoneinfo/right/Australia/Eucla", "/usr/share/zoneinfo/right/Australia/Hobart", "/usr/share/zoneinfo/right/Australia/Lindeman", "/usr/share/zoneinfo/right/Australia/Lord_Howe", "/usr/share/zoneinfo/right/Australia/Melbourne", "/usr/share/zoneinfo/right/Australia/Perth", "/usr/share/zoneinfo/right/Australia/Sydney", "/usr/share/zoneinfo/right/CET", "/usr/share/zoneinfo/right/CST6CDT", "/usr/share/zoneinfo/right/EET", "/usr/share/zoneinfo/right/EST", "/usr/share/zoneinfo/right/EST5EDT", "/usr/share/zoneinfo/right/Etc/GMT", "/usr/share/zoneinfo/right/Etc/GMT+1", "/usr/share/zoneinfo/right/Etc/GMT+10", "/usr/share/zoneinfo/right/Etc/GMT+11", "/usr/share/zoneinfo/right/Etc/GMT+12", "/usr/share/zoneinfo/right/Etc/GMT+2", "/usr/share/zoneinfo/right/Etc/GMT+3", "/usr/share/zoneinfo/right/Etc/GMT+4", "/usr/share/zoneinfo/right/Etc/GMT+5", "/usr/share/zoneinfo/right/Etc/GMT+6", "/usr/share/zoneinfo/right/Etc/GMT+7", "/usr/share/zoneinfo/right/Etc/GMT+8", "/usr/share/zoneinfo/right/Etc/GMT+9", "/usr/share/zoneinfo/right/Etc/GMT-1", "/usr/share/zoneinfo/right/Etc/GMT-10", "/usr/share/zoneinfo/right/Etc/GMT-11", "/usr/share/zoneinfo/right/Etc/GMT-12", "/usr/share/zoneinfo/right/Etc/GMT-13", "/usr/share/zoneinfo/right/Etc/GMT-14", "/usr/share/zoneinfo/right/Etc/GMT-2", "/usr/share/zoneinfo/right/Etc/GMT-3", "/usr/share/zoneinfo/right/Etc/GMT-4", "/usr/share/zoneinfo/right/Etc/GMT-5", "/usr/share/zoneinfo/right/Etc/GMT-6", "/usr/share/zoneinfo/right/Etc/GMT-7", "/usr/share/zoneinfo/right/Etc/GMT-8", "/usr/share/zoneinfo/right/Etc/GMT-9", "/usr/share/zoneinfo/right/Etc/UTC", "/usr/share/zoneinfo/right/Europe/Amsterdam", "/usr/share/zoneinfo/right/Europe/Andorra", "/usr/share/zoneinfo/right/Europe/Astrakhan", "/usr/share/zoneinfo/right/Europe/Athens", "/usr/share/zoneinfo/right/Europe/Belgrade", "/usr/share/zoneinfo/right/Europe/Berlin", "/usr/share/zoneinfo/right/Europe/Brussels", "/usr/share/zoneinfo/right/Europe/Bucharest", "/usr/share/zoneinfo/right/Europe/Budapest", "/usr/share/zoneinfo/right/Europe/Chisinau", "/usr/share/zoneinfo/right/Europe/Copenhagen", "/usr/share/zoneinfo/right/Europe/Dublin", "/usr/share/zoneinfo/right/Europe/Gibraltar", "/usr/share/zoneinfo/right/Europe/Guernsey", "/usr/share/zoneinfo/right/Europe/Helsinki", "/usr/share/zoneinfo/right/Europe/Isle_of_Man", "/usr/share/zoneinfo/right/Europe/Istanbul", "/usr/share/zoneinfo/right/Europe/Jersey", "/usr/share/zoneinfo/right/Europe/Kaliningrad", "/usr/share/zoneinfo/right/Europe/Kirov", "/usr/share/zoneinfo/right/Europe/Kyiv", "/usr/share/zoneinfo/right/Europe/Lisbon", "/usr/share/zoneinfo/right/Europe/Ljubljana", "/usr/share/zoneinfo/right/Europe/London", "/usr/share/zoneinfo/right/Europe/Luxembourg", "/usr/share/zoneinfo/right/Europe/Madrid", "/usr/share/zoneinfo/right/Europe/Malta", "/usr/share/zoneinfo/right/Europe/Minsk", "/usr/share/zoneinfo/right/Europe/Monaco", "/usr/share/zoneinfo/right/Europe/Moscow", "/usr/share/zoneinfo/right/Europe/Oslo", "/usr/share/zoneinfo/right/Europe/Paris", "/usr/share/zoneinfo/right/Europe/Prague", "/usr/share/zoneinfo/right/Europe/Riga", "/usr/share/zoneinfo/right/Europe/Rome", "/usr/share/zoneinfo/right/Europe/Samara", "/usr/share/zoneinfo/right/Europe/Sarajevo", "/usr/share/zoneinfo/right/Europe/Saratov", "/usr/share/zoneinfo/right/Europe/Simferopol", "/usr/share/zoneinfo/right/Europe/Skopje", "/usr/share/zoneinfo/right/Europe/Sofia", "/usr/share/zoneinfo/right/Europe/Stockholm", "/usr/share/zoneinfo/right/Europe/Tallinn", "/usr/share/zoneinfo/right/Europe/Tirane", "/usr/share/zoneinfo/right/Europe/Ulyanovsk", "/usr/share/zoneinfo/right/Europe/Vaduz", "/usr/share/zoneinfo/right/Europe/Vienna", "/usr/share/zoneinfo/right/Europe/Vilnius", "/usr/share/zoneinfo/right/Europe/Volgograd", "/usr/share/zoneinfo/right/Europe/Warsaw", "/usr/share/zoneinfo/right/Europe/Zagreb", "/usr/share/zoneinfo/right/Europe/Zurich", "/usr/share/zoneinfo/right/Factory", "/usr/share/zoneinfo/right/HST", "/usr/share/zoneinfo/right/Indian/Antananarivo", "/usr/share/zoneinfo/right/Indian/Chagos", "/usr/share/zoneinfo/right/Indian/Christmas", "/usr/share/zoneinfo/right/Indian/Cocos", "/usr/share/zoneinfo/right/Indian/Comoro", "/usr/share/zoneinfo/right/Indian/Kerguelen", "/usr/share/zoneinfo/right/Indian/Mahe", "/usr/share/zoneinfo/right/Indian/Maldives", "/usr/share/zoneinfo/right/Indian/Mauritius", "/usr/share/zoneinfo/right/Indian/Mayotte", "/usr/share/zoneinfo/right/Indian/Reunion", "/usr/share/zoneinfo/right/MET", "/usr/share/zoneinfo/right/MST", "/usr/share/zoneinfo/right/MST7MDT", "/usr/share/zoneinfo/right/PST8PDT", "/usr/share/zoneinfo/right/Pacific/Apia", "/usr/share/zoneinfo/right/Pacific/Auckland", "/usr/share/zoneinfo/right/Pacific/Bougainville", "/usr/share/zoneinfo/right/Pacific/Chatham", "/usr/share/zoneinfo/right/Pacific/Chuuk", "/usr/share/zoneinfo/right/Pacific/Easter", "/usr/share/zoneinfo/right/Pacific/Efate", "/usr/share/zoneinfo/right/Pacific/Fakaofo", "/usr/share/zoneinfo/right/Pacific/Fiji", "/usr/share/zoneinfo/right/Pacific/Funafuti", "/usr/share/zoneinfo/right/Pacific/Galapagos", "/usr/share/zoneinfo/right/Pacific/Gambier", "/usr/share/zoneinfo/right/Pacific/Guadalcanal", "/usr/share/zoneinfo/right/Pacific/Guam", "/usr/share/zoneinfo/right/Pacific/Honolulu", "/usr/share/zoneinfo/right/Pacific/Kanton", "/usr/share/zoneinfo/right/Pacific/Kiritimati", "/usr/share/zoneinfo/right/Pacific/Kosrae", "/usr/share/zoneinfo/right/Pacific/Kwajalein", "/usr/share/zoneinfo/right/Pacific/Majuro", "/usr/share/zoneinfo/right/Pacific/Marquesas", "/usr/share/zoneinfo/right/Pacific/Midway", "/usr/share/zoneinfo/right/Pacific/Nauru", "/usr/share/zoneinfo/right/Pacific/Niue", "/usr/share/zoneinfo/right/Pacific/Norfolk", "/usr/share/zoneinfo/right/Pacific/Noumea", "/usr/share/zoneinfo/right/Pacific/Pago_Pago", "/usr/share/zoneinfo/right/Pacific/Palau", "/usr/share/zoneinfo/right/Pacific/Pitcairn", "/usr/share/zoneinfo/right/Pacific/Pohnpei", "/usr/share/zoneinfo/right/Pacific/Port_Moresby", "/usr/share/zoneinfo/right/Pacific/Rarotonga", "/usr/share/zoneinfo/right/Pacific/Saipan", "/usr/share/zoneinfo/right/Pacific/Tahiti", "/usr/share/zoneinfo/right/Pacific/Tarawa", "/usr/share/zoneinfo/right/Pacific/Tongatapu", "/usr/share/zoneinfo/right/Pacific/Wake", "/usr/share/zoneinfo/right/Pacific/Wallis", "/usr/share/zoneinfo/right/US/Pacific-New", "/usr/share/zoneinfo/right/WET", "/usr/share/zoneinfo/zone.tab", "/usr/share/zoneinfo/zone1970.tab" ], "AnalyzedBy": "dpkg" }, { "ID": "util-linux@2.33.1-0.1+deb10u1", "Name": "util-linux", "Identifier": { "PURL": "pkg:deb/debian/util-linux@2.33.1-0.1%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "5fe209c83a651cb6" }, "Version": "2.33.1", "Release": "0.1+deb10u1", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.33.1", "SrcRelease": "0.1+deb10u1", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "public-domain", "BSD-4-Clause", "MIT", "BSD-2-Clause", "BSD-3-Clause", "LGPL-2.0-or-later", "LGPL-2.1-or-later", "GPL-3.0-or-later", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "LaMont Jones \u003clamont@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "fdisk@2.33.1-0.1+deb10u1", "login@1:4.5-1.1" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/bin/dmesg", "/bin/findmnt", "/bin/lsblk", "/bin/more", "/bin/mountpoint", "/bin/su", "/bin/wdctl", "/lib/systemd/system/fstrim.service", "/lib/systemd/system/fstrim.timer", "/lib/udev/hwclock-set", "/lib/udev/rules.d/85-hwclock.rules", "/sbin/agetty", "/sbin/blkdiscard", "/sbin/blkid", "/sbin/blkzone", "/sbin/blockdev", "/sbin/chcpu", "/sbin/ctrlaltdel", "/sbin/findfs", "/sbin/fsck", "/sbin/fsck.cramfs", "/sbin/fsck.minix", "/sbin/fsfreeze", "/sbin/fstrim", "/sbin/hwclock", "/sbin/isosize", "/sbin/mkfs", "/sbin/mkfs.bfs", "/sbin/mkfs.cramfs", "/sbin/mkfs.minix", "/sbin/mkswap", "/sbin/pivot_root", "/sbin/raw", "/sbin/runuser", "/sbin/sulogin", "/sbin/swaplabel", "/sbin/switch_root", "/sbin/wipefs", "/sbin/zramctl", "/usr/bin/addpart", "/usr/bin/choom", "/usr/bin/chrt", "/usr/bin/delpart", "/usr/bin/fallocate", "/usr/bin/fincore", "/usr/bin/flock", "/usr/bin/getopt", "/usr/bin/ionice", "/usr/bin/ipcmk", "/usr/bin/ipcrm", "/usr/bin/ipcs", "/usr/bin/last", "/usr/bin/lscpu", "/usr/bin/lsipc", "/usr/bin/lslocks", "/usr/bin/lslogins", "/usr/bin/lsmem", "/usr/bin/lsns", "/usr/bin/mcookie", "/usr/bin/mesg", "/usr/bin/namei", "/usr/bin/nsenter", "/usr/bin/partx", "/usr/bin/prlimit", "/usr/bin/rename.ul", "/usr/bin/resizepart", "/usr/bin/rev", "/usr/bin/setarch", "/usr/bin/setpriv", "/usr/bin/setsid", "/usr/bin/setterm", "/usr/bin/taskset", "/usr/bin/unshare", "/usr/bin/utmpdump", "/usr/bin/whereis", "/usr/lib/mime/packages/util-linux", "/usr/sbin/chmem", "/usr/sbin/fdformat", "/usr/sbin/ldattach", "/usr/sbin/readprofile", "/usr/sbin/rtcwake", "/usr/share/bash-completion/completions/addpart", "/usr/share/bash-completion/completions/blkdiscard", "/usr/share/bash-completion/completions/blkid", "/usr/share/bash-completion/completions/blkzone", "/usr/share/bash-completion/completions/blockdev", "/usr/share/bash-completion/completions/chcpu", "/usr/share/bash-completion/completions/chmem", "/usr/share/bash-completion/completions/chrt", "/usr/share/bash-completion/completions/ctrlaltdel", "/usr/share/bash-completion/completions/delpart", "/usr/share/bash-completion/completions/dmesg", "/usr/share/bash-completion/completions/fallocate", "/usr/share/bash-completion/completions/fdformat", "/usr/share/bash-completion/completions/fincore", "/usr/share/bash-completion/completions/findfs", "/usr/share/bash-completion/completions/findmnt", "/usr/share/bash-completion/completions/flock", "/usr/share/bash-completion/completions/fsck", "/usr/share/bash-completion/completions/fsck.cramfs", "/usr/share/bash-completion/completions/fsck.minix", "/usr/share/bash-completion/completions/fsfreeze", "/usr/share/bash-completion/completions/fstrim", "/usr/share/bash-completion/completions/getopt", "/usr/share/bash-completion/completions/hwclock", "/usr/share/bash-completion/completions/ionice", "/usr/share/bash-completion/completions/ipcmk", "/usr/share/bash-completion/completions/ipcrm", "/usr/share/bash-completion/completions/ipcs", "/usr/share/bash-completion/completions/isosize", "/usr/share/bash-completion/completions/last", "/usr/share/bash-completion/completions/ldattach", "/usr/share/bash-completion/completions/lsblk", "/usr/share/bash-completion/completions/lscpu", "/usr/share/bash-completion/completions/lsipc", "/usr/share/bash-completion/completions/lslocks", "/usr/share/bash-completion/completions/lslogins", "/usr/share/bash-completion/completions/lsmem", "/usr/share/bash-completion/completions/lsns", "/usr/share/bash-completion/completions/mcookie", "/usr/share/bash-completion/completions/mesg", "/usr/share/bash-completion/completions/mkfs", "/usr/share/bash-completion/completions/mkfs.bfs", "/usr/share/bash-completion/completions/mkfs.cramfs", "/usr/share/bash-completion/completions/mkfs.minix", "/usr/share/bash-completion/completions/mkswap", "/usr/share/bash-completion/completions/more", "/usr/share/bash-completion/completions/mountpoint", "/usr/share/bash-completion/completions/namei", "/usr/share/bash-completion/completions/nsenter", "/usr/share/bash-completion/completions/partx", "/usr/share/bash-completion/completions/pivot_root", "/usr/share/bash-completion/completions/prlimit", "/usr/share/bash-completion/completions/raw", "/usr/share/bash-completion/completions/readprofile", "/usr/share/bash-completion/completions/resizepart", "/usr/share/bash-completion/completions/rev", "/usr/share/bash-completion/completions/rtcwake", "/usr/share/bash-completion/completions/setarch", "/usr/share/bash-completion/completions/setpriv", "/usr/share/bash-completion/completions/setsid", "/usr/share/bash-completion/completions/setterm", "/usr/share/bash-completion/completions/su", "/usr/share/bash-completion/completions/swaplabel", "/usr/share/bash-completion/completions/taskset", "/usr/share/bash-completion/completions/unshare", "/usr/share/bash-completion/completions/utmpdump", "/usr/share/bash-completion/completions/wdctl", "/usr/share/bash-completion/completions/whereis", "/usr/share/bash-completion/completions/wipefs", "/usr/share/bash-completion/completions/zramctl", "/usr/share/doc/util-linux/00-about-docs.txt", "/usr/share/doc/util-linux/AUTHORS.gz", "/usr/share/doc/util-linux/NEWS.Debian.gz", "/usr/share/doc/util-linux/PAM-configuration.txt", "/usr/share/doc/util-linux/README.Debian", "/usr/share/doc/util-linux/blkid.txt", "/usr/share/doc/util-linux/cal.txt", "/usr/share/doc/util-linux/changelog.Debian.gz", "/usr/share/doc/util-linux/changelog.gz", "/usr/share/doc/util-linux/col.txt", "/usr/share/doc/util-linux/copyright", "/usr/share/doc/util-linux/deprecated.txt", "/usr/share/doc/util-linux/examples/filesystems", "/usr/share/doc/util-linux/examples/fstab", "/usr/share/doc/util-linux/examples/fstab.example2", "/usr/share/doc/util-linux/examples/getopt-parse.bash", "/usr/share/doc/util-linux/examples/getopt-parse.tcsh", "/usr/share/doc/util-linux/examples/motd", "/usr/share/doc/util-linux/examples/securetty", "/usr/share/doc/util-linux/examples/shells", "/usr/share/doc/util-linux/examples/udev-raw.rules", "/usr/share/doc/util-linux/getopt.txt", "/usr/share/doc/util-linux/getopt_changelog.txt", "/usr/share/doc/util-linux/howto-build-sys.txt", "/usr/share/doc/util-linux/howto-compilation.txt", "/usr/share/doc/util-linux/howto-contribute.txt.gz", "/usr/share/doc/util-linux/howto-debug.txt", "/usr/share/doc/util-linux/howto-man-page.txt.gz", "/usr/share/doc/util-linux/howto-pull-request.txt.gz", "/usr/share/doc/util-linux/howto-tests.txt", "/usr/share/doc/util-linux/howto-usage-function.txt.gz", "/usr/share/doc/util-linux/hwclock.txt", "/usr/share/doc/util-linux/modems-with-agetty.txt", "/usr/share/doc/util-linux/mount.txt", "/usr/share/doc/util-linux/parse-date.txt.gz", "/usr/share/doc/util-linux/pg.txt", "/usr/share/doc/util-linux/poeigl.txt.gz", "/usr/share/doc/util-linux/release-schedule.txt", "/usr/share/doc/util-linux/releases/v2.13-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.14-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.15-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.16-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.17-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.18-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.19-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.20-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.21-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.22-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.23-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.24-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.25-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.26-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.27-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.28-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.29-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.30-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.31-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.32-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.33-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.33.1-ReleaseNotes", "/usr/share/lintian/overrides/util-linux", "/usr/share/man/man1/choom.1.gz", "/usr/share/man/man1/chrt.1.gz", "/usr/share/man/man1/dmesg.1.gz", "/usr/share/man/man1/fallocate.1.gz", "/usr/share/man/man1/fincore.1.gz", "/usr/share/man/man1/flock.1.gz", "/usr/share/man/man1/getopt.1.gz", "/usr/share/man/man1/ionice.1.gz", "/usr/share/man/man1/ipcmk.1.gz", "/usr/share/man/man1/ipcrm.1.gz", "/usr/share/man/man1/ipcs.1.gz", "/usr/share/man/man1/last.1.gz", "/usr/share/man/man1/lscpu.1.gz", "/usr/share/man/man1/lsipc.1.gz", "/usr/share/man/man1/lslogins.1.gz", "/usr/share/man/man1/lsmem.1.gz", "/usr/share/man/man1/mcookie.1.gz", "/usr/share/man/man1/mesg.1.gz", "/usr/share/man/man1/more.1.gz", "/usr/share/man/man1/mountpoint.1.gz", "/usr/share/man/man1/namei.1.gz", "/usr/share/man/man1/nsenter.1.gz", "/usr/share/man/man1/prlimit.1.gz", "/usr/share/man/man1/rename.ul.1.gz", "/usr/share/man/man1/rev.1.gz", "/usr/share/man/man1/runuser.1.gz", "/usr/share/man/man1/setpriv.1.gz", "/usr/share/man/man1/setsid.1.gz", "/usr/share/man/man1/setterm.1.gz", "/usr/share/man/man1/su.1.gz", "/usr/share/man/man1/taskset.1.gz", "/usr/share/man/man1/unshare.1.gz", "/usr/share/man/man1/utmpdump.1.gz", "/usr/share/man/man1/whereis.1.gz", "/usr/share/man/man5/adjtime_config.5.gz", "/usr/share/man/man5/hwclock.5.gz", "/usr/share/man/man5/terminal-colors.d.5.gz", "/usr/share/man/man8/addpart.8.gz", "/usr/share/man/man8/agetty.8.gz", "/usr/share/man/man8/blkdiscard.8.gz", "/usr/share/man/man8/blkid.8.gz", "/usr/share/man/man8/blkzone.8.gz", "/usr/share/man/man8/blockdev.8.gz", "/usr/share/man/man8/chcpu.8.gz", "/usr/share/man/man8/chmem.8.gz", "/usr/share/man/man8/ctrlaltdel.8.gz", "/usr/share/man/man8/delpart.8.gz", "/usr/share/man/man8/fdformat.8.gz", "/usr/share/man/man8/findfs.8.gz", "/usr/share/man/man8/findmnt.8.gz", "/usr/share/man/man8/fsck.8.gz", "/usr/share/man/man8/fsck.cramfs.8.gz", "/usr/share/man/man8/fsck.minix.8.gz", "/usr/share/man/man8/fsfreeze.8.gz", "/usr/share/man/man8/fstrim.8.gz", "/usr/share/man/man8/hwclock.8.gz", "/usr/share/man/man8/isosize.8.gz", "/usr/share/man/man8/ldattach.8.gz", "/usr/share/man/man8/lsblk.8.gz", "/usr/share/man/man8/lslocks.8.gz", "/usr/share/man/man8/lsns.8.gz", "/usr/share/man/man8/mkfs.8.gz", "/usr/share/man/man8/mkfs.bfs.8.gz", "/usr/share/man/man8/mkfs.cramfs.8.gz", "/usr/share/man/man8/mkfs.minix.8.gz", "/usr/share/man/man8/mkswap.8.gz", "/usr/share/man/man8/partx.8.gz", "/usr/share/man/man8/pivot_root.8.gz", "/usr/share/man/man8/raw.8.gz", "/usr/share/man/man8/readprofile.8.gz", "/usr/share/man/man8/resizepart.8.gz", "/usr/share/man/man8/rtcwake.8.gz", "/usr/share/man/man8/setarch.8.gz", "/usr/share/man/man8/sulogin.8.gz", "/usr/share/man/man8/swaplabel.8.gz", "/usr/share/man/man8/switch_root.8.gz", "/usr/share/man/man8/wdctl.8.gz", "/usr/share/man/man8/wipefs.8.gz", "/usr/share/man/man8/zramctl.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "zlib1g@1:1.2.11.dfsg-1+deb10u2", "Name": "zlib1g", "Identifier": { "PURL": "pkg:deb/debian/zlib1g@1.2.11.dfsg-1%2Bdeb10u2?arch=amd64\u0026distro=debian-10.13\u0026epoch=1", "UID": "a2867790d533e25a" }, "Version": "1.2.11.dfsg", "Release": "1+deb10u2", "Epoch": 1, "Arch": "amd64", "SrcName": "zlib", "SrcVersion": "1.2.11.dfsg", "SrcRelease": "1+deb10u2", "SrcEpoch": 1, "Licenses": [ "Zlib" ], "Maintainer": "Mark Brown \u003cbroonie@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.28-10+deb10u3" ], "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "InstalledFiles": [ "/lib/x86_64-linux-gnu/libz.so.1.2.11", "/usr/share/doc/zlib1g/changelog.Debian.gz", "/usr/share/doc/zlib1g/changelog.gz", "/usr/share/doc/zlib1g/copyright" ], "AnalyzedBy": "dpkg" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2022-1304", "PkgID": "e2fsprogs@1.44.5-1+deb10u3", "PkgName": "e2fsprogs", "PkgIdentifier": { "PURL": "pkg:deb/debian/e2fsprogs@1.44.5-1%2Bdeb10u3?arch=amd64\u0026distro=debian-10.13", "UID": "9d0af2b1fc98ad2b" }, "InstalledVersion": "1.44.5-1+deb10u3", "Status": "affected", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-1304", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a1956aa3702a62c95c169df20be63ff8c6ea94fd6ecb1973998b9f60df6288cf", "Title": "e2fsprogs: out-of-bounds read/write via crafted filesystem", "Description": "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.", "Severity": "HIGH", "CweIDs": [ "CWE-125", "CWE-787" ], "VendorSeverity": { "alma": 2, "amazon": 2, "bottlerocket": 2, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V2Vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V2Score": 6.8, "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H", "V3Score": 5.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304", "https://access.redhat.com/errata/RHSA-2022:8361", "https://access.redhat.com/security/cve/CVE-2022-1304", "https://bugzilla.redhat.com/2069726", "https://bugzilla.redhat.com/show_bug.cgi?id=2069726", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://cert-portal.siemens.com/productcert/html/ssa-419740.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304", "https://errata.almalinux.org/9/ALSA-2022-8361.html", "https://errata.rockylinux.org/RLSA-2022:8361", "https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-qh9x-999x-wqhr", "https://linux.oracle.com/cve/CVE-2022-1304.html", "https://linux.oracle.com/errata/ELSA-2024-12731.html", "https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html", "https://marc.info/?l=linux-ext4\u0026m=165056234501732\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2022-1304", "https://security.netapp.com/advisory/ntap-20241122-0010/", "https://ubuntu.com/security/notices/USN-5464-1", "https://www.cve.org/CVERecord?id=CVE-2022-1304" ], "PublishedDate": "2022-04-14T21:15:08.49Z", "LastModifiedDate": "2026-10-14T13:17:18.393Z" }, { "VulnerabilityID": "CVE-2018-12886", "PkgID": "gcc-8-base@8.3.0-6", "PkgName": "gcc-8-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/gcc-8-base@8.3.0-6?arch=amd64\u0026distro=debian-10.13", "UID": "58ea355d15f00ff2" }, "InstalledVersion": "8.3.0-6", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2018-12886", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:13aea237bb6b9627d34e848b5c20f854af892104910dadecbaca04a4c37082f4", "Title": "gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass", "Description": "stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against.", "Severity": "HIGH", "CweIDs": [ "CWE-209" ], "VendorSeverity": { "nvd": 3, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V2Vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "V3Vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V2Score": 6.8, "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "V3Score": 6.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2018-12886", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://cert-portal.siemens.com/productcert/html/ssa-565386.html", "https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=89d7557202d25a393666ac4c0f7dbdab31e452a2", "https://gcc.gnu.org/viewcvs/gcc/trunk/gcc/config/arm/arm-protos.h?revision=266379\u0026view=markup", "https://nvd.nist.gov/vuln/detail/CVE-2018-12886", "https://www.cve.org/CVERecord?id=CVE-2018-12886", "https://www.gnu.org/software/gcc/gcc-8/changes.html" ], "PublishedDate": "2019-05-22T19:29:00.297Z", "LastModifiedDate": "2026-10-14T07:16:41.957Z" }, { "VulnerabilityID": "CVE-2019-15847", "PkgID": "gcc-8-base@8.3.0-6", "PkgName": "gcc-8-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/gcc-8-base@8.3.0-6?arch=amd64\u0026distro=debian-10.13", "UID": "58ea355d15f00ff2" }, "InstalledVersion": "8.3.0-6", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-15847", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2da8f9259934d1236dcadff2f22a839250db5a70504e96660ac527fdd650b52f", "Title": "gcc: POWER9 \"DARN\" RNG intrinsic produces repeated output", "Description": "The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.", "Severity": "HIGH", "CweIDs": [ "CWE-331" ], "VendorSeverity": { "cbl-mariner": 3, "nvd": 3, "oracle-oval": 2, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V2Vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V2Score": 5, "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00056.html", "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00057.html", "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00058.html", "https://access.redhat.com/security/cve/CVE-2019-15847", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91481", "https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=457dac402027dd7e14543fbd59a75858422cf6c6", "https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=e99bfdd2a8db732ea84cf0a6486707e5e821ad7e", "https://linux.oracle.com/cve/CVE-2019-15847.html", "https://linux.oracle.com/errata/ELSA-2020-1864.html", "https://nvd.nist.gov/vuln/detail/CVE-2019-15847", "https://www.cve.org/CVERecord?id=CVE-2019-15847" ], "PublishedDate": "2019-09-02T23:15:10.837Z", "LastModifiedDate": "2026-10-14T07:16:46.907Z" }, { "VulnerabilityID": "CVE-2020-1751", "PkgID": "libc-bin@2.28-10+deb10u3", "PkgName": "libc-bin", "PkgIdentifier": { "PURL": "pkg:deb/debian/libc-bin@2.28-10%2Bdeb10u3?arch=amd64\u0026distro=debian-10.13", "UID": "8f6e1d8a417dc238" }, "InstalledVersion": "2.28-10+deb10u3", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2020-1751", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:c1bd364ec6e300f87cfff539235492fc40b530ce3e0086a0d10be18a23631fe3", "Title": "glibc: array overflow in backtrace functions for powerpc", "Description": "An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "cbl-mariner": 3, "nvd": 3, "oracle-oval": 2, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V2Vector": "AV:L/AC:M/Au:N/C:P/I:P/A:C", "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V2Score": 5.9, "V3Score": 7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2020-1751", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1751", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://linux.oracle.com/cve/CVE-2020-1751.html", "https://linux.oracle.com/errata/ELSA-2020-4444.html", "https://nvd.nist.gov/vuln/detail/CVE-2020-1751", "https://security.gentoo.org/glsa/202006-04", "https://security.netapp.com/advisory/ntap-20200430-0002/", "https://sourceware.org/bugzilla/show_bug.cgi?id=25423", "https://ubuntu.com/security/notices/USN-4416-1", "https://usn.ubuntu.com/4416-1/", "https://www.cve.org/CVERecord?id=CVE-2020-1751" ], "PublishedDate": "2020-04-17T19:15:14.437Z", "LastModifiedDate": "2026-10-14T09:17:18.64Z" }, { "VulnerabilityID": "CVE-2024-33599", "VendorIDs": [ "DLA-3850-1" ], "PkgID": "libc-bin@2.28-10+deb10u3", "PkgName": "libc-bin", "PkgIdentifier": { "PURL": "pkg:deb/debian/libc-bin@2.28-10%2Bdeb10u3?arch=amd64\u0026distro=debian-10.13", "UID": "8f6e1d8a417dc238" }, "InstalledVersion": "2.28-10+deb10u3", "FixedVersion": "2.28-10+deb10u4", "Status": "fixed", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-33599", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:611c97836d646cacba662d8381bbe6b818b173741622a51a4cae7ae69b31805e", "Title": "glibc: stack-based buffer overflow in netgroup cache", "Description": "nscd: Stack-based buffer overflow in netgroup cache\n\nIf the Name Service Cache Daemon's (nscd) fixed size cache is exhausted\nby client requests then a subsequent client request for netgroup data\nmay result in a stack-based buffer overflow. This flaw was introduced\nin glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.", "Severity": "HIGH", "CweIDs": [ "CWE-121" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "cbl-mariner": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H", "V3Score": 7.6 } }, "References": [ "http://www.openwall.com/lists/oss-security/2024/07/22/5", "https://access.redhat.com/errata/RHSA-2024:3339", "https://access.redhat.com/security/cve/CVE-2024-33599", "https://bugzilla.redhat.com/2273404", "https://bugzilla.redhat.com/2277202", "https://bugzilla.redhat.com/2277204", "https://bugzilla.redhat.com/2277205", "https://bugzilla.redhat.com/2277206", "https://bugzilla.redhat.com/show_bug.cgi?id=2273404", "https://bugzilla.redhat.com/show_bug.cgi?id=2277202", "https://bugzilla.redhat.com/show_bug.cgi?id=2277204", "https://bugzilla.redhat.com/show_bug.cgi?id=2277205", "https://bugzilla.redhat.com/show_bug.cgi?id=2277206", "https://cert-portal.siemens.com/productcert/html/ssa-082556.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602", "https://errata.almalinux.org/9/ALSA-2024-3339.html", "https://errata.rockylinux.org/RLSA-2024:3339", "https://inbox.sourceware.org/libc-alpha/cover.1713974801.git.fweimer@redhat.com/", "https://linux.oracle.com/cve/CVE-2024-33599.html", "https://linux.oracle.com/errata/ELSA-2024-3588.html", "https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html", "https://nvd.nist.gov/vuln/detail/CVE-2024-33599", "https://security.netapp.com/advisory/ntap-20240524-0011/", "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0005", "https://ubuntu.com/security/notices/USN-6804-1", "https://www.cve.org/CVERecord?id=CVE-2024-33599", "https://www.openwall.com/lists/oss-security/2024/04/24/2" ], "PublishedDate": "2024-05-06T20:15:11.437Z", "LastModifiedDate": "2026-06-17T07:32:03.82Z" }, { "VulnerabilityID": "CVE-2020-1751", "PkgID": "libc6@2.28-10+deb10u3", "PkgName": "libc6", "PkgIdentifier": { "PURL": "pkg:deb/debian/libc6@2.28-10%2Bdeb10u3?arch=amd64\u0026distro=debian-10.13", "UID": "202087dbc6a9c4cc" }, "InstalledVersion": "2.28-10+deb10u3", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2020-1751", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d5e120ba1cfdc867b6b631660dc8d40d34281635a1bab94ca1e261318540aa0a", "Title": "glibc: array overflow in backtrace functions for powerpc", "Description": "An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "cbl-mariner": 3, "nvd": 3, "oracle-oval": 2, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V2Vector": "AV:L/AC:M/Au:N/C:P/I:P/A:C", "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V2Score": 5.9, "V3Score": 7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2020-1751", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1751", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://linux.oracle.com/cve/CVE-2020-1751.html", "https://linux.oracle.com/errata/ELSA-2020-4444.html", "https://nvd.nist.gov/vuln/detail/CVE-2020-1751", "https://security.gentoo.org/glsa/202006-04", "https://security.netapp.com/advisory/ntap-20200430-0002/", "https://sourceware.org/bugzilla/show_bug.cgi?id=25423", "https://ubuntu.com/security/notices/USN-4416-1", "https://usn.ubuntu.com/4416-1/", "https://www.cve.org/CVERecord?id=CVE-2020-1751" ], "PublishedDate": "2020-04-17T19:15:14.437Z", "LastModifiedDate": "2026-10-14T09:17:18.64Z" }, { "VulnerabilityID": "CVE-2024-33599", "VendorIDs": [ "DLA-3850-1" ], "PkgID": "libc6@2.28-10+deb10u3", "PkgName": "libc6", "PkgIdentifier": { "PURL": "pkg:deb/debian/libc6@2.28-10%2Bdeb10u3?arch=amd64\u0026distro=debian-10.13", "UID": "202087dbc6a9c4cc" }, "InstalledVersion": "2.28-10+deb10u3", "FixedVersion": "2.28-10+deb10u4", "Status": "fixed", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-33599", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5fa772edb40822ce96a96048536f5b49c24057d7d6d20850ae99e58c6dff16b4", "Title": "glibc: stack-based buffer overflow in netgroup cache", "Description": "nscd: Stack-based buffer overflow in netgroup cache\n\nIf the Name Service Cache Daemon's (nscd) fixed size cache is exhausted\nby client requests then a subsequent client request for netgroup data\nmay result in a stack-based buffer overflow. This flaw was introduced\nin glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.", "Severity": "HIGH", "CweIDs": [ "CWE-121" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "cbl-mariner": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H", "V3Score": 7.6 } }, "References": [ "http://www.openwall.com/lists/oss-security/2024/07/22/5", "https://access.redhat.com/errata/RHSA-2024:3339", "https://access.redhat.com/security/cve/CVE-2024-33599", "https://bugzilla.redhat.com/2273404", "https://bugzilla.redhat.com/2277202", "https://bugzilla.redhat.com/2277204", "https://bugzilla.redhat.com/2277205", "https://bugzilla.redhat.com/2277206", "https://bugzilla.redhat.com/show_bug.cgi?id=2273404", "https://bugzilla.redhat.com/show_bug.cgi?id=2277202", "https://bugzilla.redhat.com/show_bug.cgi?id=2277204", "https://bugzilla.redhat.com/show_bug.cgi?id=2277205", "https://bugzilla.redhat.com/show_bug.cgi?id=2277206", "https://cert-portal.siemens.com/productcert/html/ssa-082556.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602", "https://errata.almalinux.org/9/ALSA-2024-3339.html", "https://errata.rockylinux.org/RLSA-2024:3339", "https://inbox.sourceware.org/libc-alpha/cover.1713974801.git.fweimer@redhat.com/", "https://linux.oracle.com/cve/CVE-2024-33599.html", "https://linux.oracle.com/errata/ELSA-2024-3588.html", "https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html", "https://nvd.nist.gov/vuln/detail/CVE-2024-33599", "https://security.netapp.com/advisory/ntap-20240524-0011/", "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0005", "https://ubuntu.com/security/notices/USN-6804-1", "https://www.cve.org/CVERecord?id=CVE-2024-33599", "https://www.openwall.com/lists/oss-security/2024/04/24/2" ], "PublishedDate": "2024-05-06T20:15:11.437Z", "LastModifiedDate": "2026-06-17T07:32:03.82Z" }, { "VulnerabilityID": "CVE-2022-1304", "PkgID": "libcom-err2@1.44.5-1+deb10u3", "PkgName": "libcom-err2", "PkgIdentifier": { "PURL": "pkg:deb/debian/libcom-err2@1.44.5-1%2Bdeb10u3?arch=amd64\u0026distro=debian-10.13", "UID": "46eeae54b7ed62de" }, "InstalledVersion": "1.44.5-1+deb10u3", "Status": "affected", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-1304", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:739e48728a280a972b5ed3e932d2dff068be3653819a68bb9a22f4b372d82fb4", "Title": "e2fsprogs: out-of-bounds read/write via crafted filesystem", "Description": "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.", "Severity": "HIGH", "CweIDs": [ "CWE-125", "CWE-787" ], "VendorSeverity": { "alma": 2, "amazon": 2, "bottlerocket": 2, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V2Vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V2Score": 6.8, "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H", "V3Score": 5.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304", "https://access.redhat.com/errata/RHSA-2022:8361", "https://access.redhat.com/security/cve/CVE-2022-1304", "https://bugzilla.redhat.com/2069726", "https://bugzilla.redhat.com/show_bug.cgi?id=2069726", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://cert-portal.siemens.com/productcert/html/ssa-419740.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304", "https://errata.almalinux.org/9/ALSA-2022-8361.html", "https://errata.rockylinux.org/RLSA-2022:8361", "https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-qh9x-999x-wqhr", "https://linux.oracle.com/cve/CVE-2022-1304.html", "https://linux.oracle.com/errata/ELSA-2024-12731.html", "https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html", "https://marc.info/?l=linux-ext4\u0026m=165056234501732\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2022-1304", "https://security.netapp.com/advisory/ntap-20241122-0010/", "https://ubuntu.com/security/notices/USN-5464-1", "https://www.cve.org/CVERecord?id=CVE-2022-1304" ], "PublishedDate": "2022-04-14T21:15:08.49Z", "LastModifiedDate": "2026-10-14T13:17:18.393Z" }, { "VulnerabilityID": "CVE-2019-8457", "PkgID": "libdb5.3@5.3.28+dfsg1-0.5", "PkgName": "libdb5.3", "PkgIdentifier": { "PURL": "pkg:deb/debian/libdb5.3@5.3.28%2Bdfsg1-0.5?arch=amd64\u0026distro=debian-10.13", "UID": "adf8517bb84bd667" }, "InstalledVersion": "5.3.28+dfsg1-0.5", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-8457", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:c22a8477b1e21f056027570f82c6c3447e85d4d227aab4a3dba77f758955225b", "Title": "sqlite: heap out-of-bound read in function rtreenode()", "Description": "SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.", "Severity": "CRITICAL", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "azure": 4, "nvd": 4, "oracle-oval": 2, "photon": 4, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V2Vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V2Score": 7.5, "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00074.html", "https://access.redhat.com/security/cve/CVE-2019-8457", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10365", "https://linux.oracle.com/cve/CVE-2019-8457.html", "https://linux.oracle.com/errata/ELSA-2020-1810.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OPKYSWCOM3CL66RI76TYVIG6TJ263RXH/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SJPFGA45DI4F5MCF2OAACGH3HQOF4G3M/", "https://nvd.nist.gov/vuln/detail/CVE-2019-8457", "https://security.netapp.com/advisory/ntap-20190606-0002/", "https://ubuntu.com/security/notices/USN-4004-1", "https://ubuntu.com/security/notices/USN-4004-2", "https://ubuntu.com/security/notices/USN-4019-1", "https://ubuntu.com/security/notices/USN-4019-2", "https://usn.ubuntu.com/4004-1/", "https://usn.ubuntu.com/4004-2/", "https://usn.ubuntu.com/4019-1/", "https://usn.ubuntu.com/4019-2/", "https://www.cve.org/CVERecord?id=CVE-2019-8457", "https://www.oracle.com/security-alerts/cpuapr2020.html", "https://www.oracle.com/security-alerts/cpujan2020.html", "https://www.oracle.com/security-alerts/cpujul2020.html", "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html", "https://www.sqlite.org/releaselog/3_28_0.html", "https://www.sqlite.org/src/info/90acdbfce9c08858" ], "PublishedDate": "2019-05-30T16:29:01.84Z", "LastModifiedDate": "2026-10-14T07:16:56.763Z" }, { "VulnerabilityID": "CVE-2022-1304", "PkgID": "libext2fs2@1.44.5-1+deb10u3", "PkgName": "libext2fs2", "PkgIdentifier": { "PURL": "pkg:deb/debian/libext2fs2@1.44.5-1%2Bdeb10u3?arch=amd64\u0026distro=debian-10.13", "UID": "bd5c77bae463e2e8" }, "InstalledVersion": "1.44.5-1+deb10u3", "Status": "affected", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-1304", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:c99254895623505e856c97b978dab52423c01942e54ee63fdbff26e6a701309b", "Title": "e2fsprogs: out-of-bounds read/write via crafted filesystem", "Description": "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.", "Severity": "HIGH", "CweIDs": [ "CWE-125", "CWE-787" ], "VendorSeverity": { "alma": 2, "amazon": 2, "bottlerocket": 2, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V2Vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V2Score": 6.8, "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H", "V3Score": 5.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304", "https://access.redhat.com/errata/RHSA-2022:8361", "https://access.redhat.com/security/cve/CVE-2022-1304", "https://bugzilla.redhat.com/2069726", "https://bugzilla.redhat.com/show_bug.cgi?id=2069726", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://cert-portal.siemens.com/productcert/html/ssa-419740.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304", "https://errata.almalinux.org/9/ALSA-2022-8361.html", "https://errata.rockylinux.org/RLSA-2022:8361", "https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-qh9x-999x-wqhr", "https://linux.oracle.com/cve/CVE-2022-1304.html", "https://linux.oracle.com/errata/ELSA-2024-12731.html", "https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html", "https://marc.info/?l=linux-ext4\u0026m=165056234501732\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2022-1304", "https://security.netapp.com/advisory/ntap-20241122-0010/", "https://ubuntu.com/security/notices/USN-5464-1", "https://www.cve.org/CVERecord?id=CVE-2022-1304" ], "PublishedDate": "2022-04-14T21:15:08.49Z", "LastModifiedDate": "2026-10-14T13:17:18.393Z" }, { "VulnerabilityID": "CVE-2018-12886", "PkgID": "libgcc1@1:8.3.0-6", "PkgName": "libgcc1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libgcc1@8.3.0-6?arch=amd64\u0026distro=debian-10.13\u0026epoch=1", "UID": "dd91de618ef2f1f3" }, "InstalledVersion": "1:8.3.0-6", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2018-12886", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ca73769c67185b91e82a78eefc5bf3da1e09ed635c61ca050bdd9ff88c005ca6", "Title": "gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass", "Description": "stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against.", "Severity": "HIGH", "CweIDs": [ "CWE-209" ], "VendorSeverity": { "nvd": 3, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V2Vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "V3Vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V2Score": 6.8, "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "V3Score": 6.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2018-12886", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://cert-portal.siemens.com/productcert/html/ssa-565386.html", "https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=89d7557202d25a393666ac4c0f7dbdab31e452a2", "https://gcc.gnu.org/viewcvs/gcc/trunk/gcc/config/arm/arm-protos.h?revision=266379\u0026view=markup", "https://nvd.nist.gov/vuln/detail/CVE-2018-12886", "https://www.cve.org/CVERecord?id=CVE-2018-12886", "https://www.gnu.org/software/gcc/gcc-8/changes.html" ], "PublishedDate": "2019-05-22T19:29:00.297Z", "LastModifiedDate": "2026-10-14T07:16:41.957Z" }, { "VulnerabilityID": "CVE-2019-15847", "PkgID": "libgcc1@1:8.3.0-6", "PkgName": "libgcc1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libgcc1@8.3.0-6?arch=amd64\u0026distro=debian-10.13\u0026epoch=1", "UID": "dd91de618ef2f1f3" }, "InstalledVersion": "1:8.3.0-6", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-15847", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3689fdac52eb533f1e10decbbf6645e5b00b031fc03ecb62b84724476eee36fd", "Title": "gcc: POWER9 \"DARN\" RNG intrinsic produces repeated output", "Description": "The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.", "Severity": "HIGH", "CweIDs": [ "CWE-331" ], "VendorSeverity": { "cbl-mariner": 3, "nvd": 3, "oracle-oval": 2, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V2Vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V2Score": 5, "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00056.html", "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00057.html", "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00058.html", "https://access.redhat.com/security/cve/CVE-2019-15847", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91481", "https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=457dac402027dd7e14543fbd59a75858422cf6c6", "https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=e99bfdd2a8db732ea84cf0a6486707e5e821ad7e", "https://linux.oracle.com/cve/CVE-2019-15847.html", "https://linux.oracle.com/errata/ELSA-2020-1864.html", "https://nvd.nist.gov/vuln/detail/CVE-2019-15847", "https://www.cve.org/CVERecord?id=CVE-2019-15847" ], "PublishedDate": "2019-09-02T23:15:10.837Z", "LastModifiedDate": "2026-10-14T07:16:46.907Z" }, { "VulnerabilityID": "CVE-2021-33560", "PkgID": "libgcrypt20@1.8.4-5+deb10u1", "PkgName": "libgcrypt20", "PkgIdentifier": { "PURL": "pkg:deb/debian/libgcrypt20@1.8.4-5%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "9fa83d5237ab65ca" }, "InstalledVersion": "1.8.4-5+deb10u1", "Status": "affected", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2021-33560", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6863e6d4ec7bfe23379ec24655a3be0d7f415bba6438052ebedd72d7ea326be6", "Title": "libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm", "Description": "Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.", "Severity": "HIGH", "CweIDs": [ "CWE-203", "CWE-325" ], "VendorSeverity": { "alma": 2, "amazon": 2, "cbl-mariner": 3, "julia": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 }, "nvd": { "V2Vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V2Score": 5, "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-33560.json", "https://access.redhat.com/security/cve/CVE-2021-33560", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://dev.gnupg.org/T5305", "https://dev.gnupg.org/T5328", "https://dev.gnupg.org/T5466", "https://dev.gnupg.org/rCe8b7f10be275bcedb5fc05ed4837a89bfd605c61", "https://eprint.iacr.org/2021/923", "https://errata.almalinux.org/8/ALSA-2021-4409.html", "https://linux.oracle.com/cve/CVE-2021-33560.html", "https://linux.oracle.com/errata/ELSA-2022-9263.html", "https://lists.debian.org/debian-lts-announce/2021/06/msg00021.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BKKTOIGFW2SGN3DO2UHHVZ7MJSYN4AAB/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R7OAPCUGPF3VLA7QAJUQSL255D4ITVTL/", "https://nvd.nist.gov/vuln/detail/CVE-2021-33560", "https://security.gentoo.org/glsa/202210-13", "https://ubuntu.com/security/notices/USN-5080-1", "https://ubuntu.com/security/notices/USN-5080-2", "https://www.cve.org/CVERecord?id=CVE-2021-33560", "https://www.oracle.com/security-alerts/cpuapr2022.html", "https://www.oracle.com/security-alerts/cpujan2022.html", "https://www.oracle.com/security-alerts/cpujul2022.html", "https://www.oracle.com/security-alerts/cpuoct2021.html" ], "PublishedDate": "2021-06-08T11:15:07.767Z", "LastModifiedDate": "2026-10-14T12:17:12.267Z" }, { "VulnerabilityID": "CVE-2019-12290", "PkgID": "libidn2-0@2.0.5-1+deb10u1", "PkgName": "libidn2-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libidn2-0@2.0.5-1%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "f2609d77e13b8623" }, "InstalledVersion": "2.0.5-1+deb10u1", "Status": "affected", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-12290", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f519d725c09bc6a9ee6bf77e1420e0d37b23c21b9a5cb40e9388d4cf4f4343f5", "Title": "GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specifi ...", "Description": "GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in some circumstances for one domain to impersonate another. By creating a malicious domain that matches a target domain except for the inclusion of certain punycoded Unicode characters (that would be discarded when converted first to a Unicode label and then back to an ASCII label), arbitrary domains can be impersonated.", "Severity": "HIGH", "CweIDs": [ "CWE-20" ], "VendorSeverity": { "amazon": 2, "nvd": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V2Vector": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V2Score": 5, "V3Score": 7.5 } }, "References": [ "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00008.html", "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00009.html", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://gitlab.com/libidn/libidn2/commit/241e8f486134793cb0f4a5b0e5817a97883401f5", "https://gitlab.com/libidn/libidn2/commit/614117ef6e4c60e1950d742e3edf0a0ef8d389de", "https://gitlab.com/libidn/libidn2/merge_requests/71", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UFT76Y7OSGPZV3EBEHD6ISVUM3DLARM/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXDKYWFV6N2HHVSE67FFDM7G3FEL2ZNE/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ONG3GJRRJO35COPGVJXXSZLU4J5Y42AT/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RSI4TI2JTQWQ3YEUX5X36GTVGKO4QKZ5/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6ZXL2RDNQRAHCMKWPOMJFKYJ344X4HL/", "https://security.gentoo.org/glsa/202003-63", "https://ubuntu.com/security/notices/USN-4168-1", "https://usn.ubuntu.com/4168-1/", "https://www.cve.org/CVERecord?id=CVE-2019-12290" ], "PublishedDate": "2019-10-22T16:15:10.877Z", "LastModifiedDate": "2026-10-14T07:16:45.2Z" }, { "VulnerabilityID": "CVE-2023-2953", "PkgID": "libldap-2.4-2@2.4.47+dfsg-3+deb10u7", "PkgName": "libldap-2.4-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/libldap-2.4-2@2.4.47%2Bdfsg-3%2Bdeb10u7?arch=amd64\u0026distro=debian-10.13", "UID": "90ac6f194795d9c5" }, "InstalledVersion": "2.4.47+dfsg-3+deb10u7", "Status": "affected", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-2953", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:511adcaf406404224c2b529c7d2ba195c80bde0f8a9fdc40de26a3fe725c1a7a", "Title": "openldap: null pointer dereference in ber_memalloc_x function", "Description": "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "alma": 1, "amazon": 2, "bitnami": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 1, "photon": 3, "redhat": 1, "rocky": 1, "ubuntu": 1 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H", "V3Score": 7.1 } }, "References": [ "http://seclists.org/fulldisclosure/2023/Jul/47", "http://seclists.org/fulldisclosure/2023/Jul/48", "http://seclists.org/fulldisclosure/2023/Jul/52", "https://access.redhat.com/errata/RHSA-2024:4264", "https://access.redhat.com/security/cve/CVE-2023-2953", "https://bugs.openldap.org/show_bug.cgi?id=9904", "https://bugzilla.redhat.com/2210651", "https://bugzilla.redhat.com/show_bug.cgi?id=2210651", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://cert-portal.siemens.com/productcert/html/ssa-806742.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2953", "https://errata.almalinux.org/8/ALSA-2024-4264.html", "https://errata.rockylinux.org/RLSA-2024:4264", "https://linux.oracle.com/cve/CVE-2023-2953.html", "https://linux.oracle.com/errata/ELSA-2024-4264.html", "https://nvd.nist.gov/vuln/detail/CVE-2023-2953", "https://security.netapp.com/advisory/ntap-20230703-0005/", "https://support.apple.com/kb/HT213843", "https://support.apple.com/kb/HT213844", "https://support.apple.com/kb/HT213845", "https://ubuntu.com/security/notices/USN-6197-1", "https://ubuntu.com/security/notices/USN-6616-1", "https://www.cve.org/CVERecord?id=CVE-2023-2953" ], "PublishedDate": "2023-05-30T22:15:10.613Z", "LastModifiedDate": "2026-10-14T21:17:15.61Z" }, { "VulnerabilityID": "CVE-2023-2953", "PkgID": "libldap-common@2.4.47+dfsg-3+deb10u7", "PkgName": "libldap-common", "PkgIdentifier": { "PURL": "pkg:deb/debian/libldap-common@2.4.47%2Bdfsg-3%2Bdeb10u7?arch=all\u0026distro=debian-10.13", "UID": "72cfc72012eabcbd" }, "InstalledVersion": "2.4.47+dfsg-3+deb10u7", "Status": "affected", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-2953", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4dae0f08949e7263ab1216e4f536dc3190170d3ecf0d304db3e97c94cab27bda", "Title": "openldap: null pointer dereference in ber_memalloc_x function", "Description": "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "alma": 1, "amazon": 2, "bitnami": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 1, "photon": 3, "redhat": 1, "rocky": 1, "ubuntu": 1 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H", "V3Score": 7.1 } }, "References": [ "http://seclists.org/fulldisclosure/2023/Jul/47", "http://seclists.org/fulldisclosure/2023/Jul/48", "http://seclists.org/fulldisclosure/2023/Jul/52", "https://access.redhat.com/errata/RHSA-2024:4264", "https://access.redhat.com/security/cve/CVE-2023-2953", "https://bugs.openldap.org/show_bug.cgi?id=9904", "https://bugzilla.redhat.com/2210651", "https://bugzilla.redhat.com/show_bug.cgi?id=2210651", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://cert-portal.siemens.com/productcert/html/ssa-806742.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2953", "https://errata.almalinux.org/8/ALSA-2024-4264.html", "https://errata.rockylinux.org/RLSA-2024:4264", "https://linux.oracle.com/cve/CVE-2023-2953.html", "https://linux.oracle.com/errata/ELSA-2024-4264.html", "https://nvd.nist.gov/vuln/detail/CVE-2023-2953", "https://security.netapp.com/advisory/ntap-20230703-0005/", "https://support.apple.com/kb/HT213843", "https://support.apple.com/kb/HT213844", "https://support.apple.com/kb/HT213845", "https://ubuntu.com/security/notices/USN-6197-1", "https://ubuntu.com/security/notices/USN-6616-1", "https://www.cve.org/CVERecord?id=CVE-2023-2953" ], "PublishedDate": "2023-05-30T22:15:10.613Z", "LastModifiedDate": "2026-10-14T21:17:15.61Z" }, { "VulnerabilityID": "CVE-2022-0391", "PkgID": "libpython3.7-minimal@3.7.3-2+deb10u7", "PkgName": "libpython3.7-minimal", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpython3.7-minimal@3.7.3-2%2Bdeb10u7?arch=amd64\u0026distro=debian-10.13", "UID": "39ee42d008675d41" }, "InstalledVersion": "3.7.3-2+deb10u7", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-0391", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ed23bb7312441f842e64c79a21cdcc62e7095cbba09b8a5e87df81391cd52956", "Title": "python: urllib.parse does not sanitize URLs containing ASCII newline and tabs", "Description": "A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\\r' and '\\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14.", "Severity": "HIGH", "CweIDs": [ "CWE-74" ], "VendorSeverity": { "alma": 2, "amazon": 2, "bitnami": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "nvd": { "V2Vector": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V2Score": 5, "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/errata/RHSA-2022:6457", "https://access.redhat.com/security/cve/CVE-2022-0391", "https://bugs.python.org/issue43882", "https://bugzilla.redhat.com/2047376", "https://bugzilla.redhat.com/2075390", "https://bugzilla.redhat.com/show_bug.cgi?id=1995162", "https://bugzilla.redhat.com/show_bug.cgi?id=1995234", "https://bugzilla.redhat.com/show_bug.cgi?id=2006792", "https://bugzilla.redhat.com/show_bug.cgi?id=2032569", "https://bugzilla.redhat.com/show_bug.cgi?id=2036020", "https://bugzilla.redhat.com/show_bug.cgi?id=2047376", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3733", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3737", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4189", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0391", "https://errata.almalinux.org/8/ALSA-2022-6457.html", "https://errata.rockylinux.org/RLSA-2022:1821", "https://linux.oracle.com/cve/CVE-2022-0391.html", "https://linux.oracle.com/errata/ELSA-2023-3550.html", "https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html", "https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html", "https://lists.debian.org/debian-lts-announce/2025/03/msg00013.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CSD2YBXP3ZF44E44QMIIAR5VTO35KTRB/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UDBDBAU6HUPZHISBOARTXZ5GKHF2VH5U/", "https://nvd.nist.gov/vuln/detail/CVE-2022-0391", "https://security.gentoo.org/glsa/202305-02", "https://security.netapp.com/advisory/ntap-20220225-0009/", "https://ubuntu.com/security/notices/USN-5342-1", "https://ubuntu.com/security/notices/USN-5342-2", "https://ubuntu.com/security/notices/USN-6891-1", "https://www.cve.org/CVERecord?id=CVE-2022-0391", "https://www.oracle.com/security-alerts/cpuapr2022.html" ], "PublishedDate": "2022-02-09T23:15:16.58Z", "LastModifiedDate": "2026-10-14T13:17:13.947Z" }, { "VulnerabilityID": "CVE-2022-42919", "PkgID": "libpython3.7-minimal@3.7.3-2+deb10u7", "PkgName": "libpython3.7-minimal", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpython3.7-minimal@3.7.3-2%2Bdeb10u7?arch=amd64\u0026distro=debian-10.13", "UID": "39ee42d008675d41" }, "InstalledVersion": "3.7.3-2+deb10u7", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-42919", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:25033b53ee8122827283acb39000581615f505fa1d543bc0a631a07b2cb574bc", "Title": "python: local privilege escalation via the multiprocessing forkserver start method", "Description": "Python 3.9.x before 3.9.16 and 3.10.x before 3.10.9 on Linux allows local privilege escalation in a non-default configuration. The Python multiprocessing library, when used with the forkserver start method on Linux, allows pickles to be deserialized from any user in the same machine local network namespace, which in many system configurations means any user on the same machine. Pickles can execute arbitrary code. Thus, this allows for local user privilege escalation to the user that any forkserver process is running as. Setting multiprocessing.util.abstract_sockets_supported to False is a workaround. The forkserver start method for multiprocessing is not the default start method. This issue is Linux specific because only Linux supports abstract namespace sockets. CPython before 3.9 does not make use of Linux abstract namespace sockets by default. Support for users manually specifying an abstract namespace socket was added as a bugfix in 3.7.8 and 3.8.3, but users would need to make specific uncommon API calls in order to do that in CPython before 3.9.", "Severity": "HIGH", "CweIDs": [ "CWE-502" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2022:8493", "https://access.redhat.com/security/cve/CVE-2022-42919", "https://bugzilla.redhat.com/2138705", "https://bugzilla.redhat.com/show_bug.cgi?id=2138705", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42919", "https://errata.almalinux.org/9/ALSA-2022-8493.html", "https://errata.rockylinux.org/RLSA-2022:8493", "https://github.com/python/cpython/compare/v3.10.8...v3.10.9", "https://github.com/python/cpython/compare/v3.9.15...v3.9.16", "https://github.com/python/cpython/issues/97514", "https://github.com/python/cpython/issues/97514#issuecomment-1310277840", "https://linux.oracle.com/cve/CVE-2022-42919.html", "https://linux.oracle.com/errata/ELSA-2022-8493.html", "https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FKGCQPIVHEAIJ77R3RSNSQWYBUDVWDKU/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2LHWWEI5OBQ6RELULMVU6KMDYG4WZXH/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI5DYIED6U26BGX5IRZWNCP6TY4M2ZGZ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QLUGZSEAO3MBWGKCUSMKQIRYJZKJCIOB/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6KGIRHSENZ4QAB234Z36HVIDTRJ3MFI/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RDK3ZZBRYFO47ET3N4BNTKVXN47U6ICY/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCRKBB5Y5EWTJUNC7LK665WO64DDXSTN/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XX6LLAXGZVZ327REY6MDZRMMP47LJ53P/", "https://nvd.nist.gov/vuln/detail/CVE-2022-42919", "https://python-security.readthedocs.io/vuln/multiprocessing-abstract-socket.html", "https://security.gentoo.org/glsa/202305-02", "https://security.netapp.com/advisory/ntap-20221209-0006/", "https://ubuntu.com/security/notices/USN-5713-1", "https://ubuntu.com/security/notices/USN-5888-1", "https://ubuntu.com/security/notices/USN-6891-1", "https://www.cve.org/CVERecord?id=CVE-2022-42919" ], "PublishedDate": "2022-11-07T00:15:09.697Z", "LastModifiedDate": "2026-06-17T05:05:35.24Z" }, { "VulnerabilityID": "CVE-2023-24329", "PkgID": "libpython3.7-minimal@3.7.3-2+deb10u7", "PkgName": "libpython3.7-minimal", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpython3.7-minimal@3.7.3-2%2Bdeb10u7?arch=amd64\u0026distro=debian-10.13", "UID": "39ee42d008675d41" }, "InstalledVersion": "3.7.3-2+deb10u7", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-24329", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:72fda70c0a7c0b7b8bfde4c6c0fe12ff897c0a6e13dcedacdabb63571649e53b", "Title": "python: urllib.parse url blocklisting bypass", "Description": "An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.", "Severity": "HIGH", "CweIDs": [ "CWE-20" ], "VendorSeverity": { "alma": 3, "amazon": 2, "bitnami": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2023:3595", "https://access.redhat.com/security/cve/CVE-2023-24329", "https://bugzilla.redhat.com/2173917", "https://bugzilla.redhat.com/show_bug.cgi?id=2173917", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24329", "https://errata.almalinux.org/9/ALSA-2023-3595.html", "https://errata.rockylinux.org/RLSA-2023:3595", "https://github.com/python/cpython/issues/102153", "https://github.com/python/cpython/pull/99421", "https://github.com/python/cpython/pull/99446%20%28backport%20for%203.11%20branch%29", "https://linux.oracle.com/cve/CVE-2023-24329.html", "https://linux.oracle.com/errata/ELSA-2023-3811.html", "https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html", "https://lists.debian.org/debian-lts-announce/2024/11/msg00005.html", "https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PEVICI7YNGGMSL3UCMWGE66QFLATH72/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DSL6NSOAXWBJJ67XPLSSC74MNKZF3BBO/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EM2XLZSTXG44TMFXF4E6VTGKR2MQCW3G/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F2NY75GFDZ5T6YPN44D3VMFT5SUVTOTG/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GR5US3BYILYJ4SKBV6YBNPRUBAL5P2CN/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H23OSKC6UG6IWOQAUPW74YUHWRWVXJP7/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZTLGV2HYFF4AMYJL25VDIGAIHCU7UPA/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LWC4WGXER5P6Q75RFGL7QUTPP3N5JR7T/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZEHSXSCMA4WWQKXT6QV7AAR6SWNZ2VP/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O5SP4RT3RRS434ZS2HQKQJ3VZW7YPKYR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OHHJHJRLEF3TDT2K3676CAUVRDD4CCMR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PEUN6T22UJFXR7J5F6UUHCXXPKJ2DVHI/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PURM5CFDABEWAIWZFD2MQ7ZJGCPYSQ44/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q3J5N24ECS4B6MJDRO6UAYU6GPLYBDCL/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRQHN7RWJQJHYP6E5EKESOYP5VDSHZG4/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RA2MBEEES6L46OD64OBSVUUMGKNGMOWW/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T4IDB5OAR5Y4UK3HLMZBW4WEL2B7YFMJ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TZH26JGNZ5XYPZ5SAU3NKSBSPRE5OHTG/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U2MZOJYGFCB5PPT6AKMAU72N7QOYWLBP/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UONZWLB4QVLQIY5CPDLEUEKH6WX4VQMC/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTOAUJNDWZDRWVSXJ354AYZYKRMT56HU/", "https://nvd.nist.gov/vuln/detail/CVE-2023-24329", "https://pointernull.com/security/python-url-parse-problem.html", "https://security.netapp.com/advisory/ntap-20230324-0004/", "https://ubuntu.com/security/notices/USN-5888-1", "https://ubuntu.com/security/notices/USN-5960-1", "https://ubuntu.com/security/notices/USN-6139-1", "https://ubuntu.com/security/notices/USN-6891-1", "https://ubuntu.com/security/notices/USN-7180-1", "https://www.cve.org/CVERecord?id=CVE-2023-24329", "https://www.kb.cert.org/vuls/id/127587" ], "PublishedDate": "2023-02-17T15:15:12.243Z", "LastModifiedDate": "2026-10-14T23:17:14.647Z" }, { "VulnerabilityID": "CVE-2022-0391", "PkgID": "libpython3.7-stdlib@3.7.3-2+deb10u7", "PkgName": "libpython3.7-stdlib", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpython3.7-stdlib@3.7.3-2%2Bdeb10u7?arch=amd64\u0026distro=debian-10.13", "UID": "920667a651416dfe" }, "InstalledVersion": "3.7.3-2+deb10u7", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-0391", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:689312cf55e97cdc2087fb666adef39753be5b29fd4ecd2e3ab5612d8e46affd", "Title": "python: urllib.parse does not sanitize URLs containing ASCII newline and tabs", "Description": "A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\\r' and '\\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14.", "Severity": "HIGH", "CweIDs": [ "CWE-74" ], "VendorSeverity": { "alma": 2, "amazon": 2, "bitnami": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "nvd": { "V2Vector": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V2Score": 5, "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/errata/RHSA-2022:6457", "https://access.redhat.com/security/cve/CVE-2022-0391", "https://bugs.python.org/issue43882", "https://bugzilla.redhat.com/2047376", "https://bugzilla.redhat.com/2075390", "https://bugzilla.redhat.com/show_bug.cgi?id=1995162", "https://bugzilla.redhat.com/show_bug.cgi?id=1995234", "https://bugzilla.redhat.com/show_bug.cgi?id=2006792", "https://bugzilla.redhat.com/show_bug.cgi?id=2032569", "https://bugzilla.redhat.com/show_bug.cgi?id=2036020", "https://bugzilla.redhat.com/show_bug.cgi?id=2047376", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3733", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3737", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4189", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0391", "https://errata.almalinux.org/8/ALSA-2022-6457.html", "https://errata.rockylinux.org/RLSA-2022:1821", "https://linux.oracle.com/cve/CVE-2022-0391.html", "https://linux.oracle.com/errata/ELSA-2023-3550.html", "https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html", "https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html", "https://lists.debian.org/debian-lts-announce/2025/03/msg00013.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CSD2YBXP3ZF44E44QMIIAR5VTO35KTRB/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UDBDBAU6HUPZHISBOARTXZ5GKHF2VH5U/", "https://nvd.nist.gov/vuln/detail/CVE-2022-0391", "https://security.gentoo.org/glsa/202305-02", "https://security.netapp.com/advisory/ntap-20220225-0009/", "https://ubuntu.com/security/notices/USN-5342-1", "https://ubuntu.com/security/notices/USN-5342-2", "https://ubuntu.com/security/notices/USN-6891-1", "https://www.cve.org/CVERecord?id=CVE-2022-0391", "https://www.oracle.com/security-alerts/cpuapr2022.html" ], "PublishedDate": "2022-02-09T23:15:16.58Z", "LastModifiedDate": "2026-10-14T13:17:13.947Z" }, { "VulnerabilityID": "CVE-2022-42919", "PkgID": "libpython3.7-stdlib@3.7.3-2+deb10u7", "PkgName": "libpython3.7-stdlib", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpython3.7-stdlib@3.7.3-2%2Bdeb10u7?arch=amd64\u0026distro=debian-10.13", "UID": "920667a651416dfe" }, "InstalledVersion": "3.7.3-2+deb10u7", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-42919", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:862bae0528993219903c67f44922817cbfe64e6ba654bfcb312040f41f0d1f42", "Title": "python: local privilege escalation via the multiprocessing forkserver start method", "Description": "Python 3.9.x before 3.9.16 and 3.10.x before 3.10.9 on Linux allows local privilege escalation in a non-default configuration. The Python multiprocessing library, when used with the forkserver start method on Linux, allows pickles to be deserialized from any user in the same machine local network namespace, which in many system configurations means any user on the same machine. Pickles can execute arbitrary code. Thus, this allows for local user privilege escalation to the user that any forkserver process is running as. Setting multiprocessing.util.abstract_sockets_supported to False is a workaround. The forkserver start method for multiprocessing is not the default start method. This issue is Linux specific because only Linux supports abstract namespace sockets. CPython before 3.9 does not make use of Linux abstract namespace sockets by default. Support for users manually specifying an abstract namespace socket was added as a bugfix in 3.7.8 and 3.8.3, but users would need to make specific uncommon API calls in order to do that in CPython before 3.9.", "Severity": "HIGH", "CweIDs": [ "CWE-502" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2022:8493", "https://access.redhat.com/security/cve/CVE-2022-42919", "https://bugzilla.redhat.com/2138705", "https://bugzilla.redhat.com/show_bug.cgi?id=2138705", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42919", "https://errata.almalinux.org/9/ALSA-2022-8493.html", "https://errata.rockylinux.org/RLSA-2022:8493", "https://github.com/python/cpython/compare/v3.10.8...v3.10.9", "https://github.com/python/cpython/compare/v3.9.15...v3.9.16", "https://github.com/python/cpython/issues/97514", "https://github.com/python/cpython/issues/97514#issuecomment-1310277840", "https://linux.oracle.com/cve/CVE-2022-42919.html", "https://linux.oracle.com/errata/ELSA-2022-8493.html", "https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FKGCQPIVHEAIJ77R3RSNSQWYBUDVWDKU/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2LHWWEI5OBQ6RELULMVU6KMDYG4WZXH/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI5DYIED6U26BGX5IRZWNCP6TY4M2ZGZ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QLUGZSEAO3MBWGKCUSMKQIRYJZKJCIOB/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6KGIRHSENZ4QAB234Z36HVIDTRJ3MFI/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RDK3ZZBRYFO47ET3N4BNTKVXN47U6ICY/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCRKBB5Y5EWTJUNC7LK665WO64DDXSTN/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XX6LLAXGZVZ327REY6MDZRMMP47LJ53P/", "https://nvd.nist.gov/vuln/detail/CVE-2022-42919", "https://python-security.readthedocs.io/vuln/multiprocessing-abstract-socket.html", "https://security.gentoo.org/glsa/202305-02", "https://security.netapp.com/advisory/ntap-20221209-0006/", "https://ubuntu.com/security/notices/USN-5713-1", "https://ubuntu.com/security/notices/USN-5888-1", "https://ubuntu.com/security/notices/USN-6891-1", "https://www.cve.org/CVERecord?id=CVE-2022-42919" ], "PublishedDate": "2022-11-07T00:15:09.697Z", "LastModifiedDate": "2026-06-17T05:05:35.24Z" }, { "VulnerabilityID": "CVE-2023-24329", "PkgID": "libpython3.7-stdlib@3.7.3-2+deb10u7", "PkgName": "libpython3.7-stdlib", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpython3.7-stdlib@3.7.3-2%2Bdeb10u7?arch=amd64\u0026distro=debian-10.13", "UID": "920667a651416dfe" }, "InstalledVersion": "3.7.3-2+deb10u7", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-24329", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:faa82978d995b39b4431346895dc43d780d85d2a9fa32a7d4c95fd80e4f87dbd", "Title": "python: urllib.parse url blocklisting bypass", "Description": "An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.", "Severity": "HIGH", "CweIDs": [ "CWE-20" ], "VendorSeverity": { "alma": 3, "amazon": 2, "bitnami": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2023:3595", "https://access.redhat.com/security/cve/CVE-2023-24329", "https://bugzilla.redhat.com/2173917", "https://bugzilla.redhat.com/show_bug.cgi?id=2173917", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24329", "https://errata.almalinux.org/9/ALSA-2023-3595.html", "https://errata.rockylinux.org/RLSA-2023:3595", "https://github.com/python/cpython/issues/102153", "https://github.com/python/cpython/pull/99421", "https://github.com/python/cpython/pull/99446%20%28backport%20for%203.11%20branch%29", "https://linux.oracle.com/cve/CVE-2023-24329.html", "https://linux.oracle.com/errata/ELSA-2023-3811.html", "https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html", "https://lists.debian.org/debian-lts-announce/2024/11/msg00005.html", "https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PEVICI7YNGGMSL3UCMWGE66QFLATH72/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DSL6NSOAXWBJJ67XPLSSC74MNKZF3BBO/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EM2XLZSTXG44TMFXF4E6VTGKR2MQCW3G/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F2NY75GFDZ5T6YPN44D3VMFT5SUVTOTG/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GR5US3BYILYJ4SKBV6YBNPRUBAL5P2CN/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H23OSKC6UG6IWOQAUPW74YUHWRWVXJP7/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZTLGV2HYFF4AMYJL25VDIGAIHCU7UPA/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LWC4WGXER5P6Q75RFGL7QUTPP3N5JR7T/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZEHSXSCMA4WWQKXT6QV7AAR6SWNZ2VP/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O5SP4RT3RRS434ZS2HQKQJ3VZW7YPKYR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OHHJHJRLEF3TDT2K3676CAUVRDD4CCMR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PEUN6T22UJFXR7J5F6UUHCXXPKJ2DVHI/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PURM5CFDABEWAIWZFD2MQ7ZJGCPYSQ44/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q3J5N24ECS4B6MJDRO6UAYU6GPLYBDCL/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRQHN7RWJQJHYP6E5EKESOYP5VDSHZG4/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RA2MBEEES6L46OD64OBSVUUMGKNGMOWW/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T4IDB5OAR5Y4UK3HLMZBW4WEL2B7YFMJ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TZH26JGNZ5XYPZ5SAU3NKSBSPRE5OHTG/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U2MZOJYGFCB5PPT6AKMAU72N7QOYWLBP/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UONZWLB4QVLQIY5CPDLEUEKH6WX4VQMC/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTOAUJNDWZDRWVSXJ354AYZYKRMT56HU/", "https://nvd.nist.gov/vuln/detail/CVE-2023-24329", "https://pointernull.com/security/python-url-parse-problem.html", "https://security.netapp.com/advisory/ntap-20230324-0004/", "https://ubuntu.com/security/notices/USN-5888-1", "https://ubuntu.com/security/notices/USN-5960-1", "https://ubuntu.com/security/notices/USN-6139-1", "https://ubuntu.com/security/notices/USN-6891-1", "https://ubuntu.com/security/notices/USN-7180-1", "https://www.cve.org/CVERecord?id=CVE-2023-24329", "https://www.kb.cert.org/vuls/id/127587" ], "PublishedDate": "2023-02-17T15:15:12.243Z", "LastModifiedDate": "2026-10-14T23:17:14.647Z" }, { "VulnerabilityID": "CVE-2019-19603", "PkgID": "libsqlite3-0@3.27.2-3+deb10u2", "PkgName": "libsqlite3-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsqlite3-0@3.27.2-3%2Bdeb10u2?arch=amd64\u0026distro=debian-10.13", "UID": "dda7d8af2c36206a" }, "InstalledVersion": "3.27.2-3+deb10u2", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-19603", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:c0190e32024220ff8e0abe4a6a5d1e598f3a686b279e400aaff88d89393a9ff0", "Title": "sqlite: mishandling of certain SELECT statements with non-existent VIEW can lead to DoS", "Description": "SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.", "Severity": "HIGH", "VendorSeverity": { "alma": 2, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V2Vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V2Score": 5, "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13750.json", "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13751.json", "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19603.json", "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5827.json", "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13435.json", "https://access.redhat.com/security/cve/CVE-2019-19603", "https://cert-portal.siemens.com/productcert/html/ssa-389290.html", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf", "https://errata.almalinux.org/8/ALSA-2021-4396.html", "https://github.com/sqlite/sqlite/commit/527cbd4a104cb93bf3994b3dd3619a6299a78b13", "https://linux.oracle.com/cve/CVE-2019-19603.html", "https://linux.oracle.com/errata/ELSA-2021-4396.html", "https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c@%3Cissues.guacamole.apache.org%3E", "https://nvd.nist.gov/vuln/detail/CVE-2019-19603", "https://security.netapp.com/advisory/ntap-20191223-0001/", "https://ubuntu.com/security/notices/USN-4394-1", "https://usn.ubuntu.com/4394-1/", "https://www.cve.org/CVERecord?id=CVE-2019-19603", "https://www.oracle.com/security-alerts/cpuapr2020.html", "https://www.sqlite.org/" ], "PublishedDate": "2019-12-09T19:15:14.71Z", "LastModifiedDate": "2026-10-14T08:16:58.417Z" }, { "VulnerabilityID": "CVE-2023-7104", "PkgID": "libsqlite3-0@3.27.2-3+deb10u2", "PkgName": "libsqlite3-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsqlite3-0@3.27.2-3%2Bdeb10u2?arch=amd64\u0026distro=debian-10.13", "UID": "dda7d8af2c36206a" }, "InstalledVersion": "3.27.2-3+deb10u2", "Status": "affected", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-7104", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:31cc195a66cba91e238ec8167b00eb228db0642376ab7777e7e31869502e6acc", "Title": "sqlite: heap-buffer-overflow at sessionfuzz", "Description": "A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.", "Severity": "HIGH", "CweIDs": [ "CWE-122", "CWE-119" ], "VendorSeverity": { "alma": 2, "amazon": 3, "bitnami": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "V3Score": 7.3 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "V3Score": 7.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "V3Score": 7.3 } }, "References": [ "https://access.redhat.com/errata/RHSA-2024:0465", "https://access.redhat.com/security/cve/CVE-2023-7104", "https://bugzilla.redhat.com/2256194", "https://bugzilla.redhat.com/show_bug.cgi?id=2256194", "https://cert-portal.siemens.com/productcert/html/ssa-000297.html", "https://cert-portal.siemens.com/productcert/html/ssa-277137.html", "https://cert-portal.siemens.com/productcert/html/ssa-794697.html", "https://cert-portal.siemens.com/productcert/html/ssa-915275.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7104", "https://errata.almalinux.org/9/ALSA-2024-0465.html", "https://errata.rockylinux.org/RLSA-2024:0465", "https://linux.oracle.com/cve/CVE-2023-7104.html", "https://linux.oracle.com/errata/ELSA-2024-0465.html", "https://lists.debian.org/debian-lts-announce/2024/09/msg00050.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/", "https://nvd.nist.gov/vuln/detail/CVE-2023-7104", "https://security.netapp.com/advisory/ntap-20240112-0008/", "https://sqlite.org/forum/forumpost/5bcbf4571c", "https://sqlite.org/src/info/0e4e7a05c4204b47", "https://ubuntu.com/security/notices/USN-6566-1", "https://ubuntu.com/security/notices/USN-6566-2", "https://vuldb.com/?ctiid.248999", "https://vuldb.com/?id.248999", "https://www.cve.org/CVERecord?id=CVE-2023-7104" ], "PublishedDate": "2023-12-29T10:15:13.89Z", "LastModifiedDate": "2026-10-14T23:17:21.387Z" }, { "VulnerabilityID": "CVE-2022-1304", "PkgID": "libss2@1.44.5-1+deb10u3", "PkgName": "libss2", "PkgIdentifier": { "PURL": "pkg:deb/debian/libss2@1.44.5-1%2Bdeb10u3?arch=amd64\u0026distro=debian-10.13", "UID": "666ec9751dceff27" }, "InstalledVersion": "1.44.5-1+deb10u3", "Status": "affected", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-1304", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:fe54aa48c830e4dea1b7610d075ec8d7148628fffe5763b497ab2b8ff44f7427", "Title": "e2fsprogs: out-of-bounds read/write via crafted filesystem", "Description": "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.", "Severity": "HIGH", "CweIDs": [ "CWE-125", "CWE-787" ], "VendorSeverity": { "alma": 2, "amazon": 2, "bottlerocket": 2, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V2Vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V2Score": 6.8, "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H", "V3Score": 5.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304", "https://access.redhat.com/errata/RHSA-2022:8361", "https://access.redhat.com/security/cve/CVE-2022-1304", "https://bugzilla.redhat.com/2069726", "https://bugzilla.redhat.com/show_bug.cgi?id=2069726", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://cert-portal.siemens.com/productcert/html/ssa-419740.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304", "https://errata.almalinux.org/9/ALSA-2022-8361.html", "https://errata.rockylinux.org/RLSA-2022:8361", "https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-qh9x-999x-wqhr", "https://linux.oracle.com/cve/CVE-2022-1304.html", "https://linux.oracle.com/errata/ELSA-2024-12731.html", "https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html", "https://marc.info/?l=linux-ext4\u0026m=165056234501732\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2022-1304", "https://security.netapp.com/advisory/ntap-20241122-0010/", "https://ubuntu.com/security/notices/USN-5464-1", "https://www.cve.org/CVERecord?id=CVE-2022-1304" ], "PublishedDate": "2022-04-14T21:15:08.49Z", "LastModifiedDate": "2026-10-14T13:17:18.393Z" }, { "VulnerabilityID": "CVE-2018-12886", "PkgID": "libstdc++6@8.3.0-6", "PkgName": "libstdc++6", "PkgIdentifier": { "PURL": "pkg:deb/debian/libstdc%2B%2B6@8.3.0-6?arch=amd64\u0026distro=debian-10.13", "UID": "20c560b6f31895f6" }, "InstalledVersion": "8.3.0-6", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2018-12886", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:72a62cbd489f462e7db0576fd7e6cbccf8f4e4ac0abbc8b20a0b0df09d2416de", "Title": "gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass", "Description": "stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against.", "Severity": "HIGH", "CweIDs": [ "CWE-209" ], "VendorSeverity": { "nvd": 3, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V2Vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "V3Vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V2Score": 6.8, "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "V3Score": 6.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2018-12886", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://cert-portal.siemens.com/productcert/html/ssa-565386.html", "https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=89d7557202d25a393666ac4c0f7dbdab31e452a2", "https://gcc.gnu.org/viewcvs/gcc/trunk/gcc/config/arm/arm-protos.h?revision=266379\u0026view=markup", "https://nvd.nist.gov/vuln/detail/CVE-2018-12886", "https://www.cve.org/CVERecord?id=CVE-2018-12886", "https://www.gnu.org/software/gcc/gcc-8/changes.html" ], "PublishedDate": "2019-05-22T19:29:00.297Z", "LastModifiedDate": "2026-10-14T07:16:41.957Z" }, { "VulnerabilityID": "CVE-2019-15847", "PkgID": "libstdc++6@8.3.0-6", "PkgName": "libstdc++6", "PkgIdentifier": { "PURL": "pkg:deb/debian/libstdc%2B%2B6@8.3.0-6?arch=amd64\u0026distro=debian-10.13", "UID": "20c560b6f31895f6" }, "InstalledVersion": "8.3.0-6", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-15847", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:635269486bfc49b4f2b9204cbccc088c4fd68bf04a1c4ce9b52be2035dbea400", "Title": "gcc: POWER9 \"DARN\" RNG intrinsic produces repeated output", "Description": "The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.", "Severity": "HIGH", "CweIDs": [ "CWE-331" ], "VendorSeverity": { "cbl-mariner": 3, "nvd": 3, "oracle-oval": 2, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V2Vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V2Score": 5, "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00056.html", "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00057.html", "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00058.html", "https://access.redhat.com/security/cve/CVE-2019-15847", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91481", "https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=457dac402027dd7e14543fbd59a75858422cf6c6", "https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=e99bfdd2a8db732ea84cf0a6486707e5e821ad7e", "https://linux.oracle.com/cve/CVE-2019-15847.html", "https://linux.oracle.com/errata/ELSA-2020-1864.html", "https://nvd.nist.gov/vuln/detail/CVE-2019-15847", "https://www.cve.org/CVERecord?id=CVE-2019-15847" ], "PublishedDate": "2019-09-02T23:15:10.837Z", "LastModifiedDate": "2026-10-14T07:16:46.907Z" }, { "VulnerabilityID": "CVE-2019-3843", "PkgID": "libsystemd0@241-7~deb10u10", "PkgName": "libsystemd0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsystemd0@241-7~deb10u10?arch=amd64\u0026distro=debian-10.13", "UID": "ca42dde3178fe4eb" }, "InstalledVersion": "241-7~deb10u10", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-3843", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9fde94767e4a0ae1908bee4a8436345ee7850f4972528b0582732dec6d65c86c", "Title": "systemd: services with DynamicUser can create SUID/SGID binaries", "Description": "It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the UID/GID will be recycled.", "Severity": "HIGH", "CweIDs": [ "CWE-266", "CWE-269" ], "VendorSeverity": { "cbl-mariner": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V2Vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V2Score": 4.6, "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L", "V3Score": 4.5 } }, "References": [ "http://www.securityfocus.com/bid/108116", "https://access.redhat.com/security/cve/CVE-2019-3843", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3843", "https://github.com/systemd/systemd-stable/pull/54%20%28backport%20for%20v241-stable%29", "https://linux.oracle.com/cve/CVE-2019-3843.html", "https://linux.oracle.com/errata/ELSA-2020-1794.html", "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E", "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5JXQAKSTMABZ46EVCRMW62DHWYHTTFES/", "https://nvd.nist.gov/vuln/detail/CVE-2019-3843", "https://security.netapp.com/advisory/ntap-20190619-0002/", "https://ubuntu.com/security/notices/USN-4269-1", "https://usn.ubuntu.com/4269-1/", "https://www.cve.org/CVERecord?id=CVE-2019-3843" ], "PublishedDate": "2019-04-26T21:29:00.36Z", "LastModifiedDate": "2026-06-17T02:35:42.523Z" }, { "VulnerabilityID": "CVE-2019-3844", "PkgID": "libsystemd0@241-7~deb10u10", "PkgName": "libsystemd0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsystemd0@241-7~deb10u10?arch=amd64\u0026distro=debian-10.13", "UID": "ca42dde3178fe4eb" }, "InstalledVersion": "241-7~deb10u10", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-3844", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:1c2557308a5f3238e19bf6b70250200442890e58f73bbca149aae1c83913b40a", "Title": "systemd: services with DynamicUser can get new privileges and create SGID binaries", "Description": "It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the GID will be recycled.", "Severity": "HIGH", "CweIDs": [ "CWE-268" ], "VendorSeverity": { "cbl-mariner": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V2Vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V2Score": 4.6, "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L", "V3Score": 4.5 } }, "References": [ "http://www.securityfocus.com/bid/108096", "https://access.redhat.com/security/cve/CVE-2019-3844", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3844", "https://linux.oracle.com/cve/CVE-2019-3844.html", "https://linux.oracle.com/errata/ELSA-2020-1794.html", "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E", "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E", "https://nvd.nist.gov/vuln/detail/CVE-2019-3844", "https://security.netapp.com/advisory/ntap-20190619-0002/", "https://ubuntu.com/security/notices/USN-4269-1", "https://usn.ubuntu.com/4269-1/", "https://www.cve.org/CVERecord?id=CVE-2019-3844" ], "PublishedDate": "2019-04-26T21:29:00.423Z", "LastModifiedDate": "2026-06-17T02:35:42.68Z" }, { "VulnerabilityID": "CVE-2023-50387", "PkgID": "libsystemd0@241-7~deb10u10", "PkgName": "libsystemd0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsystemd0@241-7~deb10u10?arch=amd64\u0026distro=debian-10.13", "UID": "ca42dde3178fe4eb" }, "InstalledVersion": "241-7~deb10u10", "Status": "affected", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-50387", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:0673e13d61f31a37fb4f2d89cfa9f1fe6e4832673474c2477b7d9b172d6dfd0c", "Title": "bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator", "Description": "Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \"KeyTrap\" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2024/02/16/2", "http://www.openwall.com/lists/oss-security/2024/02/16/3", "https://access.redhat.com/errata/RHSA-2024:2551", "https://access.redhat.com/security/cve/CVE-2023-50387", "https://blog.powerdns.com/2024/02/13/powerdns-recursor-4-8-6-4-9-3-5-0-2-released", "https://bugzilla.redhat.com/2263896", "https://bugzilla.redhat.com/2263897", "https://bugzilla.redhat.com/2263909", "https://bugzilla.redhat.com/2263911", "https://bugzilla.redhat.com/2263914", "https://bugzilla.redhat.com/2263917", "https://bugzilla.redhat.com/show_bug.cgi?id=2263896", "https://bugzilla.redhat.com/show_bug.cgi?id=2263897", "https://bugzilla.redhat.com/show_bug.cgi?id=2263909", "https://bugzilla.redhat.com/show_bug.cgi?id=2263911", "https://bugzilla.redhat.com/show_bug.cgi?id=2263914", "https://bugzilla.redhat.com/show_bug.cgi?id=2263917", "https://bugzilla.suse.com/show_bug.cgi?id=1219823", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50387", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50868", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5517", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6516", "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html", "https://errata.almalinux.org/9/ALSA-2024-2551.html", "https://errata.rockylinux.org/RLSA-2024:2551", "https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1", "https://kb.isc.org/docs/cve-2023-50387", "https://linux.oracle.com/cve/CVE-2023-50387.html", "https://linux.oracle.com/errata/ELSA-2024-3741.html", "https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html", "https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html", "https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html", "https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/", "https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-50387", "https://news.ycombinator.com/item?id=39367411", "https://news.ycombinator.com/item?id=39372384", "https://nlnetlabs.nl/downloads/unbound/CVE-2023-50387_CVE-2023-50868.txt", "https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/", "https://nvd.nist.gov/vuln/detail/CVE-2023-50387", "https://security.netapp.com/advisory/ntap-20240307-0007/", "https://ubuntu.com/security/notices/USN-6633-1", "https://ubuntu.com/security/notices/USN-6642-1", "https://ubuntu.com/security/notices/USN-6657-1", "https://ubuntu.com/security/notices/USN-6657-2", "https://ubuntu.com/security/notices/USN-6665-1", "https://ubuntu.com/security/notices/USN-6723-1", "https://ubuntu.com/security/notices/USN-8946-1", "https://www.athene-center.de/aktuelles/key-trap", "https://www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-50387", "https://www.isc.org/blogs/2024-bind-security-release/", "https://www.knot-resolver.cz/2024-02-13-knot-resolver-5.7.1.html", "https://www.securityweek.com/keytrap-dns-attack-could-disable-large-parts-of-internet-researchers/", "https://www.theregister.com/2024/02/13/dnssec_vulnerability_internet/" ], "PublishedDate": "2024-02-14T16:15:45.3Z", "LastModifiedDate": "2026-06-17T06:39:35.51Z" }, { "VulnerabilityID": "CVE-2023-50868", "PkgID": "libsystemd0@241-7~deb10u10", "PkgName": "libsystemd0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsystemd0@241-7~deb10u10?arch=amd64\u0026distro=debian-10.13", "UID": "ca42dde3178fe4eb" }, "InstalledVersion": "241-7~deb10u10", "Status": "affected", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-50868", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:97283cb993fb434fd4225a41a61929421a4ef47bcb586dd0f345bfa2866b911a", "Title": "bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources", "Description": "The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the \"NSEC3\" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.", "Severity": "HIGH", "CweIDs": [ "CWE-400" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2024/02/16/2", "http://www.openwall.com/lists/oss-security/2024/02/16/3", "https://access.redhat.com/errata/RHSA-2024:2551", "https://access.redhat.com/security/cve/CVE-2023-50868", "https://blog.powerdns.com/2024/02/13/powerdns-recursor-4-8-6-4-9-3-5-0-2-released", "https://bugzilla.redhat.com/2263896", "https://bugzilla.redhat.com/2263897", "https://bugzilla.redhat.com/2263909", "https://bugzilla.redhat.com/2263911", "https://bugzilla.redhat.com/2263914", "https://bugzilla.redhat.com/2263917", "https://bugzilla.redhat.com/show_bug.cgi?id=2263896", "https://bugzilla.redhat.com/show_bug.cgi?id=2263897", "https://bugzilla.redhat.com/show_bug.cgi?id=2263909", "https://bugzilla.redhat.com/show_bug.cgi?id=2263911", "https://bugzilla.redhat.com/show_bug.cgi?id=2263914", "https://bugzilla.redhat.com/show_bug.cgi?id=2263917", "https://bugzilla.suse.com/show_bug.cgi?id=1219826", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50387", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50868", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5517", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6516", "https://datatracker.ietf.org/doc/html/rfc5155", "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html", "https://errata.almalinux.org/9/ALSA-2024-2551.html", "https://errata.rockylinux.org/RLSA-2024:2551", "https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1", "https://kb.isc.org/docs/cve-2023-50868", "https://linux.oracle.com/cve/CVE-2023-50868.html", "https://linux.oracle.com/errata/ELSA-2024-3741.html", "https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html", "https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html", "https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html", "https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/", "https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html", "https://nlnetlabs.nl/downloads/unbound/CVE-2023-50387_CVE-2023-50868.txt", "https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/", "https://nvd.nist.gov/vuln/detail/CVE-2023-50868", "https://security.netapp.com/advisory/ntap-20240307-0008/", "https://ubuntu.com/security/notices/USN-6633-1", "https://ubuntu.com/security/notices/USN-6642-1", "https://ubuntu.com/security/notices/USN-6657-1", "https://ubuntu.com/security/notices/USN-6657-2", "https://ubuntu.com/security/notices/USN-6665-1", "https://ubuntu.com/security/notices/USN-6723-1", "https://ubuntu.com/security/notices/USN-8946-1", "https://www.cve.org/CVERecord?id=CVE-2023-50868", "https://www.isc.org/blogs/2024-bind-security-release/", "https://www.knot-resolver.cz/2024-02-13-knot-resolver-5.7.1.html" ], "PublishedDate": "2024-02-14T16:15:45.377Z", "LastModifiedDate": "2026-06-17T06:40:07.417Z" }, { "VulnerabilityID": "CVE-2019-3843", "PkgID": "libudev1@241-7~deb10u10", "PkgName": "libudev1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libudev1@241-7~deb10u10?arch=amd64\u0026distro=debian-10.13", "UID": "1a0a0d6046211982" }, "InstalledVersion": "241-7~deb10u10", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-3843", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:92b0f2405f865b30dec0ebf5635e62149c0370258ef0313492dba39f060efdc8", "Title": "systemd: services with DynamicUser can create SUID/SGID binaries", "Description": "It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the UID/GID will be recycled.", "Severity": "HIGH", "CweIDs": [ "CWE-266", "CWE-269" ], "VendorSeverity": { "cbl-mariner": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V2Vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V2Score": 4.6, "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L", "V3Score": 4.5 } }, "References": [ "http://www.securityfocus.com/bid/108116", "https://access.redhat.com/security/cve/CVE-2019-3843", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3843", "https://github.com/systemd/systemd-stable/pull/54%20%28backport%20for%20v241-stable%29", "https://linux.oracle.com/cve/CVE-2019-3843.html", "https://linux.oracle.com/errata/ELSA-2020-1794.html", "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E", "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5JXQAKSTMABZ46EVCRMW62DHWYHTTFES/", "https://nvd.nist.gov/vuln/detail/CVE-2019-3843", "https://security.netapp.com/advisory/ntap-20190619-0002/", "https://ubuntu.com/security/notices/USN-4269-1", "https://usn.ubuntu.com/4269-1/", "https://www.cve.org/CVERecord?id=CVE-2019-3843" ], "PublishedDate": "2019-04-26T21:29:00.36Z", "LastModifiedDate": "2026-06-17T02:35:42.523Z" }, { "VulnerabilityID": "CVE-2019-3844", "PkgID": "libudev1@241-7~deb10u10", "PkgName": "libudev1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libudev1@241-7~deb10u10?arch=amd64\u0026distro=debian-10.13", "UID": "1a0a0d6046211982" }, "InstalledVersion": "241-7~deb10u10", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-3844", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:0d7b53fc79d55fcace72930442fa401b6af2a47afba4d450b58c38b37fbd06b4", "Title": "systemd: services with DynamicUser can get new privileges and create SGID binaries", "Description": "It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the GID will be recycled.", "Severity": "HIGH", "CweIDs": [ "CWE-268" ], "VendorSeverity": { "cbl-mariner": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V2Vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V2Score": 4.6, "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L", "V3Score": 4.5 } }, "References": [ "http://www.securityfocus.com/bid/108096", "https://access.redhat.com/security/cve/CVE-2019-3844", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3844", "https://linux.oracle.com/cve/CVE-2019-3844.html", "https://linux.oracle.com/errata/ELSA-2020-1794.html", "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E", "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E", "https://nvd.nist.gov/vuln/detail/CVE-2019-3844", "https://security.netapp.com/advisory/ntap-20190619-0002/", "https://ubuntu.com/security/notices/USN-4269-1", "https://usn.ubuntu.com/4269-1/", "https://www.cve.org/CVERecord?id=CVE-2019-3844" ], "PublishedDate": "2019-04-26T21:29:00.423Z", "LastModifiedDate": "2026-06-17T02:35:42.68Z" }, { "VulnerabilityID": "CVE-2023-50387", "PkgID": "libudev1@241-7~deb10u10", "PkgName": "libudev1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libudev1@241-7~deb10u10?arch=amd64\u0026distro=debian-10.13", "UID": "1a0a0d6046211982" }, "InstalledVersion": "241-7~deb10u10", "Status": "affected", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-50387", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:704985b083ba0323f87db549ee7745db418568c5b05b76a327d977c93b71e059", "Title": "bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator", "Description": "Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \"KeyTrap\" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2024/02/16/2", "http://www.openwall.com/lists/oss-security/2024/02/16/3", "https://access.redhat.com/errata/RHSA-2024:2551", "https://access.redhat.com/security/cve/CVE-2023-50387", "https://blog.powerdns.com/2024/02/13/powerdns-recursor-4-8-6-4-9-3-5-0-2-released", "https://bugzilla.redhat.com/2263896", "https://bugzilla.redhat.com/2263897", "https://bugzilla.redhat.com/2263909", "https://bugzilla.redhat.com/2263911", "https://bugzilla.redhat.com/2263914", "https://bugzilla.redhat.com/2263917", "https://bugzilla.redhat.com/show_bug.cgi?id=2263896", "https://bugzilla.redhat.com/show_bug.cgi?id=2263897", "https://bugzilla.redhat.com/show_bug.cgi?id=2263909", "https://bugzilla.redhat.com/show_bug.cgi?id=2263911", "https://bugzilla.redhat.com/show_bug.cgi?id=2263914", "https://bugzilla.redhat.com/show_bug.cgi?id=2263917", "https://bugzilla.suse.com/show_bug.cgi?id=1219823", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50387", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50868", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5517", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6516", "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html", "https://errata.almalinux.org/9/ALSA-2024-2551.html", "https://errata.rockylinux.org/RLSA-2024:2551", "https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1", "https://kb.isc.org/docs/cve-2023-50387", "https://linux.oracle.com/cve/CVE-2023-50387.html", "https://linux.oracle.com/errata/ELSA-2024-3741.html", "https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html", "https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html", "https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html", "https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/", "https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-50387", "https://news.ycombinator.com/item?id=39367411", "https://news.ycombinator.com/item?id=39372384", "https://nlnetlabs.nl/downloads/unbound/CVE-2023-50387_CVE-2023-50868.txt", "https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/", "https://nvd.nist.gov/vuln/detail/CVE-2023-50387", "https://security.netapp.com/advisory/ntap-20240307-0007/", "https://ubuntu.com/security/notices/USN-6633-1", "https://ubuntu.com/security/notices/USN-6642-1", "https://ubuntu.com/security/notices/USN-6657-1", "https://ubuntu.com/security/notices/USN-6657-2", "https://ubuntu.com/security/notices/USN-6665-1", "https://ubuntu.com/security/notices/USN-6723-1", "https://ubuntu.com/security/notices/USN-8946-1", "https://www.athene-center.de/aktuelles/key-trap", "https://www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-50387", "https://www.isc.org/blogs/2024-bind-security-release/", "https://www.knot-resolver.cz/2024-02-13-knot-resolver-5.7.1.html", "https://www.securityweek.com/keytrap-dns-attack-could-disable-large-parts-of-internet-researchers/", "https://www.theregister.com/2024/02/13/dnssec_vulnerability_internet/" ], "PublishedDate": "2024-02-14T16:15:45.3Z", "LastModifiedDate": "2026-06-17T06:39:35.51Z" }, { "VulnerabilityID": "CVE-2023-50868", "PkgID": "libudev1@241-7~deb10u10", "PkgName": "libudev1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libudev1@241-7~deb10u10?arch=amd64\u0026distro=debian-10.13", "UID": "1a0a0d6046211982" }, "InstalledVersion": "241-7~deb10u10", "Status": "affected", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-50868", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:fe6abcca67c61e88df7644b71e36f99d4aa2de6265cec4c57e04e1d3b2541ba3", "Title": "bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources", "Description": "The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the \"NSEC3\" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.", "Severity": "HIGH", "CweIDs": [ "CWE-400" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2024/02/16/2", "http://www.openwall.com/lists/oss-security/2024/02/16/3", "https://access.redhat.com/errata/RHSA-2024:2551", "https://access.redhat.com/security/cve/CVE-2023-50868", "https://blog.powerdns.com/2024/02/13/powerdns-recursor-4-8-6-4-9-3-5-0-2-released", "https://bugzilla.redhat.com/2263896", "https://bugzilla.redhat.com/2263897", "https://bugzilla.redhat.com/2263909", "https://bugzilla.redhat.com/2263911", "https://bugzilla.redhat.com/2263914", "https://bugzilla.redhat.com/2263917", "https://bugzilla.redhat.com/show_bug.cgi?id=2263896", "https://bugzilla.redhat.com/show_bug.cgi?id=2263897", "https://bugzilla.redhat.com/show_bug.cgi?id=2263909", "https://bugzilla.redhat.com/show_bug.cgi?id=2263911", "https://bugzilla.redhat.com/show_bug.cgi?id=2263914", "https://bugzilla.redhat.com/show_bug.cgi?id=2263917", "https://bugzilla.suse.com/show_bug.cgi?id=1219826", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50387", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50868", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5517", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6516", "https://datatracker.ietf.org/doc/html/rfc5155", "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html", "https://errata.almalinux.org/9/ALSA-2024-2551.html", "https://errata.rockylinux.org/RLSA-2024:2551", "https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1", "https://kb.isc.org/docs/cve-2023-50868", "https://linux.oracle.com/cve/CVE-2023-50868.html", "https://linux.oracle.com/errata/ELSA-2024-3741.html", "https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html", "https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html", "https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html", "https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/", "https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html", "https://nlnetlabs.nl/downloads/unbound/CVE-2023-50387_CVE-2023-50868.txt", "https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/", "https://nvd.nist.gov/vuln/detail/CVE-2023-50868", "https://security.netapp.com/advisory/ntap-20240307-0008/", "https://ubuntu.com/security/notices/USN-6633-1", "https://ubuntu.com/security/notices/USN-6642-1", "https://ubuntu.com/security/notices/USN-6657-1", "https://ubuntu.com/security/notices/USN-6657-2", "https://ubuntu.com/security/notices/USN-6665-1", "https://ubuntu.com/security/notices/USN-6723-1", "https://ubuntu.com/security/notices/USN-8946-1", "https://www.cve.org/CVERecord?id=CVE-2023-50868", "https://www.isc.org/blogs/2024-bind-security-release/", "https://www.knot-resolver.cz/2024-02-13-knot-resolver-5.7.1.html" ], "PublishedDate": "2024-02-14T16:15:45.377Z", "LastModifiedDate": "2026-06-17T06:40:07.417Z" }, { "VulnerabilityID": "CVE-2020-1751", "PkgID": "nscd@2.28-10+deb10u4", "PkgName": "nscd", "PkgIdentifier": { "PURL": "pkg:deb/debian/nscd@2.28-10%2Bdeb10u4?arch=amd64\u0026distro=debian-10.13", "UID": "b9917cfcda34fe55" }, "InstalledVersion": "2.28-10+deb10u4", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2020-1751", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e174deadb4662cc794fe0a892257e93a26d2baa5890608c5afd3af424339003d", "Title": "glibc: array overflow in backtrace functions for powerpc", "Description": "An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "cbl-mariner": 3, "nvd": 3, "oracle-oval": 2, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V2Vector": "AV:L/AC:M/Au:N/C:P/I:P/A:C", "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V2Score": 5.9, "V3Score": 7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2020-1751", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1751", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://linux.oracle.com/cve/CVE-2020-1751.html", "https://linux.oracle.com/errata/ELSA-2020-4444.html", "https://nvd.nist.gov/vuln/detail/CVE-2020-1751", "https://security.gentoo.org/glsa/202006-04", "https://security.netapp.com/advisory/ntap-20200430-0002/", "https://sourceware.org/bugzilla/show_bug.cgi?id=25423", "https://ubuntu.com/security/notices/USN-4416-1", "https://usn.ubuntu.com/4416-1/", "https://www.cve.org/CVERecord?id=CVE-2020-1751" ], "PublishedDate": "2020-04-17T19:15:14.437Z", "LastModifiedDate": "2026-10-14T09:17:18.64Z" }, { "VulnerabilityID": "CVE-2020-16156", "PkgID": "perl-base@5.28.1-6+deb10u1", "PkgName": "perl-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-base@5.28.1-6%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "bd20e325fcbd32e6" }, "InstalledVersion": "5.28.1-6+deb10u1", "Status": "affected", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2020-16156", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7a746eac9187c87a2fc5bfa03ab0066594a0c25a37e99f84e954888b9e112104", "Title": "perl-CPAN: Bypass of verification of signatures in CHECKSUMS files", "Description": "CPAN 2.28 allows Signature Verification Bypass.", "Severity": "HIGH", "CweIDs": [ "CWE-347" ], "VendorSeverity": { "alma": 2, "amazon": 2, "nvd": 3, "oracle-oval": 2, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V2Vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V2Score": 6.8, "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html", "https://access.redhat.com/errata/RHSA-2025:8432", "https://access.redhat.com/security/cve/CVE-2020-16156", "https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/", "https://bugzilla.redhat.com/2035273", "https://bugzilla.redhat.com/show_bug.cgi?id=2035273", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16156", "https://errata.almalinux.org/8/ALSA-2025-8432.html", "https://errata.rockylinux.org/RLSA-2025:8432", "https://linux.oracle.com/cve/CVE-2020-16156.html", "https://linux.oracle.com/errata/ELSA-2025-8432.html", "https://lists.debian.org/debian-lts-announce/2024/10/msg00017.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SD6RYOJII7HRJ6WVORFNVTYNOFY5JDXN/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC/", "https://metacpan.org/pod/distribution/CPAN/scripts/cpan", "https://nvd.nist.gov/vuln/detail/CVE-2020-16156", "https://ubuntu.com/security/notices/USN-5689-1", "https://ubuntu.com/security/notices/USN-5689-2", "https://www.cve.org/CVERecord?id=CVE-2020-16156" ], "PublishedDate": "2021-12-13T18:15:07.943Z", "LastModifiedDate": "2026-06-17T02:57:47.983Z" }, { "VulnerabilityID": "CVE-2023-31484", "PkgID": "perl-base@5.28.1-6+deb10u1", "PkgName": "perl-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-base@5.28.1-6%2Bdeb10u1?arch=amd64\u0026distro=debian-10.13", "UID": "bd20e325fcbd32e6" }, "InstalledVersion": "5.28.1-6+deb10u1", "Status": "affected", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-31484", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:104e4278497d9998571c52bb9d5c5a34ea91d5fc332aee054aae4d6de550335c", "Title": "perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS", "Description": "CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.", "Severity": "HIGH", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "alma": 2, "amazon": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 2, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "http://www.openwall.com/lists/oss-security/2023/04/29/1", "http://www.openwall.com/lists/oss-security/2023/05/03/3", "http://www.openwall.com/lists/oss-security/2023/05/03/5", "http://www.openwall.com/lists/oss-security/2023/05/07/2", "https://access.redhat.com/errata/RHSA-2023:6539", "https://access.redhat.com/security/cve/CVE-2023-31484", "https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/", "https://bugzilla.redhat.com/2218667", "https://bugzilla.redhat.com/show_bug.cgi?id=2218667", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31484", "https://errata.almalinux.org/9/ALSA-2023-6539.html", "https://errata.rockylinux.org/RLSA-2023:6539", "https://github.com/andk/cpanpm/commit/9c98370287f4e709924aee7c58ef21c85289a7f0%20%282.35-TRIAL%29", "https://github.com/andk/cpanpm/pull/175", "https://linux.oracle.com/cve/CVE-2023-31484.html", "https://linux.oracle.com/errata/ELSA-2026-0079.html", "https://lists.debian.org/debian-lts-announce/2024/10/msg00017.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BM6UW55CNFUTNGD5ZRKGUKKKFDJGMFHL/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LEGCEOKFJVBJ2QQ6S2H4NAEWTUERC7SB/", "https://metacpan.org/dist/CPAN/changes", "https://nvd.nist.gov/vuln/detail/CVE-2023-31484", "https://security.netapp.com/advisory/ntap-20240621-0007/", "https://ubuntu.com/security/notices/USN-6112-1", "https://ubuntu.com/security/notices/USN-6112-2", "https://www.cve.org/CVERecord?id=CVE-2023-31484", "https://www.openwall.com/lists/oss-security/2023/04/18/14" ], "PublishedDate": "2023-04-29T00:15:09Z", "LastModifiedDate": "2026-06-17T05:57:05.02Z" }, { "VulnerabilityID": "CVE-2019-20916", "PkgID": "python-pip-whl@18.1-5", "PkgName": "python-pip-whl", "PkgIdentifier": { "PURL": "pkg:deb/debian/python-pip-whl@18.1-5?arch=all\u0026distro=debian-10.13", "UID": "6caa5325c39f44dc" }, "InstalledVersion": "18.1-5", "Status": "affected", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-20916", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7564dbe485e07c1e28eb77bf0f053b3b7d9b0f4c47081b2ff8316a1f3905b037", "Title": "python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py", "Description": "The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.", "Severity": "HIGH", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "alma": 2, "amazon": 2, "cbl-mariner": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "nvd": { "V2Vector": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V2Score": 5, "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8 } }, "References": [ "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00005.html", "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00010.html", "https://access.redhat.com/security/cve/CVE-2019-20916", "https://bugzilla.redhat.com/show_bug.cgi?id=1856481", "https://bugzilla.redhat.com/show_bug.cgi?id=1868135", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20907", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20916", "https://errata.almalinux.org/8/ALSA-2020-4654.html", "https://errata.rockylinux.org/RLSA-2020:4654", "https://github.com/advisories/GHSA-gpvv-69j7-gwj8", "https://github.com/gzpan123/pip/commit/a4c735b14a62f9cb864533808ac63936704f2ace", "https://github.com/pypa/advisory-database/tree/main/vulns/pip/PYSEC-2020-173.yaml", "https://github.com/pypa/pip", "https://github.com/pypa/pip/commit/a4c735b14a62f9cb864533808ac63936704f2ace%20%2819.2%29", "https://github.com/pypa/pip/compare/19.1.1...19.2", "https://github.com/pypa/pip/issues/6413", "https://linux.oracle.com/cve/CVE-2019-20916.html", "https://linux.oracle.com/errata/ELSA-2022-9204.html", "https://lists.debian.org/debian-lts-announce/2020/09/msg00010.html", "https://nvd.nist.gov/vuln/detail/CVE-2019-20916", "https://ubuntu.com/security/notices/USN-4601-1", "https://www.cve.org/CVERecord?id=CVE-2019-20916", "https://www.oracle.com/security-alerts/cpuapr2022.html", "https://www.oracle.com/security-alerts/cpujul2022.html" ], "PublishedDate": "2020-09-04T20:15:11.013Z", "LastModifiedDate": "2026-06-17T02:31:25.907Z" }, { "VulnerabilityID": "CVE-2020-36242", "PkgID": "python3-cryptography@2.6.1-3+deb10u4", "PkgName": "python3-cryptography", "PkgIdentifier": { "PURL": "pkg:deb/debian/python3-cryptography@2.6.1-3%2Bdeb10u4?arch=amd64\u0026distro=debian-10.13", "UID": "bfe892ec22459f00" }, "InstalledVersion": "2.6.1-3+deb10u4", "Status": "affected", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2020-36242", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:83c9909c98ace1db3e8cba475098576588ec985e37ceebdae74a8dbbb60b43a4", "Title": "python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow", "Description": "In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.", "Severity": "CRITICAL", "CweIDs": [ "CWE-190", "CWE-787" ], "VendorSeverity": { "cbl-mariner": 4, "ghsa": 3, "nvd": 4, "oracle-oval": 2, "photon": 4, "redhat": 2, "rocky": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 9.1, "V40Score": 8.8 }, "nvd": { "V2Vector": "AV:N/AC:L/Au:N/C:P/I:N/A:P", "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "V2Score": 6.4, "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2021:1608", "https://access.redhat.com/security/cve/CVE-2020-36242", "https://bugzilla.redhat.com/show_bug.cgi?id=1778939", "https://bugzilla.redhat.com/show_bug.cgi?id=1873581", "https://bugzilla.redhat.com/show_bug.cgi?id=1889988", "https://bugzilla.redhat.com/show_bug.cgi?id=1891947", "https://bugzilla.redhat.com/show_bug.cgi?id=1907429", "https://bugzilla.redhat.com/show_bug.cgi?id=1926226", "https://creativecommons.org/licenses/by/4.0/", "https://cryptography.io/en/latest/changelog.html#v3-3-2", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25659", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36242", "https://errata.rockylinux.org/RLSA-2021:1608", "https://github.com/advisories/GHSA-rhm9-p9w5-fwm7", "https://github.com/pyca/cryptography", "https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst", "https://github.com/pyca/cryptography/commit/82b6ce28389f0a317bc55ba2091a74b346db7cae", "https://github.com/pyca/cryptography/compare/3.3.1...3.3.2", "https://github.com/pyca/cryptography/issues/5615", "https://github.com/pyca/cryptography/security/advisories/GHSA-rhm9-p9w5-fwm7", "https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2021-63.yaml", "https://linux.oracle.com/cve/CVE-2020-36242.html", "https://linux.oracle.com/errata/ELSA-2021-1608.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L7RGQLK4J5ZQFRLKCHVVG6BKZTUQMG7E", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L7RGQLK4J5ZQFRLKCHVVG6BKZTUQMG7E/", "https://nvd.nist.gov/vuln/detail/CVE-2020-36242", "https://www.cve.org/CVERecord?id=CVE-2020-36242", "https://www.oracle.com/security-alerts/cpuapr2022.html", "https://www.oracle.com/security-alerts/cpujul2022.html" ], "PublishedDate": "2021-02-07T20:15:12.09Z", "LastModifiedDate": "2026-06-17T03:15:11.793Z" }, { "VulnerabilityID": "CVE-2023-50782", "PkgID": "python3-cryptography@2.6.1-3+deb10u4", "PkgName": "python3-cryptography", "PkgIdentifier": { "PURL": "pkg:deb/debian/python3-cryptography@2.6.1-3%2Bdeb10u4?arch=amd64\u0026distro=debian-10.13", "UID": "bfe892ec22459f00" }, "InstalledVersion": "2.6.1-3+deb10u4", "Status": "affected", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-50782", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5d58c27d4fdc2df65ac4f13fbfc535fe94afe77464fa16f064ad6dfea592792c", "Title": "python-cryptography: Bleichenbacher timing oracle attack against RSA decryption - incomplete fix for CVE-2020-25659", "Description": "A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.", "Severity": "HIGH", "CweIDs": [ "CWE-203" ], "VendorSeverity": { "azure": 3, "cbl-mariner": 3, "ghsa": 3, "nvd": 3, "photon": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2023-50782", "https://advisory.echohq.com/cve/CVE-2023-50782", "https://bugzilla.redhat.com/show_bug.cgi?id=2254432", "https://github.com/openssl/openssl/pull/13817", "https://github.com/pyca/cryptography", "https://github.com/pyca/cryptography/issues/9785", "https://nvd.nist.gov/vuln/detail/CVE-2023-50782", "https://people.redhat.com/~hkario/marvin/", "https://ubuntu.com/security/notices/USN-6663-1", "https://ubuntu.com/security/notices/USN-6673-1", "https://ubuntu.com/security/notices/USN-6673-2", "https://www.couchbase.com/alerts", "https://www.couchbase.com/alerts/", "https://www.cve.org/CVERecord?id=CVE-2023-50782" ], "PublishedDate": "2024-02-05T21:15:11.183Z", "LastModifiedDate": "2026-06-17T06:39:58.24Z" }, { "VulnerabilityID": "CVE-2019-20916", "PkgID": "python3-pip@18.1-5", "PkgName": "python3-pip", "PkgIdentifier": { "PURL": "pkg:deb/debian/python3-pip@18.1-5?arch=all\u0026distro=debian-10.13", "UID": "cdf6fe8eb9576f55" }, "InstalledVersion": "18.1-5", "Status": "affected", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-20916", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:bd7bfeeda66dd8064d8adb9facc0759d0e900be294906d83be82592e259d2495", "Title": "python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py", "Description": "The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.", "Severity": "HIGH", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "alma": 2, "amazon": 2, "cbl-mariner": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "nvd": { "V2Vector": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V2Score": 5, "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8 } }, "References": [ "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00005.html", "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00010.html", "https://access.redhat.com/security/cve/CVE-2019-20916", "https://bugzilla.redhat.com/show_bug.cgi?id=1856481", "https://bugzilla.redhat.com/show_bug.cgi?id=1868135", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20907", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20916", "https://errata.almalinux.org/8/ALSA-2020-4654.html", "https://errata.rockylinux.org/RLSA-2020:4654", "https://github.com/advisories/GHSA-gpvv-69j7-gwj8", "https://github.com/gzpan123/pip/commit/a4c735b14a62f9cb864533808ac63936704f2ace", "https://github.com/pypa/advisory-database/tree/main/vulns/pip/PYSEC-2020-173.yaml", "https://github.com/pypa/pip", "https://github.com/pypa/pip/commit/a4c735b14a62f9cb864533808ac63936704f2ace%20%2819.2%29", "https://github.com/pypa/pip/compare/19.1.1...19.2", "https://github.com/pypa/pip/issues/6413", "https://linux.oracle.com/cve/CVE-2019-20916.html", "https://linux.oracle.com/errata/ELSA-2022-9204.html", "https://lists.debian.org/debian-lts-announce/2020/09/msg00010.html", "https://nvd.nist.gov/vuln/detail/CVE-2019-20916", "https://ubuntu.com/security/notices/USN-4601-1", "https://www.cve.org/CVERecord?id=CVE-2019-20916", "https://www.oracle.com/security-alerts/cpuapr2022.html", "https://www.oracle.com/security-alerts/cpujul2022.html" ], "PublishedDate": "2020-09-04T20:15:11.013Z", "LastModifiedDate": "2026-06-17T02:31:25.907Z" }, { "VulnerabilityID": "CVE-2022-0391", "PkgID": "python3.7@3.7.3-2+deb10u7", "PkgName": "python3.7", "PkgIdentifier": { "PURL": "pkg:deb/debian/python3.7@3.7.3-2%2Bdeb10u7?arch=amd64\u0026distro=debian-10.13", "UID": "1724fa86a0cd088d" }, "InstalledVersion": "3.7.3-2+deb10u7", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-0391", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:757cfb60717c2e3a0d66b414b0b9e634f8771fa108d9e1ed70761c721109f0e2", "Title": "python: urllib.parse does not sanitize URLs containing ASCII newline and tabs", "Description": "A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\\r' and '\\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14.", "Severity": "HIGH", "CweIDs": [ "CWE-74" ], "VendorSeverity": { "alma": 2, "amazon": 2, "bitnami": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "nvd": { "V2Vector": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V2Score": 5, "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/errata/RHSA-2022:6457", "https://access.redhat.com/security/cve/CVE-2022-0391", "https://bugs.python.org/issue43882", "https://bugzilla.redhat.com/2047376", "https://bugzilla.redhat.com/2075390", "https://bugzilla.redhat.com/show_bug.cgi?id=1995162", "https://bugzilla.redhat.com/show_bug.cgi?id=1995234", "https://bugzilla.redhat.com/show_bug.cgi?id=2006792", "https://bugzilla.redhat.com/show_bug.cgi?id=2032569", "https://bugzilla.redhat.com/show_bug.cgi?id=2036020", "https://bugzilla.redhat.com/show_bug.cgi?id=2047376", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3733", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3737", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4189", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0391", "https://errata.almalinux.org/8/ALSA-2022-6457.html", "https://errata.rockylinux.org/RLSA-2022:1821", "https://linux.oracle.com/cve/CVE-2022-0391.html", "https://linux.oracle.com/errata/ELSA-2023-3550.html", "https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html", "https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html", "https://lists.debian.org/debian-lts-announce/2025/03/msg00013.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CSD2YBXP3ZF44E44QMIIAR5VTO35KTRB/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UDBDBAU6HUPZHISBOARTXZ5GKHF2VH5U/", "https://nvd.nist.gov/vuln/detail/CVE-2022-0391", "https://security.gentoo.org/glsa/202305-02", "https://security.netapp.com/advisory/ntap-20220225-0009/", "https://ubuntu.com/security/notices/USN-5342-1", "https://ubuntu.com/security/notices/USN-5342-2", "https://ubuntu.com/security/notices/USN-6891-1", "https://www.cve.org/CVERecord?id=CVE-2022-0391", "https://www.oracle.com/security-alerts/cpuapr2022.html" ], "PublishedDate": "2022-02-09T23:15:16.58Z", "LastModifiedDate": "2026-10-14T13:17:13.947Z" }, { "VulnerabilityID": "CVE-2022-42919", "PkgID": "python3.7@3.7.3-2+deb10u7", "PkgName": "python3.7", "PkgIdentifier": { "PURL": "pkg:deb/debian/python3.7@3.7.3-2%2Bdeb10u7?arch=amd64\u0026distro=debian-10.13", "UID": "1724fa86a0cd088d" }, "InstalledVersion": "3.7.3-2+deb10u7", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-42919", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a3d1534f2330ee7a4a3536b9c102286b14a4801fe138c91f0ef72c3bd4f34074", "Title": "python: local privilege escalation via the multiprocessing forkserver start method", "Description": "Python 3.9.x before 3.9.16 and 3.10.x before 3.10.9 on Linux allows local privilege escalation in a non-default configuration. The Python multiprocessing library, when used with the forkserver start method on Linux, allows pickles to be deserialized from any user in the same machine local network namespace, which in many system configurations means any user on the same machine. Pickles can execute arbitrary code. Thus, this allows for local user privilege escalation to the user that any forkserver process is running as. Setting multiprocessing.util.abstract_sockets_supported to False is a workaround. The forkserver start method for multiprocessing is not the default start method. This issue is Linux specific because only Linux supports abstract namespace sockets. CPython before 3.9 does not make use of Linux abstract namespace sockets by default. Support for users manually specifying an abstract namespace socket was added as a bugfix in 3.7.8 and 3.8.3, but users would need to make specific uncommon API calls in order to do that in CPython before 3.9.", "Severity": "HIGH", "CweIDs": [ "CWE-502" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2022:8493", "https://access.redhat.com/security/cve/CVE-2022-42919", "https://bugzilla.redhat.com/2138705", "https://bugzilla.redhat.com/show_bug.cgi?id=2138705", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42919", "https://errata.almalinux.org/9/ALSA-2022-8493.html", "https://errata.rockylinux.org/RLSA-2022:8493", "https://github.com/python/cpython/compare/v3.10.8...v3.10.9", "https://github.com/python/cpython/compare/v3.9.15...v3.9.16", "https://github.com/python/cpython/issues/97514", "https://github.com/python/cpython/issues/97514#issuecomment-1310277840", "https://linux.oracle.com/cve/CVE-2022-42919.html", "https://linux.oracle.com/errata/ELSA-2022-8493.html", "https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FKGCQPIVHEAIJ77R3RSNSQWYBUDVWDKU/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2LHWWEI5OBQ6RELULMVU6KMDYG4WZXH/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI5DYIED6U26BGX5IRZWNCP6TY4M2ZGZ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QLUGZSEAO3MBWGKCUSMKQIRYJZKJCIOB/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6KGIRHSENZ4QAB234Z36HVIDTRJ3MFI/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RDK3ZZBRYFO47ET3N4BNTKVXN47U6ICY/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCRKBB5Y5EWTJUNC7LK665WO64DDXSTN/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XX6LLAXGZVZ327REY6MDZRMMP47LJ53P/", "https://nvd.nist.gov/vuln/detail/CVE-2022-42919", "https://python-security.readthedocs.io/vuln/multiprocessing-abstract-socket.html", "https://security.gentoo.org/glsa/202305-02", "https://security.netapp.com/advisory/ntap-20221209-0006/", "https://ubuntu.com/security/notices/USN-5713-1", "https://ubuntu.com/security/notices/USN-5888-1", "https://ubuntu.com/security/notices/USN-6891-1", "https://www.cve.org/CVERecord?id=CVE-2022-42919" ], "PublishedDate": "2022-11-07T00:15:09.697Z", "LastModifiedDate": "2026-06-17T05:05:35.24Z" }, { "VulnerabilityID": "CVE-2023-24329", "PkgID": "python3.7@3.7.3-2+deb10u7", "PkgName": "python3.7", "PkgIdentifier": { "PURL": "pkg:deb/debian/python3.7@3.7.3-2%2Bdeb10u7?arch=amd64\u0026distro=debian-10.13", "UID": "1724fa86a0cd088d" }, "InstalledVersion": "3.7.3-2+deb10u7", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-24329", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:23fa3435651e528115de9c4b59fbdede7b43709b966cd5db2b5f127711376477", "Title": "python: urllib.parse url blocklisting bypass", "Description": "An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.", "Severity": "HIGH", "CweIDs": [ "CWE-20" ], "VendorSeverity": { "alma": 3, "amazon": 2, "bitnami": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2023:3595", "https://access.redhat.com/security/cve/CVE-2023-24329", "https://bugzilla.redhat.com/2173917", "https://bugzilla.redhat.com/show_bug.cgi?id=2173917", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24329", "https://errata.almalinux.org/9/ALSA-2023-3595.html", "https://errata.rockylinux.org/RLSA-2023:3595", "https://github.com/python/cpython/issues/102153", "https://github.com/python/cpython/pull/99421", "https://github.com/python/cpython/pull/99446%20%28backport%20for%203.11%20branch%29", "https://linux.oracle.com/cve/CVE-2023-24329.html", "https://linux.oracle.com/errata/ELSA-2023-3811.html", "https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html", "https://lists.debian.org/debian-lts-announce/2024/11/msg00005.html", "https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PEVICI7YNGGMSL3UCMWGE66QFLATH72/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DSL6NSOAXWBJJ67XPLSSC74MNKZF3BBO/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EM2XLZSTXG44TMFXF4E6VTGKR2MQCW3G/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F2NY75GFDZ5T6YPN44D3VMFT5SUVTOTG/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GR5US3BYILYJ4SKBV6YBNPRUBAL5P2CN/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H23OSKC6UG6IWOQAUPW74YUHWRWVXJP7/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZTLGV2HYFF4AMYJL25VDIGAIHCU7UPA/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LWC4WGXER5P6Q75RFGL7QUTPP3N5JR7T/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZEHSXSCMA4WWQKXT6QV7AAR6SWNZ2VP/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O5SP4RT3RRS434ZS2HQKQJ3VZW7YPKYR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OHHJHJRLEF3TDT2K3676CAUVRDD4CCMR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PEUN6T22UJFXR7J5F6UUHCXXPKJ2DVHI/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PURM5CFDABEWAIWZFD2MQ7ZJGCPYSQ44/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q3J5N24ECS4B6MJDRO6UAYU6GPLYBDCL/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRQHN7RWJQJHYP6E5EKESOYP5VDSHZG4/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RA2MBEEES6L46OD64OBSVUUMGKNGMOWW/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T4IDB5OAR5Y4UK3HLMZBW4WEL2B7YFMJ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TZH26JGNZ5XYPZ5SAU3NKSBSPRE5OHTG/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U2MZOJYGFCB5PPT6AKMAU72N7QOYWLBP/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UONZWLB4QVLQIY5CPDLEUEKH6WX4VQMC/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTOAUJNDWZDRWVSXJ354AYZYKRMT56HU/", "https://nvd.nist.gov/vuln/detail/CVE-2023-24329", "https://pointernull.com/security/python-url-parse-problem.html", "https://security.netapp.com/advisory/ntap-20230324-0004/", "https://ubuntu.com/security/notices/USN-5888-1", "https://ubuntu.com/security/notices/USN-5960-1", "https://ubuntu.com/security/notices/USN-6139-1", "https://ubuntu.com/security/notices/USN-6891-1", "https://ubuntu.com/security/notices/USN-7180-1", "https://www.cve.org/CVERecord?id=CVE-2023-24329", "https://www.kb.cert.org/vuls/id/127587" ], "PublishedDate": "2023-02-17T15:15:12.243Z", "LastModifiedDate": "2026-10-14T23:17:14.647Z" }, { "VulnerabilityID": "CVE-2022-0391", "PkgID": "python3.7-minimal@3.7.3-2+deb10u7", "PkgName": "python3.7-minimal", "PkgIdentifier": { "PURL": "pkg:deb/debian/python3.7-minimal@3.7.3-2%2Bdeb10u7?arch=amd64\u0026distro=debian-10.13", "UID": "ef82f827b25ff588" }, "InstalledVersion": "3.7.3-2+deb10u7", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-0391", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:97183d1bde3745c26768b3c98beef2d7795a917eb9aa9cd417974d0f85f14543", "Title": "python: urllib.parse does not sanitize URLs containing ASCII newline and tabs", "Description": "A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\\r' and '\\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14.", "Severity": "HIGH", "CweIDs": [ "CWE-74" ], "VendorSeverity": { "alma": 2, "amazon": 2, "bitnami": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "nvd": { "V2Vector": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V2Score": 5, "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/errata/RHSA-2022:6457", "https://access.redhat.com/security/cve/CVE-2022-0391", "https://bugs.python.org/issue43882", "https://bugzilla.redhat.com/2047376", "https://bugzilla.redhat.com/2075390", "https://bugzilla.redhat.com/show_bug.cgi?id=1995162", "https://bugzilla.redhat.com/show_bug.cgi?id=1995234", "https://bugzilla.redhat.com/show_bug.cgi?id=2006792", "https://bugzilla.redhat.com/show_bug.cgi?id=2032569", "https://bugzilla.redhat.com/show_bug.cgi?id=2036020", "https://bugzilla.redhat.com/show_bug.cgi?id=2047376", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3733", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3737", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4189", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0391", "https://errata.almalinux.org/8/ALSA-2022-6457.html", "https://errata.rockylinux.org/RLSA-2022:1821", "https://linux.oracle.com/cve/CVE-2022-0391.html", "https://linux.oracle.com/errata/ELSA-2023-3550.html", "https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html", "https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html", "https://lists.debian.org/debian-lts-announce/2025/03/msg00013.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CSD2YBXP3ZF44E44QMIIAR5VTO35KTRB/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UDBDBAU6HUPZHISBOARTXZ5GKHF2VH5U/", "https://nvd.nist.gov/vuln/detail/CVE-2022-0391", "https://security.gentoo.org/glsa/202305-02", "https://security.netapp.com/advisory/ntap-20220225-0009/", "https://ubuntu.com/security/notices/USN-5342-1", "https://ubuntu.com/security/notices/USN-5342-2", "https://ubuntu.com/security/notices/USN-6891-1", "https://www.cve.org/CVERecord?id=CVE-2022-0391", "https://www.oracle.com/security-alerts/cpuapr2022.html" ], "PublishedDate": "2022-02-09T23:15:16.58Z", "LastModifiedDate": "2026-10-14T13:17:13.947Z" }, { "VulnerabilityID": "CVE-2022-42919", "PkgID": "python3.7-minimal@3.7.3-2+deb10u7", "PkgName": "python3.7-minimal", "PkgIdentifier": { "PURL": "pkg:deb/debian/python3.7-minimal@3.7.3-2%2Bdeb10u7?arch=amd64\u0026distro=debian-10.13", "UID": "ef82f827b25ff588" }, "InstalledVersion": "3.7.3-2+deb10u7", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-42919", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:166f6223dcc990bdfc2fbb6a87bd52121a44fee26432374d48d721dd8070eb81", "Title": "python: local privilege escalation via the multiprocessing forkserver start method", "Description": "Python 3.9.x before 3.9.16 and 3.10.x before 3.10.9 on Linux allows local privilege escalation in a non-default configuration. The Python multiprocessing library, when used with the forkserver start method on Linux, allows pickles to be deserialized from any user in the same machine local network namespace, which in many system configurations means any user on the same machine. Pickles can execute arbitrary code. Thus, this allows for local user privilege escalation to the user that any forkserver process is running as. Setting multiprocessing.util.abstract_sockets_supported to False is a workaround. The forkserver start method for multiprocessing is not the default start method. This issue is Linux specific because only Linux supports abstract namespace sockets. CPython before 3.9 does not make use of Linux abstract namespace sockets by default. Support for users manually specifying an abstract namespace socket was added as a bugfix in 3.7.8 and 3.8.3, but users would need to make specific uncommon API calls in order to do that in CPython before 3.9.", "Severity": "HIGH", "CweIDs": [ "CWE-502" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2022:8493", "https://access.redhat.com/security/cve/CVE-2022-42919", "https://bugzilla.redhat.com/2138705", "https://bugzilla.redhat.com/show_bug.cgi?id=2138705", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42919", "https://errata.almalinux.org/9/ALSA-2022-8493.html", "https://errata.rockylinux.org/RLSA-2022:8493", "https://github.com/python/cpython/compare/v3.10.8...v3.10.9", "https://github.com/python/cpython/compare/v3.9.15...v3.9.16", "https://github.com/python/cpython/issues/97514", "https://github.com/python/cpython/issues/97514#issuecomment-1310277840", "https://linux.oracle.com/cve/CVE-2022-42919.html", "https://linux.oracle.com/errata/ELSA-2022-8493.html", "https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FKGCQPIVHEAIJ77R3RSNSQWYBUDVWDKU/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2LHWWEI5OBQ6RELULMVU6KMDYG4WZXH/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI5DYIED6U26BGX5IRZWNCP6TY4M2ZGZ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QLUGZSEAO3MBWGKCUSMKQIRYJZKJCIOB/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6KGIRHSENZ4QAB234Z36HVIDTRJ3MFI/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RDK3ZZBRYFO47ET3N4BNTKVXN47U6ICY/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCRKBB5Y5EWTJUNC7LK665WO64DDXSTN/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XX6LLAXGZVZ327REY6MDZRMMP47LJ53P/", "https://nvd.nist.gov/vuln/detail/CVE-2022-42919", "https://python-security.readthedocs.io/vuln/multiprocessing-abstract-socket.html", "https://security.gentoo.org/glsa/202305-02", "https://security.netapp.com/advisory/ntap-20221209-0006/", "https://ubuntu.com/security/notices/USN-5713-1", "https://ubuntu.com/security/notices/USN-5888-1", "https://ubuntu.com/security/notices/USN-6891-1", "https://www.cve.org/CVERecord?id=CVE-2022-42919" ], "PublishedDate": "2022-11-07T00:15:09.697Z", "LastModifiedDate": "2026-06-17T05:05:35.24Z" }, { "VulnerabilityID": "CVE-2023-24329", "PkgID": "python3.7-minimal@3.7.3-2+deb10u7", "PkgName": "python3.7-minimal", "PkgIdentifier": { "PURL": "pkg:deb/debian/python3.7-minimal@3.7.3-2%2Bdeb10u7?arch=amd64\u0026distro=debian-10.13", "UID": "ef82f827b25ff588" }, "InstalledVersion": "3.7.3-2+deb10u7", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-24329", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:40bbee90f4d2b97f43a0baaa5dc5711839c9ca4cd0594b6615c5173c723dc437", "Title": "python: urllib.parse url blocklisting bypass", "Description": "An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.", "Severity": "HIGH", "CweIDs": [ "CWE-20" ], "VendorSeverity": { "alma": 3, "amazon": 2, "bitnami": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2023:3595", "https://access.redhat.com/security/cve/CVE-2023-24329", "https://bugzilla.redhat.com/2173917", "https://bugzilla.redhat.com/show_bug.cgi?id=2173917", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24329", "https://errata.almalinux.org/9/ALSA-2023-3595.html", "https://errata.rockylinux.org/RLSA-2023:3595", "https://github.com/python/cpython/issues/102153", "https://github.com/python/cpython/pull/99421", "https://github.com/python/cpython/pull/99446%20%28backport%20for%203.11%20branch%29", "https://linux.oracle.com/cve/CVE-2023-24329.html", "https://linux.oracle.com/errata/ELSA-2023-3811.html", "https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html", "https://lists.debian.org/debian-lts-announce/2024/11/msg00005.html", "https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PEVICI7YNGGMSL3UCMWGE66QFLATH72/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DSL6NSOAXWBJJ67XPLSSC74MNKZF3BBO/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EM2XLZSTXG44TMFXF4E6VTGKR2MQCW3G/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F2NY75GFDZ5T6YPN44D3VMFT5SUVTOTG/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GR5US3BYILYJ4SKBV6YBNPRUBAL5P2CN/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H23OSKC6UG6IWOQAUPW74YUHWRWVXJP7/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZTLGV2HYFF4AMYJL25VDIGAIHCU7UPA/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LWC4WGXER5P6Q75RFGL7QUTPP3N5JR7T/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZEHSXSCMA4WWQKXT6QV7AAR6SWNZ2VP/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O5SP4RT3RRS434ZS2HQKQJ3VZW7YPKYR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OHHJHJRLEF3TDT2K3676CAUVRDD4CCMR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PEUN6T22UJFXR7J5F6UUHCXXPKJ2DVHI/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PURM5CFDABEWAIWZFD2MQ7ZJGCPYSQ44/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q3J5N24ECS4B6MJDRO6UAYU6GPLYBDCL/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRQHN7RWJQJHYP6E5EKESOYP5VDSHZG4/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RA2MBEEES6L46OD64OBSVUUMGKNGMOWW/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T4IDB5OAR5Y4UK3HLMZBW4WEL2B7YFMJ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TZH26JGNZ5XYPZ5SAU3NKSBSPRE5OHTG/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U2MZOJYGFCB5PPT6AKMAU72N7QOYWLBP/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UONZWLB4QVLQIY5CPDLEUEKH6WX4VQMC/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTOAUJNDWZDRWVSXJ354AYZYKRMT56HU/", "https://nvd.nist.gov/vuln/detail/CVE-2023-24329", "https://pointernull.com/security/python-url-parse-problem.html", "https://security.netapp.com/advisory/ntap-20230324-0004/", "https://ubuntu.com/security/notices/USN-5888-1", "https://ubuntu.com/security/notices/USN-5960-1", "https://ubuntu.com/security/notices/USN-6139-1", "https://ubuntu.com/security/notices/USN-6891-1", "https://ubuntu.com/security/notices/USN-7180-1", "https://www.cve.org/CVERecord?id=CVE-2023-24329", "https://www.kb.cert.org/vuls/id/127587" ], "PublishedDate": "2023-02-17T15:15:12.243Z", "LastModifiedDate": "2026-10-14T23:17:14.647Z" }, { "VulnerabilityID": "CVE-2019-19603", "PkgID": "sqlite3@3.27.2-3+deb10u2", "PkgName": "sqlite3", "PkgIdentifier": { "PURL": "pkg:deb/debian/sqlite3@3.27.2-3%2Bdeb10u2?arch=amd64\u0026distro=debian-10.13", "UID": "1726dfbe6ece555a" }, "InstalledVersion": "3.27.2-3+deb10u2", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-19603", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:08ce4a18994422433fada087eafb65fa186685002e95dfe1a56cbc8e3675af81", "Title": "sqlite: mishandling of certain SELECT statements with non-existent VIEW can lead to DoS", "Description": "SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.", "Severity": "HIGH", "VendorSeverity": { "alma": 2, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V2Vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V2Score": 5, "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13750.json", "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13751.json", "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19603.json", "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5827.json", "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13435.json", "https://access.redhat.com/security/cve/CVE-2019-19603", "https://cert-portal.siemens.com/productcert/html/ssa-389290.html", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf", "https://errata.almalinux.org/8/ALSA-2021-4396.html", "https://github.com/sqlite/sqlite/commit/527cbd4a104cb93bf3994b3dd3619a6299a78b13", "https://linux.oracle.com/cve/CVE-2019-19603.html", "https://linux.oracle.com/errata/ELSA-2021-4396.html", "https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c@%3Cissues.guacamole.apache.org%3E", "https://nvd.nist.gov/vuln/detail/CVE-2019-19603", "https://security.netapp.com/advisory/ntap-20191223-0001/", "https://ubuntu.com/security/notices/USN-4394-1", "https://usn.ubuntu.com/4394-1/", "https://www.cve.org/CVERecord?id=CVE-2019-19603", "https://www.oracle.com/security-alerts/cpuapr2020.html", "https://www.sqlite.org/" ], "PublishedDate": "2019-12-09T19:15:14.71Z", "LastModifiedDate": "2026-10-14T08:16:58.417Z" }, { "VulnerabilityID": "CVE-2023-7104", "PkgID": "sqlite3@3.27.2-3+deb10u2", "PkgName": "sqlite3", "PkgIdentifier": { "PURL": "pkg:deb/debian/sqlite3@3.27.2-3%2Bdeb10u2?arch=amd64\u0026distro=debian-10.13", "UID": "1726dfbe6ece555a" }, "InstalledVersion": "3.27.2-3+deb10u2", "Status": "affected", "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-7104", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:cb454b8c20fe865c17581981b70ef118087966763c9805617342422285469d91", "Title": "sqlite: heap-buffer-overflow at sessionfuzz", "Description": "A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.", "Severity": "HIGH", "CweIDs": [ "CWE-122", "CWE-119" ], "VendorSeverity": { "alma": 2, "amazon": 3, "bitnami": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "V3Score": 7.3 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "V3Score": 7.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "V3Score": 7.3 } }, "References": [ "https://access.redhat.com/errata/RHSA-2024:0465", "https://access.redhat.com/security/cve/CVE-2023-7104", "https://bugzilla.redhat.com/2256194", "https://bugzilla.redhat.com/show_bug.cgi?id=2256194", "https://cert-portal.siemens.com/productcert/html/ssa-000297.html", "https://cert-portal.siemens.com/productcert/html/ssa-277137.html", "https://cert-portal.siemens.com/productcert/html/ssa-794697.html", "https://cert-portal.siemens.com/productcert/html/ssa-915275.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7104", "https://errata.almalinux.org/9/ALSA-2024-0465.html", "https://errata.rockylinux.org/RLSA-2024:0465", "https://linux.oracle.com/cve/CVE-2023-7104.html", "https://linux.oracle.com/errata/ELSA-2024-0465.html", "https://lists.debian.org/debian-lts-announce/2024/09/msg00050.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/", "https://nvd.nist.gov/vuln/detail/CVE-2023-7104", "https://security.netapp.com/advisory/ntap-20240112-0008/", "https://sqlite.org/forum/forumpost/5bcbf4571c", "https://sqlite.org/src/info/0e4e7a05c4204b47", "https://ubuntu.com/security/notices/USN-6566-1", "https://ubuntu.com/security/notices/USN-6566-2", "https://vuldb.com/?ctiid.248999", "https://vuldb.com/?id.248999", "https://www.cve.org/CVERecord?id=CVE-2023-7104" ], "PublishedDate": "2023-12-29T10:15:13.89Z", "LastModifiedDate": "2026-10-14T23:17:21.387Z" }, { "VulnerabilityID": "CVE-2023-45853", "PkgID": "zlib1g@1:1.2.11.dfsg-1+deb10u2", "PkgName": "zlib1g", "PkgIdentifier": { "PURL": "pkg:deb/debian/zlib1g@1.2.11.dfsg-1%2Bdeb10u2?arch=amd64\u0026distro=debian-10.13\u0026epoch=1", "UID": "a2867790d533e25a" }, "InstalledVersion": "1:1.2.11.dfsg-1+deb10u2", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:8a84050e401db52e8497f209ecfcf750d083895608f020cf3f25daaf65837d55" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-45853", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5e5fee6ae572b8d0d3f9ee31900fb1eaea5963a3148fab9c6685eaadf0dc7dde", "Title": "zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6", "Description": "MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.", "Severity": "CRITICAL", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "amazon": 2, "azure": 3, "cbl-mariner": 4, "ghsa": 4, "julia": 4, "nvd": 4, "photon": 4, "redhat": 2, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "V3Score": 5.3 } }, "References": [ "http://www.openwall.com/lists/oss-security/2023/10/20/9", "http://www.openwall.com/lists/oss-security/2024/01/24/10", "https://access.redhat.com/security/cve/CVE-2023-45853", "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "https://cert-portal.siemens.com/productcert/html/ssa-470355.html", "https://cert-portal.siemens.com/productcert/html/ssa-769027.html", "https://chromium.googlesource.com/chromium/src/+/d709fb23806858847131027da95ef4c548813356", "https://chromium.googlesource.com/chromium/src/+/de29dd6c7151d3cd37cb4cf0036800ddfb1d8b61", "https://github.com/madler/zlib/blob/ac8f12c97d1afd9bafa9c710f827d40a407d3266/contrib/README.contrib#L1-L4", "https://github.com/madler/zlib/commit/73331a6a0481067628f065ffe87bb1d8f787d10c", "https://github.com/madler/zlib/pull/843", "https://github.com/smihica/pyminizip", "https://github.com/smihica/pyminizip/blob/master/zlib-1.2.11/contrib/minizip/zip.c", "https://lists.debian.org/debian-lts-announce/2023/11/msg00026.html", "https://nvd.nist.gov/vuln/detail/CVE-2023-45853", "https://pypi.org/project/pyminizip/#history", "https://security.gentoo.org/glsa/202401-18", "https://security.netapp.com/advisory/ntap-20231130-0009", "https://security.netapp.com/advisory/ntap-20231130-0009/", "https://ubuntu.com/security/notices/USN-7107-1", "https://www.cve.org/CVERecord?id=CVE-2023-45853", "https://www.winimage.com/zLibDll/minizip.html" ], "PublishedDate": "2023-10-14T02:15:09.323Z", "LastModifiedDate": "2026-10-15T00:16:39.75Z" } ] }, { "Target": "Node.js", "Class": "lang-pkgs", "Type": "node-pkg", "Packages": [ { "ID": "@aws-crypto/sha256-browser@5.2.0", "Name": "@aws-crypto/sha256-browser", "Identifier": { "PURL": "pkg:npm/%40aws-crypto/sha256-browser@5.2.0", "UID": "6fdd7c461b530406" }, "Version": "5.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-crypto/sha256-browser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-crypto/sha256-js@5.2.0", "Name": "@aws-crypto/sha256-js", "Identifier": { "PURL": "pkg:npm/%40aws-crypto/sha256-js@5.2.0", "UID": "c4bc1570839581ad" }, "Version": "5.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-crypto/sha256-js/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-crypto/supports-web-crypto@5.2.0", "Name": "@aws-crypto/supports-web-crypto", "Identifier": { "PURL": "pkg:npm/%40aws-crypto/supports-web-crypto@5.2.0", "UID": "a599cec0254ab0af" }, "Version": "5.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-crypto/supports-web-crypto/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-crypto/util@5.2.0", "Name": "@aws-crypto/util", "Identifier": { "PURL": "pkg:npm/%40aws-crypto/util@5.2.0", "UID": "56ad27cb3ab31a16" }, "Version": "5.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-crypto/util/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/client-cognito-identity@3.901.0", "Name": "@aws-sdk/client-cognito-identity", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/client-cognito-identity@3.901.0", "UID": "615cf9efee523732" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/client-cognito-identity/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/client-sso@3.901.0", "Name": "@aws-sdk/client-sso", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/client-sso@3.901.0", "UID": "c671f4f3d2692de5" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/client-sso/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/core@3.901.0", "Name": "@aws-sdk/core", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/core@3.901.0", "UID": "a8b24d92c52a15e" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/core/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/credential-provider-cognito-identity@3.901.0", "Name": "@aws-sdk/credential-provider-cognito-identity", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/credential-provider-cognito-identity@3.901.0", "UID": "55f0550ccb1d38c1" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/credential-provider-cognito-identity/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/credential-provider-env@3.901.0", "Name": "@aws-sdk/credential-provider-env", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/credential-provider-env@3.901.0", "UID": "9b2e39a5550db31" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/credential-provider-env/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/credential-provider-http@3.901.0", "Name": "@aws-sdk/credential-provider-http", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/credential-provider-http@3.901.0", "UID": "e06aabcdbb390614" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/credential-provider-http/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/credential-provider-ini@3.901.0", "Name": "@aws-sdk/credential-provider-ini", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/credential-provider-ini@3.901.0", "UID": "9ce0d0075e213b38" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/credential-provider-ini/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/credential-provider-node@3.901.0", "Name": "@aws-sdk/credential-provider-node", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/credential-provider-node@3.901.0", "UID": "5f8b39575c8ec9c1" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/credential-provider-node/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/credential-provider-process@3.901.0", "Name": "@aws-sdk/credential-provider-process", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/credential-provider-process@3.901.0", "UID": "97a5ea852a57f608" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/credential-provider-process/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/credential-provider-sso@3.901.0", "Name": "@aws-sdk/credential-provider-sso", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/credential-provider-sso@3.901.0", "UID": "320a643141bfe389" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/credential-provider-sso/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/credential-provider-web-identity@3.901.0", "Name": "@aws-sdk/credential-provider-web-identity", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/credential-provider-web-identity@3.901.0", "UID": "2ee3dd6f382a7b45" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/credential-provider-web-identity/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/credential-providers@3.901.0", "Name": "@aws-sdk/credential-providers", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/credential-providers@3.901.0", "UID": "35536a920cb8fb20" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/credential-providers/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/middleware-host-header@3.901.0", "Name": "@aws-sdk/middleware-host-header", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/middleware-host-header@3.901.0", "UID": "39eac26dab986934" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/middleware-host-header/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/middleware-logger@3.901.0", "Name": "@aws-sdk/middleware-logger", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/middleware-logger@3.901.0", "UID": "efdbdbe364be39dd" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/middleware-logger/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/middleware-recursion-detection@3.901.0", "Name": "@aws-sdk/middleware-recursion-detection", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/middleware-recursion-detection@3.901.0", "UID": "e2f2f5f3fc148db1" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/middleware-recursion-detection/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/middleware-user-agent@3.901.0", "Name": "@aws-sdk/middleware-user-agent", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/middleware-user-agent@3.901.0", "UID": "ffa7fb1692520891" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/middleware-user-agent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/nested-clients@3.901.0", "Name": "@aws-sdk/nested-clients", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/nested-clients@3.901.0", "UID": "776d77a27597c081" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/nested-clients/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/region-config-resolver@3.901.0", "Name": "@aws-sdk/region-config-resolver", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/region-config-resolver@3.901.0", "UID": "5f4b53ad07c9e9b4" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/region-config-resolver/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/token-providers@3.901.0", "Name": "@aws-sdk/token-providers", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/token-providers@3.901.0", "UID": "6547eb8b403d478f" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/token-providers/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/types@3.901.0", "Name": "@aws-sdk/types", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/types@3.901.0", "UID": "d46f3725b736d535" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/types/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/util-endpoints@3.901.0", "Name": "@aws-sdk/util-endpoints", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/util-endpoints@3.901.0", "UID": "cccb0f070ff7637f" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/util-endpoints/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/util-locate-window@3.893.0", "Name": "@aws-sdk/util-locate-window", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/util-locate-window@3.893.0", "UID": "10c9feb6134971eb" }, "Version": "3.893.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/util-locate-window/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/util-user-agent-browser@3.901.0", "Name": "@aws-sdk/util-user-agent-browser", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/util-user-agent-browser@3.901.0", "UID": "669c1faefcf38b42" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/util-user-agent-browser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/util-user-agent-node@3.901.0", "Name": "@aws-sdk/util-user-agent-node", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/util-user-agent-node@3.901.0", "UID": "4065c8aff447f76e" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/util-user-agent-node/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws-sdk/xml-builder@3.901.0", "Name": "@aws-sdk/xml-builder", "Identifier": { "PURL": "pkg:npm/%40aws-sdk/xml-builder@3.901.0", "UID": "ba82b32fdcec549" }, "Version": "3.901.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-sdk/xml-builder/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@aws/lambda-invoke-store@0.0.1", "Name": "@aws/lambda-invoke-store", "Identifier": { "PURL": "pkg:npm/%40aws/lambda-invoke-store@0.0.1", "UID": "fc158a2dd590edfb" }, "Version": "0.0.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws/lambda-invoke-store/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure-rest/core-client@2.5.1", "Name": "@azure-rest/core-client", "Identifier": { "PURL": "pkg:npm/%40azure-rest/core-client@2.5.1", "UID": "bfb9b7c264dfd2b0" }, "Version": "2.5.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure-rest/core-client/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/abort-controller@1.1.0", "Name": "@azure/abort-controller", "Identifier": { "PURL": "pkg:npm/%40azure/abort-controller@1.1.0", "UID": "5ac271d141d924b0" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/abort-controller/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/abort-controller@2.1.2", "Name": "@azure/abort-controller", "Identifier": { "PURL": "pkg:npm/%40azure/abort-controller@2.1.2", "UID": "28ac02b998c985" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure-rest/core-client/node_modules/@azure/abort-controller/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/abort-controller@2.1.2", "Name": "@azure/abort-controller", "Identifier": { "PURL": "pkg:npm/%40azure/abort-controller@2.1.2", "UID": "ce8314b46528f48b" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/core-auth/node_modules/@azure/abort-controller/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/abort-controller@2.1.2", "Name": "@azure/abort-controller", "Identifier": { "PURL": "pkg:npm/%40azure/abort-controller@2.1.2", "UID": "a4b18fdbe7cc7f5c" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/core-client/node_modules/@azure/abort-controller/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/abort-controller@2.1.2", "Name": "@azure/abort-controller", "Identifier": { "PURL": "pkg:npm/%40azure/abort-controller@2.1.2", "UID": "26d35c004f1c3d80" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/core-http-compat/node_modules/@azure/abort-controller/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/abort-controller@2.1.2", "Name": "@azure/abort-controller", "Identifier": { "PURL": "pkg:npm/%40azure/abort-controller@2.1.2", "UID": "1a4b8efe450e4201" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/core-lro/node_modules/@azure/abort-controller/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/abort-controller@2.1.2", "Name": "@azure/abort-controller", "Identifier": { "PURL": "pkg:npm/%40azure/abort-controller@2.1.2", "UID": "6b72834c798a005c" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/core-rest-pipeline/node_modules/@azure/abort-controller/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/abort-controller@2.1.2", "Name": "@azure/abort-controller", "Identifier": { "PURL": "pkg:npm/%40azure/abort-controller@2.1.2", "UID": "2d407e458f9b28e7" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/core-util/node_modules/@azure/abort-controller/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/abort-controller@2.1.2", "Name": "@azure/abort-controller", "Identifier": { "PURL": "pkg:npm/%40azure/abort-controller@2.1.2", "UID": "ba4b4f385f877e4d" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/keyvault-common/node_modules/@azure/abort-controller/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/abort-controller@2.1.2", "Name": "@azure/abort-controller", "Identifier": { "PURL": "pkg:npm/%40azure/abort-controller@2.1.2", "UID": "db1bf170107d4743" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/keyvault-keys/node_modules/@azure/abort-controller/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/core-auth@1.10.1", "Name": "@azure/core-auth", "Identifier": { "PURL": "pkg:npm/%40azure/core-auth@1.10.1", "UID": "8b80c695da396580" }, "Version": "1.10.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/core-auth/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/core-client@1.10.1", "Name": "@azure/core-client", "Identifier": { "PURL": "pkg:npm/%40azure/core-client@1.10.1", "UID": "cc32e0625174273" }, "Version": "1.10.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/core-client/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/core-http-compat@2.3.1", "Name": "@azure/core-http-compat", "Identifier": { "PURL": "pkg:npm/%40azure/core-http-compat@2.3.1", "UID": "eafa6a243cb378a3" }, "Version": "2.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/core-http-compat/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/core-lro@2.7.2", "Name": "@azure/core-lro", "Identifier": { "PURL": "pkg:npm/%40azure/core-lro@2.7.2", "UID": "bb6954abbfef2d84" }, "Version": "2.7.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/core-lro/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/core-paging@1.6.2", "Name": "@azure/core-paging", "Identifier": { "PURL": "pkg:npm/%40azure/core-paging@1.6.2", "UID": "8c98430abd7c8a68" }, "Version": "1.6.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/core-paging/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/core-rest-pipeline@1.22.1", "Name": "@azure/core-rest-pipeline", "Identifier": { "PURL": "pkg:npm/%40azure/core-rest-pipeline@1.22.1", "UID": "5fc54a925f50760f" }, "Version": "1.22.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/core-rest-pipeline/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/core-tracing@1.3.1", "Name": "@azure/core-tracing", "Identifier": { "PURL": "pkg:npm/%40azure/core-tracing@1.3.1", "UID": "16a1133a042fbafa" }, "Version": "1.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/core-tracing/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/core-util@1.13.1", "Name": "@azure/core-util", "Identifier": { "PURL": "pkg:npm/%40azure/core-util@1.13.1", "UID": "918a048acdb1fd2" }, "Version": "1.13.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/core-util/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/identity@2.1.0", "Name": "@azure/identity", "Identifier": { "PURL": "pkg:npm/%40azure/identity@2.1.0", "UID": "b60d9df3bd190a52" }, "Version": "2.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/identity/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/keyvault-common@2.0.0", "Name": "@azure/keyvault-common", "Identifier": { "PURL": "pkg:npm/%40azure/keyvault-common@2.0.0", "UID": "1abdad76dd87f416" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/keyvault-common/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/keyvault-keys@4.10.0", "Name": "@azure/keyvault-keys", "Identifier": { "PURL": "pkg:npm/%40azure/keyvault-keys@4.10.0", "UID": "fe5204e2a12a850" }, "Version": "4.10.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/keyvault-keys/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/logger@1.3.0", "Name": "@azure/logger", "Identifier": { "PURL": "pkg:npm/%40azure/logger@1.3.0", "UID": "fb183edd27b3c702" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/logger/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/msal-browser@2.39.0", "Name": "@azure/msal-browser", "Identifier": { "PURL": "pkg:npm/%40azure/msal-browser@2.39.0", "UID": "dee5753f731d41a" }, "Version": "2.39.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/msal-browser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/msal-common@13.3.1", "Name": "@azure/msal-common", "Identifier": { "PURL": "pkg:npm/%40azure/msal-common@13.3.1", "UID": "b3ad0eb9814613f1" }, "Version": "13.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/msal-node/node_modules/@azure/msal-common/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/msal-common@13.3.3", "Name": "@azure/msal-common", "Identifier": { "PURL": "pkg:npm/%40azure/msal-common@13.3.3", "UID": "7056bb51aad56d96" }, "Version": "13.3.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/msal-browser/node_modules/@azure/msal-common/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/msal-common@7.6.0", "Name": "@azure/msal-common", "Identifier": { "PURL": "pkg:npm/%40azure/msal-common@7.6.0", "UID": "54826d272ab1947e" }, "Version": "7.6.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/msal-common/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@azure/msal-node@1.18.4", "Name": "@azure/msal-node", "Identifier": { "PURL": "pkg:npm/%40azure/msal-node@1.18.4", "UID": "734a6b5b2ca93569" }, "Version": "1.18.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/msal-node/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@gar/promisify@1.1.3", "Name": "@gar/promisify", "Identifier": { "PURL": "pkg:npm/%40gar/promisify@1.1.3", "UID": "59b15b99a4c0b7e6" }, "Version": "1.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@gar/promisify/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@grpc/grpc-js@1.8.22", "Name": "@grpc/grpc-js", "Identifier": { "PURL": "pkg:npm/%40grpc/grpc-js@1.8.22", "UID": "75d465eb7550513d" }, "Version": "1.8.22", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@grpc/grpc-js/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@grpc/proto-loader@0.7.15", "Name": "@grpc/proto-loader", "Identifier": { "PURL": "pkg:npm/%40grpc/proto-loader@0.7.15", "UID": "b9b73bd1fcc35740" }, "Version": "0.7.15", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@grpc/proto-loader/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@isaacs/cliui@8.0.2", "Name": "@isaacs/cliui", "Identifier": { "PURL": "pkg:npm/%40isaacs/cliui@8.0.2", "UID": "e6985beb35b2f4ed" }, "Version": "8.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@isaacs/cliui/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@isaacs/cliui@8.0.2", "Name": "@isaacs/cliui", "Identifier": { "PURL": "pkg:npm/%40isaacs/cliui@8.0.2", "UID": "b8227c9af53bf615" }, "Version": "8.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@isaacs/cliui/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@isaacs/string-locale-compare@1.1.0", "Name": "@isaacs/string-locale-compare", "Identifier": { "PURL": "pkg:npm/%40isaacs/string-locale-compare@1.1.0", "UID": "4b7c47e3454f8345" }, "Version": "1.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@isaacs/string-locale-compare/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@js-joda/core@5.6.5", "Name": "@js-joda/core", "Identifier": { "PURL": "pkg:npm/%40js-joda/core@5.6.5", "UID": "e139c800c04a4f57" }, "Version": "5.6.5", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@js-joda/core/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@louislam/ping@0.4.4-mod.1", "Name": "@louislam/ping", "Identifier": { "PURL": "pkg:npm/%40louislam/ping@0.4.4-mod.1", "UID": "a1878b40d0314c91" }, "Version": "0.4.4-mod.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@louislam/ping/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@louislam/sqlite3@15.1.6", "Name": "@louislam/sqlite3", "Identifier": { "PURL": "pkg:npm/%40louislam/sqlite3@15.1.6", "UID": "d13a4ff5803a4228" }, "Version": "15.1.6", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@louislam/sqlite3/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@mapbox/node-pre-gyp@1.0.11", "Name": "@mapbox/node-pre-gyp", "Identifier": { "PURL": "pkg:npm/%40mapbox/node-pre-gyp@1.0.11", "UID": "1a6c4478236ad581" }, "Version": "1.0.11", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@mapbox/node-pre-gyp/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@mongodb-js/saslprep@1.3.1", "Name": "@mongodb-js/saslprep", "Identifier": { "PURL": "pkg:npm/%40mongodb-js/saslprep@1.3.1", "UID": "9c56711d0fbc52ef" }, "Version": "1.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@mongodb-js/saslprep/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@my-scope/package-a@0.0.0", "Name": "@my-scope/package-a", "Identifier": { "PURL": "pkg:npm/%40my-scope/package-a@0.0.0", "UID": "cc446443b771c9aa" }, "Version": "0.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@my-scope/package-b@0.0.0", "Name": "@my-scope/package-b", "Identifier": { "PURL": "pkg:npm/%40my-scope/package-b@0.0.0", "UID": "4115029eb3cd15f8" }, "Version": "0.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@noble/ciphers@0.2.0", "Name": "@noble/ciphers", "Identifier": { "PURL": "pkg:npm/%40noble/ciphers@0.2.0", "UID": "6081095aa38c1152" }, "Version": "0.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@noble/ciphers/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@noble/curves@1.1.0", "Name": "@noble/curves", "Identifier": { "PURL": "pkg:npm/%40noble/curves@1.1.0", "UID": "c4861ada566a93b0" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@noble/curves/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@noble/hashes@1.3.1", "Name": "@noble/hashes", "Identifier": { "PURL": "pkg:npm/%40noble/hashes@1.3.1", "UID": "a0f6ef6d1ccea047" }, "Version": "1.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@noble/hashes/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/agent@2.2.2", "Name": "@npmcli/agent", "Identifier": { "PURL": "pkg:npm/%40npmcli/agent@2.2.2", "UID": "6db75bb6fe370af6" }, "Version": "2.2.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/agent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/arborist@7.5.1", "Name": "@npmcli/arborist", "Identifier": { "PURL": "pkg:npm/%40npmcli/arborist@7.5.1", "UID": "b878fdb449a3bad1" }, "Version": "7.5.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/arborist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/config@8.3.1", "Name": "@npmcli/config", "Identifier": { "PURL": "pkg:npm/%40npmcli/config@8.3.1", "UID": "6d0bdb09aaa5e38b" }, "Version": "8.3.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/config/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/fs@1.1.1", "Name": "@npmcli/fs", "Identifier": { "PURL": "pkg:npm/%40npmcli/fs@1.1.1", "UID": "4b15017480e49784" }, "Version": "1.1.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@npmcli/fs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/fs@3.1.0", "Name": "@npmcli/fs", "Identifier": { "PURL": "pkg:npm/%40npmcli/fs@3.1.0", "UID": "308ceb16e14919ac" }, "Version": "3.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/fs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/git@5.0.6", "Name": "@npmcli/git", "Identifier": { "PURL": "pkg:npm/%40npmcli/git@5.0.6", "UID": "e54f99af3ed9373d" }, "Version": "5.0.6", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/git/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/installed-package-contents@2.1.0", "Name": "@npmcli/installed-package-contents", "Identifier": { "PURL": "pkg:npm/%40npmcli/installed-package-contents@2.1.0", "UID": "358f4e4fdb0ff385" }, "Version": "2.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/installed-package-contents/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/map-workspaces@3.0.6", "Name": "@npmcli/map-workspaces", "Identifier": { "PURL": "pkg:npm/%40npmcli/map-workspaces@3.0.6", "UID": "e07685f1ef82cd1" }, "Version": "3.0.6", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/map-workspaces/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/metavuln-calculator@7.1.0", "Name": "@npmcli/metavuln-calculator", "Identifier": { "PURL": "pkg:npm/%40npmcli/metavuln-calculator@7.1.0", "UID": "aadf8b82af25b76f" }, "Version": "7.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/metavuln-calculator/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/move-file@1.1.2", "Name": "@npmcli/move-file", "Identifier": { "PURL": "pkg:npm/%40npmcli/move-file@1.1.2", "UID": "5ac02500d4571f9a" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@npmcli/move-file/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/name-from-folder@2.0.0", "Name": "@npmcli/name-from-folder", "Identifier": { "PURL": "pkg:npm/%40npmcli/name-from-folder@2.0.0", "UID": "7f827fd1f749b1" }, "Version": "2.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/name-from-folder/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/node-gyp@3.0.0", "Name": "@npmcli/node-gyp", "Identifier": { "PURL": "pkg:npm/%40npmcli/node-gyp@3.0.0", "UID": "df6a62ee228860eb" }, "Version": "3.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/node-gyp/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/package-json@5.1.0", "Name": "@npmcli/package-json", "Identifier": { "PURL": "pkg:npm/%40npmcli/package-json@5.1.0", "UID": "83699d90fd625383" }, "Version": "5.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/package-json/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/promise-spawn@7.0.1", "Name": "@npmcli/promise-spawn", "Identifier": { "PURL": "pkg:npm/%40npmcli/promise-spawn@7.0.1", "UID": "d0e0e04d55a2e80" }, "Version": "7.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/promise-spawn/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/query@3.1.0", "Name": "@npmcli/query", "Identifier": { "PURL": "pkg:npm/%40npmcli/query@3.1.0", "UID": "bd6f8de37400dc13" }, "Version": "3.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/query/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/redact@2.0.0", "Name": "@npmcli/redact", "Identifier": { "PURL": "pkg:npm/%40npmcli/redact@2.0.0", "UID": "9fa329ba0d32455d" }, "Version": "2.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/redact/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/run-script@8.1.0", "Name": "@npmcli/run-script", "Identifier": { "PURL": "pkg:npm/%40npmcli/run-script@8.1.0", "UID": "8d4fb62aa1d1d7c6" }, "Version": "8.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/run-script/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@pkgjs/parseargs@0.11.0", "Name": "@pkgjs/parseargs", "Identifier": { "PURL": "pkg:npm/%40pkgjs/parseargs@0.11.0", "UID": "ce32508ccfec8f2e" }, "Version": "0.11.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@pkgjs/parseargs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@pkgjs/parseargs@0.11.0", "Name": "@pkgjs/parseargs", "Identifier": { "PURL": "pkg:npm/%40pkgjs/parseargs@0.11.0", "UID": "63153b366f22754b" }, "Version": "0.11.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@pkgjs/parseargs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@protobufjs/aspromise@1.1.2", "Name": "@protobufjs/aspromise", "Identifier": { "PURL": "pkg:npm/%40protobufjs/aspromise@1.1.2", "UID": "ec0ab8e36a5d9738" }, "Version": "1.1.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@protobufjs/aspromise/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@protobufjs/base64@1.1.2", "Name": "@protobufjs/base64", "Identifier": { "PURL": "pkg:npm/%40protobufjs/base64@1.1.2", "UID": "be65a6cbb77e035e" }, "Version": "1.1.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@protobufjs/base64/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@protobufjs/codegen@2.0.4", "Name": "@protobufjs/codegen", "Identifier": { "PURL": "pkg:npm/%40protobufjs/codegen@2.0.4", "UID": "1626e52c74328aad" }, "Version": "2.0.4", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@protobufjs/codegen/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@protobufjs/eventemitter@1.1.0", "Name": "@protobufjs/eventemitter", "Identifier": { "PURL": "pkg:npm/%40protobufjs/eventemitter@1.1.0", "UID": "53700a7a6bd49521" }, "Version": "1.1.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@protobufjs/eventemitter/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@protobufjs/fetch@1.1.0", "Name": "@protobufjs/fetch", "Identifier": { "PURL": "pkg:npm/%40protobufjs/fetch@1.1.0", "UID": "e68f3d06812fe203" }, "Version": "1.1.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@protobufjs/fetch/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@protobufjs/float@1.0.2", "Name": "@protobufjs/float", "Identifier": { "PURL": "pkg:npm/%40protobufjs/float@1.0.2", "UID": "2724ff3a685732a4" }, "Version": "1.0.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@protobufjs/float/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@protobufjs/inquire@1.1.0", "Name": "@protobufjs/inquire", "Identifier": { "PURL": "pkg:npm/%40protobufjs/inquire@1.1.0", "UID": "7c49d375b2dbdc0e" }, "Version": "1.1.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@protobufjs/inquire/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@protobufjs/path@1.1.2", "Name": "@protobufjs/path", "Identifier": { "PURL": "pkg:npm/%40protobufjs/path@1.1.2", "UID": "1a9315bfed627abe" }, "Version": "1.1.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@protobufjs/path/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@protobufjs/pool@1.1.0", "Name": "@protobufjs/pool", "Identifier": { "PURL": "pkg:npm/%40protobufjs/pool@1.1.0", "UID": "976e302e1e95defe" }, "Version": "1.1.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@protobufjs/pool/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@protobufjs/utf8@1.1.0", "Name": "@protobufjs/utf8", "Identifier": { "PURL": "pkg:npm/%40protobufjs/utf8@1.1.0", "UID": "d06f32f03bf1845b" }, "Version": "1.1.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@protobufjs/utf8/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@redis/bloom@1.1.0", "Name": "@redis/bloom", "Identifier": { "PURL": "pkg:npm/%40redis/bloom@1.1.0", "UID": "50f01cfad4fa3d4" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@redis/bloom/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@redis/client@1.4.2", "Name": "@redis/client", "Identifier": { "PURL": "pkg:npm/%40redis/client@1.4.2", "UID": "9d55c1d8771a51bb" }, "Version": "1.4.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@redis/client/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@redis/graph@1.1.0", "Name": "@redis/graph", "Identifier": { "PURL": "pkg:npm/%40redis/graph@1.1.0", "UID": "a58187508c84ba0c" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@redis/graph/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@redis/json@1.0.4", "Name": "@redis/json", "Identifier": { "PURL": "pkg:npm/%40redis/json@1.0.4", "UID": "fce812cc728410a0" }, "Version": "1.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@redis/json/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@redis/search@1.1.0", "Name": "@redis/search", "Identifier": { "PURL": "pkg:npm/%40redis/search@1.1.0", "UID": "b7d99f7eda85c128" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@redis/search/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@redis/time-series@1.0.4", "Name": "@redis/time-series", "Identifier": { "PURL": "pkg:npm/%40redis/time-series@1.0.4", "UID": "9545b18ff0e1dd08" }, "Version": "1.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@redis/time-series/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@scure/base@1.1.1", "Name": "@scure/base", "Identifier": { "PURL": "pkg:npm/%40scure/base@1.1.1", "UID": "8418f02545f9dff3" }, "Version": "1.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@scure/base/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@scure/bip32@1.3.1", "Name": "@scure/bip32", "Identifier": { "PURL": "pkg:npm/%40scure/bip32@1.3.1", "UID": "c71268af3d9d454" }, "Version": "1.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@scure/bip32/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@scure/bip39@1.2.1", "Name": "@scure/bip39", "Identifier": { "PURL": "pkg:npm/%40scure/bip39@1.2.1", "UID": "54de1a84de6e8a49" }, "Version": "1.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@scure/bip39/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@sigstore/bundle@2.3.1", "Name": "@sigstore/bundle", "Identifier": { "PURL": "pkg:npm/%40sigstore/bundle@2.3.1", "UID": "32e43ea478488e22" }, "Version": "2.3.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/bundle/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@sigstore/core@1.1.0", "Name": "@sigstore/core", "Identifier": { "PURL": "pkg:npm/%40sigstore/core@1.1.0", "UID": "4e818d180cd0ce1a" }, "Version": "1.1.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/core/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@sigstore/protobuf-specs@0.3.1", "Name": "@sigstore/protobuf-specs", "Identifier": { "PURL": "pkg:npm/%40sigstore/protobuf-specs@0.3.1", "UID": "e4a127eef7d114c8" }, "Version": "0.3.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/protobuf-specs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@sigstore/sign@2.3.0", "Name": "@sigstore/sign", "Identifier": { "PURL": "pkg:npm/%40sigstore/sign@2.3.0", "UID": "f55212bf973848c" }, "Version": "2.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/sign/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@sigstore/tuf@2.3.2", "Name": "@sigstore/tuf", "Identifier": { "PURL": "pkg:npm/%40sigstore/tuf@2.3.2", "UID": "5609d2043c26be52" }, "Version": "2.3.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/tuf/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@sigstore/verify@1.2.0", "Name": "@sigstore/verify", "Identifier": { "PURL": "pkg:npm/%40sigstore/verify@1.2.0", "UID": "5b7c552760f21518" }, "Version": "1.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/verify/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@sindresorhus/is@4.6.0", "Name": "@sindresorhus/is", "Identifier": { "PURL": "pkg:npm/%40sindresorhus/is@4.6.0", "UID": "1bdba246bd60097c" }, "Version": "4.6.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@sindresorhus/is/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/abort-controller@4.2.0", "Name": "@smithy/abort-controller", "Identifier": { "PURL": "pkg:npm/%40smithy/abort-controller@4.2.0", "UID": "856705a73d34a7f8" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/abort-controller/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/config-resolver@4.3.0", "Name": "@smithy/config-resolver", "Identifier": { "PURL": "pkg:npm/%40smithy/config-resolver@4.3.0", "UID": "f59993b31e3a4cc1" }, "Version": "4.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/config-resolver/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/core@3.14.0", "Name": "@smithy/core", "Identifier": { "PURL": "pkg:npm/%40smithy/core@3.14.0", "UID": "d3ea9f70fce057e4" }, "Version": "3.14.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/core/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/credential-provider-imds@4.2.0", "Name": "@smithy/credential-provider-imds", "Identifier": { "PURL": "pkg:npm/%40smithy/credential-provider-imds@4.2.0", "UID": "12199fe20c246175" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/credential-provider-imds/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/fetch-http-handler@5.3.0", "Name": "@smithy/fetch-http-handler", "Identifier": { "PURL": "pkg:npm/%40smithy/fetch-http-handler@5.3.0", "UID": "d30afcd9bd61be56" }, "Version": "5.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/fetch-http-handler/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/hash-node@4.2.0", "Name": "@smithy/hash-node", "Identifier": { "PURL": "pkg:npm/%40smithy/hash-node@4.2.0", "UID": "77e6f1953a9d6c5d" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/hash-node/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/invalid-dependency@4.2.0", "Name": "@smithy/invalid-dependency", "Identifier": { "PURL": "pkg:npm/%40smithy/invalid-dependency@4.2.0", "UID": "33b25a5ba45214c6" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/invalid-dependency/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/is-array-buffer@2.2.0", "Name": "@smithy/is-array-buffer", "Identifier": { "PURL": "pkg:npm/%40smithy/is-array-buffer@2.2.0", "UID": "f2d476ca6b7a411" }, "Version": "2.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-crypto/sha256-browser/node_modules/@smithy/is-array-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/is-array-buffer@2.2.0", "Name": "@smithy/is-array-buffer", "Identifier": { "PURL": "pkg:npm/%40smithy/is-array-buffer@2.2.0", "UID": "f86db2c2d6d392b5" }, "Version": "2.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-crypto/util/node_modules/@smithy/is-array-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/is-array-buffer@4.2.0", "Name": "@smithy/is-array-buffer", "Identifier": { "PURL": "pkg:npm/%40smithy/is-array-buffer@4.2.0", "UID": "628a65d1b01eff60" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/is-array-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/middleware-content-length@4.2.0", "Name": "@smithy/middleware-content-length", "Identifier": { "PURL": "pkg:npm/%40smithy/middleware-content-length@4.2.0", "UID": "c398f8a7623c39cf" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/middleware-content-length/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/middleware-endpoint@4.3.0", "Name": "@smithy/middleware-endpoint", "Identifier": { "PURL": "pkg:npm/%40smithy/middleware-endpoint@4.3.0", "UID": "66cef66c5619ccf8" }, "Version": "4.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/middleware-endpoint/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/middleware-retry@4.4.0", "Name": "@smithy/middleware-retry", "Identifier": { "PURL": "pkg:npm/%40smithy/middleware-retry@4.4.0", "UID": "8fd5f8b055dd5efe" }, "Version": "4.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/middleware-retry/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/middleware-serde@4.2.0", "Name": "@smithy/middleware-serde", "Identifier": { "PURL": "pkg:npm/%40smithy/middleware-serde@4.2.0", "UID": "a42ce0c4f98df80b" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/middleware-serde/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/middleware-stack@4.2.0", "Name": "@smithy/middleware-stack", "Identifier": { "PURL": "pkg:npm/%40smithy/middleware-stack@4.2.0", "UID": "4dcf4226cd89e693" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/middleware-stack/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/node-config-provider@4.3.0", "Name": "@smithy/node-config-provider", "Identifier": { "PURL": "pkg:npm/%40smithy/node-config-provider@4.3.0", "UID": "d435557708ca5a6b" }, "Version": "4.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/node-config-provider/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/node-http-handler@4.3.0", "Name": "@smithy/node-http-handler", "Identifier": { "PURL": "pkg:npm/%40smithy/node-http-handler@4.3.0", "UID": "3151e7fa94b02788" }, "Version": "4.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/node-http-handler/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/property-provider@4.2.0", "Name": "@smithy/property-provider", "Identifier": { "PURL": "pkg:npm/%40smithy/property-provider@4.2.0", "UID": "ac4c3398f718846a" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/property-provider/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/protocol-http@5.3.0", "Name": "@smithy/protocol-http", "Identifier": { "PURL": "pkg:npm/%40smithy/protocol-http@5.3.0", "UID": "8b04db80c824d7c4" }, "Version": "5.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/protocol-http/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/querystring-builder@4.2.0", "Name": "@smithy/querystring-builder", "Identifier": { "PURL": "pkg:npm/%40smithy/querystring-builder@4.2.0", "UID": "7988074cc4f353ee" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/querystring-builder/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/querystring-parser@4.2.0", "Name": "@smithy/querystring-parser", "Identifier": { "PURL": "pkg:npm/%40smithy/querystring-parser@4.2.0", "UID": "6783b3359d3c9de1" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/querystring-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/service-error-classification@4.2.0", "Name": "@smithy/service-error-classification", "Identifier": { "PURL": "pkg:npm/%40smithy/service-error-classification@4.2.0", "UID": "519c4c9f767a22d6" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/service-error-classification/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/shared-ini-file-loader@4.3.0", "Name": "@smithy/shared-ini-file-loader", "Identifier": { "PURL": "pkg:npm/%40smithy/shared-ini-file-loader@4.3.0", "UID": "967ba2b56c0fe66d" }, "Version": "4.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/shared-ini-file-loader/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/signature-v4@5.3.0", "Name": "@smithy/signature-v4", "Identifier": { "PURL": "pkg:npm/%40smithy/signature-v4@5.3.0", "UID": "2764387ec6b5e919" }, "Version": "5.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/signature-v4/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/smithy-client@4.7.0", "Name": "@smithy/smithy-client", "Identifier": { "PURL": "pkg:npm/%40smithy/smithy-client@4.7.0", "UID": "1d524c8f0d104894" }, "Version": "4.7.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/smithy-client/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/types@4.6.0", "Name": "@smithy/types", "Identifier": { "PURL": "pkg:npm/%40smithy/types@4.6.0", "UID": "b7d54d98bc9ad26d" }, "Version": "4.6.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/types/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/url-parser@4.2.0", "Name": "@smithy/url-parser", "Identifier": { "PURL": "pkg:npm/%40smithy/url-parser@4.2.0", "UID": "6a05b85667a13f2d" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/url-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/util-base64@4.2.0", "Name": "@smithy/util-base64", "Identifier": { "PURL": "pkg:npm/%40smithy/util-base64@4.2.0", "UID": "7f023b24fff1764f" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/util-base64/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/util-body-length-browser@4.2.0", "Name": "@smithy/util-body-length-browser", "Identifier": { "PURL": "pkg:npm/%40smithy/util-body-length-browser@4.2.0", "UID": "a42650c74871f052" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/util-body-length-browser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/util-body-length-node@4.2.0", "Name": "@smithy/util-body-length-node", "Identifier": { "PURL": "pkg:npm/%40smithy/util-body-length-node@4.2.0", "UID": "ca658fedc790f1bc" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/util-body-length-node/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/util-buffer-from@2.2.0", "Name": "@smithy/util-buffer-from", "Identifier": { "PURL": "pkg:npm/%40smithy/util-buffer-from@2.2.0", "UID": "5036088a21ef1eec" }, "Version": "2.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-crypto/sha256-browser/node_modules/@smithy/util-buffer-from/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/util-buffer-from@2.2.0", "Name": "@smithy/util-buffer-from", "Identifier": { "PURL": "pkg:npm/%40smithy/util-buffer-from@2.2.0", "UID": "d65f2972f632ce22" }, "Version": "2.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-crypto/util/node_modules/@smithy/util-buffer-from/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/util-buffer-from@4.2.0", "Name": "@smithy/util-buffer-from", "Identifier": { "PURL": "pkg:npm/%40smithy/util-buffer-from@4.2.0", "UID": "e881267bcf449656" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/util-buffer-from/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/util-config-provider@4.2.0", "Name": "@smithy/util-config-provider", "Identifier": { "PURL": "pkg:npm/%40smithy/util-config-provider@4.2.0", "UID": "f2d6c8dfff506995" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/util-config-provider/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/util-defaults-mode-browser@4.2.0", "Name": "@smithy/util-defaults-mode-browser", "Identifier": { "PURL": "pkg:npm/%40smithy/util-defaults-mode-browser@4.2.0", "UID": "dd5e9bdb659e8aa4" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/util-defaults-mode-browser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/util-defaults-mode-node@4.2.0", "Name": "@smithy/util-defaults-mode-node", "Identifier": { "PURL": "pkg:npm/%40smithy/util-defaults-mode-node@4.2.0", "UID": "b2f23970ed088166" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/util-defaults-mode-node/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/util-endpoints@3.2.0", "Name": "@smithy/util-endpoints", "Identifier": { "PURL": "pkg:npm/%40smithy/util-endpoints@3.2.0", "UID": "e076d4abb17ab820" }, "Version": "3.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/util-endpoints/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/util-hex-encoding@4.2.0", "Name": "@smithy/util-hex-encoding", "Identifier": { "PURL": "pkg:npm/%40smithy/util-hex-encoding@4.2.0", "UID": "ede64a7dc8a0fe75" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/util-hex-encoding/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/util-middleware@4.2.0", "Name": "@smithy/util-middleware", "Identifier": { "PURL": "pkg:npm/%40smithy/util-middleware@4.2.0", "UID": "49c27b6278003129" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/util-middleware/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/util-retry@4.2.0", "Name": "@smithy/util-retry", "Identifier": { "PURL": "pkg:npm/%40smithy/util-retry@4.2.0", "UID": "125bf2737418ee2" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/util-retry/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/util-stream@4.4.0", "Name": "@smithy/util-stream", "Identifier": { "PURL": "pkg:npm/%40smithy/util-stream@4.4.0", "UID": "79e84e2d964a273f" }, "Version": "4.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/util-stream/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/util-uri-escape@4.2.0", "Name": "@smithy/util-uri-escape", "Identifier": { "PURL": "pkg:npm/%40smithy/util-uri-escape@4.2.0", "UID": "d20035360af824de" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/util-uri-escape/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/util-utf8@2.3.0", "Name": "@smithy/util-utf8", "Identifier": { "PURL": "pkg:npm/%40smithy/util-utf8@2.3.0", "UID": "4dccf317567ca4bf" }, "Version": "2.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-crypto/sha256-browser/node_modules/@smithy/util-utf8/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/util-utf8@2.3.0", "Name": "@smithy/util-utf8", "Identifier": { "PURL": "pkg:npm/%40smithy/util-utf8@2.3.0", "UID": "91d357c7d2e48c68" }, "Version": "2.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@aws-crypto/util/node_modules/@smithy/util-utf8/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/util-utf8@4.2.0", "Name": "@smithy/util-utf8", "Identifier": { "PURL": "pkg:npm/%40smithy/util-utf8@4.2.0", "UID": "b492f7517a6afea2" }, "Version": "4.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/util-utf8/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@smithy/uuid@1.1.0", "Name": "@smithy/uuid", "Identifier": { "PURL": "pkg:npm/%40smithy/uuid@1.1.0", "UID": "e943b0d27678057f" }, "Version": "1.1.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@smithy/uuid/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@socket.io/component-emitter@3.1.2", "Name": "@socket.io/component-emitter", "Identifier": { "PURL": "pkg:npm/%40socket.io/component-emitter@3.1.2", "UID": "71766a840383fda3" }, "Version": "3.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@socket.io/component-emitter/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@szmarczak/http-timer@5.0.1", "Name": "@szmarczak/http-timer", "Identifier": { "PURL": "pkg:npm/%40szmarczak/http-timer@5.0.1", "UID": "9b6bf498be9b6332" }, "Version": "5.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@szmarczak/http-timer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@tediousjs/connection-string@0.3.0", "Name": "@tediousjs/connection-string", "Identifier": { "PURL": "pkg:npm/%40tediousjs/connection-string@0.3.0", "UID": "9b0b4577ec3cbedd" }, "Version": "0.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@tediousjs/connection-string/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@tootallnate/once@1.1.2", "Name": "@tootallnate/once", "Identifier": { "PURL": "pkg:npm/%40tootallnate/once@1.1.2", "UID": "b8771c7309c36915" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/make-fetch-happen/node_modules/@tootallnate/once/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@tootallnate/once@2.0.0", "Name": "@tootallnate/once", "Identifier": { "PURL": "pkg:npm/%40tootallnate/once@2.0.0", "UID": "b3d8c77f5ad75104" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@tootallnate/once/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@tufjs/canonical-json@2.0.0", "Name": "@tufjs/canonical-json", "Identifier": { "PURL": "pkg:npm/%40tufjs/canonical-json@2.0.0", "UID": "c9bd83d46147e58a" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@tufjs/canonical-json/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@tufjs/models@2.0.0", "Name": "@tufjs/models", "Identifier": { "PURL": "pkg:npm/%40tufjs/models@2.0.0", "UID": "73895b30f0702b28" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@tufjs/models/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/accepts@1.3.7", "Name": "@types/accepts", "Identifier": { "PURL": "pkg:npm/%40types/accepts@1.3.7", "UID": "61e16f9a8b912155" }, "Version": "1.3.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/accepts/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/body-parser@1.19.6", "Name": "@types/body-parser", "Identifier": { "PURL": "pkg:npm/%40types/body-parser@1.19.6", "UID": "62a6fe5d75503af6" }, "Version": "1.19.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/body-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/cacheable-request@6.0.3", "Name": "@types/cacheable-request", "Identifier": { "PURL": "pkg:npm/%40types/cacheable-request@6.0.3", "UID": "73e65c07c9c2c9dc" }, "Version": "6.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/cacheable-request/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/connect@3.4.38", "Name": "@types/connect", "Identifier": { "PURL": "pkg:npm/%40types/connect@3.4.38", "UID": "a696cecd0ec34122" }, "Version": "3.4.38", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/connect/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/content-disposition@0.5.9", "Name": "@types/content-disposition", "Identifier": { "PURL": "pkg:npm/%40types/content-disposition@0.5.9", "UID": "1ac2de83d5a385f" }, "Version": "0.5.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/content-disposition/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/cookies@0.9.1", "Name": "@types/cookies", "Identifier": { "PURL": "pkg:npm/%40types/cookies@0.9.1", "UID": "daeda19ad04c1089" }, "Version": "0.9.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/cookies/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/cors@2.8.19", "Name": "@types/cors", "Identifier": { "PURL": "pkg:npm/%40types/cors@2.8.19", "UID": "79759b78ad122e55" }, "Version": "2.8.19", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/cors/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/es-aggregate-error@1.0.6", "Name": "@types/es-aggregate-error", "Identifier": { "PURL": "pkg:npm/%40types/es-aggregate-error@1.0.6", "UID": "b9ff70e68b226301" }, "Version": "1.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/es-aggregate-error/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/express@4.17.23", "Name": "@types/express", "Identifier": { "PURL": "pkg:npm/%40types/express@4.17.23", "UID": "42ce65d053ffa23a" }, "Version": "4.17.23", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/express/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/express-serve-static-core@4.19.7", "Name": "@types/express-serve-static-core", "Identifier": { "PURL": "pkg:npm/%40types/express-serve-static-core@4.19.7", "UID": "a0f71f41c097a0bf" }, "Version": "4.19.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/express-serve-static-core/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/http-assert@1.5.6", "Name": "@types/http-assert", "Identifier": { "PURL": "pkg:npm/%40types/http-assert@1.5.6", "UID": "27ccb67932db7ce6" }, "Version": "1.5.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/http-assert/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/http-cache-semantics@4.0.4", "Name": "@types/http-cache-semantics", "Identifier": { "PURL": "pkg:npm/%40types/http-cache-semantics@4.0.4", "UID": "deac793bfcadc6d1" }, "Version": "4.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/http-cache-semantics/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/http-errors@2.0.5", "Name": "@types/http-errors", "Identifier": { "PURL": "pkg:npm/%40types/http-errors@2.0.5", "UID": "9735ec4bd88c04f4" }, "Version": "2.0.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/http-errors/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/keygrip@1.0.6", "Name": "@types/keygrip", "Identifier": { "PURL": "pkg:npm/%40types/keygrip@1.0.6", "UID": "ad291883fcf8577b" }, "Version": "1.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/keygrip/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/keyv@3.1.4", "Name": "@types/keyv", "Identifier": { "PURL": "pkg:npm/%40types/keyv@3.1.4", "UID": "a618c29d93d80f23" }, "Version": "3.1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/keyv/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/koa@2.15.0", "Name": "@types/koa", "Identifier": { "PURL": "pkg:npm/%40types/koa@2.15.0", "UID": "c448ed024b20f1ba" }, "Version": "2.15.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/koa/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/koa-compose@3.2.8", "Name": "@types/koa-compose", "Identifier": { "PURL": "pkg:npm/%40types/koa-compose@3.2.8", "UID": "61ed7455333bcee8" }, "Version": "3.2.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/koa-compose/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/mime@1.3.5", "Name": "@types/mime", "Identifier": { "PURL": "pkg:npm/%40types/mime@1.3.5", "UID": "a3f9292b99e9e17c" }, "Version": "1.3.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/mime/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/node@20.3.3", "Name": "@types/node", "Identifier": { "PURL": "pkg:npm/%40types/node@20.3.3", "UID": "b23cc472b6bb48f2" }, "Version": "20.3.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/redbean-node/node_modules/@types/node/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/node@24.7.0", "Name": "@types/node", "Identifier": { "PURL": "pkg:npm/%40types/node@24.7.0", "UID": "2fff0bbee4110c3" }, "Version": "24.7.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/node/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/qs@6.14.0", "Name": "@types/qs", "Identifier": { "PURL": "pkg:npm/%40types/qs@6.14.0", "UID": "151fd1fba18a5457" }, "Version": "6.14.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/qs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/range-parser@1.2.7", "Name": "@types/range-parser", "Identifier": { "PURL": "pkg:npm/%40types/range-parser@1.2.7", "UID": "9454d70c95896073" }, "Version": "1.2.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/range-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/responselike@1.0.3", "Name": "@types/responselike", "Identifier": { "PURL": "pkg:npm/%40types/responselike@1.0.3", "UID": "e3cea5c7078e459d" }, "Version": "1.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/responselike/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/send@0.17.5", "Name": "@types/send", "Identifier": { "PURL": "pkg:npm/%40types/send@0.17.5", "UID": "75dbc60d3761faf9" }, "Version": "0.17.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/serve-static/node_modules/@types/send/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/send@1.2.0", "Name": "@types/send", "Identifier": { "PURL": "pkg:npm/%40types/send@1.2.0", "UID": "235dd0fd35c9633e" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/send/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/serve-static@1.15.9", "Name": "@types/serve-static", "Identifier": { "PURL": "pkg:npm/%40types/serve-static@1.15.9", "UID": "efd54c5a83cf5c76" }, "Version": "1.15.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/serve-static/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/webidl-conversions@7.0.3", "Name": "@types/webidl-conversions", "Identifier": { "PURL": "pkg:npm/%40types/webidl-conversions@7.0.3", "UID": "c72c9d2c0603c0c3" }, "Version": "7.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/webidl-conversions/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/whatwg-url@8.2.2", "Name": "@types/whatwg-url", "Identifier": { "PURL": "pkg:npm/%40types/whatwg-url@8.2.2", "UID": "fe93642ad1362967" }, "Version": "8.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@types/whatwg-url/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@typespec/ts-http-runtime@0.3.1", "Name": "@typespec/ts-http-runtime", "Identifier": { "PURL": "pkg:npm/%40typespec/ts-http-runtime@0.3.1", "UID": "488bb894c807e7c7" }, "Version": "0.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@typespec/ts-http-runtime/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "abbrev@1.1.1", "Name": "abbrev", "Identifier": { "PURL": "pkg:npm/abbrev@1.1.1", "UID": "d02a32d62b4a37e4" }, "Version": "1.1.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/abbrev/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "abbrev@2.0.0", "Name": "abbrev", "Identifier": { "PURL": "pkg:npm/abbrev@2.0.0", "UID": "b0fe13964fae1281" }, "Version": "2.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/abbrev/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "accepts@1.3.8", "Name": "accepts", "Identifier": { "PURL": "pkg:npm/accepts@1.3.8", "UID": "5409a311747e5bed" }, "Version": "1.3.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/accepts/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "agent-base@6.0.2", "Name": "agent-base", "Identifier": { "PURL": "pkg:npm/agent-base@6.0.2", "UID": "1edb58fbe05b4909" }, "Version": "6.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/agent-base/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "agent-base@7.1.1", "Name": "agent-base", "Identifier": { "PURL": "pkg:npm/agent-base@7.1.1", "UID": "8768e201ae9bbf06" }, "Version": "7.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/agent-base/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "agent-base@7.1.4", "Name": "agent-base", "Identifier": { "PURL": "pkg:npm/agent-base@7.1.4", "UID": "1ae95e4f487f2818" }, "Version": "7.1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@typespec/ts-http-runtime/node_modules/agent-base/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "agentkeepalive@4.6.0", "Name": "agentkeepalive", "Identifier": { "PURL": "pkg:npm/agentkeepalive@4.6.0", "UID": "19e3474abfa4d073" }, "Version": "4.6.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/agentkeepalive/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "aggregate-error@3.1.0", "Name": "aggregate-error", "Identifier": { "PURL": "pkg:npm/aggregate-error@3.1.0", "UID": "742df4158847cd25" }, "Version": "3.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/aggregate-error/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "aggregate-error@3.1.0", "Name": "aggregate-error", "Identifier": { "PURL": "pkg:npm/aggregate-error@3.1.0", "UID": "ab0d4589968df1f7" }, "Version": "3.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/aggregate-error/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "anafanafo@2.0.0", "Name": "anafanafo", "Identifier": { "PURL": "pkg:npm/anafanafo@2.0.0", "UID": "7145869c6a24d4a0" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/anafanafo/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ansi-regex@5.0.1", "Name": "ansi-regex", "Identifier": { "PURL": "pkg:npm/ansi-regex@5.0.1", "UID": "36ae639bde2db0af" }, "Version": "5.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/ansi-regex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ansi-regex@5.0.1", "Name": "ansi-regex", "Identifier": { "PURL": "pkg:npm/ansi-regex@5.0.1", "UID": "1516ae0336e3fe5b" }, "Version": "5.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/ansi-regex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ansi-regex@6.0.1", "Name": "ansi-regex", "Identifier": { "PURL": "pkg:npm/ansi-regex@6.0.1", "UID": "b9d55ae87b70d569" }, "Version": "6.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@isaacs/cliui/node_modules/ansi-regex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ansi-regex@6.0.1", "Name": "ansi-regex", "Identifier": { "PURL": "pkg:npm/ansi-regex@6.0.1", "UID": "66732f1310d4a99" }, "Version": "6.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/wrap-ansi/node_modules/ansi-regex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ansi-regex@6.2.2", "Name": "ansi-regex", "Identifier": { "PURL": "pkg:npm/ansi-regex@6.2.2", "UID": "5d8e208b57717bf" }, "Version": "6.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@isaacs/cliui/node_modules/ansi-regex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ansi-styles@4.3.0", "Name": "ansi-styles", "Identifier": { "PURL": "pkg:npm/ansi-styles@4.3.0", "UID": "eea7bd34ab76df42" }, "Version": "4.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/ansi-styles/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ansi-styles@4.3.0", "Name": "ansi-styles", "Identifier": { "PURL": "pkg:npm/ansi-styles@4.3.0", "UID": "d8df5d7a0071b171" }, "Version": "4.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/wrap-ansi-cjs/node_modules/ansi-styles/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ansi-styles@6.2.1", "Name": "ansi-styles", "Identifier": { "PURL": "pkg:npm/ansi-styles@6.2.1", "UID": "c7a3251acec74b7e" }, "Version": "6.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/ansi-styles/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ansi-styles@6.2.3", "Name": "ansi-styles", "Identifier": { "PURL": "pkg:npm/ansi-styles@6.2.3", "UID": "c3e925893b94523d" }, "Version": "6.2.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@isaacs/cliui/node_modules/ansi-styles/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "any-promise@1.3.0", "Name": "any-promise", "Identifier": { "PURL": "pkg:npm/any-promise@1.3.0", "UID": "874ae6cad95c55af" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/any-promise/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "aproba@2.0.0", "Name": "aproba", "Identifier": { "PURL": "pkg:npm/aproba@2.0.0", "UID": "ab15fafe993db5b1" }, "Version": "2.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/aproba/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "aproba@2.1.0", "Name": "aproba", "Identifier": { "PURL": "pkg:npm/aproba@2.1.0", "UID": "67c052f2403d7221" }, "Version": "2.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/aproba/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "archy@1.0.0", "Name": "archy", "Identifier": { "PURL": "pkg:npm/archy@1.0.0", "UID": "c6f97df2c6bd73cd" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/archy/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "are-we-there-yet@2.0.0", "Name": "are-we-there-yet", "Identifier": { "PURL": "pkg:npm/are-we-there-yet@2.0.0", "UID": "c7168b9581079183" }, "Version": "2.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/are-we-there-yet/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "are-we-there-yet@3.0.1", "Name": "are-we-there-yet", "Identifier": { "PURL": "pkg:npm/are-we-there-yet@3.0.1", "UID": "9be0fed92d538415" }, "Version": "3.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/node-gyp/node_modules/are-we-there-yet/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "args-parser@1.3.0", "Name": "args-parser", "Identifier": { "PURL": "pkg:npm/args-parser@1.3.0", "UID": "6c51e8a87ded2008" }, "Version": "1.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/args-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "array-buffer-byte-length@1.0.2", "Name": "array-buffer-byte-length", "Identifier": { "PURL": "pkg:npm/array-buffer-byte-length@1.0.2", "UID": "e73a7b0c7864b5b2" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/array-buffer-byte-length/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "array-flatten@1.1.1", "Name": "array-flatten", "Identifier": { "PURL": "pkg:npm/array-flatten@1.1.1", "UID": "6eec8aff1204422d" }, "Version": "1.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/array-flatten/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "arraybuffer.prototype.slice@1.0.4", "Name": "arraybuffer.prototype.slice", "Identifier": { "PURL": "pkg:npm/arraybuffer.prototype.slice@1.0.4", "UID": "2685ea7d9aeb12f1" }, "Version": "1.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/arraybuffer.prototype.slice/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "async-function@1.0.0", "Name": "async-function", "Identifier": { "PURL": "pkg:npm/async-function@1.0.0", "UID": "b52134b07b2ca98e" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/async-function/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "asynckit@0.4.0", "Name": "asynckit", "Identifier": { "PURL": "pkg:npm/asynckit@0.4.0", "UID": "d0ee63f604de4d47" }, "Version": "0.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/asynckit/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "available-typed-arrays@1.0.7", "Name": "available-typed-arrays", "Identifier": { "PURL": "pkg:npm/available-typed-arrays@1.0.7", "UID": "2b7e20eecbfa7c47" }, "Version": "1.0.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/available-typed-arrays/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "await-lock@2.2.2", "Name": "await-lock", "Identifier": { "PURL": "pkg:npm/await-lock@2.2.2", "UID": "10db4009705da0e2" }, "Version": "2.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/await-lock/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "axios@0.21.4", "Name": "axios", "Identifier": { "PURL": "pkg:npm/axios@0.21.4", "UID": "57358d64af9ceb17" }, "Version": "0.21.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/axios-ntlm/node_modules/axios/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "axios@0.30.2", "Name": "axios", "Identifier": { "PURL": "pkg:npm/axios@0.30.2", "UID": "90d7522b6e9757da" }, "Version": "0.30.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/axios/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "axios-ntlm@1.3.0", "Name": "axios-ntlm", "Identifier": { "PURL": "pkg:npm/axios-ntlm@1.3.0", "UID": "116fd38b9d9121a2" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/axios-ntlm/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "badge-maker@3.3.1", "Name": "badge-maker", "Identifier": { "PURL": "pkg:npm/badge-maker@3.3.1", "UID": "2ea19ae1c89a8e99" }, "Version": "3.3.1", "Licenses": [ "CC0-1.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/badge-maker/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "balanced-match@1.0.2", "Name": "balanced-match", "Identifier": { "PURL": "pkg:npm/balanced-match@1.0.2", "UID": "24ccec41f2e146" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/balanced-match/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "balanced-match@1.0.2", "Name": "balanced-match", "Identifier": { "PURL": "pkg:npm/balanced-match@1.0.2", "UID": "292b6cb8de8f521c" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/balanced-match/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "barse@0.4.3", "Name": "barse", "Identifier": { "PURL": "pkg:npm/barse@0.4.3", "UID": "9f9ff17c4a1cc685" }, "Version": "0.4.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/barse/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "base64-js@1.5.1", "Name": "base64-js", "Identifier": { "PURL": "pkg:npm/base64-js@1.5.1", "UID": "aa374fb1de4783db" }, "Version": "1.5.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/base64-js/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "base64id@2.0.0", "Name": "base64id", "Identifier": { "PURL": "pkg:npm/base64id@2.0.0", "UID": "13595ff141c1893a" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/base64id/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "basic-auth@2.0.1", "Name": "basic-auth", "Identifier": { "PURL": "pkg:npm/basic-auth@2.0.1", "UID": "755e13856d7591c5" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/basic-auth/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "bcryptjs@2.4.3", "Name": "bcryptjs", "Identifier": { "PURL": "pkg:npm/bcryptjs@2.4.3", "UID": "a31033ff9ade4792" }, "Version": "2.4.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/bcryptjs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "bin-links@4.0.3", "Name": "bin-links", "Identifier": { "PURL": "pkg:npm/bin-links@4.0.3", "UID": "6f6c7a538c335a7d" }, "Version": "4.0.3", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/bin-links/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "binary-extensions@2.3.0", "Name": "binary-extensions", "Identifier": { "PURL": "pkg:npm/binary-extensions@2.3.0", "UID": "230ec0fa5d8085ed" }, "Version": "2.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/binary-extensions/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "binary-search@1.3.6", "Name": "binary-search", "Identifier": { "PURL": "pkg:npm/binary-search@1.3.6", "UID": "b49f327f018c1def" }, "Version": "1.3.6", "Licenses": [ "CC0-1.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/binary-search/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "bintrees@1.0.2", "Name": "bintrees", "Identifier": { "PURL": "pkg:npm/bintrees@1.0.2", "UID": "3660bf5ecd1c95ba" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/bintrees/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "bl@4.1.0", "Name": "bl", "Identifier": { "PURL": "pkg:npm/bl@4.1.0", "UID": "9c285575da0aa81f" }, "Version": "4.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/bl/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "bl@5.1.0", "Name": "bl", "Identifier": { "PURL": "pkg:npm/bl@5.1.0", "UID": "e8eef84638c928a4" }, "Version": "5.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/tedious/node_modules/bl/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "body-parser@1.20.3", "Name": "body-parser", "Identifier": { "PURL": "pkg:npm/body-parser@1.20.3", "UID": "3885ef93734d8a1b" }, "Version": "1.20.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/body-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "boolbase@1.0.0", "Name": "boolbase", "Identifier": { "PURL": "pkg:npm/boolbase@1.0.0", "UID": "fb94533435495" }, "Version": "1.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/boolbase/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "bowser@2.12.1", "Name": "bowser", "Identifier": { "PURL": "pkg:npm/bowser@2.12.1", "UID": "ab2336100b99fc7e" }, "Version": "2.12.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/bowser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "brace-expansion@1.1.12", "Name": "brace-expansion", "Identifier": { "PURL": "pkg:npm/brace-expansion@1.1.12", "UID": "daa018f1f2c1d0e1" }, "Version": "1.1.12", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/brace-expansion/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "brace-expansion@2.0.1", "Name": "brace-expansion", "Identifier": { "PURL": "pkg:npm/brace-expansion@2.0.1", "UID": "becc2016f5337669" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "brace-expansion@2.0.2", "Name": "brace-expansion", "Identifier": { "PURL": "pkg:npm/brace-expansion@2.0.2", "UID": "a8314da7fb2646b1" }, "Version": "2.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/redbean-node/node_modules/brace-expansion/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "bson@4.7.2", "Name": "bson", "Identifier": { "PURL": "pkg:npm/bson@4.7.2", "UID": "e262eee32d31309" }, "Version": "4.7.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/bson/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "buffer@5.7.1", "Name": "buffer", "Identifier": { "PURL": "pkg:npm/buffer@5.7.1", "UID": "c96d62881c33a704" }, "Version": "5.7.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "buffer@6.0.3", "Name": "buffer", "Identifier": { "PURL": "pkg:npm/buffer@6.0.3", "UID": "b17e8ee5adbc2ef" }, "Version": "6.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/tedious/node_modules/buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "buffer-equal-constant-time@1.0.1", "Name": "buffer-equal-constant-time", "Identifier": { "PURL": "pkg:npm/buffer-equal-constant-time@1.0.1", "UID": "5ac7cd4e7cdf71e8" }, "Version": "1.0.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/buffer-equal-constant-time/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "buffer-from@1.1.2", "Name": "buffer-from", "Identifier": { "PURL": "pkg:npm/buffer-from@1.1.2", "UID": "f00e7de7c3d5460f" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/buffer-from/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "builtins@5.1.0", "Name": "builtins", "Identifier": { "PURL": "pkg:npm/builtins@5.1.0", "UID": "528cfb465e83657f" }, "Version": "5.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/builtins/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "bytes@3.1.2", "Name": "bytes", "Identifier": { "PURL": "pkg:npm/bytes@3.1.2", "UID": "47d46450f00e82cc" }, "Version": "3.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/bytes/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cacache@15.3.0", "Name": "cacache", "Identifier": { "PURL": "pkg:npm/cacache@15.3.0", "UID": "4049269ec27f9a5f" }, "Version": "15.3.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/cacache/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cacache@18.0.2", "Name": "cacache", "Identifier": { "PURL": "pkg:npm/cacache@18.0.2", "UID": "d0111495169c62c2" }, "Version": "18.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/cacache/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cacheable-lookup@6.0.4", "Name": "cacheable-lookup", "Identifier": { "PURL": "pkg:npm/cacheable-lookup@6.0.4", "UID": "805f8cbfe90cb6" }, "Version": "6.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/cacheable-lookup/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cacheable-request@7.0.4", "Name": "cacheable-request", "Identifier": { "PURL": "pkg:npm/cacheable-request@7.0.4", "UID": "85927b8d5aa26f4b" }, "Version": "7.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/cacheable-request/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "call-bind@1.0.8", "Name": "call-bind", "Identifier": { "PURL": "pkg:npm/call-bind@1.0.8", "UID": "9c5e1a71ed99f36d" }, "Version": "1.0.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/call-bind/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "call-bind-apply-helpers@1.0.2", "Name": "call-bind-apply-helpers", "Identifier": { "PURL": "pkg:npm/call-bind-apply-helpers@1.0.2", "UID": "aa66ab0dd922748e" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/call-bind-apply-helpers/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "call-bound@1.0.4", "Name": "call-bound", "Identifier": { "PURL": "pkg:npm/call-bound@1.0.4", "UID": "3abb492f59bda414" }, "Version": "1.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/call-bound/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "chalk@5.3.0", "Name": "chalk", "Identifier": { "PURL": "pkg:npm/chalk@5.3.0", "UID": "3c94bf62ca075449" }, "Version": "5.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/chalk/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "char-width-table-consumer@1.0.0", "Name": "char-width-table-consumer", "Identifier": { "PURL": "pkg:npm/char-width-table-consumer@1.0.0", "UID": "a6a9823d98ab30c7" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/char-width-table-consumer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "chardet@1.4.0", "Name": "chardet", "Identifier": { "PURL": "pkg:npm/chardet@1.4.0", "UID": "3654c6c131d3d949" }, "Version": "1.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/chardet/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "check-password-strength@2.0.10", "Name": "check-password-strength", "Identifier": { "PURL": "pkg:npm/check-password-strength@2.0.10", "UID": "c5699c94abcdfd7f" }, "Version": "2.0.10", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/check-password-strength/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cheerio@1.0.0-rc.10", "Name": "cheerio", "Identifier": { "PURL": "pkg:npm/cheerio@1.0.0-rc.10", "UID": "2c944f4431082c21" }, "Version": "1.0.0-rc.10", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/gamedig/node_modules/cheerio/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cheerio@1.0.0-rc.12", "Name": "cheerio", "Identifier": { "PURL": "pkg:npm/cheerio@1.0.0-rc.12", "UID": "45ace597fc796a00" }, "Version": "1.0.0-rc.12", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/cheerio/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cheerio-select@1.6.0", "Name": "cheerio-select", "Identifier": { "PURL": "pkg:npm/cheerio-select@1.6.0", "UID": "1c77364cc60be7bf" }, "Version": "1.6.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/gamedig/node_modules/cheerio-select/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cheerio-select@2.1.0", "Name": "cheerio-select", "Identifier": { "PURL": "pkg:npm/cheerio-select@2.1.0", "UID": "d463922210d47d38" }, "Version": "2.1.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/cheerio-select/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "chownr@2.0.0", "Name": "chownr", "Identifier": { "PURL": "pkg:npm/chownr@2.0.0", "UID": "6eaa153c26c74574" }, "Version": "2.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/chownr/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "chownr@2.0.0", "Name": "chownr", "Identifier": { "PURL": "pkg:npm/chownr@2.0.0", "UID": "dff2cfa9eb2ca155" }, "Version": "2.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/chownr/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "chroma-js@2.4.2", "Name": "chroma-js", "Identifier": { "PURL": "pkg:npm/chroma-js@2.4.2", "UID": "a760d3410ee54d4f" }, "Version": "2.4.2", "Licenses": [ "(BSD-3-Clause AND Apache-2.0)" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/chroma-js/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ci-info@4.0.0", "Name": "ci-info", "Identifier": { "PURL": "pkg:npm/ci-info@4.0.0", "UID": "ab70917a38f3c61d" }, "Version": "4.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/ci-info/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cidr-regex@4.0.5", "Name": "cidr-regex", "Identifier": { "PURL": "pkg:npm/cidr-regex@4.0.5", "UID": "565d528b2029bfa4" }, "Version": "4.0.5", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/cidr-regex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "clean-stack@2.2.0", "Name": "clean-stack", "Identifier": { "PURL": "pkg:npm/clean-stack@2.2.0", "UID": "d68ee063930e7a5f" }, "Version": "2.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/clean-stack/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "clean-stack@2.2.0", "Name": "clean-stack", "Identifier": { "PURL": "pkg:npm/clean-stack@2.2.0", "UID": "4c318fa193ce7783" }, "Version": "2.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/clean-stack/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cli-columns@4.0.0", "Name": "cli-columns", "Identifier": { "PURL": "pkg:npm/cli-columns@4.0.0", "UID": "c13347c6a11babea" }, "Version": "4.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/cli-columns/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cliui@8.0.1", "Name": "cliui", "Identifier": { "PURL": "pkg:npm/cliui@8.0.1", "UID": "28e12fc92d228fbc" }, "Version": "8.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/cliui/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "clone-response@1.0.3", "Name": "clone-response", "Identifier": { "PURL": "pkg:npm/clone-response@1.0.3", "UID": "54e0f9374df9b216" }, "Version": "1.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/clone-response/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cluster-key-slot@1.1.1", "Name": "cluster-key-slot", "Identifier": { "PURL": "pkg:npm/cluster-key-slot@1.1.1", "UID": "62605f1a3becd20a" }, "Version": "1.1.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/cluster-key-slot/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cmd-shim@6.0.2", "Name": "cmd-shim", "Identifier": { "PURL": "pkg:npm/cmd-shim@6.0.2", "UID": "bce4bf5582313649" }, "Version": "6.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/cmd-shim/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "color-convert@0.5.3", "Name": "color-convert", "Identifier": { "PURL": "pkg:npm/color-convert@0.5.3", "UID": "82325c031266a94d" }, "Version": "0.5.3", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/css-color-converter/node_modules/color-convert/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "color-convert@2.0.1", "Name": "color-convert", "Identifier": { "PURL": "pkg:npm/color-convert@2.0.1", "UID": "53f53a05810a0c4f" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/color-convert/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "color-convert@2.0.1", "Name": "color-convert", "Identifier": { "PURL": "pkg:npm/color-convert@2.0.1", "UID": "bd1efdd30f697050" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/color-convert/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "color-name@1.1.4", "Name": "color-name", "Identifier": { "PURL": "pkg:npm/color-name@1.1.4", "UID": "a8d1ab0198f379c0" }, "Version": "1.1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/color-name/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "color-name@1.1.4", "Name": "color-name", "Identifier": { "PURL": "pkg:npm/color-name@1.1.4", "UID": "d139f68849e5a900" }, "Version": "1.1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/color-name/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "color-support@1.1.3", "Name": "color-support", "Identifier": { "PURL": "pkg:npm/color-support@1.1.3", "UID": "824a7b601c420ee1" }, "Version": "1.1.3", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/color-support/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "colorette@2.0.19", "Name": "colorette", "Identifier": { "PURL": "pkg:npm/colorette@2.0.19", "UID": "4735c61a80a89f82" }, "Version": "2.0.19", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/knex/node_modules/colorette/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "combined-stream@1.0.8", "Name": "combined-stream", "Identifier": { "PURL": "pkg:npm/combined-stream@1.0.8", "UID": "3c631e3095db0bec" }, "Version": "1.0.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/combined-stream/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "command-exists@1.2.9", "Name": "command-exists", "Identifier": { "PURL": "pkg:npm/command-exists@1.2.9", "UID": "dc61dd68f90d2c35" }, "Version": "1.2.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/command-exists/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "commander@10.0.1", "Name": "commander", "Identifier": { "PURL": "pkg:npm/commander@10.0.1", "UID": "c32a4b57a459c77f" }, "Version": "10.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/liquidjs/node_modules/commander/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "commander@6.2.1", "Name": "commander", "Identifier": { "PURL": "pkg:npm/commander@6.2.1", "UID": "a3f10eb7b2c6e13e" }, "Version": "6.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/commander/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "commander@9.5.0", "Name": "commander", "Identifier": { "PURL": "pkg:npm/commander@9.5.0", "UID": "f62f235282fef8e8" }, "Version": "9.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/knex/node_modules/commander/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "commander@9.5.0", "Name": "commander", "Identifier": { "PURL": "pkg:npm/commander@9.5.0", "UID": "22d81e3017a055a5" }, "Version": "9.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/mssql/node_modules/commander/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "commist@1.1.0", "Name": "commist", "Identifier": { "PURL": "pkg:npm/commist@1.1.0", "UID": "974ae3b88d7ed810" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/commist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "common-ancestor-path@1.0.1", "Name": "common-ancestor-path", "Identifier": { "PURL": "pkg:npm/common-ancestor-path@1.0.1", "UID": "75be870e681ddfc7" }, "Version": "1.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/common-ancestor-path/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "compare-versions@3.6.0", "Name": "compare-versions", "Identifier": { "PURL": "pkg:npm/compare-versions@3.6.0", "UID": "2f63d600ecaf2aa2" }, "Version": "3.6.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/compare-versions/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "compressible@2.0.18", "Name": "compressible", "Identifier": { "PURL": "pkg:npm/compressible@2.0.18", "UID": "a40aac25d7d2e4d4" }, "Version": "2.0.18", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/compressible/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "compression@1.8.1", "Name": "compression", "Identifier": { "PURL": "pkg:npm/compression@1.8.1", "UID": "5dccd05098085626" }, "Version": "1.8.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/compression/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "concat-map@0.0.1", "Name": "concat-map", "Identifier": { "PURL": "pkg:npm/concat-map@0.0.1", "UID": "daf584e246f8ae89" }, "Version": "0.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/concat-map/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "concat-stream@2.0.0", "Name": "concat-stream", "Identifier": { "PURL": "pkg:npm/concat-stream@2.0.0", "UID": "52e030b7a1b65507" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/concat-stream/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "console-control-strings@1.1.0", "Name": "console-control-strings", "Identifier": { "PURL": "pkg:npm/console-control-strings@1.1.0", "UID": "e61ae18aa5444085" }, "Version": "1.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/console-control-strings/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "content-disposition@0.5.4", "Name": "content-disposition", "Identifier": { "PURL": "pkg:npm/content-disposition@0.5.4", "UID": "47d8c34a5c5ac850" }, "Version": "0.5.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/content-disposition/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "content-type@1.0.5", "Name": "content-type", "Identifier": { "PURL": "pkg:npm/content-type@1.0.5", "UID": "8be4b7102d173c4a" }, "Version": "1.0.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/content-type/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cookie@0.7.1", "Name": "cookie", "Identifier": { "PURL": "pkg:npm/cookie@0.7.1", "UID": "b81a9f9c98aaec2d" }, "Version": "0.7.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/cookie/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cookie@0.7.2", "Name": "cookie", "Identifier": { "PURL": "pkg:npm/cookie@0.7.2", "UID": "a6c57cfe8a0a4778" }, "Version": "0.7.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/engine.io/node_modules/cookie/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cookie-signature@1.0.6", "Name": "cookie-signature", "Identifier": { "PURL": "pkg:npm/cookie-signature@1.0.6", "UID": "b3f40efccf7d491a" }, "Version": "1.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/cookie-signature/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "core-util-is@1.0.2", "Name": "core-util-is", "Identifier": { "PURL": "pkg:npm/core-util-is@1.0.2", "UID": "78e20258d56c293" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/core-util-is/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "corepack@0.28.0", "Name": "corepack", "Identifier": { "PURL": "pkg:npm/corepack@0.28.0", "UID": "829a90390e515dc0" }, "Version": "0.28.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/corepack/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cors@2.8.5", "Name": "cors", "Identifier": { "PURL": "pkg:npm/cors@2.8.5", "UID": "7678b2576a8119fe" }, "Version": "2.8.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/cors/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "croner@6.0.7", "Name": "croner", "Identifier": { "PURL": "pkg:npm/croner@6.0.7", "UID": "f2eaead14d8be5c9" }, "Version": "6.0.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/croner/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cross-spawn@7.0.3", "Name": "cross-spawn", "Identifier": { "PURL": "pkg:npm/cross-spawn@7.0.3", "UID": "dfc86ed0cb153668" }, "Version": "7.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/cross-spawn/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cross-spawn@7.0.6", "Name": "cross-spawn", "Identifier": { "PURL": "pkg:npm/cross-spawn@7.0.6", "UID": "79f00baccbb4a6ab" }, "Version": "7.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/cross-spawn/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "css-color-converter@2.0.0", "Name": "css-color-converter", "Identifier": { "PURL": "pkg:npm/css-color-converter@2.0.0", "UID": "ad2ca75705b0cfce" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/css-color-converter/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "css-select@4.3.0", "Name": "css-select", "Identifier": { "PURL": "pkg:npm/css-select@4.3.0", "UID": "4d933dc07c606fa6" }, "Version": "4.3.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/gamedig/node_modules/css-select/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "css-select@5.2.2", "Name": "css-select", "Identifier": { "PURL": "pkg:npm/css-select@5.2.2", "UID": "56e0b4072d0ad2b2" }, "Version": "5.2.2", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/css-select/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "css-unit-converter@1.1.2", "Name": "css-unit-converter", "Identifier": { "PURL": "pkg:npm/css-unit-converter@1.1.2", "UID": "9b7ae09e531f4edf" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/css-unit-converter/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "css-what@6.2.2", "Name": "css-what", "Identifier": { "PURL": "pkg:npm/css-what@6.2.2", "UID": "2002668c605a1675" }, "Version": "6.2.2", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/css-what/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cssesc@3.0.0", "Name": "cssesc", "Identifier": { "PURL": "pkg:npm/cssesc@3.0.0", "UID": "7f5523593daaa2d6" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/cssesc/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "data-view-buffer@1.0.2", "Name": "data-view-buffer", "Identifier": { "PURL": "pkg:npm/data-view-buffer@1.0.2", "UID": "4a595a5ad42dbdf8" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/data-view-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "data-view-byte-length@1.0.2", "Name": "data-view-byte-length", "Identifier": { "PURL": "pkg:npm/data-view-byte-length@1.0.2", "UID": "2bf996a75f8260d" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/data-view-byte-length/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "data-view-byte-offset@1.0.1", "Name": "data-view-byte-offset", "Identifier": { "PURL": "pkg:npm/data-view-byte-offset@1.0.1", "UID": "ce9621e2d597e63a" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/data-view-byte-offset/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "dayjs@1.11.18", "Name": "dayjs", "Identifier": { "PURL": "pkg:npm/dayjs@1.11.18", "UID": "e050b6984841a28f" }, "Version": "1.11.18", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/dayjs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@2.6.9", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@2.6.9", "UID": "2c2d6f0bf813292d" }, "Version": "2.6.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/body-parser/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@2.6.9", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@2.6.9", "UID": "932174fd4cd4734e" }, "Version": "2.6.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/compression/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@2.6.9", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@2.6.9", "UID": "1b13cc338bf5e56b" }, "Version": "2.6.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/express/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@2.6.9", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@2.6.9", "UID": "7361dd24ca706504" }, "Version": "2.6.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/finalhandler/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@2.6.9", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@2.6.9", "UID": "a9aa49b9a759d99f" }, "Version": "2.6.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/send/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@3.2.7", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@3.2.7", "UID": "955414722932db" }, "Version": "3.2.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/prometheus-api-metrics/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@4.3.4", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@4.3.4", "UID": "a15be2ad3eed1c13" }, "Version": "4.3.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/knex/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@4.3.4", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@4.3.4", "UID": "de828c2d6aeee2b5" }, "Version": "4.3.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@4.3.7", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@4.3.7", "UID": "b2f25e5ff98c3fb8" }, "Version": "4.3.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/engine.io-client/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@4.3.7", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@4.3.7", "UID": "4c5b6b1c9a94821" }, "Version": "4.3.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/engine.io/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@4.3.7", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@4.3.7", "UID": "df849ae60acb67ba" }, "Version": "4.3.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/socket.io-adapter/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@4.3.7", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@4.3.7", "UID": "91d2f67428fc2917" }, "Version": "4.3.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/socket.io-client/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@4.3.7", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@4.3.7", "UID": "2842914ec3873ffe" }, "Version": "4.3.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/socket.io-parser/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@4.3.7", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@4.3.7", "UID": "793efdc736cb0228" }, "Version": "4.3.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/socket.io/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@4.4.3", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@4.4.3", "UID": "396ca031f451c553" }, "Version": "4.4.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "decompress-response@6.0.0", "Name": "decompress-response", "Identifier": { "PURL": "pkg:npm/decompress-response@6.0.0", "UID": "30b82f61de4244f0" }, "Version": "6.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/decompress-response/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "defer-to-connect@2.0.1", "Name": "defer-to-connect", "Identifier": { "PURL": "pkg:npm/defer-to-connect@2.0.1", "UID": "a8f07dc7fbb514b3" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/defer-to-connect/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "define-data-property@1.1.4", "Name": "define-data-property", "Identifier": { "PURL": "pkg:npm/define-data-property@1.1.4", "UID": "28fee9ec5526c224" }, "Version": "1.1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/define-data-property/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "define-lazy-prop@2.0.0", "Name": "define-lazy-prop", "Identifier": { "PURL": "pkg:npm/define-lazy-prop@2.0.0", "UID": "9a4a0b0ab2208552" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/define-lazy-prop/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "define-properties@1.2.1", "Name": "define-properties", "Identifier": { "PURL": "pkg:npm/define-properties@1.2.1", "UID": "65cd453a46276c7f" }, "Version": "1.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/define-properties/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "delayed-stream@1.0.0", "Name": "delayed-stream", "Identifier": { "PURL": "pkg:npm/delayed-stream@1.0.0", "UID": "ec5b8bf6b1915b31" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/delayed-stream/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "delegates@1.0.0", "Name": "delegates", "Identifier": { "PURL": "pkg:npm/delegates@1.0.0", "UID": "66017515609270fa" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/delegates/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "denque@2.1.0", "Name": "denque", "Identifier": { "PURL": "pkg:npm/denque@2.1.0", "UID": "37699cdea84c6640" }, "Version": "2.1.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/denque/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "depd@2.0.0", "Name": "depd", "Identifier": { "PURL": "pkg:npm/depd@2.0.0", "UID": "3df66290ea9428cd" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/depd/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "destroy@1.2.0", "Name": "destroy", "Identifier": { "PURL": "pkg:npm/destroy@1.2.0", "UID": "1a1d4af7d4f2e8e6" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/destroy/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "detect-libc@2.1.2", "Name": "detect-libc", "Identifier": { "PURL": "pkg:npm/detect-libc@2.1.2", "UID": "ddf1cba2a5b1bd8" }, "Version": "2.1.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/detect-libc/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "dev-null@0.1.1", "Name": "dev-null", "Identifier": { "PURL": "pkg:npm/dev-null@0.1.1", "UID": "950f26822211adcd" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/dev-null/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "diff@5.2.0", "Name": "diff", "Identifier": { "PURL": "pkg:npm/diff@5.2.0", "UID": "a4aceb5431ee23f2" }, "Version": "5.2.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/diff/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "dom-serializer@1.4.1", "Name": "dom-serializer", "Identifier": { "PURL": "pkg:npm/dom-serializer@1.4.1", "UID": "828dea62acc9da0a" }, "Version": "1.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/gamedig/node_modules/dom-serializer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "dom-serializer@2.0.0", "Name": "dom-serializer", "Identifier": { "PURL": "pkg:npm/dom-serializer@2.0.0", "UID": "68be9f2bc9f258c2" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/dom-serializer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "domelementtype@2.3.0", "Name": "domelementtype", "Identifier": { "PURL": "pkg:npm/domelementtype@2.3.0", "UID": "cdd7977b7cfb03c5" }, "Version": "2.3.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/domelementtype/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "domhandler@4.3.1", "Name": "domhandler", "Identifier": { "PURL": "pkg:npm/domhandler@4.3.1", "UID": "7757c685ec87caea" }, "Version": "4.3.1", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/gamedig/node_modules/domhandler/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "domhandler@5.0.3", "Name": "domhandler", "Identifier": { "PURL": "pkg:npm/domhandler@5.0.3", "UID": "d6fb3f8c14d14e96" }, "Version": "5.0.3", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/domhandler/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "domutils@2.8.0", "Name": "domutils", "Identifier": { "PURL": "pkg:npm/domutils@2.8.0", "UID": "7fc032eb3c64133d" }, "Version": "2.8.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/gamedig/node_modules/domutils/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "domutils@3.2.2", "Name": "domutils", "Identifier": { "PURL": "pkg:npm/domutils@3.2.2", "UID": "a400e89e69dbbc1d" }, "Version": "3.2.2", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/domutils/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "dotenv@16.0.3", "Name": "dotenv", "Identifier": { "PURL": "pkg:npm/dotenv@16.0.3", "UID": "df8b4672cf4fab6d" }, "Version": "16.0.3", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/dotenv/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "dunder-proto@1.0.1", "Name": "dunder-proto", "Identifier": { "PURL": "pkg:npm/dunder-proto@1.0.1", "UID": "45bd188b6a36d724" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/dunder-proto/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "duplexify@4.1.3", "Name": "duplexify", "Identifier": { "PURL": "pkg:npm/duplexify@4.1.3", "UID": "c8e56ceed95263d7" }, "Version": "4.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/duplexify/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "eastasianwidth@0.2.0", "Name": "eastasianwidth", "Identifier": { "PURL": "pkg:npm/eastasianwidth@0.2.0", "UID": "3548e3c999fe50dc" }, "Version": "0.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/eastasianwidth/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "eastasianwidth@0.2.0", "Name": "eastasianwidth", "Identifier": { "PURL": "pkg:npm/eastasianwidth@0.2.0", "UID": "e837d05849c9e09b" }, "Version": "0.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/eastasianwidth/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ecdsa-sig-formatter@1.0.11", "Name": "ecdsa-sig-formatter", "Identifier": { "PURL": "pkg:npm/ecdsa-sig-formatter@1.0.11", "UID": "b18469b8809b7698" }, "Version": "1.0.11", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/ecdsa-sig-formatter/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ee-first@1.1.1", "Name": "ee-first", "Identifier": { "PURL": "pkg:npm/ee-first@1.1.1", "UID": "308702bdc5d5af9b" }, "Version": "1.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/ee-first/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "emoji-regex@8.0.0", "Name": "emoji-regex", "Identifier": { "PURL": "pkg:npm/emoji-regex@8.0.0", "UID": "27ea84a5d939fe33" }, "Version": "8.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/emoji-regex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "emoji-regex@8.0.0", "Name": "emoji-regex", "Identifier": { "PURL": "pkg:npm/emoji-regex@8.0.0", "UID": "ff9f7d586cb43e8d" }, "Version": "8.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/emoji-regex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "emoji-regex@9.2.2", "Name": "emoji-regex", "Identifier": { "PURL": "pkg:npm/emoji-regex@9.2.2", "UID": "5e86e62eabe33fe1" }, "Version": "9.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@isaacs/cliui/node_modules/emoji-regex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "emoji-regex@9.2.2", "Name": "emoji-regex", "Identifier": { "PURL": "pkg:npm/emoji-regex@9.2.2", "UID": "e3da15e8bc9892e" }, "Version": "9.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@isaacs/cliui/node_modules/emoji-regex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "emoji-regex@9.2.2", "Name": "emoji-regex", "Identifier": { "PURL": "pkg:npm/emoji-regex@9.2.2", "UID": "cce19d255d5bd19d" }, "Version": "9.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/wrap-ansi/node_modules/emoji-regex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "encodeurl@1.0.2", "Name": "encodeurl", "Identifier": { "PURL": "pkg:npm/encodeurl@1.0.2", "UID": "62c2deac5c5fdf07" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/send/node_modules/encodeurl/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "encodeurl@2.0.0", "Name": "encodeurl", "Identifier": { "PURL": "pkg:npm/encodeurl@2.0.0", "UID": "12a043aee0d425d1" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/encodeurl/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "encoding@0.1.13", "Name": "encoding", "Identifier": { "PURL": "pkg:npm/encoding@0.1.13", "UID": "5a457c0f4f67d9da" }, "Version": "0.1.13", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/encoding/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "encoding@0.1.13", "Name": "encoding", "Identifier": { "PURL": "pkg:npm/encoding@0.1.13", "UID": "b275a07a9d6210f1" }, "Version": "0.1.13", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/encoding/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "end-of-stream@1.4.5", "Name": "end-of-stream", "Identifier": { "PURL": "pkg:npm/end-of-stream@1.4.5", "UID": "635995e134b65310" }, "Version": "1.4.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/end-of-stream/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "engine.io@6.6.4", "Name": "engine.io", "Identifier": { "PURL": "pkg:npm/engine.io@6.6.4", "UID": "c307c15d941b62e3" }, "Version": "6.6.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/engine.io/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "engine.io-client@6.6.3", "Name": "engine.io-client", "Identifier": { "PURL": "pkg:npm/engine.io-client@6.6.3", "UID": "c7f2830de4686f27" }, "Version": "6.6.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/engine.io-client/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "engine.io-parser@5.2.3", "Name": "engine.io-parser", "Identifier": { "PURL": "pkg:npm/engine.io-parser@5.2.3", "UID": "4f008bf0b8a3ae09" }, "Version": "5.2.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/engine.io-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "entities@2.2.0", "Name": "entities", "Identifier": { "PURL": "pkg:npm/entities@2.2.0", "UID": "299b68457274ddcb" }, "Version": "2.2.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/gamedig/node_modules/entities/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "entities@4.5.0", "Name": "entities", "Identifier": { "PURL": "pkg:npm/entities@4.5.0", "UID": "fe8759a1996a9feb" }, "Version": "4.5.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/entities/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "entities@6.0.1", "Name": "entities", "Identifier": { "PURL": "pkg:npm/entities@6.0.1", "UID": "4f8a3058b16bc427" }, "Version": "6.0.1", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/parse5/node_modules/entities/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "env-paths@2.2.1", "Name": "env-paths", "Identifier": { "PURL": "pkg:npm/env-paths@2.2.1", "UID": "b98b791b26bcce7e" }, "Version": "2.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/env-paths/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "env-paths@2.2.1", "Name": "env-paths", "Identifier": { "PURL": "pkg:npm/env-paths@2.2.1", "UID": "4d5f9228dca262ad" }, "Version": "2.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/env-paths/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "err-code@2.0.3", "Name": "err-code", "Identifier": { "PURL": "pkg:npm/err-code@2.0.3", "UID": "3f8bce145f483ee6" }, "Version": "2.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/err-code/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "err-code@2.0.3", "Name": "err-code", "Identifier": { "PURL": "pkg:npm/err-code@2.0.3", "UID": "6520b55ebdc1fc1" }, "Version": "2.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/err-code/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "es-abstract@1.24.0", "Name": "es-abstract", "Identifier": { "PURL": "pkg:npm/es-abstract@1.24.0", "UID": "eeb9fb95d151bb77" }, "Version": "1.24.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/es-abstract/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "es-aggregate-error@1.0.14", "Name": "es-aggregate-error", "Identifier": { "PURL": "pkg:npm/es-aggregate-error@1.0.14", "UID": "727473e5d3dfba86" }, "Version": "1.0.14", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/es-aggregate-error/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "es-define-property@1.0.1", "Name": "es-define-property", "Identifier": { "PURL": "pkg:npm/es-define-property@1.0.1", "UID": "ce12ee27c669df54" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/es-define-property/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "es-errors@1.3.0", "Name": "es-errors", "Identifier": { "PURL": "pkg:npm/es-errors@1.3.0", "UID": "be98dbdc22578220" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/es-errors/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "es-object-atoms@1.1.1", "Name": "es-object-atoms", "Identifier": { "PURL": "pkg:npm/es-object-atoms@1.1.1", "UID": "325843d8570b5ebd" }, "Version": "1.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/es-object-atoms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "es-set-tostringtag@2.1.0", "Name": "es-set-tostringtag", "Identifier": { "PURL": "pkg:npm/es-set-tostringtag@2.1.0", "UID": "bc9134377d846231" }, "Version": "2.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/es-set-tostringtag/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "es-to-primitive@1.3.0", "Name": "es-to-primitive", "Identifier": { "PURL": "pkg:npm/es-to-primitive@1.3.0", "UID": "62d922bfc0221d4" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/es-to-primitive/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "escalade@3.2.0", "Name": "escalade", "Identifier": { "PURL": "pkg:npm/escalade@3.2.0", "UID": "9e2477abece9d839" }, "Version": "3.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/escalade/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "escape-html@1.0.3", "Name": "escape-html", "Identifier": { "PURL": "pkg:npm/escape-html@1.0.3", "UID": "9e42571d820270ac" }, "Version": "1.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/escape-html/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "esm@3.2.25", "Name": "esm", "Identifier": { "PURL": "pkg:npm/esm@3.2.25", "UID": "c77e83f3940d319b" }, "Version": "3.2.25", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/esm/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "etag@1.8.1", "Name": "etag", "Identifier": { "PURL": "pkg:npm/etag@1.8.1", "UID": "e306c344790d47a9" }, "Version": "1.8.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/etag/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "event-to-promise@0.7.0", "Name": "event-to-promise", "Identifier": { "PURL": "pkg:npm/event-to-promise@0.7.0", "UID": "437d0c66b4fed868" }, "Version": "0.7.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/event-to-promise/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "events@3.3.0", "Name": "events", "Identifier": { "PURL": "pkg:npm/events@3.3.0", "UID": "ffcac6fa0120d801" }, "Version": "3.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/events/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "exponential-backoff@3.1.1", "Name": "exponential-backoff", "Identifier": { "PURL": "pkg:npm/exponential-backoff@3.1.1", "UID": "1f302d26e9ab0848" }, "Version": "3.1.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/exponential-backoff/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "express@4.21.2", "Name": "express", "Identifier": { "PURL": "pkg:npm/express@4.21.2", "UID": "b4394745d74314f0" }, "Version": "4.21.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/express/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "express-basic-auth@1.2.1", "Name": "express-basic-auth", "Identifier": { "PURL": "pkg:npm/express-basic-auth@1.2.1", "UID": "dc9780eae9dbe8ad" }, "Version": "1.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/express-basic-auth/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "express-static-gzip@2.1.8", "Name": "express-static-gzip", "Identifier": { "PURL": "pkg:npm/express-static-gzip@2.1.8", "UID": "51f3ca0494571644" }, "Version": "2.1.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/express-static-gzip/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "fast-xml-parser@5.2.5", "Name": "fast-xml-parser", "Identifier": { "PURL": "pkg:npm/fast-xml-parser@5.2.5", "UID": "e4b10930a496b792" }, "Version": "5.2.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/fast-xml-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "fastest-levenshtein@1.0.16", "Name": "fastest-levenshtein", "Identifier": { "PURL": "pkg:npm/fastest-levenshtein@1.0.16", "UID": "c2930316b43e3802" }, "Version": "1.0.16", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/fastest-levenshtein/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "finalhandler@1.3.1", "Name": "finalhandler", "Identifier": { "PURL": "pkg:npm/finalhandler@1.3.1", "UID": "62dc9dae711a6ea4" }, "Version": "1.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/finalhandler/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "follow-redirects@1.15.11", "Name": "follow-redirects", "Identifier": { "PURL": "pkg:npm/follow-redirects@1.15.11", "UID": "3b31d5aac4ffd58" }, "Version": "1.15.11", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/follow-redirects/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "for-each@0.3.5", "Name": "for-each", "Identifier": { "PURL": "pkg:npm/for-each@0.3.5", "UID": "89c26c97555f2a75" }, "Version": "0.3.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/for-each/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "foreground-child@3.1.1", "Name": "foreground-child", "Identifier": { "PURL": "pkg:npm/foreground-child@3.1.1", "UID": "612bbcf1804e04f2" }, "Version": "3.1.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/foreground-child/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "foreground-child@3.3.1", "Name": "foreground-child", "Identifier": { "PURL": "pkg:npm/foreground-child@3.3.1", "UID": "8688ec6d9e065705" }, "Version": "3.3.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/foreground-child/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "form-data@4.0.4", "Name": "form-data", "Identifier": { "PURL": "pkg:npm/form-data@4.0.4", "UID": "4172a22e0f83da0c" }, "Version": "4.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/form-data/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "form-data-encoder@1.7.1", "Name": "form-data-encoder", "Identifier": { "PURL": "pkg:npm/form-data-encoder@1.7.1", "UID": "7ea51160d29abb14" }, "Version": "1.7.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/form-data-encoder/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "forwarded@0.2.0", "Name": "forwarded", "Identifier": { "PURL": "pkg:npm/forwarded@0.2.0", "UID": "6cc9a75d6d5aa98d" }, "Version": "0.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/forwarded/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "fresh@0.5.2", "Name": "fresh", "Identifier": { "PURL": "pkg:npm/fresh@0.5.2", "UID": "22d44ffc10d9a360" }, "Version": "0.5.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/fresh/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "fs-minipass@2.1.0", "Name": "fs-minipass", "Identifier": { "PURL": "pkg:npm/fs-minipass@2.1.0", "UID": "638e9cf340bfd280" }, "Version": "2.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/fs-minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "fs-minipass@2.1.0", "Name": "fs-minipass", "Identifier": { "PURL": "pkg:npm/fs-minipass@2.1.0", "UID": "d90db4b18e1a7463" }, "Version": "2.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/tar/node_modules/fs-minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "fs-minipass@3.0.3", "Name": "fs-minipass", "Identifier": { "PURL": "pkg:npm/fs-minipass@3.0.3", "UID": "fcead9aef62eff18" }, "Version": "3.0.3", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/fs-minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "fs.realpath@1.0.0", "Name": "fs.realpath", "Identifier": { "PURL": "pkg:npm/fs.realpath@1.0.0", "UID": "68ccd36d45c4936b" }, "Version": "1.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/fs.realpath/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "function-bind@1.1.2", "Name": "function-bind", "Identifier": { "PURL": "pkg:npm/function-bind@1.1.2", "UID": "67890e6c0d99f170" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/function-bind/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "function-bind@1.1.2", "Name": "function-bind", "Identifier": { "PURL": "pkg:npm/function-bind@1.1.2", "UID": "d0c6c370b3492b9a" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/function-bind/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "function.prototype.name@1.1.8", "Name": "function.prototype.name", "Identifier": { "PURL": "pkg:npm/function.prototype.name@1.1.8", "UID": "1812b3ca679f76b0" }, "Version": "1.1.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/function.prototype.name/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "functions-have-names@1.2.3", "Name": "functions-have-names", "Identifier": { "PURL": "pkg:npm/functions-have-names@1.2.3", "UID": "fe1868acfce43edf" }, "Version": "1.2.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/functions-have-names/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "gamedig@4.3.2", "Name": "gamedig", "Identifier": { "PURL": "pkg:npm/gamedig@4.3.2", "UID": "453e628bcaa5225c" }, "Version": "4.3.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/gamedig/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "gauge@3.0.2", "Name": "gauge", "Identifier": { "PURL": "pkg:npm/gauge@3.0.2", "UID": "2bfbea98f9903ffb" }, "Version": "3.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/gauge/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "gauge@4.0.4", "Name": "gauge", "Identifier": { "PURL": "pkg:npm/gauge@4.0.4", "UID": "c941082061b4919a" }, "Version": "4.0.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/node-gyp/node_modules/gauge/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "gbxremote@0.2.1", "Name": "gbxremote", "Identifier": { "PURL": "pkg:npm/gbxremote@0.2.1", "UID": "105d3eb6bfba5db5" }, "Version": "0.2.1", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/gbxremote/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "generate-function@2.3.1", "Name": "generate-function", "Identifier": { "PURL": "pkg:npm/generate-function@2.3.1", "UID": "f7913ec855ca348d" }, "Version": "2.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/generate-function/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "generator-function@2.0.1", "Name": "generator-function", "Identifier": { "PURL": "pkg:npm/generator-function@2.0.1", "UID": "1681919bcfb6d452" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/generator-function/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "generic-pool@3.9.0", "Name": "generic-pool", "Identifier": { "PURL": "pkg:npm/generic-pool@3.9.0", "UID": "3838492d179cde08" }, "Version": "3.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/generic-pool/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "get-caller-file@2.0.5", "Name": "get-caller-file", "Identifier": { "PURL": "pkg:npm/get-caller-file@2.0.5", "UID": "ff67218c901ae2d2" }, "Version": "2.0.5", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/get-caller-file/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "get-intrinsic@1.3.0", "Name": "get-intrinsic", "Identifier": { "PURL": "pkg:npm/get-intrinsic@1.3.0", "UID": "6213cad7b180db5a" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/get-intrinsic/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "get-package-type@0.1.0", "Name": "get-package-type", "Identifier": { "PURL": "pkg:npm/get-package-type@0.1.0", "UID": "415e27deab35c4d6" }, "Version": "0.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/get-package-type/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "get-proto@1.0.1", "Name": "get-proto", "Identifier": { "PURL": "pkg:npm/get-proto@1.0.1", "UID": "bf2adad54e50f65c" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/get-proto/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "get-stream@5.2.0", "Name": "get-stream", "Identifier": { "PURL": "pkg:npm/get-stream@5.2.0", "UID": "db6b0ff2807e59e4" }, "Version": "5.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/get-stream/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "get-stream@6.0.1", "Name": "get-stream", "Identifier": { "PURL": "pkg:npm/get-stream@6.0.1", "UID": "f061f87080c4f47e" }, "Version": "6.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/got/node_modules/get-stream/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "get-symbol-description@1.1.0", "Name": "get-symbol-description", "Identifier": { "PURL": "pkg:npm/get-symbol-description@1.1.0", "UID": "10660c03b81b9a4a" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/get-symbol-description/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "getopts@2.3.0", "Name": "getopts", "Identifier": { "PURL": "pkg:npm/getopts@2.3.0", "UID": "68808cfb64ac4183" }, "Version": "2.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/getopts/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "glob@10.3.12", "Name": "glob", "Identifier": { "PURL": "pkg:npm/glob@10.3.12", "UID": "2eb6986e63b2778" }, "Version": "10.3.12", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/glob/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "glob@10.3.16", "Name": "glob", "Identifier": { "PURL": "pkg:npm/glob@10.3.16", "UID": "bbd600737dcd7b19" }, "Version": "10.3.16", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/redbean-node/node_modules/glob/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "glob@7.2.3", "Name": "glob", "Identifier": { "PURL": "pkg:npm/glob@7.2.3", "UID": "8b2122fce06516dc" }, "Version": "7.2.3", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/glob/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "globalthis@1.0.4", "Name": "globalthis", "Identifier": { "PURL": "pkg:npm/globalthis@1.0.4", "UID": "a84927eb9a8b1010" }, "Version": "1.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/globalthis/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "gopd@1.2.0", "Name": "gopd", "Identifier": { "PURL": "pkg:npm/gopd@1.2.0", "UID": "2d77450f3ec6e62" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/gopd/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "got@12.1.0", "Name": "got", "Identifier": { "PURL": "pkg:npm/got@12.1.0", "UID": "75b155417f4a50d7" }, "Version": "12.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/got/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "graceful-fs@4.2.11", "Name": "graceful-fs", "Identifier": { "PURL": "pkg:npm/graceful-fs@4.2.11", "UID": "bbf4b3f9a10afd65" }, "Version": "4.2.11", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/graceful-fs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "graceful-fs@4.2.11", "Name": "graceful-fs", "Identifier": { "PURL": "pkg:npm/graceful-fs@4.2.11", "UID": "48999ee23c560636" }, "Version": "4.2.11", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/graceful-fs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "has-bigints@1.1.0", "Name": "has-bigints", "Identifier": { "PURL": "pkg:npm/has-bigints@1.1.0", "UID": "b008149a50a498fb" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/has-bigints/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "has-property-descriptors@1.0.2", "Name": "has-property-descriptors", "Identifier": { "PURL": "pkg:npm/has-property-descriptors@1.0.2", "UID": "e45100159e216389" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/has-property-descriptors/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "has-proto@1.2.0", "Name": "has-proto", "Identifier": { "PURL": "pkg:npm/has-proto@1.2.0", "UID": "9397a1b10632df0f" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/has-proto/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "has-symbols@1.1.0", "Name": "has-symbols", "Identifier": { "PURL": "pkg:npm/has-symbols@1.1.0", "UID": "75d312c2b5997498" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/has-symbols/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "has-tostringtag@1.0.2", "Name": "has-tostringtag", "Identifier": { "PURL": "pkg:npm/has-tostringtag@1.0.2", "UID": "ebcf2e30da8856b6" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/has-tostringtag/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "has-unicode@2.0.1", "Name": "has-unicode", "Identifier": { "PURL": "pkg:npm/has-unicode@2.0.1", "UID": "191fb877e89cc3ef" }, "Version": "2.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/has-unicode/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "hasown@2.0.2", "Name": "hasown", "Identifier": { "PURL": "pkg:npm/hasown@2.0.2", "UID": "a4f8d33a0c3e5b32" }, "Version": "2.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/hasown/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "hasown@2.0.2", "Name": "hasown", "Identifier": { "PURL": "pkg:npm/hasown@2.0.2", "UID": "322be7e4bacab2d5" }, "Version": "2.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/hasown/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "help-me@3.0.0", "Name": "help-me", "Identifier": { "PURL": "pkg:npm/help-me@3.0.0", "UID": "2fd2c266362c8a0b" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/help-me/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "hoek@6.1.3", "Name": "hoek", "Identifier": { "PURL": "pkg:npm/hoek@6.1.3", "UID": "ade681f69a2739f3" }, "Version": "6.1.3", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/hoek/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "hosted-git-info@7.0.1", "Name": "hosted-git-info", "Identifier": { "PURL": "pkg:npm/hosted-git-info@7.0.1", "UID": "75b8c116ca2b7a48" }, "Version": "7.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/hosted-git-info/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "html-escaper@3.0.3", "Name": "html-escaper", "Identifier": { "PURL": "pkg:npm/html-escaper@3.0.3", "UID": "5bce5b010dd5c2fc" }, "Version": "3.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/html-escaper/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "htmlparser2@6.1.0", "Name": "htmlparser2", "Identifier": { "PURL": "pkg:npm/htmlparser2@6.1.0", "UID": "992921746bc1651a" }, "Version": "6.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/gamedig/node_modules/htmlparser2/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "htmlparser2@8.0.2", "Name": "htmlparser2", "Identifier": { "PURL": "pkg:npm/htmlparser2@8.0.2", "UID": "f109426f2fce667b" }, "Version": "8.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/htmlparser2/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "http-cache-semantics@4.1.1", "Name": "http-cache-semantics", "Identifier": { "PURL": "pkg:npm/http-cache-semantics@4.1.1", "UID": "81fdeffbeb304b08" }, "Version": "4.1.1", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/http-cache-semantics/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "http-cache-semantics@4.2.0", "Name": "http-cache-semantics", "Identifier": { "PURL": "pkg:npm/http-cache-semantics@4.2.0", "UID": "d86d84332b483d56" }, "Version": "4.2.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/http-cache-semantics/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "http-errors@2.0.0", "Name": "http-errors", "Identifier": { "PURL": "pkg:npm/http-errors@2.0.0", "UID": "b4948b4d47975ed1" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/http-errors/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "http-graceful-shutdown@3.1.14", "Name": "http-graceful-shutdown", "Identifier": { "PURL": "pkg:npm/http-graceful-shutdown@3.1.14", "UID": "cb6fd53fd27bc025" }, "Version": "3.1.14", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/http-graceful-shutdown/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "http-proxy-agent@4.0.1", "Name": "http-proxy-agent", "Identifier": { "PURL": "pkg:npm/http-proxy-agent@4.0.1", "UID": "9f62a8cce3e351f2" }, "Version": "4.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/make-fetch-happen/node_modules/http-proxy-agent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "http-proxy-agent@5.0.0", "Name": "http-proxy-agent", "Identifier": { "PURL": "pkg:npm/http-proxy-agent@5.0.0", "UID": "ae4bb8199f8ef287" }, "Version": "5.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/http-proxy-agent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "http-proxy-agent@7.0.2", "Name": "http-proxy-agent", "Identifier": { "PURL": "pkg:npm/http-proxy-agent@7.0.2", "UID": "41812c7ea0ecd4ee" }, "Version": "7.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@typespec/ts-http-runtime/node_modules/http-proxy-agent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "http-proxy-agent@7.0.2", "Name": "http-proxy-agent", "Identifier": { "PURL": "pkg:npm/http-proxy-agent@7.0.2", "UID": "b03040e191aa89aa" }, "Version": "7.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/http-proxy-agent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "http2-wrapper@2.2.1", "Name": "http2-wrapper", "Identifier": { "PURL": "pkg:npm/http2-wrapper@2.2.1", "UID": "8ae16b9d4b65658d" }, "Version": "2.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/http2-wrapper/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "https-proxy-agent@5.0.1", "Name": "https-proxy-agent", "Identifier": { "PURL": "pkg:npm/https-proxy-agent@5.0.1", "UID": "f3ca3b80bec75316" }, "Version": "5.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/https-proxy-agent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "https-proxy-agent@7.0.4", "Name": "https-proxy-agent", "Identifier": { "PURL": "pkg:npm/https-proxy-agent@7.0.4", "UID": "6f75eb45841023e0" }, "Version": "7.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/https-proxy-agent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "https-proxy-agent@7.0.6", "Name": "https-proxy-agent", "Identifier": { "PURL": "pkg:npm/https-proxy-agent@7.0.6", "UID": "770ae18cc9dec84b" }, "Version": "7.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@typespec/ts-http-runtime/node_modules/https-proxy-agent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "humanize-ms@1.2.1", "Name": "humanize-ms", "Identifier": { "PURL": "pkg:npm/humanize-ms@1.2.1", "UID": "5c719d7418f181fe" }, "Version": "1.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/humanize-ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "iconv-lite@0.4.24", "Name": "iconv-lite", "Identifier": { "PURL": "pkg:npm/iconv-lite@0.4.24", "UID": "75fe085fbd8d5c54" }, "Version": "0.4.24", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/body-parser/node_modules/iconv-lite/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "iconv-lite@0.4.24", "Name": "iconv-lite", "Identifier": { "PURL": "pkg:npm/iconv-lite@0.4.24", "UID": "849ee1300bc26506" }, "Version": "0.4.24", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/raw-body/node_modules/iconv-lite/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "iconv-lite@0.6.3", "Name": "iconv-lite", "Identifier": { "PURL": "pkg:npm/iconv-lite@0.6.3", "UID": "99a859dcacdb093f" }, "Version": "0.6.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/iconv-lite/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "iconv-lite@0.6.3", "Name": "iconv-lite", "Identifier": { "PURL": "pkg:npm/iconv-lite@0.6.3", "UID": "3b91bc453b91fa4" }, "Version": "0.6.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/iconv-lite/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ieee754@1.2.1", "Name": "ieee754", "Identifier": { "PURL": "pkg:npm/ieee754@1.2.1", "UID": "de15f7eaec8444b5" }, "Version": "1.2.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/ieee754/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ignore-walk@6.0.4", "Name": "ignore-walk", "Identifier": { "PURL": "pkg:npm/ignore-walk@6.0.4", "UID": "5a8e4964eb7e2345" }, "Version": "6.0.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/ignore-walk/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "imurmurhash@0.1.4", "Name": "imurmurhash", "Identifier": { "PURL": "pkg:npm/imurmurhash@0.1.4", "UID": "657476b09fe14fd8" }, "Version": "0.1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/imurmurhash/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "imurmurhash@0.1.4", "Name": "imurmurhash", "Identifier": { "PURL": "pkg:npm/imurmurhash@0.1.4", "UID": "8c2f7026a19bfbd" }, "Version": "0.1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/imurmurhash/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "indent-string@4.0.0", "Name": "indent-string", "Identifier": { "PURL": "pkg:npm/indent-string@4.0.0", "UID": "b2c7ee52eb7c11a" }, "Version": "4.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/indent-string/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "indent-string@4.0.0", "Name": "indent-string", "Identifier": { "PURL": "pkg:npm/indent-string@4.0.0", "UID": "8e53c7292fe7727b" }, "Version": "4.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/indent-string/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "infer-owner@1.0.4", "Name": "infer-owner", "Identifier": { "PURL": "pkg:npm/infer-owner@1.0.4", "UID": "a878572c1043e975" }, "Version": "1.0.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/infer-owner/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "inflight@1.0.6", "Name": "inflight", "Identifier": { "PURL": "pkg:npm/inflight@1.0.6", "UID": "c0f8e85dd4e03fd8" }, "Version": "1.0.6", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/inflight/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "inherits@2.0.4", "Name": "inherits", "Identifier": { "PURL": "pkg:npm/inherits@2.0.4", "UID": "743e1a08f0b7493f" }, "Version": "2.0.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/inherits/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ini@4.1.2", "Name": "ini", "Identifier": { "PURL": "pkg:npm/ini@4.1.2", "UID": "a83789f32ccbe90a" }, "Version": "4.1.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/ini/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "init-package-json@6.0.2", "Name": "init-package-json", "Identifier": { "PURL": "pkg:npm/init-package-json@6.0.2", "UID": "6929908dfe2b3028" }, "Version": "6.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/init-package-json/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "internal-slot@1.1.0", "Name": "internal-slot", "Identifier": { "PURL": "pkg:npm/internal-slot@1.1.0", "UID": "f58cdbdf8e904cab" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/internal-slot/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "interpret@2.2.0", "Name": "interpret", "Identifier": { "PURL": "pkg:npm/interpret@2.2.0", "UID": "fe660618d9aa7ada" }, "Version": "2.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/interpret/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ip-address@10.0.1", "Name": "ip-address", "Identifier": { "PURL": "pkg:npm/ip-address@10.0.1", "UID": "a12e0b7dd47a708c" }, "Version": "10.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/ip-address/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ip-address@9.0.5", "Name": "ip-address", "Identifier": { "PURL": "pkg:npm/ip-address@9.0.5", "UID": "5b39cd72dd1fbc6b" }, "Version": "9.0.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/ip-address/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ip-regex@5.0.0", "Name": "ip-regex", "Identifier": { "PURL": "pkg:npm/ip-regex@5.0.0", "UID": "41a7ec2cac2596f3" }, "Version": "5.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/ip-regex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ipaddr.js@1.9.1", "Name": "ipaddr.js", "Identifier": { "PURL": "pkg:npm/ipaddr.js@1.9.1", "UID": "5c2f37d7873f7e3d" }, "Version": "1.9.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/ipaddr.js/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-array-buffer@3.0.5", "Name": "is-array-buffer", "Identifier": { "PURL": "pkg:npm/is-array-buffer@3.0.5", "UID": "73b98867ed856b44" }, "Version": "3.0.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-array-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-async-function@2.1.1", "Name": "is-async-function", "Identifier": { "PURL": "pkg:npm/is-async-function@2.1.1", "UID": "19491b55dbc3228b" }, "Version": "2.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-async-function/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-bigint@1.1.0", "Name": "is-bigint", "Identifier": { "PURL": "pkg:npm/is-bigint@1.1.0", "UID": "16433c6df3b3394d" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-bigint/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-boolean-object@1.2.2", "Name": "is-boolean-object", "Identifier": { "PURL": "pkg:npm/is-boolean-object@1.2.2", "UID": "3a49f521494347b9" }, "Version": "1.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-boolean-object/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-callable@1.2.7", "Name": "is-callable", "Identifier": { "PURL": "pkg:npm/is-callable@1.2.7", "UID": "a5a6bd002ef9fed9" }, "Version": "1.2.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-callable/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-cidr@5.0.5", "Name": "is-cidr", "Identifier": { "PURL": "pkg:npm/is-cidr@5.0.5", "UID": "658b54c8904929bf" }, "Version": "5.0.5", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/is-cidr/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-core-module@2.13.1", "Name": "is-core-module", "Identifier": { "PURL": "pkg:npm/is-core-module@2.13.1", "UID": "f45ed047cbc40a71" }, "Version": "2.13.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/is-core-module/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-core-module@2.16.1", "Name": "is-core-module", "Identifier": { "PURL": "pkg:npm/is-core-module@2.16.1", "UID": "b9bf0275b231718c" }, "Version": "2.16.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-core-module/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-data-view@1.0.2", "Name": "is-data-view", "Identifier": { "PURL": "pkg:npm/is-data-view@1.0.2", "UID": "7a31ef153f152964" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-data-view/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-date-object@1.1.0", "Name": "is-date-object", "Identifier": { "PURL": "pkg:npm/is-date-object@1.1.0", "UID": "abdf351edc9e9b20" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-date-object/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-docker@2.2.1", "Name": "is-docker", "Identifier": { "PURL": "pkg:npm/is-docker@2.2.1", "UID": "5a13d8adb93e40c3" }, "Version": "2.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-docker/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-finalizationregistry@1.1.1", "Name": "is-finalizationregistry", "Identifier": { "PURL": "pkg:npm/is-finalizationregistry@1.1.1", "UID": "36005a3717544abe" }, "Version": "1.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-finalizationregistry/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-fullwidth-code-point@3.0.0", "Name": "is-fullwidth-code-point", "Identifier": { "PURL": "pkg:npm/is-fullwidth-code-point@3.0.0", "UID": "69e255603a2214ba" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-fullwidth-code-point/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-fullwidth-code-point@3.0.0", "Name": "is-fullwidth-code-point", "Identifier": { "PURL": "pkg:npm/is-fullwidth-code-point@3.0.0", "UID": "ad71067c5da66cd8" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/is-fullwidth-code-point/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-generator-function@1.1.2", "Name": "is-generator-function", "Identifier": { "PURL": "pkg:npm/is-generator-function@1.1.2", "UID": "a3576c7e5dd2e01d" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-generator-function/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-lambda@1.0.1", "Name": "is-lambda", "Identifier": { "PURL": "pkg:npm/is-lambda@1.0.1", "UID": "3ce6cad8e3f894dc" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-lambda/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-lambda@1.0.1", "Name": "is-lambda", "Identifier": { "PURL": "pkg:npm/is-lambda@1.0.1", "UID": "4d0eadd7138cb598" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/is-lambda/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-map@2.0.3", "Name": "is-map", "Identifier": { "PURL": "pkg:npm/is-map@2.0.3", "UID": "66447394ec76dc61" }, "Version": "2.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-map/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-negative-zero@2.0.3", "Name": "is-negative-zero", "Identifier": { "PURL": "pkg:npm/is-negative-zero@2.0.3", "UID": "ed2cbdafae991cf6" }, "Version": "2.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-negative-zero/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-number-object@1.1.1", "Name": "is-number-object", "Identifier": { "PURL": "pkg:npm/is-number-object@1.1.1", "UID": "bba3607f1cfe238d" }, "Version": "1.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-number-object/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-property@1.0.2", "Name": "is-property", "Identifier": { "PURL": "pkg:npm/is-property@1.0.2", "UID": "db5e521224338886" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-property/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-regex@1.2.1", "Name": "is-regex", "Identifier": { "PURL": "pkg:npm/is-regex@1.2.1", "UID": "eba90f863a62e2ed" }, "Version": "1.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-regex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-set@2.0.3", "Name": "is-set", "Identifier": { "PURL": "pkg:npm/is-set@2.0.3", "UID": "47ba41c369a36da" }, "Version": "2.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-set/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-shared-array-buffer@1.0.4", "Name": "is-shared-array-buffer", "Identifier": { "PURL": "pkg:npm/is-shared-array-buffer@1.0.4", "UID": "dc5147efac597189" }, "Version": "1.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-shared-array-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-string@1.1.1", "Name": "is-string", "Identifier": { "PURL": "pkg:npm/is-string@1.1.1", "UID": "58bc8909a423a862" }, "Version": "1.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-string/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-symbol@1.1.1", "Name": "is-symbol", "Identifier": { "PURL": "pkg:npm/is-symbol@1.1.1", "UID": "f254d87dca0ce4ef" }, "Version": "1.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-symbol/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-typed-array@1.1.15", "Name": "is-typed-array", "Identifier": { "PURL": "pkg:npm/is-typed-array@1.1.15", "UID": "965d1cdceeff7195" }, "Version": "1.1.15", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-typed-array/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-weakmap@2.0.2", "Name": "is-weakmap", "Identifier": { "PURL": "pkg:npm/is-weakmap@2.0.2", "UID": "4bca8161613d0844" }, "Version": "2.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-weakmap/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-weakref@1.1.1", "Name": "is-weakref", "Identifier": { "PURL": "pkg:npm/is-weakref@1.1.1", "UID": "cf472d264921f04" }, "Version": "1.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-weakref/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-weakset@2.0.4", "Name": "is-weakset", "Identifier": { "PURL": "pkg:npm/is-weakset@2.0.4", "UID": "5af56647411edaae" }, "Version": "2.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-weakset/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-wsl@2.2.0", "Name": "is-wsl", "Identifier": { "PURL": "pkg:npm/is-wsl@2.2.0", "UID": "bfbef1bd861c21" }, "Version": "2.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/is-wsl/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "isarray@0.0.1", "Name": "isarray", "Identifier": { "PURL": "pkg:npm/isarray@0.0.1", "UID": "59e9abca61c79c51" }, "Version": "0.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/barse/node_modules/isarray/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "isarray@1.0.0", "Name": "isarray", "Identifier": { "PURL": "pkg:npm/isarray@1.0.0", "UID": "2bd6814c6cd9e032" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/string-to-stream/node_modules/isarray/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "isarray@2.0.5", "Name": "isarray", "Identifier": { "PURL": "pkg:npm/isarray@2.0.5", "UID": "baa08f1bf73d7a47" }, "Version": "2.0.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/isarray/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "isemail@3.2.0", "Name": "isemail", "Identifier": { "PURL": "pkg:npm/isemail@3.2.0", "UID": "5f9ba3ef771a1939" }, "Version": "3.2.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/isemail/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "isexe@2.0.0", "Name": "isexe", "Identifier": { "PURL": "pkg:npm/isexe@2.0.0", "UID": "fea1f77ba92eb62a" }, "Version": "2.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/isexe/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "isexe@2.0.0", "Name": "isexe", "Identifier": { "PURL": "pkg:npm/isexe@2.0.0", "UID": "7ef0cf39565c06a4" }, "Version": "2.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/isexe/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "isexe@3.1.1", "Name": "isexe", "Identifier": { "PURL": "pkg:npm/isexe@3.1.1", "UID": "3c9cce3302d2a359" }, "Version": "3.1.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/which/node_modules/isexe/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "isomorphic-ws@5.0.0", "Name": "isomorphic-ws", "Identifier": { "PURL": "pkg:npm/isomorphic-ws@5.0.0", "UID": "131e3c0fff1a9383" }, "Version": "5.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/isomorphic-ws/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "jackspeak@2.3.6", "Name": "jackspeak", "Identifier": { "PURL": "pkg:npm/jackspeak@2.3.6", "UID": "6f6099874c899029" }, "Version": "2.3.6", "Licenses": [ "BlueOak-1.0.0" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/jackspeak/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "jackspeak@3.4.3", "Name": "jackspeak", "Identifier": { "PURL": "pkg:npm/jackspeak@3.4.3", "UID": "4b6bf3f259efaf09" }, "Version": "3.4.3", "Licenses": [ "BlueOak-1.0.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/jackspeak/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "joi@14.3.1", "Name": "joi", "Identifier": { "PURL": "pkg:npm/joi@14.3.1", "UID": "2bee501f75b74ae7" }, "Version": "14.3.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/joi/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "jose@4.15.9", "Name": "jose", "Identifier": { "PURL": "pkg:npm/jose@4.15.9", "UID": "8134731b35f241e9" }, "Version": "4.15.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/jose/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "js-md4@0.3.2", "Name": "js-md4", "Identifier": { "PURL": "pkg:npm/js-md4@0.3.2", "UID": "a65682eb36b6963a" }, "Version": "0.3.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/js-md4/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "js-sdsl@4.3.0", "Name": "js-sdsl", "Identifier": { "PURL": "pkg:npm/js-sdsl@4.3.0", "UID": "d521093dd0ace9d0" }, "Version": "4.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/js-sdsl/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "jsbi@4.3.2", "Name": "jsbi", "Identifier": { "PURL": "pkg:npm/jsbi@4.3.2", "UID": "9aaeca2dfb168808" }, "Version": "4.3.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/jsbi/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "jsbn@1.1.0", "Name": "jsbn", "Identifier": { "PURL": "pkg:npm/jsbn@1.1.0", "UID": "8df8eb9cd4ab9596" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/jsbn/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "jsesc@3.0.2", "Name": "jsesc", "Identifier": { "PURL": "pkg:npm/jsesc@3.0.2", "UID": "9fbc3fcb4c690959" }, "Version": "3.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/jsesc/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "json-buffer@3.0.1", "Name": "json-buffer", "Identifier": { "PURL": "pkg:npm/json-buffer@3.0.1", "UID": "3c49d43779033dae" }, "Version": "3.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/json-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "json-parse-even-better-errors@3.0.1", "Name": "json-parse-even-better-errors", "Identifier": { "PURL": "pkg:npm/json-parse-even-better-errors@3.0.1", "UID": "c8d36383f7fd3030" }, "Version": "3.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/json-parse-even-better-errors/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "json-stringify-nice@1.1.4", "Name": "json-stringify-nice", "Identifier": { "PURL": "pkg:npm/json-stringify-nice@1.1.4", "UID": "c5c27ed2359935d9" }, "Version": "1.1.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/json-stringify-nice/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "jsonata@2.1.0", "Name": "jsonata", "Identifier": { "PURL": "pkg:npm/jsonata@2.1.0", "UID": "903114966fd5be44" }, "Version": "2.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/jsonata/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "jsonparse@1.3.1", "Name": "jsonparse", "Identifier": { "PURL": "pkg:npm/jsonparse@1.3.1", "UID": "6d24ba846346e57e" }, "Version": "1.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/jsonparse/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "jsonwebtoken@9.0.2", "Name": "jsonwebtoken", "Identifier": { "PURL": "pkg:npm/jsonwebtoken@9.0.2", "UID": "a57e57801436e453" }, "Version": "9.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/jsonwebtoken/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "just-diff@6.0.2", "Name": "just-diff", "Identifier": { "PURL": "pkg:npm/just-diff@6.0.2", "UID": "c6c2fd84314937b7" }, "Version": "6.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/just-diff/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "just-diff-apply@5.5.0", "Name": "just-diff-apply", "Identifier": { "PURL": "pkg:npm/just-diff-apply@5.5.0", "UID": "f52effebae09b036" }, "Version": "5.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/just-diff-apply/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "just-performance@4.3.0", "Name": "just-performance", "Identifier": { "PURL": "pkg:npm/just-performance@4.3.0", "UID": "e0a825b686e0ca56" }, "Version": "4.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/just-performance/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "jwa@1.4.2", "Name": "jwa", "Identifier": { "PURL": "pkg:npm/jwa@1.4.2", "UID": "e381b73d63d87f8e" }, "Version": "1.4.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/jwa/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "jwa@2.0.1", "Name": "jwa", "Identifier": { "PURL": "pkg:npm/jwa@2.0.1", "UID": "90c853a3da328fa1" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/identity/node_modules/jwa/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "jws@3.2.2", "Name": "jws", "Identifier": { "PURL": "pkg:npm/jws@3.2.2", "UID": "38f9df3df1965732" }, "Version": "3.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/jws/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "jws@4.0.0", "Name": "jws", "Identifier": { "PURL": "pkg:npm/jws@4.0.0", "UID": "77daadecbca8b42c" }, "Version": "4.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@azure/identity/node_modules/jws/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "jwt-decode@3.1.2", "Name": "jwt-decode", "Identifier": { "PURL": "pkg:npm/jwt-decode@3.1.2", "UID": "6086abfc97d6df3d" }, "Version": "3.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/jwt-decode/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "kafkajs@2.2.4", "Name": "kafkajs", "Identifier": { "PURL": "pkg:npm/kafkajs@2.2.4", "UID": "65b6cda5ab22dea8" }, "Version": "2.2.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/kafkajs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "keyv@4.5.4", "Name": "keyv", "Identifier": { "PURL": "pkg:npm/keyv@4.5.4", "UID": "42200ab97545055" }, "Version": "4.5.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/keyv/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "knex@2.4.2", "Name": "knex", "Identifier": { "PURL": "pkg:npm/knex@2.4.2", "UID": "fd66d9a7b50c5de3" }, "Version": "2.4.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/knex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "leven@2.1.0", "Name": "leven", "Identifier": { "PURL": "pkg:npm/leven@2.1.0", "UID": "e725c10d12b53c53" }, "Version": "2.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/commist/node_modules/leven/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmaccess@8.0.5", "Name": "libnpmaccess", "Identifier": { "PURL": "pkg:npm/libnpmaccess@8.0.5", "UID": "fbdbf103a24bdd19" }, "Version": "8.0.5", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmaccess/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmdiff@6.1.1", "Name": "libnpmdiff", "Identifier": { "PURL": "pkg:npm/libnpmdiff@6.1.1", "UID": "7f28a3607a733556" }, "Version": "6.1.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmdiff/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmexec@8.1.0", "Name": "libnpmexec", "Identifier": { "PURL": "pkg:npm/libnpmexec@8.1.0", "UID": "5dc9a0a007a46400" }, "Version": "8.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmexec/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmfund@5.0.9", "Name": "libnpmfund", "Identifier": { "PURL": "pkg:npm/libnpmfund@5.0.9", "UID": "c5cc1bf78fb6b1ef" }, "Version": "5.0.9", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmfund/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmhook@10.0.4", "Name": "libnpmhook", "Identifier": { "PURL": "pkg:npm/libnpmhook@10.0.4", "UID": "719442f471437794" }, "Version": "10.0.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmhook/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmorg@6.0.5", "Name": "libnpmorg", "Identifier": { "PURL": "pkg:npm/libnpmorg@6.0.5", "UID": "9e1dcd6f5851573" }, "Version": "6.0.5", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmorg/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmpack@7.0.1", "Name": "libnpmpack", "Identifier": { "PURL": "pkg:npm/libnpmpack@7.0.1", "UID": "b7dc4c269e774812" }, "Version": "7.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmpack/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmpublish@9.0.7", "Name": "libnpmpublish", "Identifier": { "PURL": "pkg:npm/libnpmpublish@9.0.7", "UID": "6f696c2ed000a686" }, "Version": "9.0.7", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmpublish/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmsearch@7.0.4", "Name": "libnpmsearch", "Identifier": { "PURL": "pkg:npm/libnpmsearch@7.0.4", "UID": "7e22b13ea98a7ec" }, "Version": "7.0.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmsearch/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmteam@6.0.4", "Name": "libnpmteam", "Identifier": { "PURL": "pkg:npm/libnpmteam@6.0.4", "UID": "dbfe371f53f346cf" }, "Version": "6.0.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmteam/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmversion@6.0.1", "Name": "libnpmversion", "Identifier": { "PURL": "pkg:npm/libnpmversion@6.0.1", "UID": "27543a5a8402a71e" }, "Version": "6.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmversion/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "limiter@2.1.0", "Name": "limiter", "Identifier": { "PURL": "pkg:npm/limiter@2.1.0", "UID": "2258110f252ac8a4" }, "Version": "2.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/limiter/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "liquidjs@10.22.0", "Name": "liquidjs", "Identifier": { "PURL": "pkg:npm/liquidjs@10.22.0", "UID": "2131eaa43ca895c3" }, "Version": "10.22.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/liquidjs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ljharb-monorepo-symlink-test@0.0.0", "Name": "ljharb-monorepo-symlink-test", "Identifier": { "PURL": "pkg:npm/ljharb-monorepo-symlink-test@0.0.0", "UID": "2cf014c84f3a66e8" }, "Version": "0.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/resolve/test/resolver/multirepo/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lodash@4.17.21", "Name": "lodash", "Identifier": { "PURL": "pkg:npm/lodash@4.17.21", "UID": "d36399f819217b44" }, "Version": "4.17.21", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/lodash/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lodash.camelcase@4.3.0", "Name": "lodash.camelcase", "Identifier": { "PURL": "pkg:npm/lodash.camelcase@4.3.0", "UID": "45f17cd88fe8d88f" }, "Version": "4.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/lodash.camelcase/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lodash.get@4.4.2", "Name": "lodash.get", "Identifier": { "PURL": "pkg:npm/lodash.get@4.4.2", "UID": "2b0e6d8f2025cbf" }, "Version": "4.4.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/lodash.get/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lodash.includes@4.3.0", "Name": "lodash.includes", "Identifier": { "PURL": "pkg:npm/lodash.includes@4.3.0", "UID": "c5817f30d0eb7442" }, "Version": "4.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/lodash.includes/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lodash.isboolean@3.0.3", "Name": "lodash.isboolean", "Identifier": { "PURL": "pkg:npm/lodash.isboolean@3.0.3", "UID": "f0629f20e7525a13" }, "Version": "3.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/lodash.isboolean/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lodash.isinteger@4.0.4", "Name": "lodash.isinteger", "Identifier": { "PURL": "pkg:npm/lodash.isinteger@4.0.4", "UID": "be075744ba7870fe" }, "Version": "4.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/lodash.isinteger/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lodash.isnumber@3.0.3", "Name": "lodash.isnumber", "Identifier": { "PURL": "pkg:npm/lodash.isnumber@3.0.3", "UID": "abb910dc7cf8e05b" }, "Version": "3.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/lodash.isnumber/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lodash.isplainobject@4.0.6", "Name": "lodash.isplainobject", "Identifier": { "PURL": "pkg:npm/lodash.isplainobject@4.0.6", "UID": "cdff8c217d8f280" }, "Version": "4.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/lodash.isplainobject/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lodash.isstring@4.0.1", "Name": "lodash.isstring", "Identifier": { "PURL": "pkg:npm/lodash.isstring@4.0.1", "UID": "fbbe5f83aa3923af" }, "Version": "4.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/lodash.isstring/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lodash.once@4.1.1", "Name": "lodash.once", "Identifier": { "PURL": "pkg:npm/lodash.once@4.1.1", "UID": "bbe4f678fbc14cc7" }, "Version": "4.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/lodash.once/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "long@5.2.0", "Name": "long", "Identifier": { "PURL": "pkg:npm/long@5.2.0", "UID": "a2b94414e69682a7" }, "Version": "5.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/gamedig/node_modules/long/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "long@5.3.2", "Name": "long", "Identifier": { "PURL": "pkg:npm/long@5.3.2", "UID": "de02d301d458195c" }, "Version": "5.3.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/long/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lowercase-keys@2.0.0", "Name": "lowercase-keys", "Identifier": { "PURL": "pkg:npm/lowercase-keys@2.0.0", "UID": "c8b226465646480d" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/cacheable-request/node_modules/lowercase-keys/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lowercase-keys@2.0.0", "Name": "lowercase-keys", "Identifier": { "PURL": "pkg:npm/lowercase-keys@2.0.0", "UID": "914fb1567433545d" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/responselike/node_modules/lowercase-keys/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lowercase-keys@3.0.0", "Name": "lowercase-keys", "Identifier": { "PURL": "pkg:npm/lowercase-keys@3.0.0", "UID": "42010934f1c462a7" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/lowercase-keys/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lru-cache@10.2.2", "Name": "lru-cache", "Identifier": { "PURL": "pkg:npm/lru-cache@10.2.2", "UID": "d9af7d5575515e76" }, "Version": "10.2.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/lru-cache/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lru-cache@10.4.3", "Name": "lru-cache", "Identifier": { "PURL": "pkg:npm/lru-cache@10.4.3", "UID": "ee833f92ab3b1152" }, "Version": "10.4.3", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/path-scurry/node_modules/lru-cache/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lru-cache@6.0.0", "Name": "lru-cache", "Identifier": { "PURL": "pkg:npm/lru-cache@6.0.0", "UID": "c0855496502d9a43" }, "Version": "6.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/cacache/node_modules/lru-cache/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lru-cache@6.0.0", "Name": "lru-cache", "Identifier": { "PURL": "pkg:npm/lru-cache@6.0.0", "UID": "d3c8082bed2f1376" }, "Version": "6.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/make-fetch-happen/node_modules/lru-cache/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lru-cache@6.0.0", "Name": "lru-cache", "Identifier": { "PURL": "pkg:npm/lru-cache@6.0.0", "UID": "3ed8848db38d9ac9" }, "Version": "6.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/mqtt/node_modules/lru-cache/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lru-cache@6.0.0", "Name": "lru-cache", "Identifier": { "PURL": "pkg:npm/lru-cache@6.0.0", "UID": "225591106fec6885" }, "Version": "6.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/openid-client/node_modules/lru-cache/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lru-cache@6.0.0", "Name": "lru-cache", "Identifier": { "PURL": "pkg:npm/lru-cache@6.0.0", "UID": "2f885e596464a1ad" }, "Version": "6.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/semver/node_modules/lru-cache/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lru-cache@6.0.0", "Name": "lru-cache", "Identifier": { "PURL": "pkg:npm/lru-cache@6.0.0", "UID": "450661a5c0cfd227" }, "Version": "6.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/semver/node_modules/lru-cache/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lru-cache@7.18.3", "Name": "lru-cache", "Identifier": { "PURL": "pkg:npm/lru-cache@7.18.3", "UID": "d6fde2990cd8088b" }, "Version": "7.18.3", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/named-placeholders/node_modules/lru-cache/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lru-cache@8.0.5", "Name": "lru-cache", "Identifier": { "PURL": "pkg:npm/lru-cache@8.0.5", "UID": "2876fa543cd8e120" }, "Version": "8.0.5", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/mysql2/node_modules/lru-cache/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "make-dir@3.1.0", "Name": "make-dir", "Identifier": { "PURL": "pkg:npm/make-dir@3.1.0", "UID": "1db8cfb3891053d5" }, "Version": "3.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/make-dir/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "make-fetch-happen@13.0.1", "Name": "make-fetch-happen", "Identifier": { "PURL": "pkg:npm/make-fetch-happen@13.0.1", "UID": "3cc8a4915c82b715" }, "Version": "13.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/make-fetch-happen/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "make-fetch-happen@9.1.0", "Name": "make-fetch-happen", "Identifier": { "PURL": "pkg:npm/make-fetch-happen@9.1.0", "UID": "c1c39ed0888587b7" }, "Version": "9.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/make-fetch-happen/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "math-intrinsics@1.1.0", "Name": "math-intrinsics", "Identifier": { "PURL": "pkg:npm/math-intrinsics@1.1.0", "UID": "9521d350436a6007" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/math-intrinsics/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "media-typer@0.3.0", "Name": "media-typer", "Identifier": { "PURL": "pkg:npm/media-typer@0.3.0", "UID": "9ed9a2d972d300aa" }, "Version": "0.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/media-typer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "memory-pager@1.5.0", "Name": "memory-pager", "Identifier": { "PURL": "pkg:npm/memory-pager@1.5.0", "UID": "db8daa2dc95daded" }, "Version": "1.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/memory-pager/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "merge-descriptors@1.0.3", "Name": "merge-descriptors", "Identifier": { "PURL": "pkg:npm/merge-descriptors@1.0.3", "UID": "55c9195fb6f16c8d" }, "Version": "1.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/merge-descriptors/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "methods@1.1.2", "Name": "methods", "Identifier": { "PURL": "pkg:npm/methods@1.1.2", "UID": "ec67f96c3e85de3" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/methods/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mime@1.6.0", "Name": "mime", "Identifier": { "PURL": "pkg:npm/mime@1.6.0", "UID": "a65fd45312411071" }, "Version": "1.6.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/mime/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mime-db@1.52.0", "Name": "mime-db", "Identifier": { "PURL": "pkg:npm/mime-db@1.52.0", "UID": "632bbaa12c5c1761" }, "Version": "1.52.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/mime-types/node_modules/mime-db/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mime-db@1.54.0", "Name": "mime-db", "Identifier": { "PURL": "pkg:npm/mime-db@1.54.0", "UID": "48299f91220a51b6" }, "Version": "1.54.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/mime-db/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mime-types@2.1.35", "Name": "mime-types", "Identifier": { "PURL": "pkg:npm/mime-types@2.1.35", "UID": "4c030f30aec2a2f9" }, "Version": "2.1.35", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/mime-types/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mimic-response@1.0.1", "Name": "mimic-response", "Identifier": { "PURL": "pkg:npm/mimic-response@1.0.1", "UID": "5d5bb3ee14c99052" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/mimic-response/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mimic-response@3.1.0", "Name": "mimic-response", "Identifier": { "PURL": "pkg:npm/mimic-response@3.1.0", "UID": "ba6f49d9d762755d" }, "Version": "3.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/decompress-response/node_modules/mimic-response/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minimatch@3.1.2", "Name": "minimatch", "Identifier": { "PURL": "pkg:npm/minimatch@3.1.2", "UID": "7abfc03cad2c19ec" }, "Version": "3.1.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/minimatch/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minimatch@9.0.4", "Name": "minimatch", "Identifier": { "PURL": "pkg:npm/minimatch@9.0.4", "UID": "89cbb2a5914940c7" }, "Version": "9.0.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minimatch/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minimatch@9.0.5", "Name": "minimatch", "Identifier": { "PURL": "pkg:npm/minimatch@9.0.5", "UID": "210f7f54a287e49c" }, "Version": "9.0.5", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/redbean-node/node_modules/minimatch/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minimist@1.2.6", "Name": "minimist", "Identifier": { "PURL": "pkg:npm/minimist@1.2.6", "UID": "474e3a7f10efbc3" }, "Version": "1.2.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/gamedig/node_modules/minimist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minimist@1.2.8", "Name": "minimist", "Identifier": { "PURL": "pkg:npm/minimist@1.2.8", "UID": "97aad626c742dcd5" }, "Version": "1.2.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/minimist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass@3.3.6", "Name": "minipass", "Identifier": { "PURL": "pkg:npm/minipass@3.3.6", "UID": "31501ee2399aa940" }, "Version": "3.3.6", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass@3.3.6", "Name": "minipass", "Identifier": { "PURL": "pkg:npm/minipass@3.3.6", "UID": "7efbc5baf98c8d10" }, "Version": "3.3.6", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-flush/node_modules/minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass@3.3.6", "Name": "minipass", "Identifier": { "PURL": "pkg:npm/minipass@3.3.6", "UID": "6d3b9333895aa80c" }, "Version": "3.3.6", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-json-stream/node_modules/minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass@3.3.6", "Name": "minipass", "Identifier": { "PURL": "pkg:npm/minipass@3.3.6", "UID": "b7ce61ea2292da41" }, "Version": "3.3.6", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-pipeline/node_modules/minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass@3.3.6", "Name": "minipass", "Identifier": { "PURL": "pkg:npm/minipass@3.3.6", "UID": "336c142883f370bb" }, "Version": "3.3.6", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-sized/node_modules/minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass@3.3.6", "Name": "minipass", "Identifier": { "PURL": "pkg:npm/minipass@3.3.6", "UID": "a43a88258a441aed" }, "Version": "3.3.6", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minizlib/node_modules/minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass@3.3.6", "Name": "minipass", "Identifier": { "PURL": "pkg:npm/minipass@3.3.6", "UID": "29c33a523d0dd796" }, "Version": "3.3.6", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/tar/node_modules/fs-minipass/node_modules/minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass@5.0.0", "Name": "minipass", "Identifier": { "PURL": "pkg:npm/minipass@5.0.0", "UID": "28d8b7ac8d274f1d" }, "Version": "5.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/tar/node_modules/minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass@5.0.0", "Name": "minipass", "Identifier": { "PURL": "pkg:npm/minipass@5.0.0", "UID": "f4f281f3bfde165a" }, "Version": "5.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/tar/node_modules/minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass@7.0.4", "Name": "minipass", "Identifier": { "PURL": "pkg:npm/minipass@7.0.4", "UID": "425499643a0dd9eb" }, "Version": "7.0.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass@7.1.2", "Name": "minipass", "Identifier": { "PURL": "pkg:npm/minipass@7.1.2", "UID": "a8032cda9c74764d" }, "Version": "7.1.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/path-scurry/node_modules/minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass@7.1.2", "Name": "minipass", "Identifier": { "PURL": "pkg:npm/minipass@7.1.2", "UID": "ec975ff1acb7af73" }, "Version": "7.1.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/redbean-node/node_modules/minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-collect@1.0.2", "Name": "minipass-collect", "Identifier": { "PURL": "pkg:npm/minipass-collect@1.0.2", "UID": "e9eeee448dc29365" }, "Version": "1.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/minipass-collect/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-collect@2.0.1", "Name": "minipass-collect", "Identifier": { "PURL": "pkg:npm/minipass-collect@2.0.1", "UID": "c5f716d9c0ec4b92" }, "Version": "2.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-collect/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-fetch@1.4.1", "Name": "minipass-fetch", "Identifier": { "PURL": "pkg:npm/minipass-fetch@1.4.1", "UID": "9d69a7c9d8d69be3" }, "Version": "1.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/minipass-fetch/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-fetch@3.0.4", "Name": "minipass-fetch", "Identifier": { "PURL": "pkg:npm/minipass-fetch@3.0.4", "UID": "db1a0a5653fbc187" }, "Version": "3.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-fetch/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-flush@1.0.5", "Name": "minipass-flush", "Identifier": { "PURL": "pkg:npm/minipass-flush@1.0.5", "UID": "c16c310195b28d22" }, "Version": "1.0.5", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/minipass-flush/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-flush@1.0.5", "Name": "minipass-flush", "Identifier": { "PURL": "pkg:npm/minipass-flush@1.0.5", "UID": "4e155f4804d5b01e" }, "Version": "1.0.5", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-flush/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-json-stream@1.0.1", "Name": "minipass-json-stream", "Identifier": { "PURL": "pkg:npm/minipass-json-stream@1.0.1", "UID": "eb3fcd0675014856" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-json-stream/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-pipeline@1.2.4", "Name": "minipass-pipeline", "Identifier": { "PURL": "pkg:npm/minipass-pipeline@1.2.4", "UID": "624c5a12c057a503" }, "Version": "1.2.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/minipass-pipeline/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-pipeline@1.2.4", "Name": "minipass-pipeline", "Identifier": { "PURL": "pkg:npm/minipass-pipeline@1.2.4", "UID": "f9ca1e5f3449b3dc" }, "Version": "1.2.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-pipeline/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-sized@1.0.3", "Name": "minipass-sized", "Identifier": { "PURL": "pkg:npm/minipass-sized@1.0.3", "UID": "5a94052e4a7f4200" }, "Version": "1.0.3", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/minipass-sized/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-sized@1.0.3", "Name": "minipass-sized", "Identifier": { "PURL": "pkg:npm/minipass-sized@1.0.3", "UID": "e396142656705cf8" }, "Version": "1.0.3", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-sized/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minizlib@2.1.2", "Name": "minizlib", "Identifier": { "PURL": "pkg:npm/minizlib@2.1.2", "UID": "61d786286a434cfe" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/minizlib/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minizlib@2.1.2", "Name": "minizlib", "Identifier": { "PURL": "pkg:npm/minizlib@2.1.2", "UID": "2c43c59ab6db6987" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minizlib/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mkdirp@1.0.4", "Name": "mkdirp", "Identifier": { "PURL": "pkg:npm/mkdirp@1.0.4", "UID": "a4bf7e503185a329" }, "Version": "1.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/mkdirp/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mkdirp@1.0.4", "Name": "mkdirp", "Identifier": { "PURL": "pkg:npm/mkdirp@1.0.4", "UID": "6597689245d6c18d" }, "Version": "1.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/mkdirp/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mongodb@4.17.2", "Name": "mongodb", "Identifier": { "PURL": "pkg:npm/mongodb@4.17.2", "UID": "72966836aacd9822" }, "Version": "4.17.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/mongodb/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mongodb-connection-string-url@2.6.0", "Name": "mongodb-connection-string-url", "Identifier": { "PURL": "pkg:npm/mongodb-connection-string-url@2.6.0", "UID": "dfb03fbf179d50eb" }, "Version": "2.6.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/mongodb-connection-string-url/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mqtt@4.3.8", "Name": "mqtt", "Identifier": { "PURL": "pkg:npm/mqtt@4.3.8", "UID": "8f863d011372c17b" }, "Version": "4.3.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/mqtt/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mqtt-packet@6.10.0", "Name": "mqtt-packet", "Identifier": { "PURL": "pkg:npm/mqtt-packet@6.10.0", "UID": "4883dd7e036cdd74" }, "Version": "6.10.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/mqtt/node_modules/mqtt-packet/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.0.0", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.0.0", "UID": "ba506387bfc32740" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/body-parser/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.0.0", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.0.0", "UID": "264358961a888b0b" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/compression/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.0.0", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.0.0", "UID": "1d400d09c574ea9f" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/express/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.0.0", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.0.0", "UID": "b707a4b5f2561773" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/finalhandler/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.0.0", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.0.0", "UID": "565d81663e8d304c" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/send/node_modules/debug/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.1.2", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.1.2", "UID": "b8bc20877d327405" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/knex/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.1.2", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.1.2", "UID": "5e71b753ac120c1e" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/debug/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.1.3", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.1.3", "UID": "a36154e477f52d2f" }, "Version": "2.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.1.3", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.1.3", "UID": "50a140c9d554dc56" }, "Version": "2.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mssql@8.1.4", "Name": "mssql", "Identifier": { "PURL": "pkg:npm/mssql@8.1.4", "UID": "5394251ad3ea9a6d" }, "Version": "8.1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/mssql/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mute-stream@1.0.0", "Name": "mute-stream", "Identifier": { "PURL": "pkg:npm/mute-stream@1.0.0", "UID": "52aa59b27756aa54" }, "Version": "1.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/mute-stream/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mylib@0.0.0", "Name": "mylib", "Identifier": { "PURL": "pkg:npm/mylib@0.0.0", "UID": "43697a502f0f76c" }, "Version": "0.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mysql2@3.9.9", "Name": "mysql2", "Identifier": { "PURL": "pkg:npm/mysql2@3.9.9", "UID": "ff933fd321475ce" }, "Version": "3.9.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/mysql2/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "named-placeholders@1.1.3", "Name": "named-placeholders", "Identifier": { "PURL": "pkg:npm/named-placeholders@1.1.3", "UID": "2269232272f85236" }, "Version": "1.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/named-placeholders/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "nanoid@3.3.11", "Name": "nanoid", "Identifier": { "PURL": "pkg:npm/nanoid@3.3.11", "UID": "c1e14baf07a1c635" }, "Version": "3.3.11", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/nanoid/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "native-duplexpair@1.0.0", "Name": "native-duplexpair", "Identifier": { "PURL": "pkg:npm/native-duplexpair@1.0.0", "UID": "771b219c0e6fdcd0" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/native-duplexpair/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "negotiator@0.6.3", "Name": "negotiator", "Identifier": { "PURL": "pkg:npm/negotiator@0.6.3", "UID": "fc43d31ebef3cf98" }, "Version": "0.6.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/accepts/node_modules/negotiator/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "negotiator@0.6.3", "Name": "negotiator", "Identifier": { "PURL": "pkg:npm/negotiator@0.6.3", "UID": "e176c39ce0eeae44" }, "Version": "0.6.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/negotiator/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "negotiator@0.6.4", "Name": "negotiator", "Identifier": { "PURL": "pkg:npm/negotiator@0.6.4", "UID": "e5725dfb0a2e129d" }, "Version": "0.6.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/negotiator/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "node-abort-controller@3.1.1", "Name": "node-abort-controller", "Identifier": { "PURL": "pkg:npm/node-abort-controller@3.1.1", "UID": "cdb2295348914300" }, "Version": "3.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/node-abort-controller/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "node-addon-api@4.3.0", "Name": "node-addon-api", "Identifier": { "PURL": "pkg:npm/node-addon-api@4.3.0", "UID": "71682fff4de89c8f" }, "Version": "4.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/node-addon-api/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "node-cloudflared-tunnel@1.0.10", "Name": "node-cloudflared-tunnel", "Identifier": { "PURL": "pkg:npm/node-cloudflared-tunnel@1.0.10", "UID": "551e74747933b5dc" }, "Version": "1.0.10", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/node-cloudflared-tunnel/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "node-fetch@2.7.0", "Name": "node-fetch", "Identifier": { "PURL": "pkg:npm/node-fetch@2.7.0", "UID": "41fbdf73a9fdcef9" }, "Version": "2.7.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/node-fetch/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "node-gyp@10.1.0", "Name": "node-gyp", "Identifier": { "PURL": "pkg:npm/node-gyp@10.1.0", "UID": "4400fca3fdf1564f" }, "Version": "10.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/node-gyp/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "node-gyp@8.4.1", "Name": "node-gyp", "Identifier": { "PURL": "pkg:npm/node-gyp@8.4.1", "UID": "58c155bfdfcf941c" }, "Version": "8.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/node-gyp/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "node-radius-client@1.0.0", "Name": "node-radius-client", "Identifier": { "PURL": "pkg:npm/node-radius-client@1.0.0", "UID": "2141eac3a2dea603" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/node-radius-client/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "node-radius-utils@1.2.0", "Name": "node-radius-utils", "Identifier": { "PURL": "pkg:npm/node-radius-utils@1.2.0", "UID": "68b4e406515c4b25" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/node-radius-utils/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "nodemailer@6.9.16", "Name": "nodemailer", "Identifier": { "PURL": "pkg:npm/nodemailer@6.9.16", "UID": "4c16548e727bdc6b" }, "Version": "6.9.16", "Licenses": [ "MIT-0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/nodemailer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "nopt@5.0.0", "Name": "nopt", "Identifier": { "PURL": "pkg:npm/nopt@5.0.0", "UID": "6f0a03a8d7b1551d" }, "Version": "5.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/nopt/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "nopt@7.2.0", "Name": "nopt", "Identifier": { "PURL": "pkg:npm/nopt@7.2.0", "UID": "91c6999b17319261" }, "Version": "7.2.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/nopt/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "normalize-package-data@6.0.0", "Name": "normalize-package-data", "Identifier": { "PURL": "pkg:npm/normalize-package-data@6.0.0", "UID": "40ca116e112f6cbe" }, "Version": "6.0.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/normalize-package-data/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "normalize-url@6.1.0", "Name": "normalize-url", "Identifier": { "PURL": "pkg:npm/normalize-url@6.1.0", "UID": "26345c0a714fbf2b" }, "Version": "6.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/normalize-url/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "nostr-tools@1.17.0", "Name": "nostr-tools", "Identifier": { "PURL": "pkg:npm/nostr-tools@1.17.0", "UID": "a36c6657569601b4" }, "Version": "1.17.0", "Licenses": [ "Unlicense" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/nostr-tools/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "notp@2.0.3", "Name": "notp", "Identifier": { "PURL": "pkg:npm/notp@2.0.3", "UID": "4d178942afe94abd" }, "Version": "2.0.3", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/notp/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm@10.7.0", "Name": "npm", "Identifier": { "PURL": "pkg:npm/npm@10.7.0", "UID": "1480de81a5c03772" }, "Version": "10.7.0", "Licenses": [ "Artistic-2.0" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm-audit-report@5.0.0", "Name": "npm-audit-report", "Identifier": { "PURL": "pkg:npm/npm-audit-report@5.0.0", "UID": "46ed529c91e014ab" }, "Version": "5.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-audit-report/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm-bundled@3.0.0", "Name": "npm-bundled", "Identifier": { "PURL": "pkg:npm/npm-bundled@3.0.0", "UID": "5f3654b0a312a150" }, "Version": "3.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-bundled/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm-install-checks@6.3.0", "Name": "npm-install-checks", "Identifier": { "PURL": "pkg:npm/npm-install-checks@6.3.0", "UID": "7364fb20c7b12e14" }, "Version": "6.3.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-install-checks/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm-normalize-package-bin@3.0.1", "Name": "npm-normalize-package-bin", "Identifier": { "PURL": "pkg:npm/npm-normalize-package-bin@3.0.1", "UID": "156a297538acda10" }, "Version": "3.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-normalize-package-bin/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm-package-arg@11.0.2", "Name": "npm-package-arg", "Identifier": { "PURL": "pkg:npm/npm-package-arg@11.0.2", "UID": "1986326a07ef83d0" }, "Version": "11.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-package-arg/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm-packlist@8.0.2", "Name": "npm-packlist", "Identifier": { "PURL": "pkg:npm/npm-packlist@8.0.2", "UID": "808987e3679fb7bb" }, "Version": "8.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-packlist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm-pick-manifest@9.0.0", "Name": "npm-pick-manifest", "Identifier": { "PURL": "pkg:npm/npm-pick-manifest@9.0.0", "UID": "9b9aeba8efda394f" }, "Version": "9.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-pick-manifest/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm-profile@9.0.2", "Name": "npm-profile", "Identifier": { "PURL": "pkg:npm/npm-profile@9.0.2", "UID": "8bbb9d2a4d00b31b" }, "Version": "9.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-profile/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm-registry-fetch@17.0.0", "Name": "npm-registry-fetch", "Identifier": { "PURL": "pkg:npm/npm-registry-fetch@17.0.0", "UID": "e332fb888bfc5dd8" }, "Version": "17.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-registry-fetch/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm-user-validate@2.0.0", "Name": "npm-user-validate", "Identifier": { "PURL": "pkg:npm/npm-user-validate@2.0.0", "UID": "a2972c4a795db917" }, "Version": "2.0.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-user-validate/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npmlog@5.0.1", "Name": "npmlog", "Identifier": { "PURL": "pkg:npm/npmlog@5.0.1", "UID": "e2a64b5044650da2" }, "Version": "5.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/npmlog/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npmlog@6.0.2", "Name": "npmlog", "Identifier": { "PURL": "pkg:npm/npmlog@6.0.2", "UID": "94f760e77712647b" }, "Version": "6.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/node-gyp/node_modules/npmlog/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "nth-check@2.1.1", "Name": "nth-check", "Identifier": { "PURL": "pkg:npm/nth-check@2.1.1", "UID": "da96340e9ae0739a" }, "Version": "2.1.1", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/nth-check/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "number-allocator@1.0.14", "Name": "number-allocator", "Identifier": { "PURL": "pkg:npm/number-allocator@1.0.14", "UID": "d63b7451b6096c15" }, "Version": "1.0.14", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/number-allocator/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "nw-pre-gyp-module-test@0.0.1", "Name": "nw-pre-gyp-module-test", "Identifier": { "PURL": "pkg:npm/nw-pre-gyp-module-test@0.0.1", "UID": "3b6b688cbcbc5de1" }, "Version": "0.0.1", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@mapbox/node-pre-gyp/lib/util/nw-pre-gyp/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "object-assign@4.1.1", "Name": "object-assign", "Identifier": { "PURL": "pkg:npm/object-assign@4.1.1", "UID": "90f77b0b136af73" }, "Version": "4.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/object-assign/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "object-hash@2.2.0", "Name": "object-hash", "Identifier": { "PURL": "pkg:npm/object-hash@2.2.0", "UID": "2108c9c3937ef1a9" }, "Version": "2.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/object-hash/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "object-inspect@1.13.4", "Name": "object-inspect", "Identifier": { "PURL": "pkg:npm/object-inspect@1.13.4", "UID": "f8800bce9d5adb57" }, "Version": "1.13.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/object-inspect/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "object-keys@1.1.1", "Name": "object-keys", "Identifier": { "PURL": "pkg:npm/object-keys@1.1.1", "UID": "2beb3f51a4240146" }, "Version": "1.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/object-keys/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "object.assign@4.1.7", "Name": "object.assign", "Identifier": { "PURL": "pkg:npm/object.assign@4.1.7", "UID": "7e262b9482a3bca4" }, "Version": "4.1.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/object.assign/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "oidc-token-hash@5.1.1", "Name": "oidc-token-hash", "Identifier": { "PURL": "pkg:npm/oidc-token-hash@5.1.1", "UID": "a7ce10db498bf4de" }, "Version": "5.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/oidc-token-hash/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "on-finished@2.4.1", "Name": "on-finished", "Identifier": { "PURL": "pkg:npm/on-finished@2.4.1", "UID": "6bd750adc27f983d" }, "Version": "2.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/on-finished/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "on-headers@1.1.0", "Name": "on-headers", "Identifier": { "PURL": "pkg:npm/on-headers@1.1.0", "UID": "2ef8850cc3e966d3" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/on-headers/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "once@1.4.0", "Name": "once", "Identifier": { "PURL": "pkg:npm/once@1.4.0", "UID": "f2ad1313aa88f7de" }, "Version": "1.4.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/once/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "open@8.4.2", "Name": "open", "Identifier": { "PURL": "pkg:npm/open@8.4.2", "UID": "3dc8f5d7becf2e3c" }, "Version": "8.4.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/open/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "openid-client@5.7.1", "Name": "openid-client", "Identifier": { "PURL": "pkg:npm/openid-client@5.7.1", "UID": "efebfde79c04c3a5" }, "Version": "5.7.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/openid-client/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "own-keys@1.0.1", "Name": "own-keys", "Identifier": { "PURL": "pkg:npm/own-keys@1.0.1", "UID": "56973c9897228a1e" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/own-keys/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "p-cancelable@3.0.0", "Name": "p-cancelable", "Identifier": { "PURL": "pkg:npm/p-cancelable@3.0.0", "UID": "17fb36432695b316" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/p-cancelable/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "p-map@4.0.0", "Name": "p-map", "Identifier": { "PURL": "pkg:npm/p-map@4.0.0", "UID": "aad78c2bb567f4a2" }, "Version": "4.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/p-map/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "p-map@4.0.0", "Name": "p-map", "Identifier": { "PURL": "pkg:npm/p-map@4.0.0", "UID": "a5b7322783b6c361" }, "Version": "4.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/p-map/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "pacote@18.0.3", "Name": "pacote", "Identifier": { "PURL": "pkg:npm/pacote@18.0.3", "UID": "aba838c330f2b14f" }, "Version": "18.0.3", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/pacote/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "parse-conflict-json@3.0.1", "Name": "parse-conflict-json", "Identifier": { "PURL": "pkg:npm/parse-conflict-json@3.0.1", "UID": "ff8370b8e382dcce" }, "Version": "3.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/parse-conflict-json/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "parse5@6.0.1", "Name": "parse5", "Identifier": { "PURL": "pkg:npm/parse5@6.0.1", "UID": "80dc02643479c241" }, "Version": "6.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/gamedig/node_modules/parse5/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "parse5@7.3.0", "Name": "parse5", "Identifier": { "PURL": "pkg:npm/parse5@7.3.0", "UID": "1e8fc6e58dde71" }, "Version": "7.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/parse5/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "parse5-htmlparser2-tree-adapter@6.0.1", "Name": "parse5-htmlparser2-tree-adapter", "Identifier": { "PURL": "pkg:npm/parse5-htmlparser2-tree-adapter@6.0.1", "UID": "f8deec84fc7ae2f4" }, "Version": "6.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/gamedig/node_modules/parse5-htmlparser2-tree-adapter/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "parse5-htmlparser2-tree-adapter@7.1.0", "Name": "parse5-htmlparser2-tree-adapter", "Identifier": { "PURL": "pkg:npm/parse5-htmlparser2-tree-adapter@7.1.0", "UID": "1828d4822d23a303" }, "Version": "7.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/parse5-htmlparser2-tree-adapter/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "parseurl@1.3.3", "Name": "parseurl", "Identifier": { "PURL": "pkg:npm/parseurl@1.3.3", "UID": "c072101b842465b4" }, "Version": "1.3.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/parseurl/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "password-hash@1.2.2", "Name": "password-hash", "Identifier": { "PURL": "pkg:npm/password-hash@1.2.2", "UID": "873f53e1e2efc284" }, "Version": "1.2.2", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/password-hash/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "path-is-absolute@1.0.1", "Name": "path-is-absolute", "Identifier": { "PURL": "pkg:npm/path-is-absolute@1.0.1", "UID": "786383743bee48e" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/path-is-absolute/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "path-key@3.1.1", "Name": "path-key", "Identifier": { "PURL": "pkg:npm/path-key@3.1.1", "UID": "f62ea3b47a914a85" }, "Version": "3.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/path-key/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "path-key@3.1.1", "Name": "path-key", "Identifier": { "PURL": "pkg:npm/path-key@3.1.1", "UID": "9d7c1eb3094d0711" }, "Version": "3.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/path-key/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "path-parse@1.0.7", "Name": "path-parse", "Identifier": { "PURL": "pkg:npm/path-parse@1.0.7", "UID": "e1cf5ccc427ee052" }, "Version": "1.0.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/path-parse/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "path-scurry@1.10.2", "Name": "path-scurry", "Identifier": { "PURL": "pkg:npm/path-scurry@1.10.2", "UID": "56efd8323874deac" }, "Version": "1.10.2", "Licenses": [ "BlueOak-1.0.0" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/path-scurry/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "path-scurry@1.11.1", "Name": "path-scurry", "Identifier": { "PURL": "pkg:npm/path-scurry@1.11.1", "UID": "be518c581a7a9948" }, "Version": "1.11.1", "Licenses": [ "BlueOak-1.0.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/path-scurry/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "path-to-regexp@0.1.12", "Name": "path-to-regexp", "Identifier": { "PURL": "pkg:npm/path-to-regexp@0.1.12", "UID": "328c48f06cf08253" }, "Version": "0.1.12", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/path-to-regexp/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "pg@8.11.6", "Name": "pg", "Identifier": { "PURL": "pkg:npm/pg@8.11.6", "UID": "b6afa46807058423" }, "Version": "8.11.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/pg/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "pg-cloudflare@1.2.7", "Name": "pg-cloudflare", "Identifier": { "PURL": "pkg:npm/pg-cloudflare@1.2.7", "UID": "cbd49c4a58771325" }, "Version": "1.2.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/pg-cloudflare/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "pg-connection-string@2.5.0", "Name": "pg-connection-string", "Identifier": { "PURL": "pkg:npm/pg-connection-string@2.5.0", "UID": "e1e0395d62e56864" }, "Version": "2.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/knex/node_modules/pg-connection-string/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "pg-connection-string@2.6.4", "Name": "pg-connection-string", "Identifier": { "PURL": "pkg:npm/pg-connection-string@2.6.4", "UID": "e123a63cff331dc2" }, "Version": "2.6.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/pg-connection-string/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "pg-int8@1.0.1", "Name": "pg-int8", "Identifier": { "PURL": "pkg:npm/pg-int8@1.0.1", "UID": "27388dde39fc4004" }, "Version": "1.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/pg-int8/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "pg-pool@3.10.1", "Name": "pg-pool", "Identifier": { "PURL": "pkg:npm/pg-pool@3.10.1", "UID": "3163bb7f311e7e05" }, "Version": "3.10.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/pg-pool/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "pg-protocol@1.10.3", "Name": "pg-protocol", "Identifier": { "PURL": "pkg:npm/pg-protocol@1.10.3", "UID": "148dbfeb88281004" }, "Version": "1.10.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/pg-protocol/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "pg-types@2.2.0", "Name": "pg-types", "Identifier": { "PURL": "pkg:npm/pg-types@2.2.0", "UID": "14d86273095f6c64" }, "Version": "2.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/pg-types/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "pgpass@1.0.5", "Name": "pgpass", "Identifier": { "PURL": "pkg:npm/pgpass@1.0.5", "UID": "5458420b83e9dc8e" }, "Version": "1.0.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/pgpass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "pkginfo@0.4.1", "Name": "pkginfo", "Identifier": { "PURL": "pkg:npm/pkginfo@0.4.1", "UID": "775fcd6d14c131bc" }, "Version": "0.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/pkginfo/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "playwright-core@1.35.1", "Name": "playwright-core", "Identifier": { "PURL": "pkg:npm/playwright-core@1.35.1", "UID": "d48dbeeaf2e5238c" }, "Version": "1.35.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/playwright-core/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "possible-typed-array-names@1.1.0", "Name": "possible-typed-array-names", "Identifier": { "PURL": "pkg:npm/possible-typed-array-names@1.1.0", "UID": "35333bcd82213203" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/possible-typed-array-names/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "postcss-selector-parser@6.0.16", "Name": "postcss-selector-parser", "Identifier": { "PURL": "pkg:npm/postcss-selector-parser@6.0.16", "UID": "97a533e1590c4fed" }, "Version": "6.0.16", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/postcss-selector-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "postgres-array@2.0.0", "Name": "postgres-array", "Identifier": { "PURL": "pkg:npm/postgres-array@2.0.0", "UID": "605fdbb53fcc3f95" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/postgres-array/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "postgres-bytea@1.0.0", "Name": "postgres-bytea", "Identifier": { "PURL": "pkg:npm/postgres-bytea@1.0.0", "UID": "c6572567dc53a671" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/postgres-bytea/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "postgres-date@1.0.7", "Name": "postgres-date", "Identifier": { "PURL": "pkg:npm/postgres-date@1.0.7", "UID": "1e97cc11632c9375" }, "Version": "1.0.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/postgres-date/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "postgres-interval@1.2.0", "Name": "postgres-interval", "Identifier": { "PURL": "pkg:npm/postgres-interval@1.2.0", "UID": "c4e6f523e8df891" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/postgres-interval/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "proc-log@3.0.0", "Name": "proc-log", "Identifier": { "PURL": "pkg:npm/proc-log@3.0.0", "UID": "994d5e887f2ed3b2" }, "Version": "3.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/node-gyp/node_modules/proc-log/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "proc-log@4.2.0", "Name": "proc-log", "Identifier": { "PURL": "pkg:npm/proc-log@4.2.0", "UID": "7ede24858254cf3" }, "Version": "4.2.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/proc-log/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "process-nextick-args@2.0.1", "Name": "process-nextick-args", "Identifier": { "PURL": "pkg:npm/process-nextick-args@2.0.1", "UID": "7ce5d6172c623628" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/process-nextick-args/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "proggy@2.0.0", "Name": "proggy", "Identifier": { "PURL": "pkg:npm/proggy@2.0.0", "UID": "a6b3f21556a11096" }, "Version": "2.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/proggy/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "prom-client@13.2.0", "Name": "prom-client", "Identifier": { "PURL": "pkg:npm/prom-client@13.2.0", "UID": "8fd1f5bd96d2533c" }, "Version": "13.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/prom-client/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "prometheus-api-metrics@3.2.2", "Name": "prometheus-api-metrics", "Identifier": { "PURL": "pkg:npm/prometheus-api-metrics@3.2.2", "UID": "9ec0663c2c6cada5" }, "Version": "3.2.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/prometheus-api-metrics/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "promise-all-reject-late@1.0.1", "Name": "promise-all-reject-late", "Identifier": { "PURL": "pkg:npm/promise-all-reject-late@1.0.1", "UID": "759c5c0dfe22841e" }, "Version": "1.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/promise-all-reject-late/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "promise-call-limit@3.0.1", "Name": "promise-call-limit", "Identifier": { "PURL": "pkg:npm/promise-call-limit@3.0.1", "UID": "e301be1f8cd9bad5" }, "Version": "3.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/promise-call-limit/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "promise-inflight@1.0.1", "Name": "promise-inflight", "Identifier": { "PURL": "pkg:npm/promise-inflight@1.0.1", "UID": "49488d2f27fcb070" }, "Version": "1.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/promise-inflight/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "promise-inflight@1.0.1", "Name": "promise-inflight", "Identifier": { "PURL": "pkg:npm/promise-inflight@1.0.1", "UID": "cf118bb97f845acb" }, "Version": "1.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/promise-inflight/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "promise-retry@2.0.1", "Name": "promise-retry", "Identifier": { "PURL": "pkg:npm/promise-retry@2.0.1", "UID": "3c1155108b51908c" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/promise-retry/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "promise-retry@2.0.1", "Name": "promise-retry", "Identifier": { "PURL": "pkg:npm/promise-retry@2.0.1", "UID": "6e1f780ae52b5609" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/promise-retry/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "promisify-child-process@4.1.2", "Name": "promisify-child-process", "Identifier": { "PURL": "pkg:npm/promisify-child-process@4.1.2", "UID": "6fc716a0da4bd293" }, "Version": "4.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/promisify-child-process/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "promzard@1.0.1", "Name": "promzard", "Identifier": { "PURL": "pkg:npm/promzard@1.0.1", "UID": "897c8babedfa9b7" }, "Version": "1.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/promzard/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "protobufjs@7.2.6", "Name": "protobufjs", "Identifier": { "PURL": "pkg:npm/protobufjs@7.2.6", "UID": "855c5ee310c62e6d" }, "Version": "7.2.6", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/protobufjs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "proxy-addr@2.0.7", "Name": "proxy-addr", "Identifier": { "PURL": "pkg:npm/proxy-addr@2.0.7", "UID": "de768ad757b6600d" }, "Version": "2.0.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/proxy-addr/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "proxy-from-env@1.1.0", "Name": "proxy-from-env", "Identifier": { "PURL": "pkg:npm/proxy-from-env@1.1.0", "UID": "66ce762413bfd0cc" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/proxy-from-env/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "pump@3.0.3", "Name": "pump", "Identifier": { "PURL": "pkg:npm/pump@3.0.3", "UID": "e47858bca1b8bae5" }, "Version": "3.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/pump/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "punycode@2.1.1", "Name": "punycode", "Identifier": { "PURL": "pkg:npm/punycode@2.1.1", "UID": "f8fd62431c784150" }, "Version": "2.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/punycode/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "qrcode-terminal@0.12.0", "Name": "qrcode-terminal", "Identifier": { "PURL": "pkg:npm/qrcode-terminal@0.12.0", "UID": "b17a7c2ec3321961" }, "Version": "0.12.0", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/qrcode-terminal/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "qs@6.10.4", "Name": "qs", "Identifier": { "PURL": "pkg:npm/qs@6.10.4", "UID": "e354235e6c831231" }, "Version": "6.10.4", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/qs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "qs@6.13.0", "Name": "qs", "Identifier": { "PURL": "pkg:npm/qs@6.13.0", "UID": "e6fd23a4c8c05ccc" }, "Version": "6.13.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/body-parser/node_modules/qs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "qs@6.13.0", "Name": "qs", "Identifier": { "PURL": "pkg:npm/qs@6.13.0", "UID": "f5f649018c8783bd" }, "Version": "6.13.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/express/node_modules/qs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "quick-lru@5.1.1", "Name": "quick-lru", "Identifier": { "PURL": "pkg:npm/quick-lru@5.1.1", "UID": "d64df6669985ba12" }, "Version": "5.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/quick-lru/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "radius@1.1.4", "Name": "radius", "Identifier": { "PURL": "pkg:npm/radius@1.1.4", "UID": "f55ec72df94e76b" }, "Version": "1.1.4", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/radius/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "range-parser@1.2.1", "Name": "range-parser", "Identifier": { "PURL": "pkg:npm/range-parser@1.2.1", "UID": "3245059fe66058" }, "Version": "1.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/range-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "raw-body@2.5.2", "Name": "raw-body", "Identifier": { "PURL": "pkg:npm/raw-body@2.5.2", "UID": "e6f57fef7160b3d9" }, "Version": "2.5.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/raw-body/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "read@3.0.1", "Name": "read", "Identifier": { "PURL": "pkg:npm/read@3.0.1", "UID": "bac54bbde524b906" }, "Version": "3.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/read/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "read-cmd-shim@4.0.0", "Name": "read-cmd-shim", "Identifier": { "PURL": "pkg:npm/read-cmd-shim@4.0.0", "UID": "2639400012f67690" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/read-cmd-shim/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "read-package-json-fast@3.0.2", "Name": "read-package-json-fast", "Identifier": { "PURL": "pkg:npm/read-package-json-fast@3.0.2", "UID": "e18fccb5df547f70" }, "Version": "3.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/read-package-json-fast/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "readable-stream@1.0.34", "Name": "readable-stream", "Identifier": { "PURL": "pkg:npm/readable-stream@1.0.34", "UID": "1971d7d130bc4064" }, "Version": "1.0.34", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/barse/node_modules/readable-stream/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "readable-stream@2.3.8", "Name": "readable-stream", "Identifier": { "PURL": "pkg:npm/readable-stream@2.3.8", "UID": "743a76c8530afd87" }, "Version": "2.3.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/string-to-stream/node_modules/readable-stream/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "readable-stream@3.6.2", "Name": "readable-stream", "Identifier": { "PURL": "pkg:npm/readable-stream@3.6.2", "UID": "643c781296d5d7b3" }, "Version": "3.6.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/readable-stream/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "rechoir@0.8.0", "Name": "rechoir", "Identifier": { "PURL": "pkg:npm/rechoir@0.8.0", "UID": "ae2ad5b0908e56cd" }, "Version": "0.8.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/rechoir/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "redbean-node@0.3.3", "Name": "redbean-node", "Identifier": { "PURL": "pkg:npm/redbean-node@0.3.3", "UID": "15f544ba051d9c76" }, "Version": "0.3.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/redbean-node/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "redis@4.5.1", "Name": "redis", "Identifier": { "PURL": "pkg:npm/redis@4.5.1", "UID": "b8679ddf2469ff29" }, "Version": "4.5.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/redis/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "reflect.getprototypeof@1.0.10", "Name": "reflect.getprototypeof", "Identifier": { "PURL": "pkg:npm/reflect.getprototypeof@1.0.10", "UID": "dbe034dbde474d0" }, "Version": "1.0.10", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/reflect.getprototypeof/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "regexp.prototype.flags@1.5.4", "Name": "regexp.prototype.flags", "Identifier": { "PURL": "pkg:npm/regexp.prototype.flags@1.5.4", "UID": "f2b1bf5aa8741b68" }, "Version": "1.5.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/regexp.prototype.flags/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "reinterval@1.1.0", "Name": "reinterval", "Identifier": { "PURL": "pkg:npm/reinterval@1.1.0", "UID": "e0d9d98cacadf803" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/reinterval/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "require-directory@2.1.1", "Name": "require-directory", "Identifier": { "PURL": "pkg:npm/require-directory@2.1.1", "UID": "9edc0f3ac64c11b4" }, "Version": "2.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/require-directory/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "resolve@1.22.10", "Name": "resolve", "Identifier": { "PURL": "pkg:npm/resolve@1.22.10", "UID": "cf5ffdb8f3c7449d" }, "Version": "1.22.10", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/resolve/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "resolve-alpn@1.2.1", "Name": "resolve-alpn", "Identifier": { "PURL": "pkg:npm/resolve-alpn@1.2.1", "UID": "29f05fdbaa5c877e" }, "Version": "1.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/resolve-alpn/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "resolve-from@5.0.0", "Name": "resolve-from", "Identifier": { "PURL": "pkg:npm/resolve-from@5.0.0", "UID": "a2186babec68594b" }, "Version": "5.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/knex/node_modules/resolve-from/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "responselike@2.0.1", "Name": "responselike", "Identifier": { "PURL": "pkg:npm/responselike@2.0.1", "UID": "cf0c400c46225ddb" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/responselike/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "retry@0.12.0", "Name": "retry", "Identifier": { "PURL": "pkg:npm/retry@0.12.0", "UID": "17cadf6042767910" }, "Version": "0.12.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/retry/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "retry@0.12.0", "Name": "retry", "Identifier": { "PURL": "pkg:npm/retry@0.12.0", "UID": "608a6385cf364c2b" }, "Version": "0.12.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/retry/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "rfdc@1.4.1", "Name": "rfdc", "Identifier": { "PURL": "pkg:npm/rfdc@1.4.1", "UID": "904574561c70e65c" }, "Version": "1.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/rfdc/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "rimraf@3.0.2", "Name": "rimraf", "Identifier": { "PURL": "pkg:npm/rimraf@3.0.2", "UID": "a5ac924f0c2fff4f" }, "Version": "3.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/rimraf/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "safe-array-concat@1.1.3", "Name": "safe-array-concat", "Identifier": { "PURL": "pkg:npm/safe-array-concat@1.1.3", "UID": "566587c945a04038" }, "Version": "1.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/safe-array-concat/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "safe-buffer@5.1.2", "Name": "safe-buffer", "Identifier": { "PURL": "pkg:npm/safe-buffer@5.1.2", "UID": "5c0ce5ecb1ea9df3" }, "Version": "5.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/basic-auth/node_modules/safe-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "safe-buffer@5.1.2", "Name": "safe-buffer", "Identifier": { "PURL": "pkg:npm/safe-buffer@5.1.2", "UID": "1fe2598a4472859f" }, "Version": "5.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/string-to-stream/node_modules/safe-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "safe-buffer@5.2.1", "Name": "safe-buffer", "Identifier": { "PURL": "pkg:npm/safe-buffer@5.2.1", "UID": "8e81aae28ac8c5b4" }, "Version": "5.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/safe-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "safe-push-apply@1.0.0", "Name": "safe-push-apply", "Identifier": { "PURL": "pkg:npm/safe-push-apply@1.0.0", "UID": "12504228ba2785af" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/safe-push-apply/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "safe-regex-test@1.1.0", "Name": "safe-regex-test", "Identifier": { "PURL": "pkg:npm/safe-regex-test@1.1.0", "UID": "35e603cc3bbe1e71" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/safe-regex-test/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "safer-buffer@2.1.2", "Name": "safer-buffer", "Identifier": { "PURL": "pkg:npm/safer-buffer@2.1.2", "UID": "cdf3536e56ce54f9" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/safer-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "safer-buffer@2.1.2", "Name": "safer-buffer", "Identifier": { "PURL": "pkg:npm/safer-buffer@2.1.2", "UID": "c91f6999c7debfda" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/safer-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "sax@1.2.4", "Name": "sax", "Identifier": { "PURL": "pkg:npm/sax@1.2.4", "UID": "ba8cf08dddbba9ec" }, "Version": "1.2.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/sax/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "seek-bzip@2.0.0", "Name": "seek-bzip", "Identifier": { "PURL": "pkg:npm/seek-bzip@2.0.0", "UID": "18aacd827136b05a" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/seek-bzip/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "semver@6.3.1", "Name": "semver", "Identifier": { "PURL": "pkg:npm/semver@6.3.1", "UID": "f3e83ff8f4800f57" }, "Version": "6.3.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/make-dir/node_modules/semver/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "semver@7.5.4", "Name": "semver", "Identifier": { "PURL": "pkg:npm/semver@7.5.4", "UID": "bbce1d428058ebb8" }, "Version": "7.5.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/semver/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "semver@7.6.0", "Name": "semver", "Identifier": { "PURL": "pkg:npm/semver@7.6.0", "UID": "c384c54ecf66023b" }, "Version": "7.6.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/semver/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "send@0.19.0", "Name": "send", "Identifier": { "PURL": "pkg:npm/send@0.19.0", "UID": "94eafdc24f39e619" }, "Version": "0.19.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/send/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "seq-queue@0.0.5", "Name": "seq-queue", "Identifier": { "PURL": "pkg:npm/seq-queue@0.0.5", "UID": "a8ac30901c26b997" }, "Version": "0.0.5", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/seq-queue/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "serve-static@1.16.2", "Name": "serve-static", "Identifier": { "PURL": "pkg:npm/serve-static@1.16.2", "UID": "b71b9d8c9d7dba3c" }, "Version": "1.16.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/serve-static/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "set-blocking@2.0.0", "Name": "set-blocking", "Identifier": { "PURL": "pkg:npm/set-blocking@2.0.0", "UID": "37e7f49e136251c0" }, "Version": "2.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/set-blocking/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "set-function-length@1.2.2", "Name": "set-function-length", "Identifier": { "PURL": "pkg:npm/set-function-length@1.2.2", "UID": "f34142b8375e116a" }, "Version": "1.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/set-function-length/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "set-function-name@2.0.2", "Name": "set-function-name", "Identifier": { "PURL": "pkg:npm/set-function-name@2.0.2", "UID": "e45782377c3cf6c9" }, "Version": "2.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/set-function-name/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "set-proto@1.0.0", "Name": "set-proto", "Identifier": { "PURL": "pkg:npm/set-proto@1.0.0", "UID": "45218cabb176d577" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/set-proto/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "setprototypeof@1.2.0", "Name": "setprototypeof", "Identifier": { "PURL": "pkg:npm/setprototypeof@1.2.0", "UID": "63e957bae8698175" }, "Version": "1.2.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/setprototypeof/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "shebang-command@2.0.0", "Name": "shebang-command", "Identifier": { "PURL": "pkg:npm/shebang-command@2.0.0", "UID": "eb3f370b81078ef" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/shebang-command/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "shebang-command@2.0.0", "Name": "shebang-command", "Identifier": { "PURL": "pkg:npm/shebang-command@2.0.0", "UID": "fe0501cb328ce3b" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/shebang-command/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "shebang-regex@3.0.0", "Name": "shebang-regex", "Identifier": { "PURL": "pkg:npm/shebang-regex@3.0.0", "UID": "70687123cdc79b4a" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/shebang-regex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "shebang-regex@3.0.0", "Name": "shebang-regex", "Identifier": { "PURL": "pkg:npm/shebang-regex@3.0.0", "UID": "8c44c7d1eb25d9be" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/shebang-regex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "side-channel@1.1.0", "Name": "side-channel", "Identifier": { "PURL": "pkg:npm/side-channel@1.1.0", "UID": "4de9ed2a3bb1bb8b" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/side-channel/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "side-channel-list@1.0.0", "Name": "side-channel-list", "Identifier": { "PURL": "pkg:npm/side-channel-list@1.0.0", "UID": "6092ad3fe1b9af5d" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/side-channel-list/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "side-channel-map@1.0.1", "Name": "side-channel-map", "Identifier": { "PURL": "pkg:npm/side-channel-map@1.0.1", "UID": "8bee6c3d77e30e1c" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/side-channel-map/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "side-channel-weakmap@1.0.2", "Name": "side-channel-weakmap", "Identifier": { "PURL": "pkg:npm/side-channel-weakmap@1.0.2", "UID": "b4bda1c972d315ca" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/side-channel-weakmap/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "signal-exit@3.0.7", "Name": "signal-exit", "Identifier": { "PURL": "pkg:npm/signal-exit@3.0.7", "UID": "b9bee02f9e0c3724" }, "Version": "3.0.7", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/signal-exit/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "signal-exit@4.1.0", "Name": "signal-exit", "Identifier": { "PURL": "pkg:npm/signal-exit@4.1.0", "UID": "334fb5093a9aefd5" }, "Version": "4.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/foreground-child/node_modules/signal-exit/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "signal-exit@4.1.0", "Name": "signal-exit", "Identifier": { "PURL": "pkg:npm/signal-exit@4.1.0", "UID": "883b84195e986f6a" }, "Version": "4.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/signal-exit/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "sigstore@2.3.0", "Name": "sigstore", "Identifier": { "PURL": "pkg:npm/sigstore@2.3.0", "UID": "15711876702e7d7a" }, "Version": "2.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/sigstore/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "simple-app@0.1.0", "Name": "simple-app", "Identifier": { "PURL": "pkg:npm/simple-app@0.1.0", "UID": "870322dfce5f9a8c" }, "Version": "0.1.0", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/pkginfo/examples/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "simple-app-subdir@0.1.0", "Name": "simple-app-subdir", "Identifier": { "PURL": "pkg:npm/simple-app-subdir@0.1.0", "UID": "f27b047f987c31ac" }, "Version": "0.1.0", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/pkginfo/examples/subdir/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "smart-buffer@4.2.0", "Name": "smart-buffer", "Identifier": { "PURL": "pkg:npm/smart-buffer@4.2.0", "UID": "67108c59cb121266" }, "Version": "4.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/smart-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "smart-buffer@4.2.0", "Name": "smart-buffer", "Identifier": { "PURL": "pkg:npm/smart-buffer@4.2.0", "UID": "f0c5ee9f68d6fddf" }, "Version": "4.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/smart-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "socket.io@4.8.1", "Name": "socket.io", "Identifier": { "PURL": "pkg:npm/socket.io@4.8.1", "UID": "dbc79fd53b2db224" }, "Version": "4.8.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/socket.io/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "socket.io-adapter@2.5.5", "Name": "socket.io-adapter", "Identifier": { "PURL": "pkg:npm/socket.io-adapter@2.5.5", "UID": "64e572015c0a269b" }, "Version": "2.5.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/socket.io-adapter/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "socket.io-client@4.7.5", "Name": "socket.io-client", "Identifier": { "PURL": "pkg:npm/socket.io-client@4.7.5", "UID": "8c02cfa001cc0425" }, "Version": "4.7.5", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/socket.io-client/build/esm-debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "socket.io-client@4.7.5", "Name": "socket.io-client", "Identifier": { "PURL": "pkg:npm/socket.io-client@4.7.5", "UID": "8601b7fb5aeb09f4" }, "Version": "4.7.5", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/socket.io-client/build/esm/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "socket.io-client@4.8.1", "Name": "socket.io-client", "Identifier": { "PURL": "pkg:npm/socket.io-client@4.8.1", "UID": "112215b590706a69" }, "Version": "4.8.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/socket.io-client/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "socket.io-parser@4.2.4", "Name": "socket.io-parser", "Identifier": { "PURL": "pkg:npm/socket.io-parser@4.2.4", "UID": "a3ee475c77390766" }, "Version": "4.2.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/socket.io-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "socks@2.8.3", "Name": "socks", "Identifier": { "PURL": "pkg:npm/socks@2.8.3", "UID": "a59ce214a833cd3" }, "Version": "2.8.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/socks/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "socks@2.8.7", "Name": "socks", "Identifier": { "PURL": "pkg:npm/socks@2.8.7", "UID": "2b60949fbe8c171b" }, "Version": "2.8.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/socks/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "socks-proxy-agent@6.1.1", "Name": "socks-proxy-agent", "Identifier": { "PURL": "pkg:npm/socks-proxy-agent@6.1.1", "UID": "767caa434fd69c59" }, "Version": "6.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/socks-proxy-agent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "socks-proxy-agent@8.0.3", "Name": "socks-proxy-agent", "Identifier": { "PURL": "pkg:npm/socks-proxy-agent@8.0.3", "UID": "cad698063c2fc5f1" }, "Version": "8.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/socks-proxy-agent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "sparse-bitfield@3.0.3", "Name": "sparse-bitfield", "Identifier": { "PURL": "pkg:npm/sparse-bitfield@3.0.3", "UID": "c49ce5231b1e372c" }, "Version": "3.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/sparse-bitfield/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "spdx-correct@3.2.0", "Name": "spdx-correct", "Identifier": { "PURL": "pkg:npm/spdx-correct@3.2.0", "UID": "ccc34415eb746b9a" }, "Version": "3.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/spdx-correct/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "spdx-exceptions@2.5.0", "Name": "spdx-exceptions", "Identifier": { "PURL": "pkg:npm/spdx-exceptions@2.5.0", "UID": "3602fef2070203cf" }, "Version": "2.5.0", "Licenses": [ "CC-BY-3.0" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/spdx-exceptions/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "spdx-expression-parse@3.0.1", "Name": "spdx-expression-parse", "Identifier": { "PURL": "pkg:npm/spdx-expression-parse@3.0.1", "UID": "f17cfd9d15e191ac" }, "Version": "3.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/spdx-correct/node_modules/spdx-expression-parse/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "spdx-expression-parse@3.0.1", "Name": "spdx-expression-parse", "Identifier": { "PURL": "pkg:npm/spdx-expression-parse@3.0.1", "UID": "d810a03590b3ad31" }, "Version": "3.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/validate-npm-package-license/node_modules/spdx-expression-parse/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "spdx-expression-parse@4.0.0", "Name": "spdx-expression-parse", "Identifier": { "PURL": "pkg:npm/spdx-expression-parse@4.0.0", "UID": "951d3251ced005b" }, "Version": "4.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/spdx-expression-parse/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "spdx-license-ids@3.0.17", "Name": "spdx-license-ids", "Identifier": { "PURL": "pkg:npm/spdx-license-ids@3.0.17", "UID": "a527e6333d21e595" }, "Version": "3.0.17", "Licenses": [ "CC0-1.0" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/spdx-license-ids/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "split2@3.2.2", "Name": "split2", "Identifier": { "PURL": "pkg:npm/split2@3.2.2", "UID": "7503bab45fd2c702" }, "Version": "3.2.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/split2/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "split2@4.2.0", "Name": "split2", "Identifier": { "PURL": "pkg:npm/split2@4.2.0", "UID": "da391cd20015033a" }, "Version": "4.2.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/pgpass/node_modules/split2/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "sprintf-js@1.1.3", "Name": "sprintf-js", "Identifier": { "PURL": "pkg:npm/sprintf-js@1.1.3", "UID": "ff99c741d8567946" }, "Version": "1.1.3", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/sprintf-js/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "sprintf-js@1.1.3", "Name": "sprintf-js", "Identifier": { "PURL": "pkg:npm/sprintf-js@1.1.3", "UID": "a1d76f8a7b58ab7a" }, "Version": "1.1.3", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/sprintf-js/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "sqlstring@2.3.3", "Name": "sqlstring", "Identifier": { "PURL": "pkg:npm/sqlstring@2.3.3", "UID": "f41def13fc727549" }, "Version": "2.3.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/sqlstring/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ssri@10.0.5", "Name": "ssri", "Identifier": { "PURL": "pkg:npm/ssri@10.0.5", "UID": "6bc850451c51cb80" }, "Version": "10.0.5", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/ssri/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ssri@8.0.1", "Name": "ssri", "Identifier": { "PURL": "pkg:npm/ssri@8.0.1", "UID": "9bdd5dfd951e5bf4" }, "Version": "8.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/ssri/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "statuses@2.0.1", "Name": "statuses", "Identifier": { "PURL": "pkg:npm/statuses@2.0.1", "UID": "4348665a9ba4a8ed" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/statuses/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "stop-iteration-iterator@1.1.0", "Name": "stop-iteration-iterator", "Identifier": { "PURL": "pkg:npm/stop-iteration-iterator@1.1.0", "UID": "9e235055c60e42b7" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/stop-iteration-iterator/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "stoppable@1.1.0", "Name": "stoppable", "Identifier": { "PURL": "pkg:npm/stoppable@1.1.0", "UID": "f14ca58d34bae1b" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/stoppable/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "stream-shift@1.0.3", "Name": "stream-shift", "Identifier": { "PURL": "pkg:npm/stream-shift@1.0.3", "UID": "c4d5e11ed1d6055e" }, "Version": "1.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/stream-shift/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "string-to-stream@1.1.1", "Name": "string-to-stream", "Identifier": { "PURL": "pkg:npm/string-to-stream@1.1.1", "UID": "28de0f94aa1aa9ef" }, "Version": "1.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/string-to-stream/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "string-width@4.2.3", "Name": "string-width", "Identifier": { "PURL": "pkg:npm/string-width@4.2.3", "UID": "c845001d6a208133" }, "Version": "4.2.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/string-width-cjs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "string-width@4.2.3", "Name": "string-width", "Identifier": { "PURL": "pkg:npm/string-width@4.2.3", "UID": "4143e82dadf730b" }, "Version": "4.2.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/string-width/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "string-width@4.2.3", "Name": "string-width", "Identifier": { "PURL": "pkg:npm/string-width@4.2.3", "UID": "50671a77584f7818" }, "Version": "4.2.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/string-width-cjs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "string-width@4.2.3", "Name": "string-width", "Identifier": { "PURL": "pkg:npm/string-width@4.2.3", "UID": "f40914f4b9d19df2" }, "Version": "4.2.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/string-width/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "string-width@5.1.2", "Name": "string-width", "Identifier": { "PURL": "pkg:npm/string-width@5.1.2", "UID": "c1aebaf2f1e895d3" }, "Version": "5.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@isaacs/cliui/node_modules/string-width/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "string-width@5.1.2", "Name": "string-width", "Identifier": { "PURL": "pkg:npm/string-width@5.1.2", "UID": "acc7ab16b3c46f2e" }, "Version": "5.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@isaacs/cliui/node_modules/string-width/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "string-width@5.1.2", "Name": "string-width", "Identifier": { "PURL": "pkg:npm/string-width@5.1.2", "UID": "26f12bb4d5f8ce91" }, "Version": "5.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/wrap-ansi/node_modules/string-width/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "string.prototype.trim@1.2.10", "Name": "string.prototype.trim", "Identifier": { "PURL": "pkg:npm/string.prototype.trim@1.2.10", "UID": "465b3cfe8602986b" }, "Version": "1.2.10", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/string.prototype.trim/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "string.prototype.trimend@1.0.9", "Name": "string.prototype.trimend", "Identifier": { "PURL": "pkg:npm/string.prototype.trimend@1.0.9", "UID": "3075bfb072610dc7" }, "Version": "1.0.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/string.prototype.trimend/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "string.prototype.trimstart@1.0.8", "Name": "string.prototype.trimstart", "Identifier": { "PURL": "pkg:npm/string.prototype.trimstart@1.0.8", "UID": "de41e00a5f6b7514" }, "Version": "1.0.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/string.prototype.trimstart/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "string_decoder@0.10.31", "Name": "string_decoder", "Identifier": { "PURL": "pkg:npm/string_decoder@0.10.31", "UID": "bf3c372dac4e4060" }, "Version": "0.10.31", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/barse/node_modules/string_decoder/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "string_decoder@1.1.1", "Name": "string_decoder", "Identifier": { "PURL": "pkg:npm/string_decoder@1.1.1", "UID": "fa1e643b970a5ca4" }, "Version": "1.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/string-to-stream/node_modules/string_decoder/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "string_decoder@1.3.0", "Name": "string_decoder", "Identifier": { "PURL": "pkg:npm/string_decoder@1.3.0", "UID": "6232fec366f8c65" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/string_decoder/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "strip-ansi@6.0.1", "Name": "strip-ansi", "Identifier": { "PURL": "pkg:npm/strip-ansi@6.0.1", "UID": "4ab52f64807ca49a" }, "Version": "6.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/strip-ansi-cjs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "strip-ansi@6.0.1", "Name": "strip-ansi", "Identifier": { "PURL": "pkg:npm/strip-ansi@6.0.1", "UID": "c11e51c27108eadc" }, "Version": "6.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/strip-ansi/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "strip-ansi@6.0.1", "Name": "strip-ansi", "Identifier": { "PURL": "pkg:npm/strip-ansi@6.0.1", "UID": "c8d49e34f1cd87df" }, "Version": "6.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/strip-ansi-cjs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "strip-ansi@6.0.1", "Name": "strip-ansi", "Identifier": { "PURL": "pkg:npm/strip-ansi@6.0.1", "UID": "27648fc4d23271fe" }, "Version": "6.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/strip-ansi/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "strip-ansi@7.1.0", "Name": "strip-ansi", "Identifier": { "PURL": "pkg:npm/strip-ansi@7.1.0", "UID": "8d30a66179db9cbc" }, "Version": "7.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@isaacs/cliui/node_modules/strip-ansi/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "strip-ansi@7.1.0", "Name": "strip-ansi", "Identifier": { "PURL": "pkg:npm/strip-ansi@7.1.0", "UID": "488cb286c8aa8423" }, "Version": "7.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/wrap-ansi/node_modules/strip-ansi/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "strip-ansi@7.1.2", "Name": "strip-ansi", "Identifier": { "PURL": "pkg:npm/strip-ansi@7.1.2", "UID": "a0464928cf07df81" }, "Version": "7.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@isaacs/cliui/node_modules/strip-ansi/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "strnum@2.1.1", "Name": "strnum", "Identifier": { "PURL": "pkg:npm/strnum@2.1.1", "UID": "a2b8d68b6dd438ac" }, "Version": "2.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/strnum/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "supports-color@9.4.0", "Name": "supports-color", "Identifier": { "PURL": "pkg:npm/supports-color@9.4.0", "UID": "e6fdec1687f0e861" }, "Version": "9.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/supports-color/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "supports-preserve-symlinks-flag@1.0.0", "Name": "supports-preserve-symlinks-flag", "Identifier": { "PURL": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", "UID": "dacea93209d6989f" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/supports-preserve-symlinks-flag/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "tar@6.2.1", "Name": "tar", "Identifier": { "PURL": "pkg:npm/tar@6.2.1", "UID": "be3a0b7d2887a4f4" }, "Version": "6.2.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/tar/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "tar@6.2.1", "Name": "tar", "Identifier": { "PURL": "pkg:npm/tar@6.2.1", "UID": "da51341d82b508b9" }, "Version": "6.2.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/tar/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "tarn@3.0.2", "Name": "tarn", "Identifier": { "PURL": "pkg:npm/tarn@3.0.2", "UID": "c3a7ca61fceac9c0" }, "Version": "3.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/tarn/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "tcp-ping@0.1.1", "Name": "tcp-ping", "Identifier": { "PURL": "pkg:npm/tcp-ping@0.1.1", "UID": "56605db2317cf381" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/tcp-ping/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "tdigest@0.1.2", "Name": "tdigest", "Identifier": { "PURL": "pkg:npm/tdigest@0.1.2", "UID": "d3777c334ce7198d" }, "Version": "0.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/tdigest/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "tedious@14.7.0", "Name": "tedious", "Identifier": { "PURL": "pkg:npm/tedious@14.7.0", "UID": "ab6da97987175a0d" }, "Version": "14.7.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/tedious/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "text-table@0.2.0", "Name": "text-table", "Identifier": { "PURL": "pkg:npm/text-table@0.2.0", "UID": "db9d37c2491d4eb4" }, "Version": "0.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/text-table/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "thirty-two@1.0.2", "Name": "thirty-two", "Identifier": { "PURL": "pkg:npm/thirty-two@1.0.2", "UID": "9ef678cf17e468d1" }, "Version": "1.0.2", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/thirty-two/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "tildify@2.0.0", "Name": "tildify", "Identifier": { "PURL": "pkg:npm/tildify@2.0.0", "UID": "703596e390c0b510" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/tildify/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "tiny-relative-date@1.3.0", "Name": "tiny-relative-date", "Identifier": { "PURL": "pkg:npm/tiny-relative-date@1.3.0", "UID": "113325395c8c3f86" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/tiny-relative-date/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "toidentifier@1.0.1", "Name": "toidentifier", "Identifier": { "PURL": "pkg:npm/toidentifier@1.0.1", "UID": "67e134c79acea52b" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/toidentifier/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "topo@3.0.3", "Name": "topo", "Identifier": { "PURL": "pkg:npm/topo@3.0.3", "UID": "3afb1f586c1230cf" }, "Version": "3.0.3", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/topo/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "tr46@0.0.3", "Name": "tr46", "Identifier": { "PURL": "pkg:npm/tr46@0.0.3", "UID": "5bf73743d37e36f4" }, "Version": "0.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/node-fetch/node_modules/tr46/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "tr46@3.0.0", "Name": "tr46", "Identifier": { "PURL": "pkg:npm/tr46@3.0.0", "UID": "c69005102154aa0f" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/mongodb-connection-string-url/node_modules/tr46/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "treeverse@3.0.0", "Name": "treeverse", "Identifier": { "PURL": "pkg:npm/treeverse@3.0.0", "UID": "815f9702b2f3013d" }, "Version": "3.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/treeverse/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "tslib@2.8.1", "Name": "tslib", "Identifier": { "PURL": "pkg:npm/tslib@2.8.1", "UID": "5f14f89fd1bb159a" }, "Version": "2.8.1", "Licenses": [ "0BSD" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/tslib/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "tuf-js@2.2.0", "Name": "tuf-js", "Identifier": { "PURL": "pkg:npm/tuf-js@2.2.0", "UID": "aeec08ef60abfe2f" }, "Version": "2.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/tuf-js/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "type-is@1.6.18", "Name": "type-is", "Identifier": { "PURL": "pkg:npm/type-is@1.6.18", "UID": "f68a281c906553d" }, "Version": "1.6.18", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/type-is/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "typed-array-buffer@1.0.3", "Name": "typed-array-buffer", "Identifier": { "PURL": "pkg:npm/typed-array-buffer@1.0.3", "UID": "6674095987be5c92" }, "Version": "1.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/typed-array-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "typed-array-byte-length@1.0.3", "Name": "typed-array-byte-length", "Identifier": { "PURL": "pkg:npm/typed-array-byte-length@1.0.3", "UID": "5c600cbf2bd0d561" }, "Version": "1.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/typed-array-byte-length/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "typed-array-byte-offset@1.0.4", "Name": "typed-array-byte-offset", "Identifier": { "PURL": "pkg:npm/typed-array-byte-offset@1.0.4", "UID": "f0ab4261dc2cf045" }, "Version": "1.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/typed-array-byte-offset/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "typed-array-length@1.0.7", "Name": "typed-array-length", "Identifier": { "PURL": "pkg:npm/typed-array-length@1.0.7", "UID": "ce138521845601d0" }, "Version": "1.0.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/typed-array-length/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "typedarray@0.0.6", "Name": "typedarray", "Identifier": { "PURL": "pkg:npm/typedarray@0.0.6", "UID": "9763667de3937054" }, "Version": "0.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/typedarray/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "unbox-primitive@1.1.0", "Name": "unbox-primitive", "Identifier": { "PURL": "pkg:npm/unbox-primitive@1.1.0", "UID": "f3af73065ddaa821" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/unbox-primitive/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "underscore@1.13.7", "Name": "underscore", "Identifier": { "PURL": "pkg:npm/underscore@1.13.7", "UID": "42c579b17a3122d9" }, "Version": "1.13.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/underscore/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "undici-types@7.14.0", "Name": "undici-types", "Identifier": { "PURL": "pkg:npm/undici-types@7.14.0", "UID": "ea0a62be425b63a3" }, "Version": "7.14.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/undici-types/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "unique-filename@1.1.1", "Name": "unique-filename", "Identifier": { "PURL": "pkg:npm/unique-filename@1.1.1", "UID": "b032bc67d3d069f0" }, "Version": "1.1.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/unique-filename/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "unique-filename@3.0.0", "Name": "unique-filename", "Identifier": { "PURL": "pkg:npm/unique-filename@3.0.0", "UID": "f6d066ed17d1ea78" }, "Version": "3.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/unique-filename/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "unique-slug@2.0.2", "Name": "unique-slug", "Identifier": { "PURL": "pkg:npm/unique-slug@2.0.2", "UID": "2c6d24254b554b4e" }, "Version": "2.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/unique-slug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "unique-slug@4.0.0", "Name": "unique-slug", "Identifier": { "PURL": "pkg:npm/unique-slug@4.0.0", "UID": "bd0596a318af2444" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/unique-slug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "unpipe@1.0.0", "Name": "unpipe", "Identifier": { "PURL": "pkg:npm/unpipe@1.0.0", "UID": "e3cc0acad5d4c1b7" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/unpipe/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "update-language-files@1.0.0", "Name": "update-language-files", "Identifier": { "PURL": "pkg:npm/update-language-files@1.0.0", "UID": "c53030311726cb89" }, "Version": "1.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/extra/update-language-files/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "uptime-kuma@1.23.17", "Name": "uptime-kuma", "Identifier": { "PURL": "pkg:npm/uptime-kuma@1.23.17", "UID": "a97a2b74e50bd9c3" }, "Version": "1.23.17", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "util-deprecate@1.0.2", "Name": "util-deprecate", "Identifier": { "PURL": "pkg:npm/util-deprecate@1.0.2", "UID": "c89246d8844ce65a" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/util-deprecate/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "util-deprecate@1.0.2", "Name": "util-deprecate", "Identifier": { "PURL": "pkg:npm/util-deprecate@1.0.2", "UID": "f9c0b05c435e4f77" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/util-deprecate/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "utils-merge@1.0.1", "Name": "utils-merge", "Identifier": { "PURL": "pkg:npm/utils-merge@1.0.1", "UID": "ed5d8b51355a8add" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/utils-merge/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "uuid@8.3.2", "Name": "uuid", "Identifier": { "PURL": "pkg:npm/uuid@8.3.2", "UID": "efdb752d6720e16e" }, "Version": "8.3.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/uuid/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "validate-npm-package-license@3.0.4", "Name": "validate-npm-package-license", "Identifier": { "PURL": "pkg:npm/validate-npm-package-license@3.0.4", "UID": "bb4a490d518c102f" }, "Version": "3.0.4", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/validate-npm-package-license/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "validate-npm-package-name@5.0.0", "Name": "validate-npm-package-name", "Identifier": { "PURL": "pkg:npm/validate-npm-package-name@5.0.0", "UID": "1081264b683a779c" }, "Version": "5.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/validate-npm-package-name/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "varint@6.0.0", "Name": "varint", "Identifier": { "PURL": "pkg:npm/varint@6.0.0", "UID": "2ab35534e9be39a3" }, "Version": "6.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/varint/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "vary@1.1.2", "Name": "vary", "Identifier": { "PURL": "pkg:npm/vary@1.1.2", "UID": "22e6eeedeb219424" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/vary/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "walk-up-path@3.0.1", "Name": "walk-up-path", "Identifier": { "PURL": "pkg:npm/walk-up-path@3.0.1", "UID": "a7d0bec29806c900" }, "Version": "3.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/walk-up-path/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "webidl-conversions@3.0.1", "Name": "webidl-conversions", "Identifier": { "PURL": "pkg:npm/webidl-conversions@3.0.1", "UID": "e1fdd501acebbf9" }, "Version": "3.0.1", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/node-fetch/node_modules/webidl-conversions/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "webidl-conversions@7.0.0", "Name": "webidl-conversions", "Identifier": { "PURL": "pkg:npm/webidl-conversions@7.0.0", "UID": "89acc404a4867412" }, "Version": "7.0.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/webidl-conversions/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "whatwg-url@11.0.0", "Name": "whatwg-url", "Identifier": { "PURL": "pkg:npm/whatwg-url@11.0.0", "UID": "9b8199b6d606b76a" }, "Version": "11.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/mongodb-connection-string-url/node_modules/whatwg-url/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "whatwg-url@5.0.0", "Name": "whatwg-url", "Identifier": { "PURL": "pkg:npm/whatwg-url@5.0.0", "UID": "1158c1dee64dac86" }, "Version": "5.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/node-fetch/node_modules/whatwg-url/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "which@2.0.2", "Name": "which", "Identifier": { "PURL": "pkg:npm/which@2.0.2", "UID": "355238a97367dc13" }, "Version": "2.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/which/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "which@2.0.2", "Name": "which", "Identifier": { "PURL": "pkg:npm/which@2.0.2", "UID": "1e1c9c717eb7247f" }, "Version": "2.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/cross-spawn/node_modules/which/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "which@4.0.0", "Name": "which", "Identifier": { "PURL": "pkg:npm/which@4.0.0", "UID": "7768ad255eeb8510" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/which/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "which-boxed-primitive@1.1.1", "Name": "which-boxed-primitive", "Identifier": { "PURL": "pkg:npm/which-boxed-primitive@1.1.1", "UID": "ed0e35a7fc07fe46" }, "Version": "1.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/which-boxed-primitive/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "which-builtin-type@1.2.1", "Name": "which-builtin-type", "Identifier": { "PURL": "pkg:npm/which-builtin-type@1.2.1", "UID": "cd5a1595d7bd8e44" }, "Version": "1.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/which-builtin-type/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "which-collection@1.0.2", "Name": "which-collection", "Identifier": { "PURL": "pkg:npm/which-collection@1.0.2", "UID": "c84e257cf66cd476" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/which-collection/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "which-typed-array@1.1.19", "Name": "which-typed-array", "Identifier": { "PURL": "pkg:npm/which-typed-array@1.1.19", "UID": "df9feb41e12a8748" }, "Version": "1.1.19", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/which-typed-array/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "wide-align@1.1.5", "Name": "wide-align", "Identifier": { "PURL": "pkg:npm/wide-align@1.1.5", "UID": "ef3ea2d45c21222c" }, "Version": "1.1.5", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/wide-align/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "wrap-ansi@7.0.0", "Name": "wrap-ansi", "Identifier": { "PURL": "pkg:npm/wrap-ansi@7.0.0", "UID": "66bdcd2199c7c001" }, "Version": "7.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/wrap-ansi-cjs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "wrap-ansi@7.0.0", "Name": "wrap-ansi", "Identifier": { "PURL": "pkg:npm/wrap-ansi@7.0.0", "UID": "c88f58e699023074" }, "Version": "7.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/wrap-ansi/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "wrap-ansi@7.0.0", "Name": "wrap-ansi", "Identifier": { "PURL": "pkg:npm/wrap-ansi@7.0.0", "UID": "56487f6382f300f2" }, "Version": "7.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/wrap-ansi-cjs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "wrap-ansi@8.1.0", "Name": "wrap-ansi", "Identifier": { "PURL": "pkg:npm/wrap-ansi@8.1.0", "UID": "603764c3a7b7c1c9" }, "Version": "8.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@isaacs/cliui/node_modules/wrap-ansi/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "wrap-ansi@8.1.0", "Name": "wrap-ansi", "Identifier": { "PURL": "pkg:npm/wrap-ansi@8.1.0", "UID": "c9b062e6020fdea4" }, "Version": "8.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/wrap-ansi/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "wrappy@1.0.2", "Name": "wrappy", "Identifier": { "PURL": "pkg:npm/wrappy@1.0.2", "UID": "7fed3bfa6ea9195b" }, "Version": "1.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/wrappy/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "write-file-atomic@5.0.1", "Name": "write-file-atomic", "Identifier": { "PURL": "pkg:npm/write-file-atomic@5.0.1", "UID": "3b8bbaa8c8d93bf" }, "Version": "5.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/write-file-atomic/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ws@7.5.10", "Name": "ws", "Identifier": { "PURL": "pkg:npm/ws@7.5.10", "UID": "eb9b06552c313f42" }, "Version": "7.5.10", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/mqtt/node_modules/ws/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ws@8.17.1", "Name": "ws", "Identifier": { "PURL": "pkg:npm/ws@8.17.1", "UID": "6a43b3102963ef99" }, "Version": "8.17.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/engine.io-client/node_modules/ws/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ws@8.17.1", "Name": "ws", "Identifier": { "PURL": "pkg:npm/ws@8.17.1", "UID": "d92f529cbd9c8ae8" }, "Version": "8.17.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/engine.io/node_modules/ws/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ws@8.17.1", "Name": "ws", "Identifier": { "PURL": "pkg:npm/ws@8.17.1", "UID": "33348278d890da5b" }, "Version": "8.17.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/socket.io-adapter/node_modules/ws/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ws@8.18.3", "Name": "ws", "Identifier": { "PURL": "pkg:npm/ws@8.18.3", "UID": "4eedf4d87d177cc6" }, "Version": "8.18.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/ws/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "xmlbuilder@8.2.2", "Name": "xmlbuilder", "Identifier": { "PURL": "pkg:npm/xmlbuilder@8.2.2", "UID": "57aa7b984452736c" }, "Version": "8.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/xmlbuilder/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "xmlhttprequest-ssl@2.1.2", "Name": "xmlhttprequest-ssl", "Identifier": { "PURL": "pkg:npm/xmlhttprequest-ssl@2.1.2", "UID": "47047599d20950e9" }, "Version": "2.1.2", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/xmlhttprequest-ssl/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "xmlrpc@1.3.2", "Name": "xmlrpc", "Identifier": { "PURL": "pkg:npm/xmlrpc@1.3.2", "UID": "2ba9c31f3cdcff5a" }, "Version": "1.3.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/xmlrpc/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "xtend@4.0.2", "Name": "xtend", "Identifier": { "PURL": "pkg:npm/xtend@4.0.2", "UID": "3df69a11c2e804c2" }, "Version": "4.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/xtend/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "y18n@5.0.8", "Name": "y18n", "Identifier": { "PURL": "pkg:npm/y18n@5.0.8", "UID": "1b70d971f0ee3283" }, "Version": "5.0.8", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/y18n/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "yallist@4.0.0", "Name": "yallist", "Identifier": { "PURL": "pkg:npm/yallist@4.0.0", "UID": "59ab0c44ea167a96" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/@redis/client/node_modules/yallist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "yallist@4.0.0", "Name": "yallist", "Identifier": { "PURL": "pkg:npm/yallist@4.0.0", "UID": "ad628d502184ea66" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/cacache/node_modules/yallist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "yallist@4.0.0", "Name": "yallist", "Identifier": { "PURL": "pkg:npm/yallist@4.0.0", "UID": "dc62fe5487c04d34" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/make-fetch-happen/node_modules/yallist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "yallist@4.0.0", "Name": "yallist", "Identifier": { "PURL": "pkg:npm/yallist@4.0.0", "UID": "bd5d5d4eb5d20a3b" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/minipass/node_modules/yallist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "yallist@4.0.0", "Name": "yallist", "Identifier": { "PURL": "pkg:npm/yallist@4.0.0", "UID": "88f7d761f3eb51f6" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/minizlib/node_modules/yallist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "yallist@4.0.0", "Name": "yallist", "Identifier": { "PURL": "pkg:npm/yallist@4.0.0", "UID": "aab86b24c03d3927" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/mqtt/node_modules/yallist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "yallist@4.0.0", "Name": "yallist", "Identifier": { "PURL": "pkg:npm/yallist@4.0.0", "UID": "9fafce66454a9786" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/openid-client/node_modules/yallist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "yallist@4.0.0", "Name": "yallist", "Identifier": { "PURL": "pkg:npm/yallist@4.0.0", "UID": "f0475a395bfe2225" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/semver/node_modules/yallist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "yallist@4.0.0", "Name": "yallist", "Identifier": { "PURL": "pkg:npm/yallist@4.0.0", "UID": "3d4fbe506b055575" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/tar/node_modules/yallist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "yallist@4.0.0", "Name": "yallist", "Identifier": { "PURL": "pkg:npm/yallist@4.0.0", "UID": "fcef638568eb2ddf" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/yallist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "yargs@17.7.2", "Name": "yargs", "Identifier": { "PURL": "pkg:npm/yargs@17.7.2", "UID": "c2735cb58655d83d" }, "Version": "17.7.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/yargs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "yargs-parser@21.1.1", "Name": "yargs-parser", "Identifier": { "PURL": "pkg:npm/yargs-parser@21.1.1", "UID": "7a0ed79191ac56ea" }, "Version": "21.1.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "FilePath": "app/node_modules/yargs/node_modules/yargs-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "yarn@1.22.19", "Name": "yarn", "Identifier": { "PURL": "pkg:npm/yarn@1.22.19", "UID": "9da18d3fe5555e4b" }, "Version": "1.22.19", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:992966ad9edb95959d27e87368e3837d3869222cf7e178d6289ab851f8f67e22" }, "FilePath": "opt/yarn-v1.22.19/package.json", "AnalyzedBy": "node-pkg" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2026-101916", "VendorIDs": [ "GHSA-m9gg-hp2v-232j" ], "PkgID": "@grpc/grpc-js@1.8.22", "PkgName": "@grpc/grpc-js", "PkgPath": "app/node_modules/@grpc/grpc-js/package.json", "PkgIdentifier": { "PURL": "pkg:npm/%40grpc/grpc-js@1.8.22", "UID": "75d465eb7550513d" }, "InstalledVersion": "1.8.22", "FixedVersion": "1.13.6, 1.14.5", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-101916", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:5622d8ee3563a35c0adaa7a15ff66a97821ce65ad327162334bb1004f0571f26", "Title": "grpc-js: grpc-js: Authentication bypass via improper peer certificate validation", "Description": "@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.6 and 1.14.5, getAuthContext does not distinguish authorized from unauthorized peer certificates when server credentials set requireClientCertificate to false. When applications use the returned authentication context, they can treat an unauthorized certificate as authorized, causing improper authentication. @grpc/grpc-js-xds can reach this condition when RBAC authentication is enabled in affected configurations. This issue is fixed in version 1.14.5 and 1.13.6.", "Severity": "HIGH", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-101916", "https://advisory.echohq.com/cve/CVE-2026-101916", "https://github.com/grpc/grpc-node", "https://github.com/grpc/grpc-node/commit/2a84ec8b01b9db68ed9d2b117a53a81449edb8ee", "https://github.com/grpc/grpc-node/commit/b4e0079c6d22a2adedfcac748e0bc083f783bc7c", "https://github.com/grpc/grpc-node/releases/tag/@grpc/grpc-js@1.14.5", "https://github.com/grpc/grpc-node/security/advisories/GHSA-m9gg-hp2v-232j", "https://nvd.nist.gov/vuln/detail/CVE-2026-101916", "https://www.cve.org/CVERecord?id=CVE-2026-101916" ], "PublishedDate": "2026-09-28T21:17:13.03Z", "LastModifiedDate": "2026-10-01T15:17:25.083Z" }, { "VulnerabilityID": "CVE-2026-48068", "VendorIDs": [ "GHSA-5375-pq7m-f5r2" ], "PkgID": "@grpc/grpc-js@1.8.22", "PkgName": "@grpc/grpc-js", "PkgPath": "app/node_modules/@grpc/grpc-js/package.json", "PkgIdentifier": { "PURL": "pkg:npm/%40grpc/grpc-js@1.8.22", "UID": "75d465eb7550513d" }, "InstalledVersion": "1.8.22", "FixedVersion": "1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, 1.14.4", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48068", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:7c434d0f0edacc8d50310ec309f5f4b8c2f8973ddf9ae6070f23dd7dc61b46aa", "Title": "grpc-js: @grpc/grpc-js: Server crash via malformed HTTP/2 stream initiation", "Description": "@grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4, an invalid incoming HTTP/2 stream initiation can cause a server process created using @grpc/grpc-js to crash. This issue is fixed in versions 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4.", "Severity": "HIGH", "CweIDs": [ "CWE-248" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-48068", "https://advisory.echohq.com/cve/CVE-2026-48068", "https://github.com/advisories/GHSA-5375-pq7m-f5r2", "https://github.com/grpc/grpc-node", "https://github.com/grpc/grpc-node/commit/058665a6c6dae445e2ab0f3f6259164fac52ee17", "https://github.com/grpc/grpc-node/commit/1cf4bfa738b15e59cc3daf49ffa24c04f9b626f7", "https://github.com/grpc/grpc-node/commit/234f9172b2ff35e586ca7d4e788557aad5985668", "https://github.com/grpc/grpc-node/commit/455efce8acb7fb249652a74c1618a6d7daf1faba", "https://github.com/grpc/grpc-node/commit/b1b7268f7b81b92c6f03f5128dfd871c08aeb903", "https://github.com/grpc/grpc-node/commit/e2c035aab2fe5e55d46d5fc427481497314a53a4", "https://github.com/grpc/grpc-node/releases/tag/@grpc%2Fgrpc-js@1.10.12", "https://github.com/grpc/grpc-node/releases/tag/@grpc%2Fgrpc-js@1.11.4", "https://github.com/grpc/grpc-node/releases/tag/@grpc%2Fgrpc-js@1.12.7", "https://github.com/grpc/grpc-node/releases/tag/@grpc%2Fgrpc-js@1.13.5", "https://github.com/grpc/grpc-node/releases/tag/@grpc%2Fgrpc-js@1.14.4", "https://github.com/grpc/grpc-node/releases/tag/@grpc%2Fgrpc-js@1.9.16", "https://github.com/grpc/grpc-node/security/advisories/GHSA-5375-pq7m-f5r2", "https://nvd.nist.gov/vuln/detail/CVE-2026-48068", "https://www.cve.org/CVERecord?id=CVE-2026-48068" ], "PublishedDate": "2026-07-14T20:17:05.71Z", "LastModifiedDate": "2026-10-24T21:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-48069", "VendorIDs": [ "GHSA-99f4-grh7-6pcq" ], "PkgID": "@grpc/grpc-js@1.8.22", "PkgName": "@grpc/grpc-js", "PkgPath": "app/node_modules/@grpc/grpc-js/package.json", "PkgIdentifier": { "PURL": "pkg:npm/%40grpc/grpc-js@1.8.22", "UID": "75d465eb7550513d" }, "InstalledVersion": "1.8.22", "FixedVersion": "1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, 1.14.4", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48069", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:2559b12feba4c3ed672cfd3676ed6ae92d59218092420d2991647861b8ff01c8", "Title": "grpc-js: @grpc/grpc-js: Client or server crash via malformed compressed message", "Description": "@grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4, an invalid incoming compressed message can cause a client or server process that uses @grpc/grpc-js to crash. This issue is fixed in versions 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4.", "Severity": "HIGH", "CweIDs": [ "CWE-248" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-48069", "https://advisory.echohq.com/cve/CVE-2026-48069", "https://github.com/advisories/GHSA-99f4-grh7-6pcq", "https://github.com/grpc/grpc-node", "https://github.com/grpc/grpc-node/commit/2375eadcc52ca2b1ef55288bcd6355168b02706c", "https://github.com/grpc/grpc-node/commit/2fe55fd76a8bb59eaab5f39e3552b5f84985a163", "https://github.com/grpc/grpc-node/commit/4091bd902105f8fb655741758aee71418c48b5d5", "https://github.com/grpc/grpc-node/commit/b3f16094473b5c8f38b0955eafa4a19507127346", "https://github.com/grpc/grpc-node/commit/b61c4d65953db85c2ae55b4b3cd98a4259dc87cb", "https://github.com/grpc/grpc-node/commit/b6dcfc3cee9ef390e5869ebea5a8c5ae187720b9", "https://github.com/grpc/grpc-node/releases/tag/@grpc%2Fgrpc-js@1.10.12", "https://github.com/grpc/grpc-node/releases/tag/@grpc%2Fgrpc-js@1.11.4", "https://github.com/grpc/grpc-node/releases/tag/@grpc%2Fgrpc-js@1.12.7", "https://github.com/grpc/grpc-node/releases/tag/@grpc%2Fgrpc-js@1.13.5", "https://github.com/grpc/grpc-node/releases/tag/@grpc%2Fgrpc-js@1.14.4", "https://github.com/grpc/grpc-node/releases/tag/@grpc%2Fgrpc-js@1.9.16", "https://github.com/grpc/grpc-node/security/advisories/GHSA-99f4-grh7-6pcq", "https://nvd.nist.gov/vuln/detail/CVE-2026-48069", "https://www.cve.org/CVERecord?id=CVE-2026-48069" ], "PublishedDate": "2026-07-14T20:17:05.867Z", "LastModifiedDate": "2026-10-24T21:10:00.13Z" }, { "VulnerabilityID": "CVE-2025-27152", "VendorIDs": [ "GHSA-jr5f-v2jv-69x6" ], "PkgID": "axios@0.21.4", "PkgName": "axios", "PkgPath": "app/node_modules/axios-ntlm/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.21.4", "UID": "57358d64af9ceb17" }, "InstalledVersion": "0.21.4", "FixedVersion": "1.8.2, 0.30.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-27152", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:db5e96795d029e3657d7a9eb4404d87c3a0abaf37db55f406e930c2e6fa24c16", "Title": "axios: Possible SSRF and Credential Leakage via Absolute URL in axios Requests", "Description": "axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute URLs rather than protocol-relative URLs to axios. Even if ⁠baseURL is set, axios sends the request to the specified absolute URL, potentially causing SSRF and credential leakage. This issue impacts both server-side and client-side usage of axios. This issue is fixed in 1.8.2.", "Severity": "HIGH", "CweIDs": [ "CWE-918" ], "VendorSeverity": { "ghsa": 3, "nvd": 2, "redhat": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P", "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "V3Score": 5.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-27152", "https://advisory.echohq.com/cve/CVE-2025-27152", "https://github.com/advisories/GHSA-jr5f-v2jv-69x6", "https://github.com/axios/axios", "https://github.com/axios/axios/commit/02c3c69ced0f8fd86407c23203835892313d7fde", "https://github.com/axios/axios/commit/fb8eec214ce7744b5ca787f2c3b8339b2f54b00f", "https://github.com/axios/axios/issues/6463", "https://github.com/axios/axios/pull/6829", "https://github.com/axios/axios/releases/tag/v1.8.2", "https://github.com/axios/axios/security/advisories/GHSA-jr5f-v2jv-69x6", "https://nvd.nist.gov/vuln/detail/CVE-2025-27152", "https://www.cve.org/CVERecord?id=CVE-2025-27152" ], "PublishedDate": "2025-03-07T16:15:38.773Z", "LastModifiedDate": "2026-06-17T09:03:06.57Z" }, { "VulnerabilityID": "CVE-2026-25639", "VendorIDs": [ "GHSA-43fc-jf86-j433" ], "PkgID": "axios@0.21.4", "PkgName": "axios", "PkgPath": "app/node_modules/axios-ntlm/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.21.4", "UID": "57358d64af9ceb17" }, "InstalledVersion": "0.21.4", "FixedVersion": "1.13.5, 0.30.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-25639", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:a168a68dd5861684ea11c008c95e3486cd125993653a723623176cfb9751624f", "Title": "axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to versions 0.30.3 and 1.13.5, the mergeConfig function in axios crashes with a TypeError when processing configuration objects containing __proto__ as an own property. An attacker can trigger this by providing a malicious configuration object created via JSON.parse(), causing complete denial of service. This vulnerability is fixed in versions 0.30.3 and 1.13.5.", "Severity": "HIGH", "CweIDs": [ "CWE-754", "CWE-1287" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10184", "https://access.redhat.com/errata/RHSA-2026:11414", "https://access.redhat.com/errata/RHSA-2026:13542", "https://access.redhat.com/errata/RHSA-2026:13548", "https://access.redhat.com/errata/RHSA-2026:19712", "https://access.redhat.com/errata/RHSA-2026:25041", "https://access.redhat.com/errata/RHSA-2026:2694", "https://access.redhat.com/errata/RHSA-2026:3087", "https://access.redhat.com/errata/RHSA-2026:3105", "https://access.redhat.com/errata/RHSA-2026:3106", "https://access.redhat.com/errata/RHSA-2026:3107", "https://access.redhat.com/errata/RHSA-2026:3109", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:4942", "https://access.redhat.com/errata/RHSA-2026:5142", "https://access.redhat.com/errata/RHSA-2026:5168", "https://access.redhat.com/errata/RHSA-2026:5174", "https://access.redhat.com/errata/RHSA-2026:5633", "https://access.redhat.com/errata/RHSA-2026:5636", "https://access.redhat.com/errata/RHSA-2026:5665", "https://access.redhat.com/errata/RHSA-2026:5807", "https://access.redhat.com/errata/RHSA-2026:6170", "https://access.redhat.com/errata/RHSA-2026:6174", "https://access.redhat.com/errata/RHSA-2026:6192", "https://access.redhat.com/errata/RHSA-2026:6277", "https://access.redhat.com/errata/RHSA-2026:6308", "https://access.redhat.com/errata/RHSA-2026:6309", "https://access.redhat.com/errata/RHSA-2026:6428", "https://access.redhat.com/errata/RHSA-2026:6497", "https://access.redhat.com/errata/RHSA-2026:6567", "https://access.redhat.com/errata/RHSA-2026:6568", "https://access.redhat.com/errata/RHSA-2026:6802", "https://access.redhat.com/errata/RHSA-2026:7249", "https://access.redhat.com/errata/RHSA-2026:8218", "https://access.redhat.com/errata/RHSA-2026:8229", "https://access.redhat.com/errata/RHSA-2026:8499", "https://access.redhat.com/errata/RHSA-2026:8500", "https://access.redhat.com/errata/RHSA-2026:8501", "https://access.redhat.com/errata/RHSA-2026:9848", "https://access.redhat.com/security/cve/CVE-2026-25639", "https://advisory.echohq.com/cve/CVE-2026-25639", "https://bugzilla.redhat.com/show_bug.cgi?id=2438237", "https://github.com/advisories/GHSA-43fc-jf86-j433", "https://github.com/axios/axios", "https://github.com/axios/axios/commit/28c721588c7a77e7503d0a434e016f852c597b57", "https://github.com/axios/axios/commit/d7ff1409c68168d3057fc3891f911b2b92616f9e", "https://github.com/axios/axios/pull/7369", "https://github.com/axios/axios/pull/7388", "https://github.com/axios/axios/releases/tag/v0.30.3", "https://github.com/axios/axios/releases/tag/v1.13.5", "https://github.com/axios/axios/security/advisories/GHSA-43fc-jf86-j433", "https://nvd.nist.gov/vuln/detail/CVE-2026-25639", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25639.json", "https://www.cve.org/CVERecord?id=CVE-2026-25639" ], "PublishedDate": "2026-02-09T21:15:49.01Z", "LastModifiedDate": "2026-09-10T13:17:46Z" }, { "VulnerabilityID": "CVE-2026-42033", "VendorIDs": [ "GHSA-pf86-5x62-jrwf" ], "PkgID": "axios@0.21.4", "PkgName": "axios", "PkgPath": "app/node_modules/axios-ntlm/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.21.4", "UID": "57358d64af9ceb17" }, "InstalledVersion": "0.21.4", "FixedVersion": "1.15.1, 0.31.1", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42033", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:a1d21a91401c2e4cacd836b3391e1fa4279031039372e6c3a8e42c7efadad91a", "Title": "axios: Axios: HTTP Transport Hijacking via Prototype Pollution", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when Object.prototype has been polluted by any co-dependency with keys that axios reads without a hasOwnProperty guard, an attacker can (a) silently intercept and modify every JSON response before the application sees it, or (b) fully hijack the underlying HTTP transport, gaining access to request credentials, headers, and body. The precondition is prototype pollution from a separate source in the same process. This vulnerability is fixed in 1.15.1 and 0.31.1.", "Severity": "HIGH", "CweIDs": [ "CWE-1321", "CWE-915" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:14937", "https://access.redhat.com/errata/RHSA-2026:16476", "https://access.redhat.com/errata/RHSA-2026:16532", "https://access.redhat.com/errata/RHSA-2026:16534", "https://access.redhat.com/errata/RHSA-2026:16535", "https://access.redhat.com/errata/RHSA-2026:16542", "https://access.redhat.com/errata/RHSA-2026:16874", "https://access.redhat.com/errata/RHSA-2026:17468", "https://access.redhat.com/errata/RHSA-2026:17474", "https://access.redhat.com/errata/RHSA-2026:17657", "https://access.redhat.com/errata/RHSA-2026:17699", "https://access.redhat.com/errata/RHSA-2026:19109", "https://access.redhat.com/errata/RHSA-2026:19375", "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:21017", "https://access.redhat.com/errata/RHSA-2026:21338", "https://access.redhat.com/errata/RHSA-2026:21772", "https://access.redhat.com/errata/RHSA-2026:22465", "https://access.redhat.com/errata/RHSA-2026:22619", "https://access.redhat.com/errata/RHSA-2026:22629", "https://access.redhat.com/errata/RHSA-2026:22840", "https://access.redhat.com/errata/RHSA-2026:23361", "https://access.redhat.com/errata/RHSA-2026:24536", "https://access.redhat.com/errata/RHSA-2026:24539", "https://access.redhat.com/errata/RHSA-2026:24853", "https://access.redhat.com/errata/RHSA-2026:24977", "https://access.redhat.com/errata/RHSA-2026:25041", "https://access.redhat.com/errata/RHSA-2026:25089", "https://access.redhat.com/errata/RHSA-2026:25271", "https://access.redhat.com/errata/RHSA-2026:25273", "https://access.redhat.com/errata/RHSA-2026:26214", "https://access.redhat.com/errata/RHSA-2026:26225", "https://access.redhat.com/errata/RHSA-2026:26232", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:48670", "https://access.redhat.com/security/cve/CVE-2026-42033", "https://advisory.echohq.com/cve/CVE-2026-42033", "https://bugzilla.redhat.com/show_bug.cgi?id=2461607", "https://github.com/advisories/GHSA-pf86-5x62-jrwf", "https://github.com/axios/axios", "https://github.com/axios/axios/security/advisories/GHSA-pf86-5x62-jrwf", "https://nvd.nist.gov/vuln/detail/CVE-2026-42033", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42033.json", "https://www.cve.org/CVERecord?id=CVE-2026-42033" ], "PublishedDate": "2026-04-24T18:16:29.993Z", "LastModifiedDate": "2026-09-10T13:20:03.087Z" }, { "VulnerabilityID": "CVE-2026-42035", "VendorIDs": [ "GHSA-6chq-wfr3-2hj9" ], "PkgID": "axios@0.21.4", "PkgName": "axios", "PkgPath": "app/node_modules/axios-ntlm/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.21.4", "UID": "57358d64af9ceb17" }, "InstalledVersion": "0.21.4", "FixedVersion": "1.15.1, 0.31.1", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42035", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:a66ae02632f432d3709aeaa26465ccc4b436942fdbb18230a8e3733bba1e4f08", "Title": "axios: Axios: Arbitrary HTTP header injection via prototype pollution", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, a prototype pollution gadget exists in the Axios HTTP adapter (lib/adapters/http.js) that allows an attacker to inject arbitrary HTTP headers into outgoing requests. The vulnerability exploits duck-type checking of the data payload, where if Object.prototype is polluted with getHeaders, append, pipe, on, once, and Symbol.toStringTag, Axios misidentifies any plain object payload as a FormData instance and calls the attacker-controlled getHeaders() function, merging the returned headers into the outgoing request. The vulnerable code resides exclusively in lib/adapters/http.js. The prototype pollution source does not need to originate from Axios itself — any prototype pollution primitive in any dependency in the application's dependency tree is sufficient to trigger this gadget. This vulnerability is fixed in 1.15.1 and 0.31.1.", "Severity": "HIGH", "CweIDs": [ "CWE-113", "CWE-1321" ], "VendorSeverity": { "ghsa": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-42035", "https://advisory.echohq.com/cve/CVE-2026-42035", "https://github.com/advisories/GHSA-6chq-wfr3-2hj9", "https://github.com/axios/axios", "https://github.com/axios/axios/security/advisories/GHSA-6chq-wfr3-2hj9", "https://nvd.nist.gov/vuln/detail/CVE-2026-42035", "https://www.cve.org/CVERecord?id=CVE-2026-42035" ], "PublishedDate": "2026-04-24T18:16:30.273Z", "LastModifiedDate": "2026-06-17T10:47:20.66Z" }, { "VulnerabilityID": "CVE-2026-42043", "VendorIDs": [ "GHSA-pmwg-cvhr-8vh7" ], "PkgID": "axios@0.21.4", "PkgName": "axios", "PkgPath": "app/node_modules/axios-ntlm/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.21.4", "UID": "57358d64af9ceb17" }, "InstalledVersion": "0.21.4", "FixedVersion": "1.15.1, 0.31.1", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42043", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:71533978c6f9c1f9737f83ecc7b173e313ec95b7423f1ee026a76453b94427a9", "Title": "axios: Axios: NO_PROXY bypass via crafted URL", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, an attacker who can influence the target URL of an Axios request can use any address in the 127.0.0.0/8 range (other than 127.0.0.1) to completely bypass the NO_PROXY protection. This vulnerability is due to an incomplete for CVE-2025-62718, This vulnerability is fixed in 1.15.1 and 0.31.1.", "Severity": "HIGH", "CweIDs": [ "CWE-183", "CWE-441", "CWE-918" ], "VendorSeverity": { "ghsa": 3, "nvd": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "V3Score": 7.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "V3Score": 10 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "V3Score": 7.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:14937", "https://access.redhat.com/errata/RHSA-2026:16476", "https://access.redhat.com/errata/RHSA-2026:16532", "https://access.redhat.com/errata/RHSA-2026:16534", "https://access.redhat.com/errata/RHSA-2026:16535", "https://access.redhat.com/errata/RHSA-2026:16542", "https://access.redhat.com/errata/RHSA-2026:16874", "https://access.redhat.com/errata/RHSA-2026:17468", "https://access.redhat.com/errata/RHSA-2026:17474", "https://access.redhat.com/errata/RHSA-2026:17657", "https://access.redhat.com/errata/RHSA-2026:17699", "https://access.redhat.com/errata/RHSA-2026:19109", "https://access.redhat.com/errata/RHSA-2026:19375", "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:21017", "https://access.redhat.com/errata/RHSA-2026:21338", "https://access.redhat.com/errata/RHSA-2026:21772", "https://access.redhat.com/errata/RHSA-2026:22465", "https://access.redhat.com/errata/RHSA-2026:22619", "https://access.redhat.com/errata/RHSA-2026:22629", "https://access.redhat.com/errata/RHSA-2026:22840", "https://access.redhat.com/errata/RHSA-2026:23361", "https://access.redhat.com/errata/RHSA-2026:24536", "https://access.redhat.com/errata/RHSA-2026:24539", "https://access.redhat.com/errata/RHSA-2026:24853", "https://access.redhat.com/errata/RHSA-2026:24977", "https://access.redhat.com/errata/RHSA-2026:25041", "https://access.redhat.com/errata/RHSA-2026:25089", "https://access.redhat.com/errata/RHSA-2026:25271", "https://access.redhat.com/errata/RHSA-2026:25273", "https://access.redhat.com/errata/RHSA-2026:26214", "https://access.redhat.com/errata/RHSA-2026:26225", "https://access.redhat.com/errata/RHSA-2026:26232", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:48670", "https://access.redhat.com/security/cve/CVE-2026-42043", "https://advisory.echohq.com/cve/CVE-2026-42043", "https://bugzilla.redhat.com/show_bug.cgi?id=2461626", "https://github.com/advisories/GHSA-pmwg-cvhr-8vh7", "https://github.com/axios/axios", "https://github.com/axios/axios/security/advisories/GHSA-pmwg-cvhr-8vh7", "https://nvd.nist.gov/vuln/detail/CVE-2026-42043", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42043.json", "https://ubuntu.com/security/notices/USN-8638-1", "https://www.cve.org/CVERecord?id=CVE-2026-42043" ], "PublishedDate": "2026-04-24T18:16:31.457Z", "LastModifiedDate": "2026-09-10T13:20:04.973Z" }, { "VulnerabilityID": "CVE-2026-44486", "VendorIDs": [ "GHSA-j5f8-grm9-p9fc" ], "PkgID": "axios@0.21.4", "PkgName": "axios", "PkgPath": "app/node_modules/axios-ntlm/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.21.4", "UID": "57358d64af9ceb17" }, "InstalledVersion": "0.21.4", "FixedVersion": "1.16.0, 0.32.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44486", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:fa486b6defe8213d0852fde2d0b551c0a65680efded62d0c828c16baa4282b1a", "Title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios’ Node.js HTTP adapter can leak proxy credentials to a redirect target in affected versions. When a request is sent through an authenticated proxy, Axios may add a Proxy-Authorization header. If Axios then follows a redirect and the redirected request is no longer sent through that proxy, the stale Proxy-Authorization header can remain on the redirected request and be sent to the redirect target. This affects Node.js's use of Axios with automatic redirects enabled and an authenticated proxy configuration. Browser adapters are not affected. This vulnerability is fixed in 0.32.0 and 1.16.0.", "Severity": "HIGH", "CweIDs": [ "CWE-200", "CWE-201" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:27044", "https://access.redhat.com/errata/RHSA-2026:27063", "https://access.redhat.com/errata/RHSA-2026:28964", "https://access.redhat.com/errata/RHSA-2026:29082", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34766", "https://access.redhat.com/errata/RHSA-2026:36611", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41951", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42085", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50681", "https://access.redhat.com/errata/RHSA-2026:54188", "https://access.redhat.com/errata/RHSA-2026:54206", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:66488", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-44486", "https://advisory.echohq.com/cve/CVE-2026-44486", "https://bugzilla.redhat.com/show_bug.cgi?id=2487947", "https://github.com/advisories/GHSA-j5f8-grm9-p9fc", "https://github.com/axios/axios", "https://github.com/axios/axios/commit/afca61a070728e717203c2bc21e7b589b59b858b", "https://github.com/axios/axios/pull/10794", "https://github.com/axios/axios/releases/tag/v0.32.0", "https://github.com/axios/axios/releases/tag/v1.16.0", "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc", "https://nvd.nist.gov/vuln/detail/CVE-2026-44486", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44486.json", "https://www.cve.org/CVERecord?id=CVE-2026-44486" ], "PublishedDate": "2026-06-11T17:16:32.45Z", "LastModifiedDate": "2026-09-11T13:18:05.413Z" }, { "VulnerabilityID": "CVE-2026-44487", "VendorIDs": [ "GHSA-p92q-9vqr-4j8v" ], "PkgID": "axios@0.21.4", "PkgName": "axios", "PkgPath": "app/node_modules/axios-ntlm/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.21.4", "UID": "57358d64af9ceb17" }, "InstalledVersion": "0.21.4", "FixedVersion": "1.16.0, 0.32.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44487", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:4f861121883a5f33d300cb2d62ca0f6b44578bdc2536445f04df80cc32036e77", "Title": "axios: Axios: Information disclosure of proxy credentials via redirect flows", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios’s Node.js HTTP adapter may forward a Proxy-Authorization header to a redirected origin during specific proxy-to-direct redirect flows. This affects Node.js usage, where an initial HTTP request is sent through an authenticated HTTP proxy, redirects are followed, and the redirected URL is no longer proxied. Under affected redirect shapes, the final origin can receive the proxy credential that was intended only for the outbound proxy. This vulnerability is fixed in 0.32.0 and 1.16.0.", "Severity": "HIGH", "CweIDs": [ "CWE-201" ], "VendorSeverity": { "ghsa": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:27044", "https://access.redhat.com/errata/RHSA-2026:27063", "https://access.redhat.com/errata/RHSA-2026:28964", "https://access.redhat.com/errata/RHSA-2026:29082", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:29864", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34374", "https://access.redhat.com/errata/RHSA-2026:34525", "https://access.redhat.com/errata/RHSA-2026:34527", "https://access.redhat.com/errata/RHSA-2026:34530", "https://access.redhat.com/errata/RHSA-2026:36611", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40768", "https://access.redhat.com/errata/RHSA-2026:40792", "https://access.redhat.com/errata/RHSA-2026:40795", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41951", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42085", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:54188", "https://access.redhat.com/errata/RHSA-2026:54206", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:66488", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-44487", "https://advisory.echohq.com/cve/CVE-2026-44487", "https://bugzilla.redhat.com/show_bug.cgi?id=2487948", "https://github.com/advisories/GHSA-p92q-9vqr-4j8v", "https://github.com/axios/axios", "https://github.com/axios/axios/releases/tag/v0.32.0", "https://github.com/axios/axios/releases/tag/v1.16.0", "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v", "https://nvd.nist.gov/vuln/detail/CVE-2026-44487", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44487.json", "https://www.cve.org/CVERecord?id=CVE-2026-44487" ], "PublishedDate": "2026-06-11T17:16:32.607Z", "LastModifiedDate": "2026-09-11T13:18:06.053Z" }, { "VulnerabilityID": "CVE-2026-44492", "VendorIDs": [ "GHSA-pjwm-pj3p-43mv" ], "PkgID": "axios@0.21.4", "PkgName": "axios", "PkgPath": "app/node_modules/axios-ntlm/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.21.4", "UID": "57358d64af9ceb17" }, "InstalledVersion": "0.21.4", "FixedVersion": "1.16.0, 0.32.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44492", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:365b58a1bcc6cf143bd863a321f99156694532835c1ca12a62e72792599e47ee", "Title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios does not normalise IPv4-mapped IPv6 addresses. When NO_PROXY lists an IPv4 address such as 127.0.0.1 or 169.254.169.254, a request URL using the IPv4-mapped IPv6 form (::ffff:7f00:1, ::ffff:a9fe:a9fe) still routes through the configured proxy. Node.js resolves these addresses to the underlying IPv4 host, so the request reaches the internal service via the proxy rather than being blocked. This vulnerability is fixed in 0.32.0 and 1.16.0.", "Severity": "HIGH", "CweIDs": [ "CWE-918", "CWE-289" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "V3Score": 8.6 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "V3Score": 8.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:26234", "https://access.redhat.com/errata/RHSA-2026:27044", "https://access.redhat.com/errata/RHSA-2026:27063", "https://access.redhat.com/errata/RHSA-2026:28964", "https://access.redhat.com/errata/RHSA-2026:29082", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:33005", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34766", "https://access.redhat.com/errata/RHSA-2026:36108", "https://access.redhat.com/errata/RHSA-2026:36611", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:40119", "https://access.redhat.com/errata/RHSA-2026:40138", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41951", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42085", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:54188", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:66488", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-44492", "https://advisory.echohq.com/cve/CVE-2026-44492", "https://bugzilla.redhat.com/show_bug.cgi?id=2487938", "https://github.com/advisories/GHSA-pjwm-pj3p-43mv", "https://github.com/axios/axios", "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2025-62718", "https://nvd.nist.gov/vuln/detail/CVE-2026-44492", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44492.json", "https://www.cve.org/CVERecord?id=CVE-2026-44492" ], "PublishedDate": "2026-06-11T17:16:33.167Z", "LastModifiedDate": "2026-09-11T13:18:07.357Z" }, { "VulnerabilityID": "CVE-2026-44495", "VendorIDs": [ "GHSA-3g43-6gmg-66jw" ], "PkgID": "axios@0.21.4", "PkgName": "axios", "PkgPath": "app/node_modules/axios-ntlm/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.21.4", "UID": "57358d64af9ceb17" }, "InstalledVersion": "0.21.4", "FixedVersion": "1.15.2, 0.31.1", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44495", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:7c439af7d9b81281435a3797354aa3ddcfd7cdba7ff167c1bd7732282c0454d3", "Title": "axios: Axios: Information disclosure due to prototype pollution vulnerability", "Description": "Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another vulnerability in the same JavaScript process has already polluted Object.prototype.transformResponse, affected Axios versions may treat that inherited value as request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request. This vulnerability is fixed in 0.31.1 and 1.15.2.", "Severity": "HIGH", "CweIDs": [ "CWE-94", "CWE-1321", "CWE-915" ], "VendorSeverity": { "ghsa": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L", "V3Score": 7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H", "V3Score": 7.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:27044", "https://access.redhat.com/errata/RHSA-2026:27063", "https://access.redhat.com/errata/RHSA-2026:27944", "https://access.redhat.com/errata/RHSA-2026:28964", "https://access.redhat.com/errata/RHSA-2026:29082", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34160", "https://access.redhat.com/errata/RHSA-2026:34374", "https://access.redhat.com/errata/RHSA-2026:36108", "https://access.redhat.com/errata/RHSA-2026:36611", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40768", "https://access.redhat.com/errata/RHSA-2026:40792", "https://access.redhat.com/errata/RHSA-2026:40795", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41951", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:53840", "https://access.redhat.com/errata/RHSA-2026:54188", "https://access.redhat.com/errata/RHSA-2026:54555", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-44495", "https://advisory.echohq.com/cve/CVE-2026-44495", "https://bugzilla.redhat.com/show_bug.cgi?id=2487937", "https://github.com/advisories/GHSA-3g43-6gmg-66jw", "https://github.com/axios/axios", "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw", "https://nvd.nist.gov/vuln/detail/CVE-2026-44495", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44495.json", "https://www.cve.org/CVERecord?id=CVE-2026-44495" ], "PublishedDate": "2026-06-11T17:16:33.45Z", "LastModifiedDate": "2026-09-11T13:18:08.61Z" }, { "VulnerabilityID": "CVE-2026-44496", "VendorIDs": [ "GHSA-hfxv-24rg-xrqf" ], "PkgID": "axios@0.21.4", "PkgName": "axios", "PkgPath": "app/node_modules/axios-ntlm/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.21.4", "UID": "57358d64af9ceb17" }, "InstalledVersion": "0.21.4", "FixedVersion": "1.16.0, 0.32.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44496", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:9cae98687a6cc71f5841552ce845decb014a2eb8ab8b22cde7b293d4b4d578d7", "Title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a regular expression from the configured XSRF cookie name without escaping regex metacharacters. In standard browser environments, an attacker who can influence the cookie name passed to axios can cause expensive regex backtracking while axios reads document.cookie. The practical impact is client-side availability degradation, such as freezing the affected browser tab while axios prepares a request. The issue does not affect ordinary Node.js HTTP adapter usage, React Native, or web workers, where axios does not read document.cookie. This vulnerability is fixed in 0.32.0 and 1.16.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-1333" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:27044", "https://access.redhat.com/errata/RHSA-2026:27063", "https://access.redhat.com/errata/RHSA-2026:28571", "https://access.redhat.com/errata/RHSA-2026:28964", "https://access.redhat.com/errata/RHSA-2026:29082", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:30076", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:33683", "https://access.redhat.com/errata/RHSA-2026:34766", "https://access.redhat.com/errata/RHSA-2026:36611", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41951", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42085", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:59360", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:66488", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-44496", "https://advisory.echohq.com/cve/CVE-2026-44496", "https://bugzilla.redhat.com/show_bug.cgi?id=2487943", "https://github.com/advisories/GHSA-hfxv-24rg-xrqf", "https://github.com/axios/axios", "https://github.com/axios/axios/releases/tag/v0.32.0", "https://github.com/axios/axios/releases/tag/v1.16.0", "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf", "https://nvd.nist.gov/vuln/detail/CVE-2026-44496", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44496.json", "https://www.cve.org/CVERecord?id=CVE-2026-44496" ], "PublishedDate": "2026-06-11T17:16:33.59Z", "LastModifiedDate": "2026-09-11T13:18:09.287Z" }, { "VulnerabilityID": "CVE-2026-101909", "VendorIDs": [ "GHSA-x97p-jq2g-jp4f" ], "PkgID": "axios@0.30.2", "PkgName": "axios", "PkgPath": "app/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.30.2", "UID": "90d7522b6e9757da" }, "InstalledVersion": "0.30.2", "FixedVersion": "0.34.0, 1.20.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-101909", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:b0ba83b40e033b2ab6d0ebbb616089a83a0b733b4e9e6b2ca7b6c4908b4e96a9", "Title": "axios: axios: Denial of Service via prototype pollution gadget in form serialization", "Description": "Axios is a promise-based HTTP client for the browser and Node.js. From 0.28.0 until 0.34.0 and 1.15.1 until 1.20.0, ToFormData processes inherited serialization options and visitor properties supplied through prototype pollution. A separate same-process prototype-pollution flaw supplies inherited dots, indexes, metaTokens, maxDepth, visitor, or Blob values before object serialization. The inherited options alter toFormData field naming and data interpretation, maxDepth can force request failure, Blob changes value handling, and a polluted visitor can execute when an attacker already has the stronger ability to inject a function. Serialized field naming and data interpretation can change, maxDepth can cause request failure, Blob can alter value handling, and a polluted visitor can execute under the stronger function-injection primitive. This issue is fixed in versions 0.34.0 and 1.20.0.", "Severity": "HIGH", "CweIDs": [ "CWE-1321" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-101909", "https://advisory.echohq.com/cve/CVE-2026-101909", "https://github.com/axios/axios", "https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a", "https://github.com/axios/axios/commit/d29be181f85f6fe93397a07b1f69606d9622637b", "https://github.com/axios/axios/pull/11141", "https://github.com/axios/axios/releases/tag/v0.34.0", "https://github.com/axios/axios/releases/tag/v1.20.0", "https://github.com/axios/axios/security/advisories/GHSA-x97p-jq2g-jp4f", "https://nvd.nist.gov/vuln/detail/CVE-2026-101909", "https://www.cve.org/CVERecord?id=CVE-2026-101909" ], "PublishedDate": "2026-09-28T18:17:19.68Z", "LastModifiedDate": "2026-10-01T15:17:24.67Z" }, { "VulnerabilityID": "CVE-2026-25639", "VendorIDs": [ "GHSA-43fc-jf86-j433" ], "PkgID": "axios@0.30.2", "PkgName": "axios", "PkgPath": "app/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.30.2", "UID": "90d7522b6e9757da" }, "InstalledVersion": "0.30.2", "FixedVersion": "1.13.5, 0.30.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-25639", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:745ed987d31aaff6e3d1e7e915ed56118a4fb93ef5aa043a1946dc34b1bb8128", "Title": "axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to versions 0.30.3 and 1.13.5, the mergeConfig function in axios crashes with a TypeError when processing configuration objects containing __proto__ as an own property. An attacker can trigger this by providing a malicious configuration object created via JSON.parse(), causing complete denial of service. This vulnerability is fixed in versions 0.30.3 and 1.13.5.", "Severity": "HIGH", "CweIDs": [ "CWE-754", "CWE-1287" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10184", "https://access.redhat.com/errata/RHSA-2026:11414", "https://access.redhat.com/errata/RHSA-2026:13542", "https://access.redhat.com/errata/RHSA-2026:13548", "https://access.redhat.com/errata/RHSA-2026:19712", "https://access.redhat.com/errata/RHSA-2026:25041", "https://access.redhat.com/errata/RHSA-2026:2694", "https://access.redhat.com/errata/RHSA-2026:3087", "https://access.redhat.com/errata/RHSA-2026:3105", "https://access.redhat.com/errata/RHSA-2026:3106", "https://access.redhat.com/errata/RHSA-2026:3107", "https://access.redhat.com/errata/RHSA-2026:3109", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:4942", "https://access.redhat.com/errata/RHSA-2026:5142", "https://access.redhat.com/errata/RHSA-2026:5168", "https://access.redhat.com/errata/RHSA-2026:5174", "https://access.redhat.com/errata/RHSA-2026:5633", "https://access.redhat.com/errata/RHSA-2026:5636", "https://access.redhat.com/errata/RHSA-2026:5665", "https://access.redhat.com/errata/RHSA-2026:5807", "https://access.redhat.com/errata/RHSA-2026:6170", "https://access.redhat.com/errata/RHSA-2026:6174", "https://access.redhat.com/errata/RHSA-2026:6192", "https://access.redhat.com/errata/RHSA-2026:6277", "https://access.redhat.com/errata/RHSA-2026:6308", "https://access.redhat.com/errata/RHSA-2026:6309", "https://access.redhat.com/errata/RHSA-2026:6428", "https://access.redhat.com/errata/RHSA-2026:6497", "https://access.redhat.com/errata/RHSA-2026:6567", "https://access.redhat.com/errata/RHSA-2026:6568", "https://access.redhat.com/errata/RHSA-2026:6802", "https://access.redhat.com/errata/RHSA-2026:7249", "https://access.redhat.com/errata/RHSA-2026:8218", "https://access.redhat.com/errata/RHSA-2026:8229", "https://access.redhat.com/errata/RHSA-2026:8499", "https://access.redhat.com/errata/RHSA-2026:8500", "https://access.redhat.com/errata/RHSA-2026:8501", "https://access.redhat.com/errata/RHSA-2026:9848", "https://access.redhat.com/security/cve/CVE-2026-25639", "https://advisory.echohq.com/cve/CVE-2026-25639", "https://bugzilla.redhat.com/show_bug.cgi?id=2438237", "https://github.com/advisories/GHSA-43fc-jf86-j433", "https://github.com/axios/axios", "https://github.com/axios/axios/commit/28c721588c7a77e7503d0a434e016f852c597b57", "https://github.com/axios/axios/commit/d7ff1409c68168d3057fc3891f911b2b92616f9e", "https://github.com/axios/axios/pull/7369", "https://github.com/axios/axios/pull/7388", "https://github.com/axios/axios/releases/tag/v0.30.3", "https://github.com/axios/axios/releases/tag/v1.13.5", "https://github.com/axios/axios/security/advisories/GHSA-43fc-jf86-j433", "https://nvd.nist.gov/vuln/detail/CVE-2026-25639", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25639.json", "https://www.cve.org/CVERecord?id=CVE-2026-25639" ], "PublishedDate": "2026-02-09T21:15:49.01Z", "LastModifiedDate": "2026-09-10T13:17:46Z" }, { "VulnerabilityID": "CVE-2026-42033", "VendorIDs": [ "GHSA-pf86-5x62-jrwf" ], "PkgID": "axios@0.30.2", "PkgName": "axios", "PkgPath": "app/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.30.2", "UID": "90d7522b6e9757da" }, "InstalledVersion": "0.30.2", "FixedVersion": "1.15.1, 0.31.1", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42033", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:0b03a7acdd70dddf2236fea5c21e239dbd57d9a3d2f36f1bd57ed0d194d22f83", "Title": "axios: Axios: HTTP Transport Hijacking via Prototype Pollution", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when Object.prototype has been polluted by any co-dependency with keys that axios reads without a hasOwnProperty guard, an attacker can (a) silently intercept and modify every JSON response before the application sees it, or (b) fully hijack the underlying HTTP transport, gaining access to request credentials, headers, and body. The precondition is prototype pollution from a separate source in the same process. This vulnerability is fixed in 1.15.1 and 0.31.1.", "Severity": "HIGH", "CweIDs": [ "CWE-1321", "CWE-915" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:14937", "https://access.redhat.com/errata/RHSA-2026:16476", "https://access.redhat.com/errata/RHSA-2026:16532", "https://access.redhat.com/errata/RHSA-2026:16534", "https://access.redhat.com/errata/RHSA-2026:16535", "https://access.redhat.com/errata/RHSA-2026:16542", "https://access.redhat.com/errata/RHSA-2026:16874", "https://access.redhat.com/errata/RHSA-2026:17468", "https://access.redhat.com/errata/RHSA-2026:17474", "https://access.redhat.com/errata/RHSA-2026:17657", "https://access.redhat.com/errata/RHSA-2026:17699", "https://access.redhat.com/errata/RHSA-2026:19109", "https://access.redhat.com/errata/RHSA-2026:19375", "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:21017", "https://access.redhat.com/errata/RHSA-2026:21338", "https://access.redhat.com/errata/RHSA-2026:21772", "https://access.redhat.com/errata/RHSA-2026:22465", "https://access.redhat.com/errata/RHSA-2026:22619", "https://access.redhat.com/errata/RHSA-2026:22629", "https://access.redhat.com/errata/RHSA-2026:22840", "https://access.redhat.com/errata/RHSA-2026:23361", "https://access.redhat.com/errata/RHSA-2026:24536", "https://access.redhat.com/errata/RHSA-2026:24539", "https://access.redhat.com/errata/RHSA-2026:24853", "https://access.redhat.com/errata/RHSA-2026:24977", "https://access.redhat.com/errata/RHSA-2026:25041", "https://access.redhat.com/errata/RHSA-2026:25089", "https://access.redhat.com/errata/RHSA-2026:25271", "https://access.redhat.com/errata/RHSA-2026:25273", "https://access.redhat.com/errata/RHSA-2026:26214", "https://access.redhat.com/errata/RHSA-2026:26225", "https://access.redhat.com/errata/RHSA-2026:26232", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:48670", "https://access.redhat.com/security/cve/CVE-2026-42033", "https://advisory.echohq.com/cve/CVE-2026-42033", "https://bugzilla.redhat.com/show_bug.cgi?id=2461607", "https://github.com/advisories/GHSA-pf86-5x62-jrwf", "https://github.com/axios/axios", "https://github.com/axios/axios/security/advisories/GHSA-pf86-5x62-jrwf", "https://nvd.nist.gov/vuln/detail/CVE-2026-42033", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42033.json", "https://www.cve.org/CVERecord?id=CVE-2026-42033" ], "PublishedDate": "2026-04-24T18:16:29.993Z", "LastModifiedDate": "2026-09-10T13:20:03.087Z" }, { "VulnerabilityID": "CVE-2026-42035", "VendorIDs": [ "GHSA-6chq-wfr3-2hj9" ], "PkgID": "axios@0.30.2", "PkgName": "axios", "PkgPath": "app/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.30.2", "UID": "90d7522b6e9757da" }, "InstalledVersion": "0.30.2", "FixedVersion": "1.15.1, 0.31.1", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42035", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:4882b348d2e0c14fbfcd831248a49020bb8fa0115b9a4c588ff15c6217c2925b", "Title": "axios: Axios: Arbitrary HTTP header injection via prototype pollution", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, a prototype pollution gadget exists in the Axios HTTP adapter (lib/adapters/http.js) that allows an attacker to inject arbitrary HTTP headers into outgoing requests. The vulnerability exploits duck-type checking of the data payload, where if Object.prototype is polluted with getHeaders, append, pipe, on, once, and Symbol.toStringTag, Axios misidentifies any plain object payload as a FormData instance and calls the attacker-controlled getHeaders() function, merging the returned headers into the outgoing request. The vulnerable code resides exclusively in lib/adapters/http.js. The prototype pollution source does not need to originate from Axios itself — any prototype pollution primitive in any dependency in the application's dependency tree is sufficient to trigger this gadget. This vulnerability is fixed in 1.15.1 and 0.31.1.", "Severity": "HIGH", "CweIDs": [ "CWE-113", "CWE-1321" ], "VendorSeverity": { "ghsa": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-42035", "https://advisory.echohq.com/cve/CVE-2026-42035", "https://github.com/advisories/GHSA-6chq-wfr3-2hj9", "https://github.com/axios/axios", "https://github.com/axios/axios/security/advisories/GHSA-6chq-wfr3-2hj9", "https://nvd.nist.gov/vuln/detail/CVE-2026-42035", "https://www.cve.org/CVERecord?id=CVE-2026-42035" ], "PublishedDate": "2026-04-24T18:16:30.273Z", "LastModifiedDate": "2026-06-17T10:47:20.66Z" }, { "VulnerabilityID": "CVE-2026-42043", "VendorIDs": [ "GHSA-pmwg-cvhr-8vh7" ], "PkgID": "axios@0.30.2", "PkgName": "axios", "PkgPath": "app/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.30.2", "UID": "90d7522b6e9757da" }, "InstalledVersion": "0.30.2", "FixedVersion": "1.15.1, 0.31.1", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42043", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:466cd4cdd373689215eb04324d0e137d8459bbffdb72032de1165296c83db52b", "Title": "axios: Axios: NO_PROXY bypass via crafted URL", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, an attacker who can influence the target URL of an Axios request can use any address in the 127.0.0.0/8 range (other than 127.0.0.1) to completely bypass the NO_PROXY protection. This vulnerability is due to an incomplete for CVE-2025-62718, This vulnerability is fixed in 1.15.1 and 0.31.1.", "Severity": "HIGH", "CweIDs": [ "CWE-183", "CWE-441", "CWE-918" ], "VendorSeverity": { "ghsa": 3, "nvd": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "V3Score": 7.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "V3Score": 10 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "V3Score": 7.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:14937", "https://access.redhat.com/errata/RHSA-2026:16476", "https://access.redhat.com/errata/RHSA-2026:16532", "https://access.redhat.com/errata/RHSA-2026:16534", "https://access.redhat.com/errata/RHSA-2026:16535", "https://access.redhat.com/errata/RHSA-2026:16542", "https://access.redhat.com/errata/RHSA-2026:16874", "https://access.redhat.com/errata/RHSA-2026:17468", "https://access.redhat.com/errata/RHSA-2026:17474", "https://access.redhat.com/errata/RHSA-2026:17657", "https://access.redhat.com/errata/RHSA-2026:17699", "https://access.redhat.com/errata/RHSA-2026:19109", "https://access.redhat.com/errata/RHSA-2026:19375", "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:21017", "https://access.redhat.com/errata/RHSA-2026:21338", "https://access.redhat.com/errata/RHSA-2026:21772", "https://access.redhat.com/errata/RHSA-2026:22465", "https://access.redhat.com/errata/RHSA-2026:22619", "https://access.redhat.com/errata/RHSA-2026:22629", "https://access.redhat.com/errata/RHSA-2026:22840", "https://access.redhat.com/errata/RHSA-2026:23361", "https://access.redhat.com/errata/RHSA-2026:24536", "https://access.redhat.com/errata/RHSA-2026:24539", "https://access.redhat.com/errata/RHSA-2026:24853", "https://access.redhat.com/errata/RHSA-2026:24977", "https://access.redhat.com/errata/RHSA-2026:25041", "https://access.redhat.com/errata/RHSA-2026:25089", "https://access.redhat.com/errata/RHSA-2026:25271", "https://access.redhat.com/errata/RHSA-2026:25273", "https://access.redhat.com/errata/RHSA-2026:26214", "https://access.redhat.com/errata/RHSA-2026:26225", "https://access.redhat.com/errata/RHSA-2026:26232", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:48670", "https://access.redhat.com/security/cve/CVE-2026-42043", "https://advisory.echohq.com/cve/CVE-2026-42043", "https://bugzilla.redhat.com/show_bug.cgi?id=2461626", "https://github.com/advisories/GHSA-pmwg-cvhr-8vh7", "https://github.com/axios/axios", "https://github.com/axios/axios/security/advisories/GHSA-pmwg-cvhr-8vh7", "https://nvd.nist.gov/vuln/detail/CVE-2026-42043", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42043.json", "https://ubuntu.com/security/notices/USN-8638-1", "https://www.cve.org/CVERecord?id=CVE-2026-42043" ], "PublishedDate": "2026-04-24T18:16:31.457Z", "LastModifiedDate": "2026-09-10T13:20:04.973Z" }, { "VulnerabilityID": "CVE-2026-44486", "VendorIDs": [ "GHSA-j5f8-grm9-p9fc" ], "PkgID": "axios@0.30.2", "PkgName": "axios", "PkgPath": "app/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.30.2", "UID": "90d7522b6e9757da" }, "InstalledVersion": "0.30.2", "FixedVersion": "1.16.0, 0.32.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44486", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:6d73508e87db59cfaeb3a88ce90b3d85a302c4930f01e5a42d5d5330d2968eef", "Title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios’ Node.js HTTP adapter can leak proxy credentials to a redirect target in affected versions. When a request is sent through an authenticated proxy, Axios may add a Proxy-Authorization header. If Axios then follows a redirect and the redirected request is no longer sent through that proxy, the stale Proxy-Authorization header can remain on the redirected request and be sent to the redirect target. This affects Node.js's use of Axios with automatic redirects enabled and an authenticated proxy configuration. Browser adapters are not affected. This vulnerability is fixed in 0.32.0 and 1.16.0.", "Severity": "HIGH", "CweIDs": [ "CWE-200", "CWE-201" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:27044", "https://access.redhat.com/errata/RHSA-2026:27063", "https://access.redhat.com/errata/RHSA-2026:28964", "https://access.redhat.com/errata/RHSA-2026:29082", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34766", "https://access.redhat.com/errata/RHSA-2026:36611", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41951", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42085", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50681", "https://access.redhat.com/errata/RHSA-2026:54188", "https://access.redhat.com/errata/RHSA-2026:54206", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:66488", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-44486", "https://advisory.echohq.com/cve/CVE-2026-44486", "https://bugzilla.redhat.com/show_bug.cgi?id=2487947", "https://github.com/advisories/GHSA-j5f8-grm9-p9fc", "https://github.com/axios/axios", "https://github.com/axios/axios/commit/afca61a070728e717203c2bc21e7b589b59b858b", "https://github.com/axios/axios/pull/10794", "https://github.com/axios/axios/releases/tag/v0.32.0", "https://github.com/axios/axios/releases/tag/v1.16.0", "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc", "https://nvd.nist.gov/vuln/detail/CVE-2026-44486", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44486.json", "https://www.cve.org/CVERecord?id=CVE-2026-44486" ], "PublishedDate": "2026-06-11T17:16:32.45Z", "LastModifiedDate": "2026-09-11T13:18:05.413Z" }, { "VulnerabilityID": "CVE-2026-44487", "VendorIDs": [ "GHSA-p92q-9vqr-4j8v" ], "PkgID": "axios@0.30.2", "PkgName": "axios", "PkgPath": "app/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.30.2", "UID": "90d7522b6e9757da" }, "InstalledVersion": "0.30.2", "FixedVersion": "1.16.0, 0.32.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44487", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:61992cabad9800732706e66e9975a56f8fc3582c7dcafd7e989570fc8278de81", "Title": "axios: Axios: Information disclosure of proxy credentials via redirect flows", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios’s Node.js HTTP adapter may forward a Proxy-Authorization header to a redirected origin during specific proxy-to-direct redirect flows. This affects Node.js usage, where an initial HTTP request is sent through an authenticated HTTP proxy, redirects are followed, and the redirected URL is no longer proxied. Under affected redirect shapes, the final origin can receive the proxy credential that was intended only for the outbound proxy. This vulnerability is fixed in 0.32.0 and 1.16.0.", "Severity": "HIGH", "CweIDs": [ "CWE-201" ], "VendorSeverity": { "ghsa": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:27044", "https://access.redhat.com/errata/RHSA-2026:27063", "https://access.redhat.com/errata/RHSA-2026:28964", "https://access.redhat.com/errata/RHSA-2026:29082", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:29864", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34374", "https://access.redhat.com/errata/RHSA-2026:34525", "https://access.redhat.com/errata/RHSA-2026:34527", "https://access.redhat.com/errata/RHSA-2026:34530", "https://access.redhat.com/errata/RHSA-2026:36611", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40768", "https://access.redhat.com/errata/RHSA-2026:40792", "https://access.redhat.com/errata/RHSA-2026:40795", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41951", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42085", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:54188", "https://access.redhat.com/errata/RHSA-2026:54206", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:66488", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-44487", "https://advisory.echohq.com/cve/CVE-2026-44487", "https://bugzilla.redhat.com/show_bug.cgi?id=2487948", "https://github.com/advisories/GHSA-p92q-9vqr-4j8v", "https://github.com/axios/axios", "https://github.com/axios/axios/releases/tag/v0.32.0", "https://github.com/axios/axios/releases/tag/v1.16.0", "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v", "https://nvd.nist.gov/vuln/detail/CVE-2026-44487", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44487.json", "https://www.cve.org/CVERecord?id=CVE-2026-44487" ], "PublishedDate": "2026-06-11T17:16:32.607Z", "LastModifiedDate": "2026-09-11T13:18:06.053Z" }, { "VulnerabilityID": "CVE-2026-44492", "VendorIDs": [ "GHSA-pjwm-pj3p-43mv" ], "PkgID": "axios@0.30.2", "PkgName": "axios", "PkgPath": "app/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.30.2", "UID": "90d7522b6e9757da" }, "InstalledVersion": "0.30.2", "FixedVersion": "1.16.0, 0.32.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44492", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:c133ba083b6cd8286431b10738473c78e4520ce4341b324cebc40d8f72ef3726", "Title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios does not normalise IPv4-mapped IPv6 addresses. When NO_PROXY lists an IPv4 address such as 127.0.0.1 or 169.254.169.254, a request URL using the IPv4-mapped IPv6 form (::ffff:7f00:1, ::ffff:a9fe:a9fe) still routes through the configured proxy. Node.js resolves these addresses to the underlying IPv4 host, so the request reaches the internal service via the proxy rather than being blocked. This vulnerability is fixed in 0.32.0 and 1.16.0.", "Severity": "HIGH", "CweIDs": [ "CWE-918", "CWE-289" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "V3Score": 8.6 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "V3Score": 8.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:26234", "https://access.redhat.com/errata/RHSA-2026:27044", "https://access.redhat.com/errata/RHSA-2026:27063", "https://access.redhat.com/errata/RHSA-2026:28964", "https://access.redhat.com/errata/RHSA-2026:29082", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:33005", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34766", "https://access.redhat.com/errata/RHSA-2026:36108", "https://access.redhat.com/errata/RHSA-2026:36611", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:40119", "https://access.redhat.com/errata/RHSA-2026:40138", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41951", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42085", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:54188", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:66488", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-44492", "https://advisory.echohq.com/cve/CVE-2026-44492", "https://bugzilla.redhat.com/show_bug.cgi?id=2487938", "https://github.com/advisories/GHSA-pjwm-pj3p-43mv", "https://github.com/axios/axios", "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2025-62718", "https://nvd.nist.gov/vuln/detail/CVE-2026-44492", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44492.json", "https://www.cve.org/CVERecord?id=CVE-2026-44492" ], "PublishedDate": "2026-06-11T17:16:33.167Z", "LastModifiedDate": "2026-09-11T13:18:07.357Z" }, { "VulnerabilityID": "CVE-2026-44495", "VendorIDs": [ "GHSA-3g43-6gmg-66jw" ], "PkgID": "axios@0.30.2", "PkgName": "axios", "PkgPath": "app/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.30.2", "UID": "90d7522b6e9757da" }, "InstalledVersion": "0.30.2", "FixedVersion": "1.15.2, 0.31.1", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44495", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:53606bdd0bfcdbd405896544c6224901100b8f5d741ab1b1282c78b82a5e7e04", "Title": "axios: Axios: Information disclosure due to prototype pollution vulnerability", "Description": "Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another vulnerability in the same JavaScript process has already polluted Object.prototype.transformResponse, affected Axios versions may treat that inherited value as request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request. This vulnerability is fixed in 0.31.1 and 1.15.2.", "Severity": "HIGH", "CweIDs": [ "CWE-94", "CWE-1321", "CWE-915" ], "VendorSeverity": { "ghsa": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L", "V3Score": 7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H", "V3Score": 7.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:27044", "https://access.redhat.com/errata/RHSA-2026:27063", "https://access.redhat.com/errata/RHSA-2026:27944", "https://access.redhat.com/errata/RHSA-2026:28964", "https://access.redhat.com/errata/RHSA-2026:29082", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34160", "https://access.redhat.com/errata/RHSA-2026:34374", "https://access.redhat.com/errata/RHSA-2026:36108", "https://access.redhat.com/errata/RHSA-2026:36611", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40768", "https://access.redhat.com/errata/RHSA-2026:40792", "https://access.redhat.com/errata/RHSA-2026:40795", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41951", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:53840", "https://access.redhat.com/errata/RHSA-2026:54188", "https://access.redhat.com/errata/RHSA-2026:54555", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-44495", "https://advisory.echohq.com/cve/CVE-2026-44495", "https://bugzilla.redhat.com/show_bug.cgi?id=2487937", "https://github.com/advisories/GHSA-3g43-6gmg-66jw", "https://github.com/axios/axios", "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw", "https://nvd.nist.gov/vuln/detail/CVE-2026-44495", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44495.json", "https://www.cve.org/CVERecord?id=CVE-2026-44495" ], "PublishedDate": "2026-06-11T17:16:33.45Z", "LastModifiedDate": "2026-09-11T13:18:08.61Z" }, { "VulnerabilityID": "CVE-2026-44496", "VendorIDs": [ "GHSA-hfxv-24rg-xrqf" ], "PkgID": "axios@0.30.2", "PkgName": "axios", "PkgPath": "app/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.30.2", "UID": "90d7522b6e9757da" }, "InstalledVersion": "0.30.2", "FixedVersion": "1.16.0, 0.32.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44496", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:9352493e982b34930f34ff5f6bd440582dea6e50c15cac8f1c720412e7d997ad", "Title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a regular expression from the configured XSRF cookie name without escaping regex metacharacters. In standard browser environments, an attacker who can influence the cookie name passed to axios can cause expensive regex backtracking while axios reads document.cookie. The practical impact is client-side availability degradation, such as freezing the affected browser tab while axios prepares a request. The issue does not affect ordinary Node.js HTTP adapter usage, React Native, or web workers, where axios does not read document.cookie. This vulnerability is fixed in 0.32.0 and 1.16.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-1333" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:27044", "https://access.redhat.com/errata/RHSA-2026:27063", "https://access.redhat.com/errata/RHSA-2026:28571", "https://access.redhat.com/errata/RHSA-2026:28964", "https://access.redhat.com/errata/RHSA-2026:29082", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:30076", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:33683", "https://access.redhat.com/errata/RHSA-2026:34766", "https://access.redhat.com/errata/RHSA-2026:36611", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41951", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42085", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:59360", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:66488", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-44496", "https://advisory.echohq.com/cve/CVE-2026-44496", "https://bugzilla.redhat.com/show_bug.cgi?id=2487943", "https://github.com/advisories/GHSA-hfxv-24rg-xrqf", "https://github.com/axios/axios", "https://github.com/axios/axios/releases/tag/v0.32.0", "https://github.com/axios/axios/releases/tag/v1.16.0", "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf", "https://nvd.nist.gov/vuln/detail/CVE-2026-44496", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44496.json", "https://www.cve.org/CVERecord?id=CVE-2026-44496" ], "PublishedDate": "2026-06-11T17:16:33.59Z", "LastModifiedDate": "2026-09-11T13:18:09.287Z" }, { "VulnerabilityID": "CVE-2026-111181", "VendorIDs": [ "GHSA-27r3-jxmh-p828" ], "PkgID": "body-parser@1.20.3", "PkgName": "body-parser", "PkgPath": "app/node_modules/body-parser/package.json", "PkgIdentifier": { "PURL": "pkg:npm/body-parser@1.20.3", "UID": "3885ef93734d8a1b" }, "InstalledVersion": "1.20.3", "FixedVersion": "2.4.0, 1.20.9", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-111181", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:32a5938028ad21f59b33f11b04938c538022d7e2762cb54bad28f5d263bf8366", "Title": "body-parser: body-parser: Denial of Service via unhandled decompression stream error", "Description": "body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash any application using body-parser with default options. When a request carries a Content-Encoding such as gzip, body-parser pipes it into a decompression stream and, after reading the body, leaves that stream with no error listener. A payload of one valid compressed frame followed by trailing bytes decodes and the application responds normally, but the trailing bytes then reach the already-finished decoder, which emits an error that is re-thrown as an uncaught exception and terminates the process. No matching route is required because body parsing runs before routing, so any endpoint that parses a body is affected. The issue is fixed in body-parser 2.4.0 and 1.20.9, and users should upgrade to one of those versions or later. As a workaround, disable request-body inflation (set the body-parser inflate option to false) so encoded requests are rejected before any decompression stream is created.", "Severity": "HIGH", "CweIDs": [ "CWE-248" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-111181", "https://advisory.echohq.com/cve/CVE-2026-111181", "https://cna.openjsf.org/security-advisories.html", "https://github.com/expressjs/body-parser", "https://github.com/expressjs/body-parser/commit/1260c3845f54502a05a87594f09a334786bb34d7", "https://github.com/expressjs/body-parser/commit/f7075eae3a84c3473ab4bf0a777da28db208e916", "https://github.com/expressjs/body-parser/releases/tag/1.20.9", "https://github.com/expressjs/body-parser/releases/tag/v2.4.0", "https://github.com/expressjs/body-parser/security/advisories/GHSA-27r3-jxmh-p828", "https://nvd.nist.gov/vuln/detail/CVE-2026-111181", "https://www.cve.org/CVERecord?id=CVE-2026-111181" ], "PublishedDate": "2026-10-22T15:17:04.763Z", "LastModifiedDate": "2026-10-22T19:17:35.797Z" }, { "VulnerabilityID": "CVE-2026-102276", "VendorIDs": [ "GHSA-6j4f-fj2g-mc7p" ], "PkgID": "brace-expansion@1.1.12", "PkgName": "brace-expansion", "PkgPath": "app/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@1.1.12", "UID": "daa018f1f2c1d0e1" }, "InstalledVersion": "1.1.12", "FixedVersion": "5.0.10, 3.0.7, 2.1.5, 1.1.19", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102276", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:84d4c0e892676e965b66edecfb1f9dd9b050eace1c747a05f6b9b9122ce1143f", "Title": "brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns", "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per brace group and uses push.apply to pass every element of a very large comma-part array as a function argument. Patterns containing many comma-separated brace groups trigger the recursive path, while the large array triggers the argument-array path without deep recursion. These paths cause recursive and argument-array native stack exhaustion before max or maxLength can limit output, potentially terminating the Node.js process in a process-terminating denial of service. This issue is fixed in versions 1.1.19, 2.1.5, 3.0.7, and 5.0.10.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-674" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92378", "https://access.redhat.com/security/cve/CVE-2026-102276", "https://advisory.echohq.com/cve/CVE-2026-102276", "https://bugzilla.redhat.com/2542596", "https://bugzilla.redhat.com/2542700", "https://bugzilla.redhat.com/2542706", "https://bugzilla.redhat.com/2542707", "https://bugzilla.redhat.com/2558973", "https://bugzilla.redhat.com/2559870", "https://bugzilla.redhat.com/2559873", "https://bugzilla.redhat.com/2559875", "https://bugzilla.redhat.com/2560016", "https://bugzilla.redhat.com/2560018", "https://bugzilla.redhat.com/2560019", "https://bugzilla.redhat.com/2560021", "https://bugzilla.redhat.com/2560022", "https://bugzilla.redhat.com/show_bug.cgi?id=2542596", "https://bugzilla.redhat.com/show_bug.cgi?id=2542700", "https://bugzilla.redhat.com/show_bug.cgi?id=2542706", "https://bugzilla.redhat.com/show_bug.cgi?id=2542707", "https://bugzilla.redhat.com/show_bug.cgi?id=2558973", "https://bugzilla.redhat.com/show_bug.cgi?id=2559870", "https://bugzilla.redhat.com/show_bug.cgi?id=2559873", "https://bugzilla.redhat.com/show_bug.cgi?id=2559875", "https://bugzilla.redhat.com/show_bug.cgi?id=2560016", "https://bugzilla.redhat.com/show_bug.cgi?id=2560018", "https://bugzilla.redhat.com/show_bug.cgi?id=2560019", "https://bugzilla.redhat.com/show_bug.cgi?id=2560021", "https://bugzilla.redhat.com/show_bug.cgi?id=2560022", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101911", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102276", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102277", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102278", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105481", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105482", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105483", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106069", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106071", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106073", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106074", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497", "https://errata.almalinux.org/9/ALSA-2026-92378.html", "https://errata.rockylinux.org/RLSA-2026:92378", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc", "https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c", "https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc", "https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p", "https://linux.oracle.com/cve/CVE-2026-102276.html", "https://linux.oracle.com/errata/ELSA-2026-92378.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-102276", "https://www.cve.org/CVERecord?id=CVE-2026-102276" ], "PublishedDate": "2026-09-28T21:17:16.033Z", "LastModifiedDate": "2026-09-30T19:57:08.043Z" }, { "VulnerabilityID": "CVE-2026-102278", "VendorIDs": [ "GHSA-qhr7-859c-m2p7" ], "PkgID": "brace-expansion@1.1.12", "PkgName": "brace-expansion", "PkgPath": "app/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@1.1.12", "UID": "daa018f1f2c1d0e1" }, "InstalledVersion": "1.1.12", "FixedVersion": "5.0.11, 3.0.8, 2.1.6, 1.1.20", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102278", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:3d0cec4db5038402c614983a5b97409471d374202e24e3e6731015f20128b8c2", "Title": "brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns", "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand_() to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before output limits can apply and potentially terminating the Node.js process. expand_ performs uncontrolled recursion for nested brace alternatives and single-part sets. deeply nested brace groups supplied as an untrusted pattern. expand_ is affected. expand is affected. Comma members is affected. Single set is affected. native stack exhaustion during nested sub-expansion. process-terminating denial of service. This issue is fixed in versions 1.1.20, 2.1.6, 3.0.8, and 5.0.11.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-674" ], "VendorSeverity": { "alma": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92378", "https://access.redhat.com/security/cve/CVE-2026-102278", "https://advisory.echohq.com/cve/CVE-2026-102278", "https://bugzilla.redhat.com/2542596", "https://bugzilla.redhat.com/2542700", "https://bugzilla.redhat.com/2542706", "https://bugzilla.redhat.com/2542707", "https://bugzilla.redhat.com/2558973", "https://bugzilla.redhat.com/2559870", "https://bugzilla.redhat.com/2559873", "https://bugzilla.redhat.com/2559875", "https://bugzilla.redhat.com/2560016", "https://bugzilla.redhat.com/2560018", "https://bugzilla.redhat.com/2560019", "https://bugzilla.redhat.com/2560021", "https://bugzilla.redhat.com/2560022", "https://bugzilla.redhat.com/show_bug.cgi?id=2542596", "https://bugzilla.redhat.com/show_bug.cgi?id=2542700", "https://bugzilla.redhat.com/show_bug.cgi?id=2542706", "https://bugzilla.redhat.com/show_bug.cgi?id=2542707", "https://bugzilla.redhat.com/show_bug.cgi?id=2558973", "https://bugzilla.redhat.com/show_bug.cgi?id=2559870", "https://bugzilla.redhat.com/show_bug.cgi?id=2559873", "https://bugzilla.redhat.com/show_bug.cgi?id=2559875", "https://bugzilla.redhat.com/show_bug.cgi?id=2560016", "https://bugzilla.redhat.com/show_bug.cgi?id=2560018", "https://bugzilla.redhat.com/show_bug.cgi?id=2560019", "https://bugzilla.redhat.com/show_bug.cgi?id=2560021", "https://bugzilla.redhat.com/show_bug.cgi?id=2560022", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101911", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102276", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102277", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102278", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105481", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105482", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105483", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106069", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106071", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106073", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106074", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497", "https://errata.almalinux.org/9/ALSA-2026-92378.html", "https://errata.rockylinux.org/RLSA-2026:92378", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b", "https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c", "https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7", "https://linux.oracle.com/cve/CVE-2026-102278.html", "https://linux.oracle.com/errata/ELSA-2026-92378.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-102278", "https://www.cve.org/CVERecord?id=CVE-2026-102278" ], "PublishedDate": "2026-09-28T21:17:16.517Z", "LastModifiedDate": "2026-10-01T15:17:25.593Z" }, { "VulnerabilityID": "CVE-2026-13149", "VendorIDs": [ "GHSA-3jxr-9vmj-r5cp" ], "PkgID": "brace-expansion@1.1.12", "PkgName": "brace-expansion", "PkgPath": "app/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@1.1.12", "UID": "daa018f1f2c1d0e1" }, "InstalledVersion": "1.1.12", "FixedVersion": "5.0.7, 1.1.16, 2.1.2", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13149", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:2fe3bacf92ffd62e30bcfaf1ec15f7be7cde25f188c13a24cc6687e6b10b5810", "Title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity", "Description": "brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-407" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:U/V:D/RE:M/U:Amber", "V3Score": 5.3, "V40Score": 7.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:47058", "https://access.redhat.com/security/cve/CVE-2026-13149", "https://advisory.echohq.com/cve/CVE-2026-13149", "https://bugzilla.redhat.com/2494813", "https://bugzilla.redhat.com/2498116", "https://bugzilla.redhat.com/2498120", "https://bugzilla.redhat.com/show_bug.cgi?id=2494813", "https://bugzilla.redhat.com/show_bug.cgi?id=2498116", "https://bugzilla.redhat.com/show_bug.cgi?id=2498120", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13149", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59873", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59874", "https://errata.almalinux.org/9/ALSA-2026-47058.html", "https://errata.rockylinux.org/RLSA-2026:47058", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/835d6be91201122d9adffb0c0c8c094189ace265", "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754", "https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95", "https://github.com/juliangruber/brace-expansion/pull/122", "https://github.com/juliangruber/brace-expansion/pull/123", "https://github.com/juliangruber/brace-expansion/releases/tag/v1.1.16", "https://github.com/juliangruber/brace-expansion/releases/tag/v2.1.2", "https://github.com/juliangruber/brace-expansion/releases/tag/v5.0.7", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-3jxr-9vmj-r5cp", "https://linux.oracle.com/cve/CVE-2026-13149.html", "https://linux.oracle.com/errata/ELSA-2026-48034.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-13149", "https://www.cve.org/CVERecord?id=CVE-2026-13149", "https://www.npmjs.com/package/brace-expansion" ], "PublishedDate": "2026-06-30T10:16:34.56Z", "LastModifiedDate": "2026-10-25T21:10:00.77Z" }, { "VulnerabilityID": "CVE-2026-14257", "VendorIDs": [ "GHSA-mh99-v99m-4gvg" ], "PkgID": "brace-expansion@1.1.12", "PkgName": "brace-expansion", "PkgPath": "app/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@1.1.12", "UID": "daa018f1f2c1d0e1" }, "InstalledVersion": "1.1.12", "FixedVersion": "5.0.8, 3.0.3, 2.1.3, 1.1.17", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14257", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:68ec598da2d2199050fddeb6b6b64c067260c6cd48712cb378a4abef53e33ea7", "Title": "brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function", "Description": "brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but does not bound the length of each result string. By chaining multiple brace groups, an attacker keeps the result count under the limit while making each result progressively longer, so total memory scales with both count and string length until the process hits a fatal, uncatchable out-of-memory error. About 7.5 KB of input ('{a,b}'.repeat(1500)) crashes a default Node.js process. Any application that passes attacker-influenced strings to brace-expansion.expand() - directly or transitively via minimatch / glob brace patterns - can be crashed by a small request. Fixed in 5.0.8 by adding a maxLength option (default 4,000,000) that bounds accumulated output and intermediate arrays.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55603", "https://access.redhat.com/security/cve/CVE-2026-14257", "https://advisory.echohq.com/cve/CVE-2026-14257", "https://bugzilla.redhat.com/2506433", "https://bugzilla.redhat.com/2507593", "https://bugzilla.redhat.com/2510722", "https://bugzilla.redhat.com/2510801", "https://bugzilla.redhat.com/show_bug.cgi?id=2487258", "https://bugzilla.redhat.com/show_bug.cgi?id=2487269", "https://bugzilla.redhat.com/show_bug.cgi?id=2506433", "https://bugzilla.redhat.com/show_bug.cgi?id=2507593", "https://bugzilla.redhat.com/show_bug.cgi?id=2510722", "https://bugzilla.redhat.com/show_bug.cgi?id=2510801", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14257", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54272", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69152", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69192", "https://errata.almalinux.org/9/ALSA-2026-55603.html", "https://errata.rockylinux.org/RLSA-2026:55603", "https://github.com/advisories/GHSA-mh99-v99m-4gvg", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d", "https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5", "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031", "https://github.com/juliangruber/brace-expansion/commit/d13ff455a58b0d56704f0111e3c2a0b16ceb06eb", "https://github.com/juliangruber/brace-expansion/pull/129", "https://github.com/juliangruber/brace-expansion/pull/130", "https://github.com/juliangruber/brace-expansion/pull/136", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-mh99-v99m-4gvg", "https://linux.oracle.com/cve/CVE-2026-14257.html", "https://linux.oracle.com/errata/ELSA-2026-58819.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14257", "https://www.cve.org/CVERecord?id=CVE-2026-14257", "https://www.npmjs.com/package/brace-expansion" ], "PublishedDate": "2026-07-23T14:17:00.25Z", "LastModifiedDate": "2026-10-24T13:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-69152", "VendorIDs": [ "GHSA-rgw5-rvv9-x895" ], "PkgID": "brace-expansion@1.1.12", "PkgName": "brace-expansion", "PkgPath": "app/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@1.1.12", "UID": "daa018f1f2c1d0e1" }, "InstalledVersion": "1.1.12", "FixedVersion": "1.1.18, 2.1.4, 3.0.6, 5.0.9", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-69152", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:979dd992d80325c2b6d6593022bd67395b7183aa3c128345ba3c39f6f963a7e3", "Title": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation", "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop. The fix for CVE-2026-14257 is bypassed by the vulnerability. This issue is fixed in versions 1.1.18, 2.1.4, 3.0.6, and 5.0.9.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55603", "https://access.redhat.com/security/cve/CVE-2026-69152", "https://advisory.echohq.com/cve/CVE-2026-69152", "https://bugzilla.redhat.com/2506433", "https://bugzilla.redhat.com/2507593", "https://bugzilla.redhat.com/2510722", "https://bugzilla.redhat.com/2510801", "https://bugzilla.redhat.com/show_bug.cgi?id=2487258", "https://bugzilla.redhat.com/show_bug.cgi?id=2487269", "https://bugzilla.redhat.com/show_bug.cgi?id=2506433", "https://bugzilla.redhat.com/show_bug.cgi?id=2507593", "https://bugzilla.redhat.com/show_bug.cgi?id=2510722", "https://bugzilla.redhat.com/show_bug.cgi?id=2510801", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14257", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54272", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69152", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69192", "https://errata.almalinux.org/9/ALSA-2026-55603.html", "https://errata.rockylinux.org/RLSA-2026:55603", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d", "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac", "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf", "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895", "https://linux.oracle.com/cve/CVE-2026-69152.html", "https://linux.oracle.com/errata/ELSA-2026-58819.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-69152", "https://www.cve.org/CVERecord?id=CVE-2026-69152" ], "PublishedDate": "2026-08-03T17:16:45.953Z", "LastModifiedDate": "2026-10-23T21:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-102276", "VendorIDs": [ "GHSA-6j4f-fj2g-mc7p" ], "PkgID": "brace-expansion@2.0.1", "PkgName": "brace-expansion", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@2.0.1", "UID": "becc2016f5337669" }, "InstalledVersion": "2.0.1", "FixedVersion": "5.0.10, 3.0.7, 2.1.5, 1.1.19", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102276", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:dd45f9a0c6739c0488d6dcabcd351a5b01ce9d6ba7197f56ce9b6003624872f7", "Title": "brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns", "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per brace group and uses push.apply to pass every element of a very large comma-part array as a function argument. Patterns containing many comma-separated brace groups trigger the recursive path, while the large array triggers the argument-array path without deep recursion. These paths cause recursive and argument-array native stack exhaustion before max or maxLength can limit output, potentially terminating the Node.js process in a process-terminating denial of service. This issue is fixed in versions 1.1.19, 2.1.5, 3.0.7, and 5.0.10.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-674" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92378", "https://access.redhat.com/security/cve/CVE-2026-102276", "https://advisory.echohq.com/cve/CVE-2026-102276", "https://bugzilla.redhat.com/2542596", "https://bugzilla.redhat.com/2542700", "https://bugzilla.redhat.com/2542706", "https://bugzilla.redhat.com/2542707", "https://bugzilla.redhat.com/2558973", "https://bugzilla.redhat.com/2559870", "https://bugzilla.redhat.com/2559873", "https://bugzilla.redhat.com/2559875", "https://bugzilla.redhat.com/2560016", "https://bugzilla.redhat.com/2560018", "https://bugzilla.redhat.com/2560019", "https://bugzilla.redhat.com/2560021", "https://bugzilla.redhat.com/2560022", "https://bugzilla.redhat.com/show_bug.cgi?id=2542596", "https://bugzilla.redhat.com/show_bug.cgi?id=2542700", "https://bugzilla.redhat.com/show_bug.cgi?id=2542706", "https://bugzilla.redhat.com/show_bug.cgi?id=2542707", "https://bugzilla.redhat.com/show_bug.cgi?id=2558973", "https://bugzilla.redhat.com/show_bug.cgi?id=2559870", "https://bugzilla.redhat.com/show_bug.cgi?id=2559873", "https://bugzilla.redhat.com/show_bug.cgi?id=2559875", "https://bugzilla.redhat.com/show_bug.cgi?id=2560016", "https://bugzilla.redhat.com/show_bug.cgi?id=2560018", "https://bugzilla.redhat.com/show_bug.cgi?id=2560019", "https://bugzilla.redhat.com/show_bug.cgi?id=2560021", "https://bugzilla.redhat.com/show_bug.cgi?id=2560022", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101911", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102276", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102277", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102278", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105481", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105482", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105483", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106069", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106071", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106073", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106074", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497", "https://errata.almalinux.org/9/ALSA-2026-92378.html", "https://errata.rockylinux.org/RLSA-2026:92378", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc", "https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c", "https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc", "https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p", "https://linux.oracle.com/cve/CVE-2026-102276.html", "https://linux.oracle.com/errata/ELSA-2026-92378.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-102276", "https://www.cve.org/CVERecord?id=CVE-2026-102276" ], "PublishedDate": "2026-09-28T21:17:16.033Z", "LastModifiedDate": "2026-09-30T19:57:08.043Z" }, { "VulnerabilityID": "CVE-2026-102278", "VendorIDs": [ "GHSA-qhr7-859c-m2p7" ], "PkgID": "brace-expansion@2.0.1", "PkgName": "brace-expansion", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@2.0.1", "UID": "becc2016f5337669" }, "InstalledVersion": "2.0.1", "FixedVersion": "5.0.11, 3.0.8, 2.1.6, 1.1.20", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102278", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:10a5cc72e972bf7ae81dfff3feda80011cb11d854ad832e7de5d338970fb7f15", "Title": "brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns", "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand_() to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before output limits can apply and potentially terminating the Node.js process. expand_ performs uncontrolled recursion for nested brace alternatives and single-part sets. deeply nested brace groups supplied as an untrusted pattern. expand_ is affected. expand is affected. Comma members is affected. Single set is affected. native stack exhaustion during nested sub-expansion. process-terminating denial of service. This issue is fixed in versions 1.1.20, 2.1.6, 3.0.8, and 5.0.11.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-674" ], "VendorSeverity": { "alma": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92378", "https://access.redhat.com/security/cve/CVE-2026-102278", "https://advisory.echohq.com/cve/CVE-2026-102278", "https://bugzilla.redhat.com/2542596", "https://bugzilla.redhat.com/2542700", "https://bugzilla.redhat.com/2542706", "https://bugzilla.redhat.com/2542707", "https://bugzilla.redhat.com/2558973", "https://bugzilla.redhat.com/2559870", "https://bugzilla.redhat.com/2559873", "https://bugzilla.redhat.com/2559875", "https://bugzilla.redhat.com/2560016", "https://bugzilla.redhat.com/2560018", "https://bugzilla.redhat.com/2560019", "https://bugzilla.redhat.com/2560021", "https://bugzilla.redhat.com/2560022", "https://bugzilla.redhat.com/show_bug.cgi?id=2542596", "https://bugzilla.redhat.com/show_bug.cgi?id=2542700", "https://bugzilla.redhat.com/show_bug.cgi?id=2542706", "https://bugzilla.redhat.com/show_bug.cgi?id=2542707", "https://bugzilla.redhat.com/show_bug.cgi?id=2558973", "https://bugzilla.redhat.com/show_bug.cgi?id=2559870", "https://bugzilla.redhat.com/show_bug.cgi?id=2559873", "https://bugzilla.redhat.com/show_bug.cgi?id=2559875", "https://bugzilla.redhat.com/show_bug.cgi?id=2560016", "https://bugzilla.redhat.com/show_bug.cgi?id=2560018", "https://bugzilla.redhat.com/show_bug.cgi?id=2560019", "https://bugzilla.redhat.com/show_bug.cgi?id=2560021", "https://bugzilla.redhat.com/show_bug.cgi?id=2560022", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101911", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102276", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102277", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102278", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105481", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105482", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105483", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106069", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106071", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106073", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106074", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497", "https://errata.almalinux.org/9/ALSA-2026-92378.html", "https://errata.rockylinux.org/RLSA-2026:92378", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b", "https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c", "https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7", "https://linux.oracle.com/cve/CVE-2026-102278.html", "https://linux.oracle.com/errata/ELSA-2026-92378.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-102278", "https://www.cve.org/CVERecord?id=CVE-2026-102278" ], "PublishedDate": "2026-09-28T21:17:16.517Z", "LastModifiedDate": "2026-10-01T15:17:25.593Z" }, { "VulnerabilityID": "CVE-2026-13149", "VendorIDs": [ "GHSA-3jxr-9vmj-r5cp" ], "PkgID": "brace-expansion@2.0.1", "PkgName": "brace-expansion", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@2.0.1", "UID": "becc2016f5337669" }, "InstalledVersion": "2.0.1", "FixedVersion": "5.0.7, 1.1.16, 2.1.2", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13149", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:2a9945e2ad5e29a42787fd61fc2c23031f39f9adebb36bf8e102783f24ac54c2", "Title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity", "Description": "brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-407" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:U/V:D/RE:M/U:Amber", "V3Score": 5.3, "V40Score": 7.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:47058", "https://access.redhat.com/security/cve/CVE-2026-13149", "https://advisory.echohq.com/cve/CVE-2026-13149", "https://bugzilla.redhat.com/2494813", "https://bugzilla.redhat.com/2498116", "https://bugzilla.redhat.com/2498120", "https://bugzilla.redhat.com/show_bug.cgi?id=2494813", "https://bugzilla.redhat.com/show_bug.cgi?id=2498116", "https://bugzilla.redhat.com/show_bug.cgi?id=2498120", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13149", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59873", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59874", "https://errata.almalinux.org/9/ALSA-2026-47058.html", "https://errata.rockylinux.org/RLSA-2026:47058", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/835d6be91201122d9adffb0c0c8c094189ace265", "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754", "https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95", "https://github.com/juliangruber/brace-expansion/pull/122", "https://github.com/juliangruber/brace-expansion/pull/123", "https://github.com/juliangruber/brace-expansion/releases/tag/v1.1.16", "https://github.com/juliangruber/brace-expansion/releases/tag/v2.1.2", "https://github.com/juliangruber/brace-expansion/releases/tag/v5.0.7", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-3jxr-9vmj-r5cp", "https://linux.oracle.com/cve/CVE-2026-13149.html", "https://linux.oracle.com/errata/ELSA-2026-48034.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-13149", "https://www.cve.org/CVERecord?id=CVE-2026-13149", "https://www.npmjs.com/package/brace-expansion" ], "PublishedDate": "2026-06-30T10:16:34.56Z", "LastModifiedDate": "2026-10-25T21:10:00.77Z" }, { "VulnerabilityID": "CVE-2026-14257", "VendorIDs": [ "GHSA-mh99-v99m-4gvg" ], "PkgID": "brace-expansion@2.0.1", "PkgName": "brace-expansion", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@2.0.1", "UID": "becc2016f5337669" }, "InstalledVersion": "2.0.1", "FixedVersion": "5.0.8, 3.0.3, 2.1.3, 1.1.17", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14257", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:6106403e57fd521efc7d031bfd2e788cc0215e7765fa6bf9aa28afb888c547f4", "Title": "brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function", "Description": "brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but does not bound the length of each result string. By chaining multiple brace groups, an attacker keeps the result count under the limit while making each result progressively longer, so total memory scales with both count and string length until the process hits a fatal, uncatchable out-of-memory error. About 7.5 KB of input ('{a,b}'.repeat(1500)) crashes a default Node.js process. Any application that passes attacker-influenced strings to brace-expansion.expand() - directly or transitively via minimatch / glob brace patterns - can be crashed by a small request. Fixed in 5.0.8 by adding a maxLength option (default 4,000,000) that bounds accumulated output and intermediate arrays.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55603", "https://access.redhat.com/security/cve/CVE-2026-14257", "https://advisory.echohq.com/cve/CVE-2026-14257", "https://bugzilla.redhat.com/2506433", "https://bugzilla.redhat.com/2507593", "https://bugzilla.redhat.com/2510722", "https://bugzilla.redhat.com/2510801", "https://bugzilla.redhat.com/show_bug.cgi?id=2487258", "https://bugzilla.redhat.com/show_bug.cgi?id=2487269", "https://bugzilla.redhat.com/show_bug.cgi?id=2506433", "https://bugzilla.redhat.com/show_bug.cgi?id=2507593", "https://bugzilla.redhat.com/show_bug.cgi?id=2510722", "https://bugzilla.redhat.com/show_bug.cgi?id=2510801", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14257", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54272", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69152", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69192", "https://errata.almalinux.org/9/ALSA-2026-55603.html", "https://errata.rockylinux.org/RLSA-2026:55603", "https://github.com/advisories/GHSA-mh99-v99m-4gvg", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d", "https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5", "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031", "https://github.com/juliangruber/brace-expansion/commit/d13ff455a58b0d56704f0111e3c2a0b16ceb06eb", "https://github.com/juliangruber/brace-expansion/pull/129", "https://github.com/juliangruber/brace-expansion/pull/130", "https://github.com/juliangruber/brace-expansion/pull/136", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-mh99-v99m-4gvg", "https://linux.oracle.com/cve/CVE-2026-14257.html", "https://linux.oracle.com/errata/ELSA-2026-58819.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14257", "https://www.cve.org/CVERecord?id=CVE-2026-14257", "https://www.npmjs.com/package/brace-expansion" ], "PublishedDate": "2026-07-23T14:17:00.25Z", "LastModifiedDate": "2026-10-24T13:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-69152", "VendorIDs": [ "GHSA-rgw5-rvv9-x895" ], "PkgID": "brace-expansion@2.0.1", "PkgName": "brace-expansion", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@2.0.1", "UID": "becc2016f5337669" }, "InstalledVersion": "2.0.1", "FixedVersion": "1.1.18, 2.1.4, 3.0.6, 5.0.9", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-69152", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:c3a3efe329047ab9f4d58a3ad2ccf04a09f3854d9fa034151d44f0e82392fe45", "Title": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation", "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop. The fix for CVE-2026-14257 is bypassed by the vulnerability. This issue is fixed in versions 1.1.18, 2.1.4, 3.0.6, and 5.0.9.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55603", "https://access.redhat.com/security/cve/CVE-2026-69152", "https://advisory.echohq.com/cve/CVE-2026-69152", "https://bugzilla.redhat.com/2506433", "https://bugzilla.redhat.com/2507593", "https://bugzilla.redhat.com/2510722", "https://bugzilla.redhat.com/2510801", "https://bugzilla.redhat.com/show_bug.cgi?id=2487258", "https://bugzilla.redhat.com/show_bug.cgi?id=2487269", "https://bugzilla.redhat.com/show_bug.cgi?id=2506433", "https://bugzilla.redhat.com/show_bug.cgi?id=2507593", "https://bugzilla.redhat.com/show_bug.cgi?id=2510722", "https://bugzilla.redhat.com/show_bug.cgi?id=2510801", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14257", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54272", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69152", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69192", "https://errata.almalinux.org/9/ALSA-2026-55603.html", "https://errata.rockylinux.org/RLSA-2026:55603", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d", "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac", "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf", "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895", "https://linux.oracle.com/cve/CVE-2026-69152.html", "https://linux.oracle.com/errata/ELSA-2026-58819.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-69152", "https://www.cve.org/CVERecord?id=CVE-2026-69152" ], "PublishedDate": "2026-08-03T17:16:45.953Z", "LastModifiedDate": "2026-10-23T21:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-102276", "VendorIDs": [ "GHSA-6j4f-fj2g-mc7p" ], "PkgID": "brace-expansion@2.0.2", "PkgName": "brace-expansion", "PkgPath": "app/node_modules/redbean-node/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@2.0.2", "UID": "a8314da7fb2646b1" }, "InstalledVersion": "2.0.2", "FixedVersion": "5.0.10, 3.0.7, 2.1.5, 1.1.19", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102276", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:0cef0db624321a9afc9716ebc1c7f1b4a63f63a1d06a2b3c365a421dad168575", "Title": "brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns", "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per brace group and uses push.apply to pass every element of a very large comma-part array as a function argument. Patterns containing many comma-separated brace groups trigger the recursive path, while the large array triggers the argument-array path without deep recursion. These paths cause recursive and argument-array native stack exhaustion before max or maxLength can limit output, potentially terminating the Node.js process in a process-terminating denial of service. This issue is fixed in versions 1.1.19, 2.1.5, 3.0.7, and 5.0.10.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-674" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92378", "https://access.redhat.com/security/cve/CVE-2026-102276", "https://advisory.echohq.com/cve/CVE-2026-102276", "https://bugzilla.redhat.com/2542596", "https://bugzilla.redhat.com/2542700", "https://bugzilla.redhat.com/2542706", "https://bugzilla.redhat.com/2542707", "https://bugzilla.redhat.com/2558973", "https://bugzilla.redhat.com/2559870", "https://bugzilla.redhat.com/2559873", "https://bugzilla.redhat.com/2559875", "https://bugzilla.redhat.com/2560016", "https://bugzilla.redhat.com/2560018", "https://bugzilla.redhat.com/2560019", "https://bugzilla.redhat.com/2560021", "https://bugzilla.redhat.com/2560022", "https://bugzilla.redhat.com/show_bug.cgi?id=2542596", "https://bugzilla.redhat.com/show_bug.cgi?id=2542700", "https://bugzilla.redhat.com/show_bug.cgi?id=2542706", "https://bugzilla.redhat.com/show_bug.cgi?id=2542707", "https://bugzilla.redhat.com/show_bug.cgi?id=2558973", "https://bugzilla.redhat.com/show_bug.cgi?id=2559870", "https://bugzilla.redhat.com/show_bug.cgi?id=2559873", "https://bugzilla.redhat.com/show_bug.cgi?id=2559875", "https://bugzilla.redhat.com/show_bug.cgi?id=2560016", "https://bugzilla.redhat.com/show_bug.cgi?id=2560018", "https://bugzilla.redhat.com/show_bug.cgi?id=2560019", "https://bugzilla.redhat.com/show_bug.cgi?id=2560021", "https://bugzilla.redhat.com/show_bug.cgi?id=2560022", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101911", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102276", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102277", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102278", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105481", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105482", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105483", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106069", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106071", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106073", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106074", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497", "https://errata.almalinux.org/9/ALSA-2026-92378.html", "https://errata.rockylinux.org/RLSA-2026:92378", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc", "https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c", "https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc", "https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p", "https://linux.oracle.com/cve/CVE-2026-102276.html", "https://linux.oracle.com/errata/ELSA-2026-92378.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-102276", "https://www.cve.org/CVERecord?id=CVE-2026-102276" ], "PublishedDate": "2026-09-28T21:17:16.033Z", "LastModifiedDate": "2026-09-30T19:57:08.043Z" }, { "VulnerabilityID": "CVE-2026-102278", "VendorIDs": [ "GHSA-qhr7-859c-m2p7" ], "PkgID": "brace-expansion@2.0.2", "PkgName": "brace-expansion", "PkgPath": "app/node_modules/redbean-node/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@2.0.2", "UID": "a8314da7fb2646b1" }, "InstalledVersion": "2.0.2", "FixedVersion": "5.0.11, 3.0.8, 2.1.6, 1.1.20", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102278", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:ff353f9baa1db56092b2c99aadf23fb5e8c7012536b870d0a818caea2e94da44", "Title": "brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns", "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand_() to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before output limits can apply and potentially terminating the Node.js process. expand_ performs uncontrolled recursion for nested brace alternatives and single-part sets. deeply nested brace groups supplied as an untrusted pattern. expand_ is affected. expand is affected. Comma members is affected. Single set is affected. native stack exhaustion during nested sub-expansion. process-terminating denial of service. This issue is fixed in versions 1.1.20, 2.1.6, 3.0.8, and 5.0.11.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-674" ], "VendorSeverity": { "alma": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92378", "https://access.redhat.com/security/cve/CVE-2026-102278", "https://advisory.echohq.com/cve/CVE-2026-102278", "https://bugzilla.redhat.com/2542596", "https://bugzilla.redhat.com/2542700", "https://bugzilla.redhat.com/2542706", "https://bugzilla.redhat.com/2542707", "https://bugzilla.redhat.com/2558973", "https://bugzilla.redhat.com/2559870", "https://bugzilla.redhat.com/2559873", "https://bugzilla.redhat.com/2559875", "https://bugzilla.redhat.com/2560016", "https://bugzilla.redhat.com/2560018", "https://bugzilla.redhat.com/2560019", "https://bugzilla.redhat.com/2560021", "https://bugzilla.redhat.com/2560022", "https://bugzilla.redhat.com/show_bug.cgi?id=2542596", "https://bugzilla.redhat.com/show_bug.cgi?id=2542700", "https://bugzilla.redhat.com/show_bug.cgi?id=2542706", "https://bugzilla.redhat.com/show_bug.cgi?id=2542707", "https://bugzilla.redhat.com/show_bug.cgi?id=2558973", "https://bugzilla.redhat.com/show_bug.cgi?id=2559870", "https://bugzilla.redhat.com/show_bug.cgi?id=2559873", "https://bugzilla.redhat.com/show_bug.cgi?id=2559875", "https://bugzilla.redhat.com/show_bug.cgi?id=2560016", "https://bugzilla.redhat.com/show_bug.cgi?id=2560018", "https://bugzilla.redhat.com/show_bug.cgi?id=2560019", "https://bugzilla.redhat.com/show_bug.cgi?id=2560021", "https://bugzilla.redhat.com/show_bug.cgi?id=2560022", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101911", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102276", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102277", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102278", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105481", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105482", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105483", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106069", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106071", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106073", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106074", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497", "https://errata.almalinux.org/9/ALSA-2026-92378.html", "https://errata.rockylinux.org/RLSA-2026:92378", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b", "https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c", "https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7", "https://linux.oracle.com/cve/CVE-2026-102278.html", "https://linux.oracle.com/errata/ELSA-2026-92378.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-102278", "https://www.cve.org/CVERecord?id=CVE-2026-102278" ], "PublishedDate": "2026-09-28T21:17:16.517Z", "LastModifiedDate": "2026-10-01T15:17:25.593Z" }, { "VulnerabilityID": "CVE-2026-13149", "VendorIDs": [ "GHSA-3jxr-9vmj-r5cp" ], "PkgID": "brace-expansion@2.0.2", "PkgName": "brace-expansion", "PkgPath": "app/node_modules/redbean-node/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@2.0.2", "UID": "a8314da7fb2646b1" }, "InstalledVersion": "2.0.2", "FixedVersion": "5.0.7, 1.1.16, 2.1.2", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13149", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:9e989212190f52a17f40af9c93434a735c59a97d356eec042f8a61c7f333f6d3", "Title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity", "Description": "brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-407" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:U/V:D/RE:M/U:Amber", "V3Score": 5.3, "V40Score": 7.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:47058", "https://access.redhat.com/security/cve/CVE-2026-13149", "https://advisory.echohq.com/cve/CVE-2026-13149", "https://bugzilla.redhat.com/2494813", "https://bugzilla.redhat.com/2498116", "https://bugzilla.redhat.com/2498120", "https://bugzilla.redhat.com/show_bug.cgi?id=2494813", "https://bugzilla.redhat.com/show_bug.cgi?id=2498116", "https://bugzilla.redhat.com/show_bug.cgi?id=2498120", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13149", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59873", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59874", "https://errata.almalinux.org/9/ALSA-2026-47058.html", "https://errata.rockylinux.org/RLSA-2026:47058", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/835d6be91201122d9adffb0c0c8c094189ace265", "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754", "https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95", "https://github.com/juliangruber/brace-expansion/pull/122", "https://github.com/juliangruber/brace-expansion/pull/123", "https://github.com/juliangruber/brace-expansion/releases/tag/v1.1.16", "https://github.com/juliangruber/brace-expansion/releases/tag/v2.1.2", "https://github.com/juliangruber/brace-expansion/releases/tag/v5.0.7", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-3jxr-9vmj-r5cp", "https://linux.oracle.com/cve/CVE-2026-13149.html", "https://linux.oracle.com/errata/ELSA-2026-48034.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-13149", "https://www.cve.org/CVERecord?id=CVE-2026-13149", "https://www.npmjs.com/package/brace-expansion" ], "PublishedDate": "2026-06-30T10:16:34.56Z", "LastModifiedDate": "2026-10-25T21:10:00.77Z" }, { "VulnerabilityID": "CVE-2026-14257", "VendorIDs": [ "GHSA-mh99-v99m-4gvg" ], "PkgID": "brace-expansion@2.0.2", "PkgName": "brace-expansion", "PkgPath": "app/node_modules/redbean-node/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@2.0.2", "UID": "a8314da7fb2646b1" }, "InstalledVersion": "2.0.2", "FixedVersion": "5.0.8, 3.0.3, 2.1.3, 1.1.17", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14257", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:9e5b51bb66e94de73f08f93581996df5ce30513a16e4aabb40f4fd00445e6f31", "Title": "brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function", "Description": "brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but does not bound the length of each result string. By chaining multiple brace groups, an attacker keeps the result count under the limit while making each result progressively longer, so total memory scales with both count and string length until the process hits a fatal, uncatchable out-of-memory error. About 7.5 KB of input ('{a,b}'.repeat(1500)) crashes a default Node.js process. Any application that passes attacker-influenced strings to brace-expansion.expand() - directly or transitively via minimatch / glob brace patterns - can be crashed by a small request. Fixed in 5.0.8 by adding a maxLength option (default 4,000,000) that bounds accumulated output and intermediate arrays.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55603", "https://access.redhat.com/security/cve/CVE-2026-14257", "https://advisory.echohq.com/cve/CVE-2026-14257", "https://bugzilla.redhat.com/2506433", "https://bugzilla.redhat.com/2507593", "https://bugzilla.redhat.com/2510722", "https://bugzilla.redhat.com/2510801", "https://bugzilla.redhat.com/show_bug.cgi?id=2487258", "https://bugzilla.redhat.com/show_bug.cgi?id=2487269", "https://bugzilla.redhat.com/show_bug.cgi?id=2506433", "https://bugzilla.redhat.com/show_bug.cgi?id=2507593", "https://bugzilla.redhat.com/show_bug.cgi?id=2510722", "https://bugzilla.redhat.com/show_bug.cgi?id=2510801", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14257", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54272", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69152", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69192", "https://errata.almalinux.org/9/ALSA-2026-55603.html", "https://errata.rockylinux.org/RLSA-2026:55603", "https://github.com/advisories/GHSA-mh99-v99m-4gvg", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d", "https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5", "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031", "https://github.com/juliangruber/brace-expansion/commit/d13ff455a58b0d56704f0111e3c2a0b16ceb06eb", "https://github.com/juliangruber/brace-expansion/pull/129", "https://github.com/juliangruber/brace-expansion/pull/130", "https://github.com/juliangruber/brace-expansion/pull/136", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-mh99-v99m-4gvg", "https://linux.oracle.com/cve/CVE-2026-14257.html", "https://linux.oracle.com/errata/ELSA-2026-58819.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14257", "https://www.cve.org/CVERecord?id=CVE-2026-14257", "https://www.npmjs.com/package/brace-expansion" ], "PublishedDate": "2026-07-23T14:17:00.25Z", "LastModifiedDate": "2026-10-24T13:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-69152", "VendorIDs": [ "GHSA-rgw5-rvv9-x895" ], "PkgID": "brace-expansion@2.0.2", "PkgName": "brace-expansion", "PkgPath": "app/node_modules/redbean-node/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@2.0.2", "UID": "a8314da7fb2646b1" }, "InstalledVersion": "2.0.2", "FixedVersion": "1.1.18, 2.1.4, 3.0.6, 5.0.9", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-69152", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:b30c6201199779743023196226e5c2c1c0b75e2ceefa5cffc40ac4a36ebbdbba", "Title": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation", "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop. The fix for CVE-2026-14257 is bypassed by the vulnerability. This issue is fixed in versions 1.1.18, 2.1.4, 3.0.6, and 5.0.9.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55603", "https://access.redhat.com/security/cve/CVE-2026-69152", "https://advisory.echohq.com/cve/CVE-2026-69152", "https://bugzilla.redhat.com/2506433", "https://bugzilla.redhat.com/2507593", "https://bugzilla.redhat.com/2510722", "https://bugzilla.redhat.com/2510801", "https://bugzilla.redhat.com/show_bug.cgi?id=2487258", "https://bugzilla.redhat.com/show_bug.cgi?id=2487269", "https://bugzilla.redhat.com/show_bug.cgi?id=2506433", "https://bugzilla.redhat.com/show_bug.cgi?id=2507593", "https://bugzilla.redhat.com/show_bug.cgi?id=2510722", "https://bugzilla.redhat.com/show_bug.cgi?id=2510801", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14257", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54272", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69152", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69192", "https://errata.almalinux.org/9/ALSA-2026-55603.html", "https://errata.rockylinux.org/RLSA-2026:55603", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d", "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac", "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf", "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895", "https://linux.oracle.com/cve/CVE-2026-69152.html", "https://linux.oracle.com/errata/ELSA-2026-58819.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-69152", "https://www.cve.org/CVERecord?id=CVE-2026-69152" ], "PublishedDate": "2026-08-03T17:16:45.953Z", "LastModifiedDate": "2026-10-23T21:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-87776", "VendorIDs": [ "GHSA-vc2v-76pw-4v95" ], "PkgID": "compression@1.8.1", "PkgName": "compression", "PkgPath": "app/node_modules/compression/package.json", "PkgIdentifier": { "PURL": "pkg:npm/compression@1.8.1", "UID": "5dccd05098085626" }, "InstalledVersion": "1.8.1", "FixedVersion": "1.8.2", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-87776", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:588bffc7058fd175e55d07d41a4992b9cb6f59a8eac1707efbe5548fffdc7d49", "Title": "compression: compression: Denial of Service via memory leak on premature response close", "Description": "compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still being sent, the zlib stream created to compress that response is never destroyed, so each aborted compressed response leaks its native zlib memory. A remote unauthenticated attacker can repeatedly open requests and disconnect early, exhausting the available memory and crashing the server. All applications using compression are affected. The issue is fixed in compression 1.8.2, and users should upgrade to 1.8.2 or later.", "Severity": "HIGH", "CweIDs": [ "CWE-401", "CWE-459" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-87776", "https://advisory.echohq.com/cve/CVE-2026-87776", "https://cna.openjsf.org/security-advisories.html", "https://github.com/advisories/GHSA-vc2v-76pw-4v95", "https://github.com/expressjs/compression", "https://github.com/expressjs/compression/commit/151f63e91e1b64f8fb0b064e19321a4f28db6bff", "https://github.com/expressjs/compression/releases/tag/v1.8.2", "https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95", "https://nvd.nist.gov/vuln/detail/CVE-2026-87776", "https://www.cve.org/CVERecord?id=CVE-2026-87776" ], "PublishedDate": "2026-09-11T12:16:52.53Z", "LastModifiedDate": "2026-09-16T19:40:00.317Z" }, { "VulnerabilityID": "CVE-2024-21538", "VendorIDs": [ "GHSA-3xgq-45jj-v275" ], "PkgID": "cross-spawn@7.0.3", "PkgName": "cross-spawn", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/cross-spawn/package.json", "PkgIdentifier": { "PURL": "pkg:npm/cross-spawn@7.0.3", "UID": "dfc86ed0cb153668" }, "InstalledVersion": "7.0.3", "FixedVersion": "7.0.5, 6.0.6", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-21538", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:028afb872ad4d1ba1c3bf3c1326ae1f511b300ffaf88f6747d116c5ae28145b6", "Title": "cross-spawn: regular expression denial of service", "Description": "Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. An attacker can increase the CPU usage and crash the program by crafting a very large and well crafted string.", "Severity": "HIGH", "CweIDs": [ "CWE-1333" ], "VendorSeverity": { "amazon": 2, "azure": 3, "cbl-mariner": 3, "ghsa": 3, "redhat": 1 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P", "V3Score": 7.5, "V40Score": 7.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H", "V3Score": 4.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2024-21538", "https://github.com/moxystudio/node-cross-spawn", "https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff", "https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f", "https://github.com/moxystudio/node-cross-spawn/commit/d35c865b877d2f9ded7c1ed87521c2fdb689c8dd", "https://github.com/moxystudio/node-cross-spawn/issues/165", "https://github.com/moxystudio/node-cross-spawn/pull/160", "https://nvd.nist.gov/vuln/detail/CVE-2024-21538", "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-8366349", "https://security.snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230", "https://www.cve.org/CVERecord?id=CVE-2024-21538" ], "PublishedDate": "2024-11-08T05:15:06.453Z", "LastModifiedDate": "2026-07-28T16:17:25.663Z" }, { "VulnerabilityID": "CVE-2026-102599", "VendorIDs": [ "GHSA-2gc4-cqfq-p2gv" ], "PkgID": "engine.io@6.6.4", "PkgName": "engine.io", "PkgPath": "app/node_modules/engine.io/package.json", "PkgIdentifier": { "PURL": "pkg:npm/engine.io@6.6.4", "UID": "c307c15d941b62e3" }, "InstalledVersion": "6.6.4", "FixedVersion": "6.6.10", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102599", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:00f9a196b579bb142bc25637322e38986d5e871191a291bc1fe508f77c07170e", "Title": "engine.io: engine.io: Denial of Service via protocol revision mismatch during transport upgrade", "Description": "Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6.0 until 6.6.10, a transport upgrade can independently derive an Engine.IO protocol revision from the upgrade request instead of enforcing the revision stored on the existing session. A malicious client can establish a valid session and send an upgrade request with a different or omitted EIO query parameter, attaching a transport with incompatible parser and heartbeat behavior. A crafted heartbeat packet can then trigger an uncaught exception and terminate the Node.js process, including when Engine.IO v3 compatibility is disabled because an omitted EIO value is interpreted as revision 3 on the affected path. This issue is fixed in Engine.IO 6.6.10.", "Severity": "HIGH", "CweIDs": [ "CWE-248" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-102599", "https://github.com/socketio/socket.io", "https://github.com/socketio/socket.io/commit/86db1fc3db2cd315a065d64c4e48918ccf9b4729", "https://github.com/socketio/socket.io/releases/tag/engine.io@6.6.10", "https://github.com/socketio/socket.io/security/advisories/GHSA-2gc4-cqfq-p2gv", "https://nvd.nist.gov/vuln/detail/CVE-2026-102599", "https://www.cve.org/CVERecord?id=CVE-2026-102599" ], "PublishedDate": "2026-10-13T19:17:49.037Z", "LastModifiedDate": "2026-10-17T02:17:08.197Z" }, { "VulnerabilityID": "CVE-2026-59724", "VendorIDs": [ "GHSA-gr94-w7qr-f4j3" ], "PkgID": "engine.io@6.6.4", "PkgName": "engine.io", "PkgPath": "app/node_modules/engine.io/package.json", "PkgIdentifier": { "PURL": "pkg:npm/engine.io@6.6.4", "UID": "c307c15d941b62e3" }, "InstalledVersion": "6.6.4", "FixedVersion": "6.6.7", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59724", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:832c4bff19f3571e3893f3cdd16387aa405e5a5c01da78deb4e00a8b4d48a143", "Title": "engine.io: Engine.IO: Denial of Service via crafted WebTransport session ID", "Description": "Socket.IO enables bidirectional and low-latency communication for every platform. From 6.5.0 before 6.6.7, Engine.IO servers with WebTransport enabled can resolve a crafted session ID such as __proto__ through an inherited property of the clients object during WebTransport upgrade handling, causing a TypeError and denial of service. This issue is fixed in version 6.6.7.", "Severity": "HIGH", "CweIDs": [ "CWE-20" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-59724", "https://github.com/socketio/socket.io", "https://github.com/socketio/socket.io/commit/1fa1f46cd420ac5b57bb4c04c959b58f3c79158c", "https://github.com/socketio/socket.io/releases/tag/engine.io@6.6.7", "https://github.com/socketio/socket.io/security/advisories/GHSA-gr94-w7qr-f4j3", "https://nvd.nist.gov/vuln/detail/CVE-2026-59724", "https://www.cve.org/CVERecord?id=CVE-2026-59724" ], "PublishedDate": "2026-07-08T16:16:32.98Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-59725", "VendorIDs": [ "GHSA-r635-g3xr-vw7x" ], "PkgID": "engine.io@6.6.4", "PkgName": "engine.io", "PkgPath": "app/node_modules/engine.io/package.json", "PkgIdentifier": { "PURL": "pkg:npm/engine.io@6.6.4", "UID": "c307c15d941b62e3" }, "InstalledVersion": "6.6.4", "FixedVersion": "6.6.7", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59725", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:21c86e58684f3370075a876fab016a2224ab170eb8b983c4390c0e9194e3ca34", "Title": "socket.io: engine.io: Socket.IO: Denial of Service via invalid binary POST requests", "Description": "Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not properly close the HTTP response for invalid binary POST requests with Content-Type: application/octet-stream, allowing an unauthenticated attacker to exhaust server-side connections and sockets. This issue is fixed in version 6.6.7.", "Severity": "HIGH", "CweIDs": [ "CWE-404" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-59725", "https://github.com/socketio/socket.io", "https://github.com/socketio/socket.io/commit/fc11285e14964c2132d122164bf130c355f60671", "https://github.com/socketio/socket.io/releases/tag/engine.io@6.6.7", "https://github.com/socketio/socket.io/security/advisories/GHSA-r635-g3xr-vw7x", "https://nvd.nist.gov/vuln/detail/CVE-2026-59725", "https://www.cve.org/CVERecord?id=CVE-2026-59725" ], "PublishedDate": "2026-07-08T16:16:33.133Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-25896", "VendorIDs": [ "GHSA-m7jm-9gc2-mpf2" ], "PkgID": "fast-xml-parser@5.2.5", "PkgName": "fast-xml-parser", "PkgPath": "app/node_modules/fast-xml-parser/package.json", "PkgIdentifier": { "PURL": "pkg:npm/fast-xml-parser@5.2.5", "UID": "e4b10930a496b792" }, "InstalledVersion": "5.2.5", "FixedVersion": "5.3.5, 4.5.4", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-25896", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:96f1e72f033b5343e3fcb7fc9eb8fc30806a863ab5a5e7b48bac1903ad0d1452", "Title": "fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling", "Description": "fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. From 4.1.3to before 5.3.5, a dot (.) in a DOCTYPE entity name is treated as a regex wildcard during entity replacement, allowing an attacker to shadow built-in XML entities (\u0026lt;, \u0026gt;, \u0026amp;, \u0026quot;, \u0026apos;) with arbitrary values. This bypasses entity encoding and leads to XSS when parsed output is rendered. This vulnerability is fixed in 5.3.5.", "Severity": "CRITICAL", "CweIDs": [ "CWE-185", "CWE-79" ], "VendorSeverity": { "ghsa": 4, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N", "V3Score": 9.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:40984", "https://access.redhat.com/errata/RHSA-2026:41941", "https://access.redhat.com/errata/RHSA-2026:41944", "https://access.redhat.com/errata/RHSA-2026:51349", "https://access.redhat.com/errata/RHSA-2026:6174", "https://access.redhat.com/errata/RHSA-2026:6802", "https://access.redhat.com/errata/RHSA-2026:7110", "https://access.redhat.com/errata/RHSA-2026:7128", "https://access.redhat.com/security/cve/CVE-2026-25896", "https://advisory.echohq.com/cve/CVE-2026-25896", "https://bugzilla.redhat.com/show_bug.cgi?id=2441501", "https://github.com/NaturalIntelligence/fast-xml-parser", "https://github.com/NaturalIntelligence/fast-xml-parser/commit/943ef0eb1b2d3284e72dd74f44a042ee9f07026e", "https://github.com/NaturalIntelligence/fast-xml-parser/commit/ddcd0acf26ddd682cb0dc15a2bd6aa3b96bb1e69", "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.5", "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-m7jm-9gc2-mpf2", "https://github.com/advisories/GHSA-m7jm-9gc2-mpf2", "https://nvd.nist.gov/vuln/detail/CVE-2026-25896", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25896.json", "https://www.cve.org/CVERecord?id=CVE-2026-25896" ], "PublishedDate": "2026-02-20T21:19:27.47Z", "LastModifiedDate": "2026-09-10T13:17:54.697Z" }, { "VulnerabilityID": "CVE-2026-25128", "VendorIDs": [ "GHSA-37qj-frw5-hhjh" ], "PkgID": "fast-xml-parser@5.2.5", "PkgName": "fast-xml-parser", "PkgPath": "app/node_modules/fast-xml-parser/package.json", "PkgIdentifier": { "PURL": "pkg:npm/fast-xml-parser@5.2.5", "UID": "e4b10930a496b792" }, "InstalledVersion": "5.2.5", "FixedVersion": "5.3.4", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-25128", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:7e7604afea45a8e7d53a515db1ed115eed98ff05f02af07df2ae1366ca5e763f", "Title": "fast-xml-parser: fast-xml-parser has RangeError DoS Numeric Entities Bug", "Description": "fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. In versions 5.0.9 through 5.3.3, a RangeError vulnerability exists in the numeric entity processing of fast-xml-parser when parsing XML with out-of-range entity code points (e.g., `\u0026#9999999;` or `\u0026#xFFFFFF;`). This causes the parser to throw an uncaught exception, crashing any application that processes untrusted XML input. Version 5.3.4 fixes the issue.", "Severity": "HIGH", "CweIDs": [ "CWE-20", "CWE-248" ], "VendorSeverity": { "ghsa": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-25128", "https://github.com/NaturalIntelligence/fast-xml-parser", "https://github.com/NaturalIntelligence/fast-xml-parser/commit/4e387f61c4a5cef792f6a2f42467013290bf95dc", "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.4", "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-37qj-frw5-hhjh", "https://nvd.nist.gov/vuln/detail/CVE-2026-25128", "https://www.cve.org/CVERecord?id=CVE-2026-25128" ], "PublishedDate": "2026-01-30T16:16:14.123Z", "LastModifiedDate": "2026-06-17T10:24:09.427Z" }, { "VulnerabilityID": "CVE-2026-26278", "VendorIDs": [ "GHSA-jmr7-xgp7-cmfj" ], "PkgID": "fast-xml-parser@5.2.5", "PkgName": "fast-xml-parser", "PkgPath": "app/node_modules/fast-xml-parser/package.json", "PkgIdentifier": { "PURL": "pkg:npm/fast-xml-parser@5.2.5", "UID": "e4b10930a496b792" }, "InstalledVersion": "5.2.5", "FixedVersion": "4.5.4, 5.3.6", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-26278", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:9605a0ddf44a67efec4f9081020813363eb8d0f35a5c02de44578a695286b7ea", "Title": "fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion", "Description": "fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. In versions 4.1.3 through 5.3.5, the XML parser can be forced to do an unlimited amount of entity expansion. With a very small XML input, it’s possible to make the parser spend seconds or even minutes processing a single request, effectively freezing the application. Version 5.3.6 fixes the issue. As a workaround, avoid using DOCTYPE parsing by `processEntities: false` option.", "Severity": "HIGH", "CweIDs": [ "CWE-776" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:40984", "https://access.redhat.com/errata/RHSA-2026:41941", "https://access.redhat.com/errata/RHSA-2026:41944", "https://access.redhat.com/errata/RHSA-2026:51349", "https://access.redhat.com/errata/RHSA-2026:6174", "https://access.redhat.com/errata/RHSA-2026:6802", "https://access.redhat.com/errata/RHSA-2026:7110", "https://access.redhat.com/errata/RHSA-2026:7128", "https://access.redhat.com/security/cve/CVE-2026-26278", "https://advisory.echohq.com/cve/CVE-2026-26278", "https://bugzilla.redhat.com/show_bug.cgi?id=2441120", "https://github.com/NaturalIntelligence/fast-xml-parser", "https://github.com/NaturalIntelligence/fast-xml-parser/commit/910dae5be2de2955e968558fadf6e8f74f117a77", "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.6", "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-jmr7-xgp7-cmfj", "https://github.com/advisories/GHSA-jmr7-xgp7-cmfj", "https://nvd.nist.gov/vuln/detail/CVE-2026-26278", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26278.json", "https://www.cve.org/CVERecord?id=CVE-2026-26278" ], "PublishedDate": "2026-02-19T20:25:43.717Z", "LastModifiedDate": "2026-09-10T13:17:56.203Z" }, { "VulnerabilityID": "CVE-2026-33036", "VendorIDs": [ "GHSA-8gc5-j5rx-235r" ], "PkgID": "fast-xml-parser@5.2.5", "PkgName": "fast-xml-parser", "PkgPath": "app/node_modules/fast-xml-parser/package.json", "PkgIdentifier": { "PURL": "pkg:npm/fast-xml-parser@5.2.5", "UID": "e4b10930a496b792" }, "InstalledVersion": "5.2.5", "FixedVersion": "5.5.6, 4.5.5", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33036", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:84954d1997600a1798ff8721890e3c0597761c4205ec3a94f87bf9a13ba67547", "Title": "fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass", "Description": "fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. Versions 4.0.0-beta.3 through 5.5.5 contain a bypass vulnerability where numeric character references (\u0026#NNN;, \u0026#xHH;) and standard XML entities completely evade the entity expansion limits (e.g., maxTotalExpansions, maxExpandedLength) added to fix CVE-2026-26278, enabling XML entity expansion Denial of Service. The root cause is that replaceEntitiesValue() in OrderedObjParser.js only enforces expansion counting on DOCTYPE-defined entities while the lastEntities loop handling numeric/standard entities performs no counting at all. An attacker supplying 1M numeric entity references like \u0026#65; can force ~147MB of memory allocation and heavy CPU usage, potentially crashing the process—even when developers have configured strict limits. This issue has been fixed in version 5.5.6.", "Severity": "HIGH", "CweIDs": [ "CWE-776" ], "VendorSeverity": { "ghsa": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-33036", "https://advisory.echohq.com/cve/CVE-2026-33036", "https://github.com/NaturalIntelligence/fast-xml-parser", "https://github.com/NaturalIntelligence/fast-xml-parser/commit/bd26122c838e6a55e7d7ac49b4ccc01a49999a01", "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v4.5.5", "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.5.6", "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-8gc5-j5rx-235r", "https://github.com/advisories/GHSA-8gc5-j5rx-235r", "https://nvd.nist.gov/vuln/detail/CVE-2026-33036", "https://www.cve.org/CVERecord?id=CVE-2026-33036" ], "PublishedDate": "2026-03-20T06:16:11.63Z", "LastModifiedDate": "2026-06-17T10:36:50.727Z" }, { "VulnerabilityID": "CVE-2026-12143", "VendorIDs": [ "GHSA-hmw2-7cc7-3qxx" ], "PkgID": "form-data@4.0.4", "PkgName": "form-data", "PkgPath": "app/node_modules/form-data/package.json", "PkgIdentifier": { "PURL": "pkg:npm/form-data@4.0.4", "UID": "4172a22e0f83da0c" }, "InstalledVersion": "4.0.4", "FixedVersion": "2.5.6, 3.0.5, 4.0.6", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-12143", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:7bd4b8b79772901b824a71531cf6df7018c53701fdfa1bc018ae1ede682d317b", "Title": "form-data: form-data: Form field override via CRLF injection", "Description": "form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (\") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the attacker to terminate the header line and inject additional headers, or to smuggle entire additional multipart parts, into the request the application forwards to a backend. This can let the attacker add or override form fields (e.g. set `is_admin=true`) seen by the downstream parser. This is an instance of CWE-93 (CRLF injection). The fix escapes CR, LF, and `\"` as `%0D`, `%0A`, and `%22` in field names and filenames, matching the serialization browsers use per the WHATWG HTML multipart/form-data encoding algorithm. Exploitation requires the consuming application to use untrusted input as a field name or filename; applications that use only fixed/trusted field names are not affected. Fixed in 2.5.6, 3.0.5, and 4.0.6.", "Severity": "HIGH", "CweIDs": [ "CWE-93" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41929", "https://access.redhat.com/errata/RHSA-2026:41951", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:44263", "https://access.redhat.com/errata/RHSA-2026:44267", "https://access.redhat.com/errata/RHSA-2026:48124", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:48693", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:54770", "https://access.redhat.com/errata/RHSA-2026:56338", "https://access.redhat.com/errata/RHSA-2026:56366", "https://access.redhat.com/errata/RHSA-2026:56431", "https://access.redhat.com/errata/RHSA-2026:57013", "https://access.redhat.com/errata/RHSA-2026:57545", "https://access.redhat.com/errata/RHSA-2026:57590", "https://access.redhat.com/errata/RHSA-2026:57801", "https://access.redhat.com/errata/RHSA-2026:59136", "https://access.redhat.com/errata/RHSA-2026:59153", "https://access.redhat.com/errata/RHSA-2026:59155", "https://access.redhat.com/errata/RHSA-2026:59556", "https://access.redhat.com/errata/RHSA-2026:59557", "https://access.redhat.com/errata/RHSA-2026:59558", "https://access.redhat.com/errata/RHSA-2026:59559", "https://access.redhat.com/errata/RHSA-2026:59579", "https://access.redhat.com/errata/RHSA-2026:60387", "https://access.redhat.com/errata/RHSA-2026:60388", "https://access.redhat.com/errata/RHSA-2026:60389", "https://access.redhat.com/errata/RHSA-2026:60390", "https://access.redhat.com/errata/RHSA-2026:60391", "https://access.redhat.com/errata/RHSA-2026:60446", "https://access.redhat.com/errata/RHSA-2026:60477", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:62260", "https://access.redhat.com/errata/RHSA-2026:63047", "https://access.redhat.com/errata/RHSA-2026:63355", "https://access.redhat.com/errata/RHSA-2026:63373", "https://access.redhat.com/errata/RHSA-2026:66003", "https://access.redhat.com/errata/RHSA-2026:66488", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-12143", "https://advisory.echohq.com/cve/CVE-2026-12143", "https://bugzilla.redhat.com/show_bug.cgi?id=2488480", "https://cwe.mitre.org/data/definitions/93.html", "https://github.com/advisories/GHSA-hmw2-7cc7-3qxx", "https://github.com/form-data/form-data", "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435", "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229", "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045", "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx", "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data", "https://nvd.nist.gov/vuln/detail/CVE-2026-12143", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12143.json", "https://www.cve.org/CVERecord?id=CVE-2026-12143", "https://www.npmjs.com/package/form-data" ], "PublishedDate": "2026-06-12T19:16:26.56Z", "LastModifiedDate": "2026-09-11T13:17:04.787Z" }, { "VulnerabilityID": "CVE-2025-64756", "VendorIDs": [ "GHSA-5j98-mcp5-4vw2" ], "PkgID": "glob@10.3.12", "PkgName": "glob", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/glob/package.json", "PkgIdentifier": { "PURL": "pkg:npm/glob@10.3.12", "UID": "2eb6986e63b2778" }, "InstalledVersion": "10.3.12", "FixedVersion": "11.1.0, 10.5.0", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-64756", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:4f73384419109ed30a7bdc0b752bee25cc5324c75b8eca244fe21b77a6f82d72", "Title": "glob: glob: Command Injection Vulnerability via Malicious Filenames", "Description": "Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c \u003ccommand\u003e \u003cpatterns\u003e are used, matched filenames are passed to a shell with shell: true, enabling shell metacharacters in filenames to trigger command injection and achieve arbitrary code execution under the user or CI account privileges. This issue has been patched in versions 10.5.0 and 11.1.0.", "Severity": "HIGH", "CweIDs": [ "CWE-78" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-64756", "https://advisory.echohq.com/cve/CVE-2025-64756", "https://github.com/advisories/GHSA-5j98-mcp5-4vw2", "https://github.com/isaacs/node-glob", "https://github.com/isaacs/node-glob/commit/1e4e297342a09f2aa0ced87fcd4a70ddc325d75f", "https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146", "https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2", "https://nvd.nist.gov/vuln/detail/CVE-2025-64756", "https://www.cve.org/CVERecord?id=CVE-2025-64756" ], "PublishedDate": "2025-11-17T18:15:58.27Z", "LastModifiedDate": "2026-10-07T21:10:00.2Z" }, { "VulnerabilityID": "CVE-2025-64756", "VendorIDs": [ "GHSA-5j98-mcp5-4vw2" ], "PkgID": "glob@10.3.16", "PkgName": "glob", "PkgPath": "app/node_modules/redbean-node/node_modules/glob/package.json", "PkgIdentifier": { "PURL": "pkg:npm/glob@10.3.16", "UID": "bbd600737dcd7b19" }, "InstalledVersion": "10.3.16", "FixedVersion": "11.1.0, 10.5.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-64756", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:c2223c37822935c242749723fa8539eb9757064efd73665d39b16f5157bb6bb6", "Title": "glob: glob: Command Injection Vulnerability via Malicious Filenames", "Description": "Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c \u003ccommand\u003e \u003cpatterns\u003e are used, matched filenames are passed to a shell with shell: true, enabling shell metacharacters in filenames to trigger command injection and achieve arbitrary code execution under the user or CI account privileges. This issue has been patched in versions 10.5.0 and 11.1.0.", "Severity": "HIGH", "CweIDs": [ "CWE-78" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-64756", "https://advisory.echohq.com/cve/CVE-2025-64756", "https://github.com/advisories/GHSA-5j98-mcp5-4vw2", "https://github.com/isaacs/node-glob", "https://github.com/isaacs/node-glob/commit/1e4e297342a09f2aa0ced87fcd4a70ddc325d75f", "https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146", "https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2", "https://nvd.nist.gov/vuln/detail/CVE-2025-64756", "https://www.cve.org/CVERecord?id=CVE-2025-64756" ], "PublishedDate": "2025-11-17T18:15:58.27Z", "LastModifiedDate": "2026-10-07T21:10:00.2Z" }, { "VulnerabilityID": "CVE-2020-36604", "VendorIDs": [ "GHSA-c429-5p7v-vgjp" ], "PkgID": "hoek@6.1.3", "PkgName": "hoek", "PkgPath": "app/node_modules/hoek/package.json", "PkgIdentifier": { "PURL": "pkg:npm/hoek@6.1.3", "UID": "ade681f69a2739f3" }, "InstalledVersion": "6.1.3", "Status": "affected", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2020-36604", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:6f7e999ddfc9c914f236a7ee21adbbe708f5e5c1ae5af72826a3506d0623feab", "Title": "hapi/hoek: Prototype Pollution in @hapi/hoek", "Description": "hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function.", "Severity": "HIGH", "CweIDs": [ "CWE-1321" ], "VendorSeverity": { "ghsa": 3, "nvd": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2020-36604", "https://github.com/advisories/GHSA-c429-5p7v-vgjp", "https://github.com/hapijs/hoek/commit/4d0804bc6135ad72afdc5e1ec002b935b2f5216a", "https://github.com/hapijs/hoek/commit/948baf98634a5c206875b67d11368f133034fa90", "https://github.com/hapijs/hoek/issues/352", "https://nvd.nist.gov/vuln/detail/CVE-2020-36604", "https://security.snyk.io/vuln/SNYK-JS-HAPIHOEK-548452%29", "https://www.cve.org/CVERecord?id=CVE-2020-36604" ], "PublishedDate": "2022-09-23T06:15:08.943Z", "LastModifiedDate": "2026-06-17T03:15:47.177Z" }, { "VulnerabilityID": "CVE-2026-69192", "VendorIDs": [ "GHSA-mwp4-54f8-5fhr" ], "PkgID": "ip-address@10.0.1", "PkgName": "ip-address", "PkgPath": "app/node_modules/ip-address/package.json", "PkgIdentifier": { "PURL": "pkg:npm/ip-address@10.0.1", "UID": "a12e0b7dd47a708c" }, "InstalledVersion": "10.0.1", "FixedVersion": "10.3.1", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-69192", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:85027e0c4641abdcf8c84fed57d3881c6defd758a30f9dc8573e6963f7e86d8e", "Title": "ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass", "Description": "ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written with a leading zero and decodes it as decimal, while the WHATWG URL host parser, inet_aton, and getaddrinfo all decode a leading zero as octal. The library and the network stack therefore disagree about which host a string names. new Address4('012.0.0.1') reports correctForm() of 12.0.0.1 and isPrivate() of false, but fetch('http://012.0.0.1/') connects to 10.0.0.1. An application that builds a network trust-boundary decision on these checks, for example a filter intended to block Server-Side Request Forgery, or SSRF, will classify an internal target as external and allow the request. The defect is in the parse gate rather than in any one classifier, so every consumer of Address4 inherits it: isPrivate(), isLoopback(), isLinkLocal(), isCGNAT(), isInSubnet(), isHostInSubnet(), and correctForm() are all computed from the mis-decoded octets. This issue is fixed in version 10.3.1.", "Severity": "HIGH", "CweIDs": [ "CWE-20", "CWE-918" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N", "V40Score": 7.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "V3Score": 8.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55603", "https://access.redhat.com/security/cve/CVE-2026-69192", "https://advisory.echohq.com/cve/CVE-2026-69192", "https://bugzilla.redhat.com/2506433", "https://bugzilla.redhat.com/2507593", "https://bugzilla.redhat.com/2510722", "https://bugzilla.redhat.com/2510801", "https://bugzilla.redhat.com/show_bug.cgi?id=2487258", "https://bugzilla.redhat.com/show_bug.cgi?id=2487269", "https://bugzilla.redhat.com/show_bug.cgi?id=2506433", "https://bugzilla.redhat.com/show_bug.cgi?id=2507593", "https://bugzilla.redhat.com/show_bug.cgi?id=2510722", "https://bugzilla.redhat.com/show_bug.cgi?id=2510801", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14257", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54272", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69152", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69192", "https://errata.almalinux.org/9/ALSA-2026-55603.html", "https://errata.rockylinux.org/RLSA-2026:55603", "https://github.com/beaugunderson/ip-address", "https://github.com/beaugunderson/ip-address/commit/56368cb3d66c73ba0ee9b6b834fd31b22c2fd71e", "https://github.com/beaugunderson/ip-address/releases/tag/v10.3.1", "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-mwp4-54f8-5fhr", "https://linux.oracle.com/cve/CVE-2026-69192.html", "https://linux.oracle.com/errata/ELSA-2026-58819.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-69192", "https://www.cve.org/CVERecord?id=CVE-2026-69192" ], "PublishedDate": "2026-08-03T20:17:29.96Z", "LastModifiedDate": "2026-10-23T21:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-69192", "VendorIDs": [ "GHSA-mwp4-54f8-5fhr" ], "PkgID": "ip-address@9.0.5", "PkgName": "ip-address", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/ip-address/package.json", "PkgIdentifier": { "PURL": "pkg:npm/ip-address@9.0.5", "UID": "5b39cd72dd1fbc6b" }, "InstalledVersion": "9.0.5", "FixedVersion": "10.3.1", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-69192", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:aa2c1578eee58e7bda9e917085c140ae7fe8e35f0dcbd11c9fd3c9d886f27696", "Title": "ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass", "Description": "ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written with a leading zero and decodes it as decimal, while the WHATWG URL host parser, inet_aton, and getaddrinfo all decode a leading zero as octal. The library and the network stack therefore disagree about which host a string names. new Address4('012.0.0.1') reports correctForm() of 12.0.0.1 and isPrivate() of false, but fetch('http://012.0.0.1/') connects to 10.0.0.1. An application that builds a network trust-boundary decision on these checks, for example a filter intended to block Server-Side Request Forgery, or SSRF, will classify an internal target as external and allow the request. The defect is in the parse gate rather than in any one classifier, so every consumer of Address4 inherits it: isPrivate(), isLoopback(), isLinkLocal(), isCGNAT(), isInSubnet(), isHostInSubnet(), and correctForm() are all computed from the mis-decoded octets. This issue is fixed in version 10.3.1.", "Severity": "HIGH", "CweIDs": [ "CWE-20", "CWE-918" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N", "V40Score": 7.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "V3Score": 8.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55603", "https://access.redhat.com/security/cve/CVE-2026-69192", "https://advisory.echohq.com/cve/CVE-2026-69192", "https://bugzilla.redhat.com/2506433", "https://bugzilla.redhat.com/2507593", "https://bugzilla.redhat.com/2510722", "https://bugzilla.redhat.com/2510801", "https://bugzilla.redhat.com/show_bug.cgi?id=2487258", "https://bugzilla.redhat.com/show_bug.cgi?id=2487269", "https://bugzilla.redhat.com/show_bug.cgi?id=2506433", "https://bugzilla.redhat.com/show_bug.cgi?id=2507593", "https://bugzilla.redhat.com/show_bug.cgi?id=2510722", "https://bugzilla.redhat.com/show_bug.cgi?id=2510801", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14257", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54272", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69152", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69192", "https://errata.almalinux.org/9/ALSA-2026-55603.html", "https://errata.rockylinux.org/RLSA-2026:55603", "https://github.com/beaugunderson/ip-address", "https://github.com/beaugunderson/ip-address/commit/56368cb3d66c73ba0ee9b6b834fd31b22c2fd71e", "https://github.com/beaugunderson/ip-address/releases/tag/v10.3.1", "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-mwp4-54f8-5fhr", "https://linux.oracle.com/cve/CVE-2026-69192.html", "https://linux.oracle.com/errata/ELSA-2026-58819.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-69192", "https://www.cve.org/CVERecord?id=CVE-2026-69192" ], "PublishedDate": "2026-08-03T20:17:29.96Z", "LastModifiedDate": "2026-10-23T21:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-77413", "VendorIDs": [ "GHSA-8gq3-vp5j-2grp" ], "PkgID": "jsonata@2.1.0", "PkgName": "jsonata", "PkgPath": "app/node_modules/jsonata/package.json", "PkgIdentifier": { "PURL": "pkg:npm/jsonata@2.1.0", "UID": "903114966fd5be44" }, "InstalledVersion": "2.1.0", "FixedVersion": "1.8.8, 2.2.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-77413", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:5da41d6056de7f22c6118489e5ec62c206cd684420d9569c8b0d5e8ef144cd0f", "Title": "jsonata: JSONata: Arbitrary Code Execution via crafted JSONata expressions", "Description": "JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.0, the src/functions.js lookup function lacked an Object.prototype.hasOwnProperty check and allowed crafted expressions to access inherited prototype members. An attacker able to supply an expression could use inherited prototype setters and getters, constructor access, valueOf, and process.getBuiltinModule to reach the child_process module and execute arbitrary code with the privileges of the host process. This issue is fixed in versions 1.8.8 and 2.2.0.", "Severity": "CRITICAL", "CweIDs": [ "CWE-94" ], "VendorSeverity": { "ghsa": 4, "redhat": 4 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-77413", "https://github.com/jsonata-js/jsonata", "https://github.com/jsonata-js/jsonata/commit/4b217d514376e30cba278941298d7ba97c4a6c6e", "https://github.com/jsonata-js/jsonata/commit/4c5f4adfb90a9b500889d50f90050ca68888b50d", "https://github.com/jsonata-js/jsonata/pull/794", "https://github.com/jsonata-js/jsonata/releases/tag/v1.8.8", "https://github.com/jsonata-js/jsonata/releases/tag/v2.2.0", "https://github.com/jsonata-js/jsonata/security/advisories/GHSA-8gq3-vp5j-2grp", "https://nvd.nist.gov/vuln/detail/CVE-2026-77413", "https://www.cve.org/CVERecord?id=CVE-2026-77413" ], "PublishedDate": "2026-08-21T21:17:07.267Z", "LastModifiedDate": "2026-10-12T16:10:00.22Z" }, { "VulnerabilityID": "CVE-2026-77414", "VendorIDs": [ "GHSA-2943-5xfg-gq5f" ], "PkgID": "jsonata@2.1.0", "PkgName": "jsonata", "PkgPath": "app/node_modules/jsonata/package.json", "PkgIdentifier": { "PURL": "pkg:npm/jsonata@2.1.0", "UID": "903114966fd5be44" }, "InstalledVersion": "2.1.0", "FixedVersion": "2.2.1, 1.8.8", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-77414", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:ab028d47816703077c981ce8a4a65a056c973e222c247e01883ab36f32d7e9e1", "Title": "jsonata: JSONata: Arbitrary Code Execution via crafted JSONata expressions", "Description": "JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.1, the src/jsonata.js environment.lookup function used a bypassable hasOwnProperty check. Crafted expressions could use $hasOwnProperty, $spread, $string, prototype access, and $constructor to reach the object prototype and invoke process.getBuiltinModule with child_process, executing arbitrary code with the privileges of the host process. This issue is fixed in versions 1.8.8 and 2.2.1.", "Severity": "CRITICAL", "CweIDs": [ "CWE-94" ], "VendorSeverity": { "ghsa": 4, "redhat": 4 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-77414", "https://github.com/jsonata-js/jsonata", "https://github.com/jsonata-js/jsonata/commit/59e25144fc3b7125f6befd71b8a6e14e1fa610d2", "https://github.com/jsonata-js/jsonata/commit/c41ef185136a7b96ca1049c7745a7503b82193de", "https://github.com/jsonata-js/jsonata/commit/f09df8416eab8ff44926fc6527c80fb8701de159", "https://github.com/jsonata-js/jsonata/pull/799", "https://github.com/jsonata-js/jsonata/releases/tag/v1.8.8", "https://github.com/jsonata-js/jsonata/releases/tag/v2.2.1", "https://github.com/jsonata-js/jsonata/security/advisories/GHSA-2943-5xfg-gq5f", "https://nvd.nist.gov/vuln/detail/CVE-2026-77414", "https://www.cve.org/CVERecord?id=CVE-2026-77414" ], "PublishedDate": "2026-08-21T21:17:07.41Z", "LastModifiedDate": "2026-10-12T16:10:00.22Z" }, { "VulnerabilityID": "CVE-2026-77415", "VendorIDs": [ "GHSA-66mm-25pp-rfff" ], "PkgID": "jsonata@2.1.0", "PkgName": "jsonata", "PkgPath": "app/node_modules/jsonata/package.json", "PkgIdentifier": { "PURL": "pkg:npm/jsonata@2.1.0", "UID": "903114966fd5be44" }, "InstalledVersion": "2.1.0", "FixedVersion": "2.2.1, 1.8.8", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-77415", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:2c775f39692b55e8565404b6b1e51ec62bdad5ffd6dc91ffaf5c49b674988f0e", "Title": "jsonata: JSONata: Arbitrary Code Execution via crafted JSONata expressions", "Description": "JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.1, crafted JSONata expressions could chain several object-integrity weaknesses to execute arbitrary code. The chain could overwrite $clone to mutate objects through evaluateTransformExpression, expose and deconstruct JSONata functions or lambdas through $merge.*, replace proc.arguments.forEach used by applyProcedure, and forge internal lambda state. These primitives allowed an attacker to reach prototype getters, prototype and constructor access, and process.getBuiltinModule with child_process, executing code with the privileges of the host process. This issue is fixed in versions 1.8.8 and 2.2.1.", "Severity": "CRITICAL", "CweIDs": [ "CWE-94" ], "VendorSeverity": { "ghsa": 4, "redhat": 4 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-77415", "https://github.com/jsonata-js/jsonata", "https://github.com/jsonata-js/jsonata/commit/47c0e58542202c705726663166dbee5fcae47d06", "https://github.com/jsonata-js/jsonata/commit/4b217d514376e30cba278941298d7ba97c4a6c6e", "https://github.com/jsonata-js/jsonata/commit/59e25144fc3b7125f6befd71b8a6e14e1fa610d2", "https://github.com/jsonata-js/jsonata/commit/f09df8416eab8ff44926fc6527c80fb8701de159", "https://github.com/jsonata-js/jsonata/commit/f174348c7fa30f271b63ddedf0767e814004bc4d", "https://github.com/jsonata-js/jsonata/pull/799", "https://github.com/jsonata-js/jsonata/pull/800", "https://github.com/jsonata-js/jsonata/pull/802", "https://github.com/jsonata-js/jsonata/releases/tag/v1.8.8", "https://github.com/jsonata-js/jsonata/releases/tag/v2.2.1", "https://github.com/jsonata-js/jsonata/security/advisories/GHSA-66mm-25pp-rfff", "https://nvd.nist.gov/vuln/detail/CVE-2026-77415", "https://www.cve.org/CVERecord?id=CVE-2026-77415" ], "PublishedDate": "2026-08-21T21:17:07.553Z", "LastModifiedDate": "2026-10-12T16:10:00.22Z" }, { "VulnerabilityID": "CVE-2026-52746", "VendorIDs": [ "GHSA-86vw-mfpg-wwv9" ], "PkgID": "jsonata@2.1.0", "PkgName": "jsonata", "PkgPath": "app/node_modules/jsonata/package.json", "PkgIdentifier": { "PURL": "pkg:npm/jsonata@2.1.0", "UID": "903114966fd5be44" }, "InstalledVersion": "2.1.0", "FixedVersion": "2.2.0, 1.8.9", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-52746", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:6af8cca4e0803b8a29eefab09776b00a20799499c01f6d16abc143e0c0b033ad", "Title": "jsonata: JSONata: Denial of Service via malicious input to $toMillis function", "Description": "JSONata is a JSON query and transformation language. Prior to 2.2.0 and 1.8.9, malicious non-matching inputs to the $toMillis function can cause superlinear backtracking in the ISO-8601 validation regex, leading to denial of service in applications that evaluate user-provided JSONata expressions. This issue is fixed in version 2.2.0 and 1.8.9.", "Severity": "HIGH", "CweIDs": [ "CWE-1333" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-52746", "https://github.com/jsonata-js/jsonata", "https://github.com/jsonata-js/jsonata/commit/80ba95d170f74e3f20f4f36b8b77d8c85cea7686", "https://github.com/jsonata-js/jsonata/commit/d6ffc17cb16a8e53c222205bd274624e919cce0b", "https://github.com/jsonata-js/jsonata/pull/782", "https://github.com/jsonata-js/jsonata/pull/793", "https://github.com/jsonata-js/jsonata/releases/tag/v1.8.9", "https://github.com/jsonata-js/jsonata/releases/tag/v2.2.0", "https://github.com/jsonata-js/jsonata/security/advisories/GHSA-86vw-mfpg-wwv9", "https://nvd.nist.gov/vuln/detail/CVE-2026-52746", "https://www.cve.org/CVERecord?id=CVE-2026-52746" ], "PublishedDate": "2026-07-17T19:17:16.5Z", "LastModifiedDate": "2026-10-24T20:10:00.137Z" }, { "VulnerabilityID": "CVE-2025-65945", "VendorIDs": [ "GHSA-869p-cjfg-cm3x" ], "PkgID": "jws@3.2.2", "PkgName": "jws", "PkgPath": "app/node_modules/jws/package.json", "PkgIdentifier": { "PURL": "pkg:npm/jws@3.2.2", "UID": "38f9df3df1965732" }, "InstalledVersion": "3.2.2", "FixedVersion": "3.2.3, 4.0.1", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-65945", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:5ae0010d702ad5efd8b57316f0826166c73f33705acba62613c01d9edc52d12b", "Title": "node-jws: auth0/node-jws: Improper signature verification in HS256 algorithm", "Description": "auth0/node-jws is a JSON Web Signature implementation for Node.js. In versions 3.2.2 and earlier and version 4.0.0, auth0/node-jws has an improper signature verification vulnerability when using the HS256 algorithm under specific conditions. Applications are affected when they use the jws.createVerify() function for HMAC algorithms and use user-provided data from the JSON Web Signature protected header or payload in HMAC secret lookup routines, which can allow attackers to bypass signature verification. This issue has been patched in versions 3.2.3 and 4.0.1.", "Severity": "HIGH", "CweIDs": [ "CWE-347" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-65945", "https://advisory.echohq.com/cve/CVE-2025-65945", "https://github.com/advisories/GHSA-869p-cjfg-cm3x", "https://github.com/auth0/node-jws", "https://github.com/auth0/node-jws/commit/34c45b2c04434f925b638de6a061de9339c0ea2e", "https://github.com/auth0/node-jws/commit/4f6e73f24df42f07d632dec6431ade8eda8d11a6", "https://github.com/auth0/node-jws/releases/tag/v3.2.3", "https://github.com/auth0/node-jws/releases/tag/v4.0.1", "https://github.com/auth0/node-jws/security/advisories/GHSA-869p-cjfg-cm3x", "https://nvd.nist.gov/vuln/detail/CVE-2025-65945", "https://www.cve.org/CVERecord?id=CVE-2025-65945" ], "PublishedDate": "2025-12-04T19:16:05.55Z", "LastModifiedDate": "2026-10-18T15:10:00.097Z" }, { "VulnerabilityID": "CVE-2025-65945", "VendorIDs": [ "GHSA-869p-cjfg-cm3x" ], "PkgID": "jws@4.0.0", "PkgName": "jws", "PkgPath": "app/node_modules/@azure/identity/node_modules/jws/package.json", "PkgIdentifier": { "PURL": "pkg:npm/jws@4.0.0", "UID": "77daadecbca8b42c" }, "InstalledVersion": "4.0.0", "FixedVersion": "3.2.3, 4.0.1", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-65945", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:d30112d87bdb95d4385255c178a48c90b69e81cc38e3f251114f389c34e47ee3", "Title": "node-jws: auth0/node-jws: Improper signature verification in HS256 algorithm", "Description": "auth0/node-jws is a JSON Web Signature implementation for Node.js. In versions 3.2.2 and earlier and version 4.0.0, auth0/node-jws has an improper signature verification vulnerability when using the HS256 algorithm under specific conditions. Applications are affected when they use the jws.createVerify() function for HMAC algorithms and use user-provided data from the JSON Web Signature protected header or payload in HMAC secret lookup routines, which can allow attackers to bypass signature verification. This issue has been patched in versions 3.2.3 and 4.0.1.", "Severity": "HIGH", "CweIDs": [ "CWE-347" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-65945", "https://advisory.echohq.com/cve/CVE-2025-65945", "https://github.com/advisories/GHSA-869p-cjfg-cm3x", "https://github.com/auth0/node-jws", "https://github.com/auth0/node-jws/commit/34c45b2c04434f925b638de6a061de9339c0ea2e", "https://github.com/auth0/node-jws/commit/4f6e73f24df42f07d632dec6431ade8eda8d11a6", "https://github.com/auth0/node-jws/releases/tag/v3.2.3", "https://github.com/auth0/node-jws/releases/tag/v4.0.1", "https://github.com/auth0/node-jws/security/advisories/GHSA-869p-cjfg-cm3x", "https://nvd.nist.gov/vuln/detail/CVE-2025-65945", "https://www.cve.org/CVERecord?id=CVE-2025-65945" ], "PublishedDate": "2025-12-04T19:16:05.55Z", "LastModifiedDate": "2026-10-18T15:10:00.097Z" }, { "VulnerabilityID": "CVE-2026-45618", "VendorIDs": [ "GHSA-gf2q-c269-pqgc" ], "PkgID": "liquidjs@10.22.0", "PkgName": "liquidjs", "PkgPath": "app/node_modules/liquidjs/package.json", "PkgIdentifier": { "PURL": "pkg:npm/liquidjs@10.22.0", "UID": "2131eaa43ca895c3" }, "InstalledVersion": "10.22.0", "FixedVersion": "10.26.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-45618", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:883cc580c353eb9687e283843ec6e3e1881fff4558f4796bde9899088ca8b205", "Title": "LiquidJS is Vulnerable to Remote Code Execution", "Description": "LiquidJS is a Shopify/GitHub Pages compatible template engine. Prior to version 10.26.0, it is possible to execute arbitrary code with crafted templates. Version 10.26.0 patches the issue.", "Severity": "CRITICAL", "CweIDs": [ "CWE-94" ], "VendorSeverity": { "ghsa": 4 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "V3Score": 10 } }, "References": [ "https://advisory.echohq.com/cve/CVE-2026-45618", "https://github.com/advisories/GHSA-gf2q-c269-pqgc", "https://github.com/harttle/liquidjs", "https://github.com/harttle/liquidjs/releases/tag/v10.26.0", "https://github.com/harttle/liquidjs/security/advisories/GHSA-gf2q-c269-pqgc" ], "PublishedDate": "2026-08-11T20:17:40.163Z", "LastModifiedDate": "2026-10-24T16:10:00.153Z" }, { "VulnerabilityID": "CVE-2026-30952", "VendorIDs": [ "GHSA-wmfp-5q7x-987x" ], "PkgID": "liquidjs@10.22.0", "PkgName": "liquidjs", "PkgPath": "app/node_modules/liquidjs/package.json", "PkgIdentifier": { "PURL": "pkg:npm/liquidjs@10.22.0", "UID": "2131eaa43ca895c3" }, "InstalledVersion": "10.22.0", "FixedVersion": "10.25.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-30952", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:2400362a73e7684b987c1703403a279d37dd804eb3bd95849348936d11c60ba0", "Title": "liquidjs has a path traversal fallback vulnerability", "Description": "liquidjs is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.0, the layout, render, and include tags allow arbitrary file access via absolute paths (either as string literals or through Liquid variables, the latter require dynamicPartials: true, which is the default). This poses a security risk when malicious users are allowed to control the template content or specify the filepath to be included as a Liquid variable. This vulnerability is fixed in 10.25.0.", "Severity": "HIGH", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "ghsa": 3, "nvd": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://github.com/harttle/liquidjs", "https://github.com/harttle/liquidjs/commit/3cd024d652dc883c46307581e979fe32302adbac", "https://github.com/harttle/liquidjs/pull/851", "https://github.com/harttle/liquidjs/pull/855", "https://github.com/harttle/liquidjs/security/advisories/GHSA-wmfp-5q7x-987x", "https://nvd.nist.gov/vuln/detail/CVE-2026-30952" ], "PublishedDate": "2026-03-10T21:16:48.187Z", "LastModifiedDate": "2026-06-17T10:33:12.823Z" }, { "VulnerabilityID": "CVE-2026-33285", "VendorIDs": [ "GHSA-9r5m-9576-7f6x" ], "PkgID": "liquidjs@10.22.0", "PkgName": "liquidjs", "PkgPath": "app/node_modules/liquidjs/package.json", "PkgIdentifier": { "PURL": "pkg:npm/liquidjs@10.22.0", "UID": "2131eaa43ca895c3" }, "InstalledVersion": "10.22.0", "Status": "affected", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33285", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:67332d53d076f19085ab91b8c7da3eaa470222152315b84821874e0d14a06b87", "Title": "LiquidJS: memoryLimit Bypass through Negative Range Values Leads to Process Crash", "Description": "LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.1, LiquidJS's `memoryLimit` security mechanism can be completely bypassed by using reverse range expressions (e.g., `(100000000..1)`), allowing an attacker to allocate unlimited memory. Combined with a string flattening operation (e.g., `replace` filter), this causes a V8 Fatal error that crashes the Node.js process, resulting in complete denial of service from a single HTTP request. Version 10.25.1 patches the issue.", "Severity": "HIGH", "CweIDs": [ "CWE-20", "CWE-400" ], "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://github.com/harttle/liquidjs", "https://github.com/harttle/liquidjs/commit/95ddefc056a11a44d9e753fd47a39db2c241e578", "https://github.com/harttle/liquidjs/security/advisories/GHSA-9r5m-9576-7f6x", "https://nvd.nist.gov/vuln/detail/CVE-2026-33285" ], "PublishedDate": "2026-03-26T01:16:27.363Z", "LastModifiedDate": "2026-06-17T10:37:15.05Z" }, { "VulnerabilityID": "CVE-2026-33287", "VendorIDs": [ "GHSA-6q5m-63h6-5x4v" ], "PkgID": "liquidjs@10.22.0", "PkgName": "liquidjs", "PkgPath": "app/node_modules/liquidjs/package.json", "PkgIdentifier": { "PURL": "pkg:npm/liquidjs@10.22.0", "UID": "2131eaa43ca895c3" }, "InstalledVersion": "10.22.0", "FixedVersion": "10.25.1", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33287", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:9ba365409b0b0575b956ac78fa2144ad16d66515f4d76f08dfc0b35eda63c8ac", "Title": "LiquidJS has Exponential Memory Amplification through its replace_first Filter $\u0026 Pattern", "Description": "LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.1, the `replace_first` filter in LiquidJS uses JavaScript's `String.prototype.replace()` which interprets `$\u0026` as a back reference to the matched substring. The filter only charges `memoryLimit` for the input string length, not the amplified output. An attacker can achieve exponential memory amplification (up to 625,000:1) while staying within the `memoryLimit` budget, leading to denial of service. Version 10.25.1 patches the issue.", "Severity": "HIGH", "CweIDs": [ "CWE-20", "CWE-400" ], "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://github.com/harttle/liquidjs", "https://github.com/harttle/liquidjs/blob/v10.25.1/CHANGELOG.md", "https://github.com/harttle/liquidjs/commit/35d523026345d80458df24c72e653db78b5d061d", "https://github.com/harttle/liquidjs/releases/tag/v10.25.1", "https://github.com/harttle/liquidjs/security/advisories/GHSA-6q5m-63h6-5x4v", "https://nvd.nist.gov/vuln/detail/CVE-2026-33287" ], "PublishedDate": "2026-03-26T01:16:27.53Z", "LastModifiedDate": "2026-06-17T10:37:15.307Z" }, { "VulnerabilityID": "CVE-2026-35525", "VendorIDs": [ "GHSA-56p5-8mhr-2fph" ], "PkgID": "liquidjs@10.22.0", "PkgName": "liquidjs", "PkgPath": "app/node_modules/liquidjs/package.json", "PkgIdentifier": { "PURL": "pkg:npm/liquidjs@10.22.0", "UID": "2131eaa43ca895c3" }, "InstalledVersion": "10.22.0", "FixedVersion": "10.25.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-35525", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:4bfabea50126f737a6bf456b34fe1b82e2f06a13343ba9cbb9a5ed9886ecd9e9", "Title": "LiquidJS: Root restriction bypass for partial and layout loading through symlinked templates", "Description": "LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.3, for {% include %}, {% render %}, and {% layout %}, LiquidJS checks whether the candidate path is inside the configured partials or layouts roots before reading it. That check is path-based, not realpath-based. Because of that, a file like partials/link.liquid passes the directory containment check as long as its pathname is under the allowed root. If link.liquid is actually a symlink to a file outside the allowed root, the filesystem follows the symlink when the file is opened and LiquidJS renders the external target. So the restriction is applied to the path string that was requested, not to the file that is actually read. This matters in environments where an attacker can place templates or otherwise influence files under a trusted template root, including uploaded themes, extracted archives, mounted content, or repository-controlled template trees. This vulnerability is fixed in 10.25.3.", "Severity": "HIGH", "CweIDs": [ "CWE-61" ], "VendorSeverity": { "ghsa": 3, "nvd": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://github.com/harttle/liquidjs", "https://github.com/harttle/liquidjs/pull/867", "https://github.com/harttle/liquidjs/releases/tag/v10.25.3", "https://github.com/harttle/liquidjs/security/advisories/GHSA-56p5-8mhr-2fph", "https://nvd.nist.gov/vuln/detail/CVE-2026-35525" ], "PublishedDate": "2026-04-08T20:16:24.913Z", "LastModifiedDate": "2026-07-24T21:10:00.143Z" }, { "VulnerabilityID": "CVE-2026-41311", "VendorIDs": [ "GHSA-4rc3-7j7w-m548" ], "PkgID": "liquidjs@10.22.0", "PkgName": "liquidjs", "PkgPath": "app/node_modules/liquidjs/package.json", "PkgIdentifier": { "PURL": "pkg:npm/liquidjs@10.22.0", "UID": "2131eaa43ca895c3" }, "InstalledVersion": "10.22.0", "FixedVersion": "10.25.7", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-41311", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:fc735601685d42ec726b3eab43296cf4f43c83f5e0503734ed421e228f99a2e0", "Title": "liquidjs has a Denial of Service via circular block reference in layout", "Description": "LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.7, a circular block reference in {% layout %} / {% block %} causes an infinite recursive loop, consuming all available memory (~4GB) and crashing the Node.js process with FATAL ERROR: JavaScript heap out of memory. This allows any user who can submit a Liquid template to perform a Denial of Service attack. This issue has been patched in version 10.25.7.", "Severity": "HIGH", "CweIDs": [ "CWE-674" ], "VendorSeverity": { "ghsa": 3, "nvd": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://advisory.echohq.com/cve/CVE-2026-41311", "https://github.com/advisories/GHSA-4rc3-7j7w-m548", "https://github.com/harttle/liquidjs", "https://github.com/harttle/liquidjs/commit/e2311dfd6e82f73509308aa8a3a1fafc92e226f0", "https://github.com/harttle/liquidjs/releases/tag/v10.25.7", "https://github.com/harttle/liquidjs/security/advisories/GHSA-4rc3-7j7w-m548", "https://nvd.nist.gov/vuln/detail/CVE-2026-41311" ], "PublishedDate": "2026-05-09T04:16:21.913Z", "LastModifiedDate": "2026-07-24T21:10:00.143Z" }, { "VulnerabilityID": "CVE-2026-45357", "VendorIDs": [ "GHSA-hh27-hf48-9f5q" ], "PkgID": "liquidjs@10.22.0", "PkgName": "liquidjs", "PkgPath": "app/node_modules/liquidjs/package.json", "PkgIdentifier": { "PURL": "pkg:npm/liquidjs@10.22.0", "UID": "2131eaa43ca895c3" }, "InstalledVersion": "10.22.0", "FixedVersion": "10.26.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-45357", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:a1231cc921f290711feeb027bb025803d32167479cf91fc665dd8894fba5fbc7", "Title": "LiquidJS has a memory and render limit bypass via unbounded width padding in `date` filter (strftime)", "Description": "LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, the date filter's strftime implementation parses width specifiers like %9999999d and forwards the captured width unchecked into pad()/padStart(), leading to memory and render limit bypass. In src/util/underscore.ts, the pad loop performs unbounded string concatenation without consulting the Context's memoryLimit or renderLimit, so a single small template ({{ x | date: '%5000000d' }}) produces megabytes of output and unbounded CPU. The memoryLimit and renderLimit options the docs (src/liquid-options.ts:87-92) advertise as DoS controls — and which the docstring explicitly mentions for strftime — are entirely bypassed. Exploitation can cause large memory allocations, high CPU usage, or OOM crashes per render. This issue has been fixed in version 10.26.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400" ], "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://advisory.echohq.com/cve/CVE-2026-45357", "https://github.com/advisories/GHSA-hh27-hf48-9f5q", "https://github.com/harttle/liquidjs", "https://github.com/harttle/liquidjs/blob/v10.26.0/CHANGELOG.md", "https://github.com/harttle/liquidjs/commit/3129d46dc95efa357b00e5a57ee1af80a13d72ed", "https://github.com/harttle/liquidjs/releases/tag/v10.26.0", "https://github.com/harttle/liquidjs/security/advisories/GHSA-hh27-hf48-9f5q", "https://nvd.nist.gov/vuln/detail/CVE-2026-45357" ], "PublishedDate": "2026-06-17T23:17:03.893Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-45617", "VendorIDs": [ "GHSA-r7g9-xpmj-5fcq" ], "PkgID": "liquidjs@10.22.0", "PkgName": "liquidjs", "PkgPath": "app/node_modules/liquidjs/package.json", "PkgIdentifier": { "PURL": "pkg:npm/liquidjs@10.22.0", "UID": "2131eaa43ca895c3" }, "InstalledVersion": "10.22.0", "FixedVersion": "10.26.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-45617", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:db25d6e57b2313aaa2583a07b9ac84247581ec6fd412f423333a29b09295c941", "Title": "LiquidJS Vulnerable to ReDoS via Quadratic Backtracking in `strip_html` Filter Regex", "Description": "LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, the built-in strip_html filter uses a regex containing four flawed lazy-quantified alternatives, leading to ReDoS via quadratic backtracking. When the input contains many \u003cscript, \u003cstyle, or \u003c!-- opener tokens without matching closers, the V8 regex engine performs O(N²) backtracking, blocking the Node.js event loop. A single ~350 KB request ('\u003cscript'.repeat(50000)) stalls the process for ~10 seconds; cost grows quadratically with input size. The default memoryLimit: Infinity does not bound regex CPU, and even when configured strip_html only charges str.length to the limit — the regex itself runs unbounded. A single unauthenticated request containing crafted untrusted input can cause severe event-loop blocking and CPU amplification that saturates Node.js workers while bypassing memoryLimit protections. This issue has been fixed in version 10.26.0.", "Severity": "HIGH", "CweIDs": [ "CWE-1333" ], "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://advisory.echohq.com/cve/CVE-2026-45617", "https://github.com/advisories/GHSA-r7g9-xpmj-5fcq", "https://github.com/harttle/liquidjs", "https://github.com/harttle/liquidjs/commit/3616a744b9abeb425c217b340a2397d46176afb8", "https://github.com/harttle/liquidjs/releases/tag/v10.26.0", "https://github.com/harttle/liquidjs/security/advisories/GHSA-r7g9-xpmj-5fcq", "https://nvd.nist.gov/vuln/detail/CVE-2026-45617" ], "PublishedDate": "2026-06-17T23:17:04.033Z", "LastModifiedDate": "2026-10-25T23:10:00.167Z" }, { "VulnerabilityID": "CVE-2026-55575", "VendorIDs": [ "GHSA-g357-x5c3-c72p" ], "PkgID": "liquidjs@10.22.0", "PkgName": "liquidjs", "PkgPath": "app/node_modules/liquidjs/package.json", "PkgIdentifier": { "PURL": "pkg:npm/liquidjs@10.22.0", "UID": "2131eaa43ca895c3" }, "InstalledVersion": "10.22.0", "FixedVersion": "10.27.1", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-55575", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:6037b2402bc5f5807018fdcb04330fbca669666c96b60a7c72301c7dc21d5b01", "Title": "LiquidJS: `pop` filter bypasses `memoryLimit` accounting that its array-filter siblings enforce", "Description": "LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.1, the pop array filter at src/filters/array.ts allocated a full clone of its input array via [...toArray(v)] without calling this.context.memoryLimit.use(...), allowing a template render such as {{ huge_array | pop }} to allocate an O(N) clone of an attacker-influenced array outside the configured memoryLimit budget. This issue is fixed in version 10.27.1.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.2 } }, "References": [ "https://github.com/harttle/liquidjs", "https://github.com/harttle/liquidjs/commit/8a0c74a7fcb1671aa1dcb71ec82ba0602dc90d04", "https://github.com/harttle/liquidjs/pull/907", "https://github.com/harttle/liquidjs/releases/tag/v10.27.1", "https://github.com/harttle/liquidjs/security/advisories/GHSA-g357-x5c3-c72p", "https://nvd.nist.gov/vuln/detail/CVE-2026-55575" ], "PublishedDate": "2026-07-08T20:16:53.137Z", "LastModifiedDate": "2026-10-25T17:10:00.197Z" }, { "VulnerabilityID": "CVE-2026-69222", "VendorIDs": [ "GHSA-4r6h-5v86-94p3" ], "PkgID": "liquidjs@10.22.0", "PkgName": "liquidjs", "PkgPath": "app/node_modules/liquidjs/package.json", "PkgIdentifier": { "PURL": "pkg:npm/liquidjs@10.22.0", "UID": "2131eaa43ca895c3" }, "InstalledVersion": "10.22.0", "FixedVersion": "10.27.2", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-69222", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:35fe355dbc9a9ebf90c88a41cb0fd8d62792177ae0da9169bccb67fdb5be2234", "Title": "LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the process", "Description": "LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.2, the join filter in src/filters/array.ts computes complexity from array.length and separator length instead of the total string length produced by array.join(sep). The concat filter can cheaply double arrays of references, after which join materializes the referenced content while charging only for element count, allowing a template to exceed a configured memoryLimit by a large factor. The sibling array_to_sentence_string filter in src/filters/string.ts has the same accounting defect, and a crafted template can allocate toward V8's string or process memory limit and crash the process. This issue is fixed in version 10.27.2.", "Severity": "HIGH", "CweIDs": [ "CWE-400" ], "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://github.com/harttle/liquidjs", "https://github.com/harttle/liquidjs/commit/7ab49f999ac045ec1e87f3a7a9fd68dd9e8602b3", "https://github.com/harttle/liquidjs/pull/925", "https://github.com/harttle/liquidjs/releases/tag/v10.27.2", "https://github.com/harttle/liquidjs/security/advisories/GHSA-4r6h-5v86-94p3", "https://nvd.nist.gov/vuln/detail/CVE-2026-69222" ], "PublishedDate": "2026-08-19T21:17:31.627Z", "LastModifiedDate": "2026-09-09T21:19:49.197Z" }, { "VulnerabilityID": "CVE-2026-4800", "VendorIDs": [ "GHSA-r5fr-rjxr-66jc" ], "PkgID": "lodash@4.17.21", "PkgName": "lodash", "PkgPath": "app/node_modules/lodash/package.json", "PkgIdentifier": { "PURL": "pkg:npm/lodash@4.17.21", "UID": "d36399f819217b44" }, "InstalledVersion": "4.17.21", "FixedVersion": "4.18.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-4800", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:5e5abaffc7ee4b10a7bab144a185b93d5e21792e0748bc81df317aff6ab57de9", "Title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports", "Description": "The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names, and both paths flow into the same Function() constructor sink. When an application passes untrusted input as options.imports key names, an attacker can inject default-parameter expressions that execute arbitrary code at template compilation time. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in, so if Object.prototype has been polluted by another vector the polluted keys are copied into the imports object and passed to Function(). The issue is fixed in 4.18.1 for lodash, lodash-es, lodash-amd, and lodash.template. As a workaround, do not pass untrusted input as key names in options.imports; use only developer-controlled, static key names.", "Severity": "HIGH", "CweIDs": [ "CWE-94" ], "VendorSeverity": { "alma": 3, "ghsa": 3, "nvd": 4, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHBA-2026:21387", "https://access.redhat.com/errata/RHSA-2026:10131", "https://access.redhat.com/errata/RHSA-2026:10175", "https://access.redhat.com/errata/RHSA-2026:10710", "https://access.redhat.com/errata/RHSA-2026:10713", "https://access.redhat.com/errata/RHSA-2026:11454", "https://access.redhat.com/errata/RHSA-2026:11469", "https://access.redhat.com/errata/RHSA-2026:11470", "https://access.redhat.com/errata/RHSA-2026:11471", "https://access.redhat.com/errata/RHSA-2026:11493", "https://access.redhat.com/errata/RHSA-2026:11494", "https://access.redhat.com/errata/RHSA-2026:11495", "https://access.redhat.com/errata/RHSA-2026:11516", "https://access.redhat.com/errata/RHSA-2026:12277", "https://access.redhat.com/errata/RHSA-2026:12279", "https://access.redhat.com/errata/RHSA-2026:13545", "https://access.redhat.com/errata/RHSA-2026:13553", "https://access.redhat.com/errata/RHSA-2026:13571", "https://access.redhat.com/errata/RHSA-2026:13826", "https://access.redhat.com/errata/RHSA-2026:14870", "https://access.redhat.com/errata/RHSA-2026:14871", "https://access.redhat.com/errata/RHSA-2026:16874", "https://access.redhat.com/errata/RHSA-2026:17448", "https://access.redhat.com/errata/RHSA-2026:17468", "https://access.redhat.com/errata/RHSA-2026:17469", "https://access.redhat.com/errata/RHSA-2026:17547", "https://access.redhat.com/errata/RHSA-2026:17549", "https://access.redhat.com/errata/RHSA-2026:17550", "https://access.redhat.com/errata/RHSA-2026:17598", "https://access.redhat.com/errata/RHSA-2026:17789", "https://access.redhat.com/errata/RHSA-2026:19008", "https://access.redhat.com/errata/RHSA-2026:19167", "https://access.redhat.com/errata/RHSA-2026:19409", "https://access.redhat.com/errata/RHSA-2026:19410", "https://access.redhat.com/errata/RHSA-2026:19712", "https://access.redhat.com/errata/RHSA-2026:20041", "https://access.redhat.com/errata/RHSA-2026:20042", "https://access.redhat.com/errata/RHSA-2026:20943", "https://access.redhat.com/errata/RHSA-2026:20946", "https://access.redhat.com/errata/RHSA-2026:21658", "https://access.redhat.com/errata/RHSA-2026:22619", "https://access.redhat.com/errata/RHSA-2026:24331", "https://access.redhat.com/errata/RHSA-2026:24762", "https://access.redhat.com/errata/RHSA-2026:24977", "https://access.redhat.com/errata/RHSA-2026:29795", "https://access.redhat.com/errata/RHSA-2026:34100", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:34608", "https://access.redhat.com/errata/RHSA-2026:36621", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:37186", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40795", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:40984", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41941", "https://access.redhat.com/errata/RHSA-2026:41944", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:44235", "https://access.redhat.com/errata/RHSA-2026:48699", "https://access.redhat.com/errata/RHSA-2026:54188", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:56854", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60023", "https://access.redhat.com/errata/RHSA-2026:8483", "https://access.redhat.com/errata/RHSA-2026:8484", "https://access.redhat.com/errata/RHSA-2026:8490", "https://access.redhat.com/errata/RHSA-2026:8491", "https://access.redhat.com/errata/RHSA-2026:8493", "https://access.redhat.com/errata/RHSA-2026:8498", "https://access.redhat.com/errata/RHSA-2026:9385", "https://access.redhat.com/errata/RHSA-2026:9742", "https://access.redhat.com/security/cve/CVE-2026-4800", "https://advisory.echohq.com/cve/CVE-2026-4800", "https://bugzilla.redhat.com/2453496", "https://bugzilla.redhat.com/show_bug.cgi?id=2431740", "https://bugzilla.redhat.com/show_bug.cgi?id=2453496", "https://cna.openjsf.org/security-advisories.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4800", "https://errata.almalinux.org/9/ALSA-2026-19167.html", "https://errata.rockylinux.org/RLSA-2026:24331", "https://github.com/advisories/GHSA-35jh-r3h4-6jhm", "https://github.com/advisories/GHSA-r5fr-rjxr-66jc", "https://github.com/lodash/lodash", "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c", "https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc", "https://linux.oracle.com/cve/CVE-2026-4800.html", "https://linux.oracle.com/errata/ELSA-2026-24331.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-4800", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4800.json", "https://ubuntu.com/security/notices/USN-8411-1", "https://www.cve.org/CVERecord?id=CVE-2026-4800" ], "PublishedDate": "2026-03-31T20:16:29.66Z", "LastModifiedDate": "2026-10-15T07:18:00.61Z" }, { "VulnerabilityID": "CVE-2026-26996", "VendorIDs": [ "GHSA-3ppc-4f35-3m26" ], "PkgID": "minimatch@3.1.2", "PkgName": "minimatch", "PkgPath": "app/node_modules/minimatch/package.json", "PkgIdentifier": { "PURL": "pkg:npm/minimatch@3.1.2", "UID": "7abfc03cad2c19ec" }, "InstalledVersion": "3.1.2", "FixedVersion": "10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-26996", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:bb00db337d6d5efce357c93eae6277510a8ca82efd7e9a76675f17d143c9ff46", "Title": "minimatch: minimatch: Denial of Service via specially crafted glob patterns", "Description": "minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains many consecutive * wildcards followed by a literal character that doesn't appear in the test string. Each * compiles to a separate [^/]*? regex group, and when the match fails, V8's regex engine backtracks exponentially across all possible splits. The time complexity is O(4^N) where N is the number of * characters. With N=15, a single minimatch() call takes ~2 seconds. With N=34, it hangs effectively forever. Any application that passes user-controlled strings to minimatch() as the pattern argument is vulnerable to DoS. This issue has been fixed in version 10.2.1.", "Severity": "HIGH", "CweIDs": [ "CWE-1333" ], "VendorSeverity": { "alma": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 2, "rocky": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:7896", "https://access.redhat.com/security/cve/CVE-2026-26996", "https://advisory.echohq.com/cve/CVE-2026-26996", "https://bugzilla.redhat.com/2441268", "https://bugzilla.redhat.com/2442922", "https://bugzilla.redhat.com/2448754", "https://bugzilla.redhat.com/2453151", "https://bugzilla.redhat.com/show_bug.cgi?id=2441268", "https://bugzilla.redhat.com/show_bug.cgi?id=2442922", "https://bugzilla.redhat.com/show_bug.cgi?id=2448754", "https://bugzilla.redhat.com/show_bug.cgi?id=2453151", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21710", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26996", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27135", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27904", "https://errata.almalinux.org/9/ALSA-2026-7896.html", "https://errata.rockylinux.org/RLSA-2026:7896", "https://github.com/advisories/GHSA-3ppc-4f35-3m26", "https://github.com/isaacs/minimatch", "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5", "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26", "https://linux.oracle.com/cve/CVE-2026-26996.html", "https://linux.oracle.com/errata/ELSA-2026-8339.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-26996", "https://www.cve.org/CVERecord?id=CVE-2026-26996" ], "PublishedDate": "2026-02-20T03:16:01.62Z", "LastModifiedDate": "2026-06-17T10:26:30.527Z" }, { "VulnerabilityID": "CVE-2026-27903", "VendorIDs": [ "GHSA-7r86-cg39-jmmj" ], "PkgID": "minimatch@3.1.2", "PkgName": "minimatch", "PkgPath": "app/node_modules/minimatch/package.json", "PkgIdentifier": { "PURL": "pkg:npm/minimatch@3.1.2", "UID": "7abfc03cad2c19ec" }, "InstalledVersion": "3.1.2", "FixedVersion": "10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27903", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:ca08d0d06774d4c2ff9d222ef3776a82fc7138f3d3fda20dafa772dc05d4ad40", "Title": "minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns", "Description": "minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3, `matchOne()` performs unbounded recursive backtracking when a glob pattern contains multiple non-adjacent `**` (GLOBSTAR) segments and the input path does not match. The time complexity is O(C(n, k)) -- binomial -- where `n` is the number of path segments and `k` is the number of globstars. With k=11 and n=30, a call to the default `minimatch()` API stalls for roughly 5 seconds. With k=13, it exceeds 15 seconds. No memoization or call budget exists to bound this behavior. Any application where an attacker can influence the glob pattern passed to `minimatch()` is vulnerable. The realistic attack surface includes build tools and task runners that accept user-supplied glob arguments (ESLint, Webpack, Rollup config), multi-tenant systems where one tenant configures glob-based rules that run in a shared process, admin or developer interfaces that accept ignore-rule or filter configuration as globs, and CI/CD pipelines that evaluate user-submitted config files containing glob patterns. An attacker who can place a crafted pattern into any of these paths can stall the Node.js event loop for tens of seconds per invocation. The pattern is 56 bytes for a 5-second stall and does not require authentication in contexts where pattern input is part of the feature. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3 fix the issue.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "ghsa": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-27903", "https://advisory.echohq.com/cve/CVE-2026-27903", "https://github.com/advisories/GHSA-7r86-cg39-jmmj", "https://github.com/isaacs/minimatch", "https://github.com/isaacs/minimatch/commit/0bf499aa45f5059b56809cc3b75ff3eafeb8d748", "https://github.com/isaacs/minimatch/security/advisories/GHSA-7r86-cg39-jmmj", "https://nvd.nist.gov/vuln/detail/CVE-2026-27903", "https://www.cve.org/CVERecord?id=CVE-2026-27903" ], "PublishedDate": "2026-02-26T02:16:21.353Z", "LastModifiedDate": "2026-06-17T10:27:51.187Z" }, { "VulnerabilityID": "CVE-2026-27904", "VendorIDs": [ "GHSA-23c5-xmqv-rm74" ], "PkgID": "minimatch@3.1.2", "PkgName": "minimatch", "PkgPath": "app/node_modules/minimatch/package.json", "PkgIdentifier": { "PURL": "pkg:npm/minimatch@3.1.2", "UID": "7abfc03cad2c19ec" }, "InstalledVersion": "3.1.2", "FixedVersion": "10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27904", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:8408d149ddccc77671649e6363c865bd477930cdda065a1abd8093bfaab29dfe", "Title": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions", "Description": "minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4, nested `*()` extglobs produce regexps with nested unbounded quantifiers (e.g. `(?:(?:a|b)*)*`), which exhibit catastrophic backtracking in V8. With a 12-byte pattern `*(*(*(a|b)))` and an 18-byte non-matching input, `minimatch()` stalls for over 7 seconds. Adding a single nesting level or a few input characters pushes this to minutes. This is the most severe finding: it is triggered by the default `minimatch()` API with no special options, and the minimum viable pattern is only 12 bytes. The same issue affects `+()` extglobs equally. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4 fix the issue.", "Severity": "HIGH", "CweIDs": [ "CWE-1333" ], "VendorSeverity": { "alma": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 2, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:7896", "https://access.redhat.com/security/cve/CVE-2026-27904", "https://advisory.echohq.com/cve/CVE-2026-27904", "https://bugzilla.redhat.com/2441268", "https://bugzilla.redhat.com/2442922", "https://bugzilla.redhat.com/2448754", "https://bugzilla.redhat.com/2453151", "https://bugzilla.redhat.com/show_bug.cgi?id=2441268", "https://bugzilla.redhat.com/show_bug.cgi?id=2442922", "https://bugzilla.redhat.com/show_bug.cgi?id=2448754", "https://bugzilla.redhat.com/show_bug.cgi?id=2453151", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21710", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26996", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27135", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27904", "https://errata.almalinux.org/9/ALSA-2026-7896.html", "https://errata.rockylinux.org/RLSA-2026:7896", "https://github.com/advisories/GHSA-23c5-xmqv-rm74", "https://github.com/isaacs/minimatch", "https://github.com/isaacs/minimatch/commit/11d0df6165d15a955462316b26d52e5efae06fce", "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74", "https://linux.oracle.com/cve/CVE-2026-27904.html", "https://linux.oracle.com/errata/ELSA-2026-8339.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-27904", "https://www.cve.org/CVERecord?id=CVE-2026-27904" ], "PublishedDate": "2026-02-26T02:16:21.76Z", "LastModifiedDate": "2026-06-17T10:27:51.297Z" }, { "VulnerabilityID": "CVE-2026-26996", "VendorIDs": [ "GHSA-3ppc-4f35-3m26" ], "PkgID": "minimatch@9.0.4", "PkgName": "minimatch", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/minimatch/package.json", "PkgIdentifier": { "PURL": "pkg:npm/minimatch@9.0.4", "UID": "89cbb2a5914940c7" }, "InstalledVersion": "9.0.4", "FixedVersion": "10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-26996", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:ed2b7767a837650cda51a5e44e47dc92fd4e3038cbe0f4209320abb6bed43beb", "Title": "minimatch: minimatch: Denial of Service via specially crafted glob patterns", "Description": "minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains many consecutive * wildcards followed by a literal character that doesn't appear in the test string. Each * compiles to a separate [^/]*? regex group, and when the match fails, V8's regex engine backtracks exponentially across all possible splits. The time complexity is O(4^N) where N is the number of * characters. With N=15, a single minimatch() call takes ~2 seconds. With N=34, it hangs effectively forever. Any application that passes user-controlled strings to minimatch() as the pattern argument is vulnerable to DoS. This issue has been fixed in version 10.2.1.", "Severity": "HIGH", "CweIDs": [ "CWE-1333" ], "VendorSeverity": { "alma": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 2, "rocky": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:7896", "https://access.redhat.com/security/cve/CVE-2026-26996", "https://advisory.echohq.com/cve/CVE-2026-26996", "https://bugzilla.redhat.com/2441268", "https://bugzilla.redhat.com/2442922", "https://bugzilla.redhat.com/2448754", "https://bugzilla.redhat.com/2453151", "https://bugzilla.redhat.com/show_bug.cgi?id=2441268", "https://bugzilla.redhat.com/show_bug.cgi?id=2442922", "https://bugzilla.redhat.com/show_bug.cgi?id=2448754", "https://bugzilla.redhat.com/show_bug.cgi?id=2453151", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21710", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26996", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27135", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27904", "https://errata.almalinux.org/9/ALSA-2026-7896.html", "https://errata.rockylinux.org/RLSA-2026:7896", "https://github.com/advisories/GHSA-3ppc-4f35-3m26", "https://github.com/isaacs/minimatch", "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5", "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26", "https://linux.oracle.com/cve/CVE-2026-26996.html", "https://linux.oracle.com/errata/ELSA-2026-8339.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-26996", "https://www.cve.org/CVERecord?id=CVE-2026-26996" ], "PublishedDate": "2026-02-20T03:16:01.62Z", "LastModifiedDate": "2026-06-17T10:26:30.527Z" }, { "VulnerabilityID": "CVE-2026-27903", "VendorIDs": [ "GHSA-7r86-cg39-jmmj" ], "PkgID": "minimatch@9.0.4", "PkgName": "minimatch", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/minimatch/package.json", "PkgIdentifier": { "PURL": "pkg:npm/minimatch@9.0.4", "UID": "89cbb2a5914940c7" }, "InstalledVersion": "9.0.4", "FixedVersion": "10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27903", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:4e00557bcef123ef3a921260599fece7b707b1bda3265441d32a07b2e2187fed", "Title": "minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns", "Description": "minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3, `matchOne()` performs unbounded recursive backtracking when a glob pattern contains multiple non-adjacent `**` (GLOBSTAR) segments and the input path does not match. The time complexity is O(C(n, k)) -- binomial -- where `n` is the number of path segments and `k` is the number of globstars. With k=11 and n=30, a call to the default `minimatch()` API stalls for roughly 5 seconds. With k=13, it exceeds 15 seconds. No memoization or call budget exists to bound this behavior. Any application where an attacker can influence the glob pattern passed to `minimatch()` is vulnerable. The realistic attack surface includes build tools and task runners that accept user-supplied glob arguments (ESLint, Webpack, Rollup config), multi-tenant systems where one tenant configures glob-based rules that run in a shared process, admin or developer interfaces that accept ignore-rule or filter configuration as globs, and CI/CD pipelines that evaluate user-submitted config files containing glob patterns. An attacker who can place a crafted pattern into any of these paths can stall the Node.js event loop for tens of seconds per invocation. The pattern is 56 bytes for a 5-second stall and does not require authentication in contexts where pattern input is part of the feature. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3 fix the issue.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "ghsa": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-27903", "https://advisory.echohq.com/cve/CVE-2026-27903", "https://github.com/advisories/GHSA-7r86-cg39-jmmj", "https://github.com/isaacs/minimatch", "https://github.com/isaacs/minimatch/commit/0bf499aa45f5059b56809cc3b75ff3eafeb8d748", "https://github.com/isaacs/minimatch/security/advisories/GHSA-7r86-cg39-jmmj", "https://nvd.nist.gov/vuln/detail/CVE-2026-27903", "https://www.cve.org/CVERecord?id=CVE-2026-27903" ], "PublishedDate": "2026-02-26T02:16:21.353Z", "LastModifiedDate": "2026-06-17T10:27:51.187Z" }, { "VulnerabilityID": "CVE-2026-27904", "VendorIDs": [ "GHSA-23c5-xmqv-rm74" ], "PkgID": "minimatch@9.0.4", "PkgName": "minimatch", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/minimatch/package.json", "PkgIdentifier": { "PURL": "pkg:npm/minimatch@9.0.4", "UID": "89cbb2a5914940c7" }, "InstalledVersion": "9.0.4", "FixedVersion": "10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27904", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:0e15cb57e8c4f56c0c8cf64079291a16eae1bc2de6e723129fbd7e35b56ea772", "Title": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions", "Description": "minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4, nested `*()` extglobs produce regexps with nested unbounded quantifiers (e.g. `(?:(?:a|b)*)*`), which exhibit catastrophic backtracking in V8. With a 12-byte pattern `*(*(*(a|b)))` and an 18-byte non-matching input, `minimatch()` stalls for over 7 seconds. Adding a single nesting level or a few input characters pushes this to minutes. This is the most severe finding: it is triggered by the default `minimatch()` API with no special options, and the minimum viable pattern is only 12 bytes. The same issue affects `+()` extglobs equally. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4 fix the issue.", "Severity": "HIGH", "CweIDs": [ "CWE-1333" ], "VendorSeverity": { "alma": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 2, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:7896", "https://access.redhat.com/security/cve/CVE-2026-27904", "https://advisory.echohq.com/cve/CVE-2026-27904", "https://bugzilla.redhat.com/2441268", "https://bugzilla.redhat.com/2442922", "https://bugzilla.redhat.com/2448754", "https://bugzilla.redhat.com/2453151", "https://bugzilla.redhat.com/show_bug.cgi?id=2441268", "https://bugzilla.redhat.com/show_bug.cgi?id=2442922", "https://bugzilla.redhat.com/show_bug.cgi?id=2448754", "https://bugzilla.redhat.com/show_bug.cgi?id=2453151", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21710", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26996", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27135", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27904", "https://errata.almalinux.org/9/ALSA-2026-7896.html", "https://errata.rockylinux.org/RLSA-2026:7896", "https://github.com/advisories/GHSA-23c5-xmqv-rm74", "https://github.com/isaacs/minimatch", "https://github.com/isaacs/minimatch/commit/11d0df6165d15a955462316b26d52e5efae06fce", "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74", "https://linux.oracle.com/cve/CVE-2026-27904.html", "https://linux.oracle.com/errata/ELSA-2026-8339.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-27904", "https://www.cve.org/CVERecord?id=CVE-2026-27904" ], "PublishedDate": "2026-02-26T02:16:21.76Z", "LastModifiedDate": "2026-06-17T10:27:51.297Z" }, { "VulnerabilityID": "CVE-2026-26996", "VendorIDs": [ "GHSA-3ppc-4f35-3m26" ], "PkgID": "minimatch@9.0.5", "PkgName": "minimatch", "PkgPath": "app/node_modules/redbean-node/node_modules/minimatch/package.json", "PkgIdentifier": { "PURL": "pkg:npm/minimatch@9.0.5", "UID": "210f7f54a287e49c" }, "InstalledVersion": "9.0.5", "FixedVersion": "10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-26996", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:419b005345a54504194c53474ee47de7bece488283a56edf9b6f4b59b4ecd357", "Title": "minimatch: minimatch: Denial of Service via specially crafted glob patterns", "Description": "minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains many consecutive * wildcards followed by a literal character that doesn't appear in the test string. Each * compiles to a separate [^/]*? regex group, and when the match fails, V8's regex engine backtracks exponentially across all possible splits. The time complexity is O(4^N) where N is the number of * characters. With N=15, a single minimatch() call takes ~2 seconds. With N=34, it hangs effectively forever. Any application that passes user-controlled strings to minimatch() as the pattern argument is vulnerable to DoS. This issue has been fixed in version 10.2.1.", "Severity": "HIGH", "CweIDs": [ "CWE-1333" ], "VendorSeverity": { "alma": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 2, "rocky": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:7896", "https://access.redhat.com/security/cve/CVE-2026-26996", "https://advisory.echohq.com/cve/CVE-2026-26996", "https://bugzilla.redhat.com/2441268", "https://bugzilla.redhat.com/2442922", "https://bugzilla.redhat.com/2448754", "https://bugzilla.redhat.com/2453151", "https://bugzilla.redhat.com/show_bug.cgi?id=2441268", "https://bugzilla.redhat.com/show_bug.cgi?id=2442922", "https://bugzilla.redhat.com/show_bug.cgi?id=2448754", "https://bugzilla.redhat.com/show_bug.cgi?id=2453151", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21710", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26996", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27135", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27904", "https://errata.almalinux.org/9/ALSA-2026-7896.html", "https://errata.rockylinux.org/RLSA-2026:7896", "https://github.com/advisories/GHSA-3ppc-4f35-3m26", "https://github.com/isaacs/minimatch", "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5", "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26", "https://linux.oracle.com/cve/CVE-2026-26996.html", "https://linux.oracle.com/errata/ELSA-2026-8339.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-26996", "https://www.cve.org/CVERecord?id=CVE-2026-26996" ], "PublishedDate": "2026-02-20T03:16:01.62Z", "LastModifiedDate": "2026-06-17T10:26:30.527Z" }, { "VulnerabilityID": "CVE-2026-27903", "VendorIDs": [ "GHSA-7r86-cg39-jmmj" ], "PkgID": "minimatch@9.0.5", "PkgName": "minimatch", "PkgPath": "app/node_modules/redbean-node/node_modules/minimatch/package.json", "PkgIdentifier": { "PURL": "pkg:npm/minimatch@9.0.5", "UID": "210f7f54a287e49c" }, "InstalledVersion": "9.0.5", "FixedVersion": "10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27903", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:260c4dccc733dc6f078069f0e031f9d67c1d80168590a04e5dcea30bbbaa804c", "Title": "minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns", "Description": "minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3, `matchOne()` performs unbounded recursive backtracking when a glob pattern contains multiple non-adjacent `**` (GLOBSTAR) segments and the input path does not match. The time complexity is O(C(n, k)) -- binomial -- where `n` is the number of path segments and `k` is the number of globstars. With k=11 and n=30, a call to the default `minimatch()` API stalls for roughly 5 seconds. With k=13, it exceeds 15 seconds. No memoization or call budget exists to bound this behavior. Any application where an attacker can influence the glob pattern passed to `minimatch()` is vulnerable. The realistic attack surface includes build tools and task runners that accept user-supplied glob arguments (ESLint, Webpack, Rollup config), multi-tenant systems where one tenant configures glob-based rules that run in a shared process, admin or developer interfaces that accept ignore-rule or filter configuration as globs, and CI/CD pipelines that evaluate user-submitted config files containing glob patterns. An attacker who can place a crafted pattern into any of these paths can stall the Node.js event loop for tens of seconds per invocation. The pattern is 56 bytes for a 5-second stall and does not require authentication in contexts where pattern input is part of the feature. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3 fix the issue.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "ghsa": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-27903", "https://advisory.echohq.com/cve/CVE-2026-27903", "https://github.com/advisories/GHSA-7r86-cg39-jmmj", "https://github.com/isaacs/minimatch", "https://github.com/isaacs/minimatch/commit/0bf499aa45f5059b56809cc3b75ff3eafeb8d748", "https://github.com/isaacs/minimatch/security/advisories/GHSA-7r86-cg39-jmmj", "https://nvd.nist.gov/vuln/detail/CVE-2026-27903", "https://www.cve.org/CVERecord?id=CVE-2026-27903" ], "PublishedDate": "2026-02-26T02:16:21.353Z", "LastModifiedDate": "2026-06-17T10:27:51.187Z" }, { "VulnerabilityID": "CVE-2026-27904", "VendorIDs": [ "GHSA-23c5-xmqv-rm74" ], "PkgID": "minimatch@9.0.5", "PkgName": "minimatch", "PkgPath": "app/node_modules/redbean-node/node_modules/minimatch/package.json", "PkgIdentifier": { "PURL": "pkg:npm/minimatch@9.0.5", "UID": "210f7f54a287e49c" }, "InstalledVersion": "9.0.5", "FixedVersion": "10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27904", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:627fc7e050bbcac306d80b3081afb2b9289fac7c19947ec7ef3bb15371d413a6", "Title": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions", "Description": "minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4, nested `*()` extglobs produce regexps with nested unbounded quantifiers (e.g. `(?:(?:a|b)*)*`), which exhibit catastrophic backtracking in V8. With a 12-byte pattern `*(*(*(a|b)))` and an 18-byte non-matching input, `minimatch()` stalls for over 7 seconds. Adding a single nesting level or a few input characters pushes this to minutes. This is the most severe finding: it is triggered by the default `minimatch()` API with no special options, and the minimum viable pattern is only 12 bytes. The same issue affects `+()` extglobs equally. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4 fix the issue.", "Severity": "HIGH", "CweIDs": [ "CWE-1333" ], "VendorSeverity": { "alma": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 2, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:7896", "https://access.redhat.com/security/cve/CVE-2026-27904", "https://advisory.echohq.com/cve/CVE-2026-27904", "https://bugzilla.redhat.com/2441268", "https://bugzilla.redhat.com/2442922", "https://bugzilla.redhat.com/2448754", "https://bugzilla.redhat.com/2453151", "https://bugzilla.redhat.com/show_bug.cgi?id=2441268", "https://bugzilla.redhat.com/show_bug.cgi?id=2442922", "https://bugzilla.redhat.com/show_bug.cgi?id=2448754", "https://bugzilla.redhat.com/show_bug.cgi?id=2453151", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21710", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26996", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27135", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27904", "https://errata.almalinux.org/9/ALSA-2026-7896.html", "https://errata.rockylinux.org/RLSA-2026:7896", "https://github.com/advisories/GHSA-23c5-xmqv-rm74", "https://github.com/isaacs/minimatch", "https://github.com/isaacs/minimatch/commit/11d0df6165d15a955462316b26d52e5efae06fce", "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74", "https://linux.oracle.com/cve/CVE-2026-27904.html", "https://linux.oracle.com/errata/ELSA-2026-8339.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-27904", "https://www.cve.org/CVERecord?id=CVE-2026-27904" ], "PublishedDate": "2026-02-26T02:16:21.76Z", "LastModifiedDate": "2026-06-17T10:27:51.297Z" }, { "VulnerabilityID": "GHSA-3f6p-5ww8-9rcr", "PkgID": "mysql2@3.9.9", "PkgName": "mysql2", "PkgPath": "app/node_modules/mysql2/package.json", "PkgIdentifier": { "PURL": "pkg:npm/mysql2@3.9.9", "UID": "ff933fd321475ce" }, "InstalledVersion": "3.9.9", "FixedVersion": "3.22.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-3f6p-5ww8-9rcr", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:7f51a740e41824593e3874c270e23b22c9d2ca2a50fcbb8d998c4f8cd7ca837d", "Title": "MySQL2: Auth Plugin Downgrade to mysql_clear_password Leaks Plaintext Credentials", "Description": "## Summary\n\nA rogue MySQL server (or MITM) can force mysql2 to send credentials in **plaintext** by requesting an auth switch to `mysql_clear_password`. The driver complies without verifying that TLS is active.\n\n## Details\n\n`mysql_clear_password` is registered as a default standard plugin in `lib/commands/auth_switch.js` (line 21). When a server sends an AuthSwitchRequest (0xFE) requesting `mysql_clear_password`, the driver executes it without checking for TLS. The plugin (`lib/auth_plugins/mysql_clear_password.js`) returns `Buffer.from(password + '\\0')`.\n\nNote: `caching_sha2_password` plugin DOES check for SSL before sending cleartext (line 77). But `mysql_clear_password` has no such guard.\n\n## Attack Scenario\n\n1. Attacker operates rogue MySQL server or performs MITM\n2. Server advertises `caching_sha2_password` in handshake\n3. Client sends hashed auth response\n4. Server replies with AuthSwitchRequest to `mysql_clear_password`\n5. Client sends password in plaintext\n6. Attacker captures plaintext password\n\n## PoC\n\nRogue MySQL server (Node.js, ~80 lines) that captures plaintext passwords from mysql2 clients. Tested against mysql2 3.20.0. Full PoC available on request.\n\n## Suggested Fix\n\nRemove `mysql_clear_password` from `standardAuthPlugins`, or add a guard requiring TLS/unix socket before allowing cleartext auth.\n\n## Impact\n\n- mysql2: 9M weekly downloads\n- Any application connecting without TLS is vulnerable to credential theft\n- Cloud environments with untrusted network paths are especially at risk", "Severity": "HIGH", "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V40Score": 8.2 } }, "References": [ "https://github.com/sidorares/node-mysql2", "https://github.com/sidorares/node-mysql2/commit/884bec56288d827939d0dd3f1f4ae476fbc8dbeb", "https://github.com/sidorares/node-mysql2/issues/1617", "https://github.com/sidorares/node-mysql2/pull/4236", "https://github.com/sidorares/node-mysql2/releases/tag/v3.22.0", "https://github.com/sidorares/node-mysql2/security/advisories/GHSA-3f6p-5ww8-9rcr" ], "PublishedDate": "2026-09-01T16:40:34Z", "LastModifiedDate": "2026-09-01T16:40:34Z" }, { "VulnerabilityID": "CVE-2026-67213", "VendorIDs": [ "GHSA-2v37-7h3g-55p8" ], "PkgID": "nanoid@3.3.11", "PkgName": "nanoid", "PkgPath": "app/node_modules/nanoid/package.json", "PkgIdentifier": { "PURL": "pkg:npm/nanoid@3.3.11", "UID": "c1e14baf07a1c635" }, "InstalledVersion": "3.3.11", "FixedVersion": "3.3.18, 5.1.6", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-67213", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:b6d5630b3fcdde31a9cd5471e0d2ec9a53997965f6109ebe6e78f6f5fef023a7", "Title": "nanoid: nanoid: Denial of Service via infinite loop in random ID generation", "Description": "nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that passes an unvalidated, attacker-controlled size of 0 to these functions is exposed to a denial-of-service condition.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "ghsa": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 5.9, "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-67213", "https://advisory.echohq.com/cve/CVE-2026-67213", "https://github.com/ai/nanoid", "https://github.com/ai/nanoid/commit/cb3626d0f3342fdf179cd425fd9c4fbb92c7d0e7", "https://github.com/ai/nanoid/commit/e10f8d40ce9d1ab47f66d65a16b48086432730d0", "https://github.com/ai/nanoid/commit/f9d13f150847d117877adee3460a46eceb0cf49b", "https://github.com/ai/nanoid/releases/tag/3.3.17", "https://github.com/ai/nanoid/releases/tag/3.3.18", "https://github.com/ai/nanoid/releases/tag/5.1.6", "https://nvd.nist.gov/vuln/detail/CVE-2026-67213", "https://www.cve.org/CVERecord?id=CVE-2026-67213", "https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-zero-size-in-customalphabet-and-customrandom" ], "PublishedDate": "2026-07-29T14:16:34.89Z", "LastModifiedDate": "2026-10-23T23:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-67214", "VendorIDs": [ "GHSA-28wg-ghj8-5hjv" ], "PkgID": "nanoid@3.3.11", "PkgName": "nanoid", "PkgPath": "app/node_modules/nanoid/package.json", "PkgIdentifier": { "PURL": "pkg:npm/nanoid@3.3.11", "UID": "c1e14baf07a1c635" }, "InstalledVersion": "3.3.11", "FixedVersion": "3.3.16, 5.1.16", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-67214", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:b447da8c16694ae3ea9ad682ebcc9db4d4a2e76e55bf4116b3bf3a3fb5754434", "Title": "nanoid: nanoid: Denial of Service via negative size input in non-secure module functions", "Description": "nanoid (Nano ID) before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module (nanoid/non-secure). When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination condition, spinning indefinitely and hanging the calling thread. An application that passes an unvalidated, attacker-controlled negative size to these functions is exposed to a denial-of-service condition.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "ghsa": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 5.9, "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-67214", "https://advisory.echohq.com/cve/CVE-2026-67214", "https://github.com/ai/nanoid", "https://github.com/ai/nanoid/commit/6ccc67bbaba71d3d77a21d9b636f4171a268ce49", "https://github.com/ai/nanoid/commit/e835c9b71eab832bc6106944bdd26ea96cf2c66d", "https://github.com/ai/nanoid/pull/600", "https://github.com/ai/nanoid/pull/601", "https://github.com/ai/nanoid/releases/tag/3.3.16", "https://github.com/ai/nanoid/releases/tag/5.1.16", "https://nvd.nist.gov/vuln/detail/CVE-2026-67214", "https://www.cve.org/CVERecord?id=CVE-2026-67214", "https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-negative-size-in-non-secure-module" ], "PublishedDate": "2026-07-29T14:16:35.043Z", "LastModifiedDate": "2026-10-29T21:17:29.87Z" }, { "VulnerabilityID": "CVE-2026-73086", "VendorIDs": [ "GHSA-xwg4-73v4-xw9w" ], "PkgID": "nanoid@3.3.11", "PkgName": "nanoid", "PkgPath": "app/node_modules/nanoid/package.json", "PkgIdentifier": { "PURL": "pkg:npm/nanoid@3.3.11", "UID": "c1e14baf07a1c635" }, "InstalledVersion": "3.3.11", "FixedVersion": "3.3.12, 5.1.11", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-73086", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:cbe6a66f4d00017a5e0b740c8947bb3cf979e383b221afbbfe4b0c4634b4d1ff", "Title": "nanoid: nanoid: Predictable ID generation due to integer overflow", "Description": "nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoid(size) function in index.js and index.cjs coerces the user-influenced size parameter to a signed 32-bit integer, allowing a value of 2147483648 to become -2147483648 and corrupt the process-wide CSPRNG poolOffset in fillPool(), which causes subsequent session tokens, CSRF tokens, API keys, and unique identifiers to become the deterministic string \"uuuuuuuuuuuuuuuuuuuuu\" until the process restarts. This issue is fixed in versions 3.3.12 and 5.1.11.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-73086", "https://advisory.echohq.com/cve/CVE-2026-73086", "https://github.com/advisories/GHSA-xwg4-73v4-xw9w", "https://github.com/ai/nanoid", "https://github.com/ai/nanoid/commit/7087969281cab8ba8ae3babf1894e819068b3bb4", "https://github.com/ai/nanoid/commit/821dfed7b5db7f88e92f56c60eef32c8135077c3", "https://github.com/ai/nanoid/commit/b0036ed60dc9facd7f1191a50dfb3076500202ac", "https://github.com/ai/nanoid/releases/tag/3.3.12", "https://github.com/ai/nanoid/releases/tag/5.1.11", "https://github.com/ai/nanoid/security/advisories/GHSA-xwg4-73v4-xw9w", "https://nvd.nist.gov/vuln/detail/CVE-2026-73086", "https://www.cve.org/CVERecord?id=CVE-2026-73086" ], "PublishedDate": "2026-08-11T17:19:16.69Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2025-14874", "VendorIDs": [ "GHSA-rcmh-qjqh-p98v" ], "PkgID": "nodemailer@6.9.16", "PkgName": "nodemailer", "PkgPath": "app/node_modules/nodemailer/package.json", "PkgIdentifier": { "PURL": "pkg:npm/nodemailer@6.9.16", "UID": "4c16548e727bdc6b" }, "InstalledVersion": "6.9.16", "FixedVersion": "7.0.11", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-14874", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:c1b8cab9e981196ab1527c64a356c483ef81e86d588dc2a51013b5e87a381730", "Title": "nodemailer: Nodemailer: Denial of service via crafted email address header", "Description": "A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email address header that triggers infinite recursion in the address parser.", "Severity": "HIGH", "CweIDs": [ "CWE-703" ], "VendorSeverity": { "ghsa": 3, "nvd": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-14874", "https://advisory.echohq.com/cve/CVE-2025-14874", "https://bugzilla.redhat.com/show_bug.cgi?id=2418133", "https://github.com/advisories/GHSA-rcmh-qjqh-p98v", "https://github.com/nodemailer/nodemailer", "https://github.com/nodemailer/nodemailer/commit/6218b8df", "https://github.com/nodemailer/nodemailer/commit/b61b9c0cfd682b6f647754ca338373b68336a150", "https://github.com/nodemailer/nodemailer/security/advisories/GHSA-rcmh-qjqh-p98v", "https://nvd.nist.gov/vuln/detail/CVE-2025-14874", "https://www.cve.org/CVERecord?id=CVE-2025-14874" ], "PublishedDate": "2025-12-18T09:15:44.87Z", "LastModifiedDate": "2026-10-27T05:16:55.207Z" }, { "VulnerabilityID": "CVE-2026-82659", "VendorIDs": [ "GHSA-p6gq-j5cr-w38f" ], "PkgID": "nodemailer@6.9.16", "PkgName": "nodemailer", "PkgPath": "app/node_modules/nodemailer/package.json", "PkgIdentifier": { "PURL": "pkg:npm/nodemailer@6.9.16", "UID": "4c16548e727bdc6b" }, "InstalledVersion": "6.9.16", "FixedVersion": "9.0.1", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-82659", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:fefa9da8ba725a1c678f286604ec6965a082346b98481430dadc3ecdb502afe8", "Title": "nodemailer: Nodemailer: Arbitrary file read and Server-Side Request Forgery via raw option bypass", "Description": "nodemailer before 9.0.1 fails to apply disableFileAccess and disableUrlAccess flags to message-level raw option, allowing authenticated attackers to read arbitrary files or perform server-side request forgery by supplying path or href properties. Attackers can exploit this by crafting raw messages with file paths or URLs that bypass the intended sandbox, with fetched content delivered in the outgoing message to attacker-controlled recipients.", "Severity": "HIGH", "CweIDs": [ "CWE-73" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-82659", "https://advisory.echohq.com/cve/CVE-2026-82659", "https://github.com/Sif-0x01/security-advisories/security/advisories/GHSA-68x8-4h5v-r533", "https://github.com/advisories/GHSA-p6gq-j5cr-w38f", "https://github.com/nodemailer/nodemailer", "https://github.com/nodemailer/nodemailer/commit/a82e060d978f27e5f41369a9a9807b1e3dedc2e2", "https://github.com/nodemailer/nodemailer/releases/tag/v9.0.1", "https://github.com/nodemailer/nodemailer/security/advisories/GHSA-p6gq-j5cr-w38f", "https://nvd.nist.gov/vuln/detail/CVE-2026-82659", "https://www.cve.org/CVERecord?id=CVE-2026-82659", "https://www.vulncheck.com/advisories/nodemailer-before-9.0.1-file-read-and-ssrf-via-raw-option" ], "PublishedDate": "2026-08-31T09:17:03.633Z", "LastModifiedDate": "2026-09-10T15:48:28.757Z" }, { "VulnerabilityID": "CVE-2026-82662", "VendorIDs": [ "GHSA-r7g4-qg5f-qqm2" ], "PkgID": "nodemailer@6.9.16", "PkgName": "nodemailer", "PkgPath": "app/node_modules/nodemailer/package.json", "PkgIdentifier": { "PURL": "pkg:npm/nodemailer@6.9.16", "UID": "4c16548e727bdc6b" }, "InstalledVersion": "6.9.16", "FixedVersion": "8.0.8", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-82662", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:63a003a640210665758b8f8da8694dda0895d7a149ff10aa71fed50492da296a", "Title": "nodemailer: Nodemailer: Information disclosure due to disabled TLS certificate verification", "Description": "Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUnauthorized: false, allowing attackers to intercept OAuth2 token requests. Attackers in a machine-in-the-middle position can capture OAuth client secrets, refresh tokens, and access tokens transmitted over compromised HTTPS connections.", "Severity": "HIGH", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "ghsa": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N", "V3Score": 6.5, "V40Score": 8.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-82662", "https://advisory.echohq.com/cve/CVE-2026-82662", "https://github.com/advisories/GHSA-r7g4-qg5f-qqm2", "https://github.com/nodemailer/nodemailer", "https://github.com/nodemailer/nodemailer/security/advisories/GHSA-r7g4-qg5f-qqm2", "https://nvd.nist.gov/vuln/detail/CVE-2026-82662", "https://www.cve.org/CVERecord?id=CVE-2026-82662", "https://www.vulncheck.com/advisories/nodemailer-before-8.0.8-tls-certificate-validation-bypass" ], "PublishedDate": "2026-08-31T09:17:04.093Z", "LastModifiedDate": "2026-09-10T15:48:28.757Z" }, { "VulnerabilityID": "GHSA-2x7j-588g-ccc2", "PkgID": "nodemailer@6.9.16", "PkgName": "nodemailer", "PkgPath": "app/node_modules/nodemailer/package.json", "PkgIdentifier": { "PURL": "pkg:npm/nodemailer@6.9.16", "UID": "4c16548e727bdc6b" }, "InstalledVersion": "6.9.16", "FixedVersion": "9.1.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-2x7j-588g-ccc2", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:cc2542fe1fe7102f5799e2b4891d492199e45b6b5fd32883fbe2423fd1bf8533", "Title": "Nodemailer: Quadratic (O(n²)) time complexity in addressparser allows remote denial of service via a crafted address list", "Description": "### Summary\n\nNodemailer's address parser (`lib/addressparser/index.js`) parses a list of comma‑separated addresses in **quadratic time — O(n²)** in the number of addresses. A single crafted address string (e.g. a `To`, `Cc`, `Bcc`, `From`, or `Reply‑To` value, or any value passed to the exported `addressparser`) therefore consumes CPU proportional to the **square** of its length and blocks Node's single‑threaded event loop for the entire duration, denying service to every other request in the process.\n\nThis requires **no special application configuration and no cooperating receiver** — it is entirely inside the parser and triggers on the library's default code path. A ~1.5 MB address value freezes the process for ~25–30 seconds of 100% CPU; the cost grows with the square of the input, so a few‑MB value stalls the server for minutes. It is a distinct issue from the recursion DoS fixed as CVE‑2025‑14874 (that path is guarded by a nesting‑depth cap; this one is a flat, comma‑separated list with no such limit).\n\n### Details\n\n`addressparser` tokenizes the input, splits it into per‑address token groups, and then accumulates the parsed results in a loop (`lib/addressparser/index.js`, ~lines 500–505):\n\n```js\naddresses.forEach(addr =\u003e {\n const handled = _handleAddress(addr, depth);\n if (handled.length) {\n parsedAddresses = parsedAddresses.concat(handled); // \u003c-- line ~503\n }\n});\n```\n\n`Array.prototype.concat` builds and returns a **new** array containing a copy of every element accumulated so far. Reassigning `parsedAddresses = parsedAddresses.concat(handled)` on each of the *n* iterations copies 1 + 2 + 3 + … + n elements in total, i.e. **O(n²)** work (and O(n²) transient allocations) for an input containing *n* addresses. Tokenization and `_handleAddress` themselves are linear; the quadratic blowup is entirely this accumulator.\n\n**Root‑cause proof.** Replacing only that line with an in‑place append and re‑running the exact same input:\n\n```\nparsedAddresses = parsedAddresses.concat(handled); -\u003e 100000 addresses: ~6068 ms\nparsedAddresses.push.apply(parsedAddresses, handled); -\u003e 100000 addresses: ~51 ms (≈119x faster, now linear)\n```\n\n**Measured scaling** (nodemailer 9.0.6, `'a@b.com,'.repeat(n)`):\n\n| addresses n | input size | parse time | ratio for 2× input |\n|---|---|---|---|\n| 25,000 | 0.19 MB | ~0.35 s | – |\n| 50,000 | 0.38 MB | ~1.4 s | ×4.0 |\n| 100,000 | 0.76 MB | ~6–8 s | ×3.9 |\n| 200,000 | 1.53 MB | ~25–30 s| ×4.1 |\n\nDoubling the input quadruples the time — the signature of O(n²).\n\n**Reachability.** The parser is invoked on any structured‑address header value on the normal send path (`MimeNode.setHeader('To'/'Cc'/'Bcc'/'From'/'Reply-To', value)` → `_parseAddresses` → `addressparser`, and `getEnvelope()`), so a single `transport.sendMail({ to: \u003ccrafted string\u003e })` triggers it. It is also reached directly through the **exported** `require('nodemailer/lib/addressparser')`, which many applications call to validate or display user‑supplied recipient lists. Confirmed via the public API: `setHeader('To', 'a@b.com,'.repeat(80000))` + `getEnvelope()` blocks for ~3.9 s.\n\n**Suggested fix:** accumulate in place instead of rebuilding the array each iteration, e.g. `parsedAddresses.push.apply(parsedAddresses, handled);` (or `for (const h of handled) parsedAddresses.push(h);`). Optionally cap the number of addresses / input length before parsing.\n\n### PoC\n\nEnvironment: Node.js ≥ 18 and the published `nodemailer@9.0.6`. No transport, network, or configuration required — the cost is in parsing.\n\n`poc-dos.js`:\n```js\n'use strict';\nconst addressparser = require('nodemailer/lib/addressparser');\n\nconsole.log('addresses | input size | parse time');\nfor (const n of [25000, 50000, 100000, 200000]) {\n const payload = 'a@b.com,'.repeat(n); // n valid, comma-separated recipients\n const t0 = process.hrtime.bigint();\n addressparser(payload); // blocks synchronously\n const ms = Number(process.hrtime.bigint() - t0) / 1e6;\n console.log(String(n).padStart(9) + ' | ' + (payload.length / 1048576).toFixed(2) + ' MB | ' + ms.toFixed(0).padStart(7) + ' ms');\n}\n```\n\nRun:\n```\nnpm init -y \u0026\u0026 npm install nodemailer@9.0.6\nnode poc-dos.js\n```\n\nActual output (nodemailer 9.0.6):\n```\naddresses | input size | parse time\n 25000 | 0.19 MB | 381 ms\n 50000 | 0.38 MB | 1435 ms\n 100000 | 0.76 MB | 7949 ms\n 200000 | 1.53 MB | 25154 ms\n```\n\nEquivalent trigger through the normal send API (freezes the event loop):\n```js\nconst nodemailer = require('nodemailer');\nnodemailer.createTransport({ jsonTransport: true })\n .sendMail({ from: 'a@b.com', to: 'a@b.com,'.repeat(150000), subject: 'x', text: 'y' });\n// ~15+ seconds of 100% CPU inside addressparser before anything is sent\n```\n\n### Impact\n\n* **Who is impacted:** any service that runs Nodemailer (or the standalone `nodemailer/lib/addressparser`) on an address value that can be influenced by an untrusted party — a recipient field in a \"send email / invite / share\" feature, a `Reply‑To`/`From` derived from user input, a contact‑import or mailing‑list parser, or any endpoint that validates addresses with `addressparser`. No authentication, special option, or particular receiver is needed.\n\n## Patched in 9.1.0\n\nThree separate quadratic paths were fixed, not one:\n\n* `addressparser` rebuilt its accumulator with `concat()` on every address ([9116da9](https://github.com/nodemailer/nodemailer/commit/9116da9)).\n* The display-name merge loop directly below spliced each fragment out of the array, the same shape reached through `'a, b \u003cc@d.com\u003e,'.repeat(n)` (same commit).\n* `MimeNode#_convertAddresses` checked recipient uniqueness with a linear scan per address ([7cc38af](https://github.com/nodemailer/nodemailer/commit/7cc38af), refined in [34da642](https://github.com/nodemailer/nodemailer/commit/34da642)). This was the most severe of the three and the reported proof of concept did not reach it: `'a@b.com,'.repeat(n)` is one address repeated, which dedupes to a single envelope entry. A list of *distinct* recipients cost O(n^2) here, taking ~35s for 100k even after `addressparser` was fixed.\n\nFixed alongside: `[].concat.apply` in `_parseAddresses` threw `RangeError: Maximum call stack size exceeded` past roughly 124k recipients, with no crafted input needed ([83b8c48](https://github.com/nodemailer/nodemailer/commit/83b8c48)).\n\nParsing 200k addresses now takes ~80ms instead of ~25s, and every path scales linearly. A new `maxRecipients` option (default 100000) throws rather than truncating, as a backstop.", "Severity": "HIGH", "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://advisory.echohq.com/cve/GHSA-2x7j-588g-ccc2", "https://github.com/advisories/GHSA-2x7j-588g-ccc2", "https://github.com/nodemailer/nodemailer", "https://github.com/nodemailer/nodemailer/commit/34da64282dcdc9b0581c721a27ab2fa226673150", "https://github.com/nodemailer/nodemailer/commit/7cc38af418ffa6fc7e86085195ca5ca681694b3e", "https://github.com/nodemailer/nodemailer/commit/9116da9528c6524cefaed75185602a7e85d20434", "https://github.com/nodemailer/nodemailer/pull/1848", "https://github.com/nodemailer/nodemailer/releases/tag/v9.1.0", "https://github.com/nodemailer/nodemailer/security/advisories/GHSA-2x7j-588g-ccc2" ], "PublishedDate": "2026-09-08T21:33:17Z", "LastModifiedDate": "2026-09-08T21:33:17Z" }, { "VulnerabilityID": "GHSA-v53p-9fqp-m79j", "PkgID": "nodemailer@6.9.16", "PkgName": "nodemailer", "PkgPath": "app/node_modules/nodemailer/package.json", "PkgIdentifier": { "PURL": "pkg:npm/nodemailer@6.9.16", "UID": "4c16548e727bdc6b" }, "InstalledVersion": "6.9.16", "FixedVersion": "10.0.6", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-v53p-9fqp-m79j", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:da117df67c2db92240649e610d5511b35b0aec81f68a84298648b0960744dd18", "Title": "Nodemailer: Quadratic backtracking in the addressparser free-text fallback allows remote denial of service", "Description": "### Summary\n\nWhen `addressparser` finds no address by its strict reading, it falls back to pulling one out of the free text with `/\\s*\\b[^@\\s]+@[^\\s]+\\b\\s*/`. That pattern backtracks quadratically: `[^@\\s]+` is retried from every offset and rescans the run to the next `@` each time. A single header value holding a long whitespace-free run with no usable `@` blocks the Node.js event loop for tens of seconds.\n\nIt is cheaper to exploit than GHSA-prgh-xp8r-p3m5: 273KB is enough for ~43s, where the comment-joined shape needed ~1.5MB for ~10s.\n\n### Details\n\nThe fallback in `src/addressparser/index.ts` ran the pattern as a search. `[^@\\s]+` crosses neither whitespace nor `@`, so from each start offset it scans forward to the next `@` or to the end of the run and then fails, and the engine simply advances one character and repeats. Three shapes make every offset fail:\n\n- the run holds no `@` at all\n- the only `@` has nothing after it\n- the only `@` has nothing before it\n\nA fourth reaches it with a valid address present but placed past a long run, so the long run is walked before the match is found.\n\n### PoC\n\n```js\nconst addressparser = require('nodemailer/lib/addressparser');\nconst s = Date.now();\naddressparser(' \u003e' + '\u003e[x][x]'.repeat(40000)); // 273KB\nconsole.log(Date.now() - s, 'ms'); // ~43000 ms, blocking\n```\n\nMeasured on 10.0.5:\n\n| Value | Parse time |\n| --- | --- |\n| `'[x]'.repeat(40000)` (117KB) | 9.0 s |\n| `'[x]'.repeat(40000) + '@'` (117KB) | 8.9 s |\n| `'@' + '[x]'.repeat(40000)` (117KB) | 8.8 s |\n| `' \u003e' + '\u003e[x][x]'.repeat(40000)` (273KB) | 42.9 s |\n\n### Impact\n\nAlgorithmic-complexity denial of service. Node is single threaded, so the block stalls the whole process. Reachable without authentication anywhere inbound header values are handed to this parser, mailparser being the notable case, and reachable from application input wherever a user-supplied string is used as a message address, since `mime-node` parses `to`, `from` and `cc` when composing.\n\n### Patch\n\nThe search is replaced by a single linear pass that finds the one offset the pattern can match at, which is then applied there with a sticky regex. Match results are unchanged, verified against the previous implementation over 3.4 million random strings comparing both the match offset and the matched text, plus 800k full-parse comparisons.\n\nFound while validating the report in GHSA-prgh-xp8r-p3m5, not reported externally.", "Severity": "HIGH", "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://advisory.echohq.com/cve/GHSA-v53p-9fqp-m79j", "https://github.com/advisories/GHSA-v53p-9fqp-m79j", "https://github.com/nodemailer/nodemailer", "https://github.com/nodemailer/nodemailer/commit/437d7fc47403df176bc39271641541b7a9bce102", "https://github.com/nodemailer/nodemailer/releases/tag/v10.0.6", "https://github.com/nodemailer/nodemailer/security/advisories/GHSA-v53p-9fqp-m79j" ], "PublishedDate": "2026-09-29T23:43:36Z", "LastModifiedDate": "2026-09-29T23:43:36Z" }, { "VulnerabilityID": "CVE-2026-9496", "VendorIDs": [ "GHSA-w4pp-8pjf-rmxw" ], "PkgID": "pacote@18.0.3", "PkgName": "pacote", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/pacote/package.json", "PkgIdentifier": { "PURL": "pkg:npm/pacote@18.0.3", "UID": "aba838c330f2b14f" }, "InstalledVersion": "18.0.3", "FixedVersion": "21.5.1", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-9496", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:4c8221e539d4a98977f351b2389914f1285920db28b73b21a7df9da2fa1e37d7", "Title": "pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function", "Description": "Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGitSha function. An attacker can exploit this vulnerability by supplying a specially crafted spec.rawSpec value that triggers the function’s regex replacement and string-manipulation logic, causing excessive CPU consumption and potentially stalling or crashing the process.", "Severity": "HIGH", "CweIDs": [ "CWE-1333", "CWE-400" ], "VendorSeverity": { "alma": 3, "amazon": 2, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P", "V3Score": 7.5, "V40Score": 7.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:76750", "https://access.redhat.com/security/cve/CVE-2026-9496", "https://bugzilla.redhat.com/2481394", "https://bugzilla.redhat.com/2528759", "https://bugzilla.redhat.com/show_bug.cgi?id=2481394", "https://bugzilla.redhat.com/show_bug.cgi?id=2528759", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19534", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9496", "https://errata.almalinux.org/9/ALSA-2026-76750.html", "https://errata.rockylinux.org/RLSA-2026:76750", "https://github.com/npm/pacote", "https://github.com/npm/pacote/blob/9d7459440826ab4cf962ef98d8f3fd0c4d464b5c/lib/util/add-git-sha.js%23L2C1-L13C2", "https://github.com/npm/pacote/commit/627a7dc1a214d857472a13b48e42559c75288c9e", "https://github.com/npm/pacote/commit/ce804fb1647fe1699b2f87efd01ea9f4efed8508", "https://github.com/npm/pacote/releases/tag/v21.5.1", "https://github.com/npm/pacote/releases/tag/v22.0.0", "https://linux.oracle.com/cve/CVE-2026-9496.html", "https://linux.oracle.com/errata/ELSA-2026-76750.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-9496", "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-16874025", "https://security.snyk.io/vuln/SNYK-JS-PACOTE-8225084", "https://www.cve.org/CVERecord?id=CVE-2026-9496" ], "PublishedDate": "2026-05-26T07:16:19.41Z", "LastModifiedDate": "2026-07-23T11:10:00.12Z" }, { "VulnerabilityID": "CVE-2026-4867", "VendorIDs": [ "GHSA-37ch-88jc-xwx2" ], "PkgID": "path-to-regexp@0.1.12", "PkgName": "path-to-regexp", "PkgPath": "app/node_modules/path-to-regexp/package.json", "PkgIdentifier": { "PURL": "pkg:npm/path-to-regexp@0.1.12", "UID": "328c48f06cf08253" }, "InstalledVersion": "0.1.12", "FixedVersion": "0.1.13", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-4867", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:2ce441e68ad1b6ced1977c309174e8c1d70b7d9767776e5b327b4794f9e7400a", "Title": "path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters", "Description": "Impact:\n\nA bad regular expression is generated any time you have three or more parameters within a single segment, separated by something that is not a period (.). For example, /:a-:b-:c or /:a-:b-:c-:d. The backtrack protection added in path-to-regexp@0.1.12 only prevents ambiguity for two parameters. With three or more, the generated lookahead does not block single separator characters, so capture groups overlap and cause catastrophic backtracking.\n\nPatches:\n\nUpgrade to path-to-regexp@0.1.13\n\nCustom regex patterns in route definitions (e.g., /:a-:b([^-/]+)-:c([^-/]+)) are not affected because they override the default capture group.\n\nWorkarounds:\n\nAll versions can be patched by providing a custom regular expression for parameters after the first in a single segment. As long as the custom regular expression does not match the text before the parameter, you will be safe. For example, change /:a-:b-:c to /:a-:b([^-/]+)-:c([^-/]+).\n\nIf paths cannot be rewritten and versions cannot be upgraded, another alternative is to limit the URL length.", "Severity": "HIGH", "CweIDs": [ "CWE-1333" ], "VendorSeverity": { "ghsa": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-4867", "https://advisory.echohq.com/cve/CVE-2026-4867", "https://blakeembrey.com/posts/2024-09-web-redos", "https://cna.openjsf.org/security-advisories.html", "https://github.com/advisories/GHSA-37ch-88jc-xwx2", "https://github.com/advisories/GHSA-9wv6-86v2-598j", "https://github.com/pillarjs/path-to-regexp", "https://github.com/pillarjs/path-to-regexp/releases/tag/v.0.1.13", "https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-37ch-88jc-xwx2", "https://nvd.nist.gov/vuln/detail/CVE-2026-4867", "https://www.cve.org/CVERecord?id=CVE-2026-4867" ], "PublishedDate": "2026-03-26T17:16:42.983Z", "LastModifiedDate": "2026-06-17T10:57:21.827Z" }, { "VulnerabilityID": "CVE-2026-41242", "VendorIDs": [ "GHSA-xq3m-2v4x-88gg" ], "PkgID": "protobufjs@7.2.6", "PkgName": "protobufjs", "PkgPath": "app/node_modules/protobufjs/package.json", "PkgIdentifier": { "PURL": "pkg:npm/protobufjs@7.2.6", "UID": "855c5ee310c62e6d" }, "InstalledVersion": "7.2.6", "FixedVersion": "8.0.1, 7.5.5, 6.11.6", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-41242", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:97bcfb126aef1a97d4cf489ba8f4b92829c1b882871994f5b87d2167603c1663", "Title": "protobufjs: protobufjs: Arbitrary code execution via injected protobuf definition type fields", "Description": "protobufjs compiles protobuf definitions into JavaScript (JS) functions. In versions prior to 8.0.1, 7.5.5, and 6.11.6, attackers can inject arbitrary code in the \"type\" fields of protobuf definitions, which will then execute during object decoding using that definition. Versions 8.0.1, 7.5.5, and 6.11.6 patch the issue.", "Severity": "CRITICAL", "CweIDs": [ "CWE-94" ], "VendorSeverity": { "ghsa": 4, "nvd": 4, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "V3Score": 9.8, "V40Score": 9.4 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:21338", "https://access.redhat.com/errata/RHSA-2026:24977", "https://access.redhat.com/errata/RHSA-2026:26234", "https://access.redhat.com/errata/RHSA-2026:37275", "https://access.redhat.com/errata/RHSA-2026:62260", "https://access.redhat.com/security/cve/CVE-2026-41242", "https://advisory.echohq.com/cve/CVE-2026-41242", "https://bugzilla.redhat.com/show_bug.cgi?id=2459442", "https://github.com/advisories/GHSA-xq3m-2v4x-88gg", "https://github.com/protobufjs/protobuf.js", "https://github.com/protobufjs/protobuf.js/commit/086916b4a52c9f73ce88956edbb38fc902e54bbf", "https://github.com/protobufjs/protobuf.js/commit/535df444ac060243722ac5d672db205e5c531d75", "https://github.com/protobufjs/protobuf.js/commit/ff7b2afef8754837cc6dc64c864cd111ab477956", "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v7.5.5", "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v8.0.1", "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-xq3m-2v4x-88gg", "https://github.com/protobufjs/protobuf.js/tree/v6.11.6", "https://nvd.nist.gov/vuln/detail/CVE-2026-41242", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41242.json", "https://www.cve.org/CVERecord?id=CVE-2026-41242" ], "PublishedDate": "2026-04-18T17:16:13.983Z", "LastModifiedDate": "2026-11-03T17:18:13.75Z" }, { "VulnerabilityID": "CVE-2026-44289", "VendorIDs": [ "GHSA-685m-2w69-288q" ], "PkgID": "protobufjs@7.2.6", "PkgName": "protobufjs", "PkgPath": "app/node_modules/protobufjs/package.json", "PkgIdentifier": { "PURL": "pkg:npm/protobufjs@7.2.6", "UID": "855c5ee310c62e6d" }, "InstalledVersion": "7.2.6", "FixedVersion": "7.5.6, 8.0.2", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44289", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:2d0da1d1f50a26b3b02a7bd2af0774f3ef62576af7a3d44cc64f66c6a1f78db8", "Title": "protobufjs: protobufjs: Denial of Service via uncontrolled recursion in protobuf decoding", "Description": "protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs could recurse without a depth limit while decoding nested protobuf data. This affected both skipping unknown group fields and generated decoding of nested message fields. A crafted protobuf binary payload could cause the JavaScript call stack to be exhausted during decoding. This vulnerability is fixed in 7.5.6 and 8.0.2.", "Severity": "HIGH", "CweIDs": [ "CWE-674", "CWE-606" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:42815", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/security/cve/CVE-2026-44289", "https://advisory.echohq.com/cve/CVE-2026-44289", "https://bugzilla.redhat.com/show_bug.cgi?id=2477130", "https://github.com/advisories/GHSA-685m-2w69-288q", "https://github.com/protobufjs/protobuf.js", "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v7.5.6", "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v8.0.2", "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-685m-2w69-288q", "https://nvd.nist.gov/vuln/detail/CVE-2026-44289", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44289.json", "https://www.cve.org/CVERecord?id=CVE-2026-44289" ], "PublishedDate": "2026-05-13T16:16:55.713Z", "LastModifiedDate": "2026-08-28T16:18:02.453Z" }, { "VulnerabilityID": "CVE-2026-44290", "VendorIDs": [ "GHSA-jvwf-75h9-cwgg" ], "PkgID": "protobufjs@7.2.6", "PkgName": "protobufjs", "PkgPath": "app/node_modules/protobufjs/package.json", "PkgIdentifier": { "PURL": "pkg:npm/protobufjs@7.2.6", "UID": "855c5ee310c62e6d" }, "InstalledVersion": "7.2.6", "FixedVersion": "7.5.6, 8.0.2", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44290", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:702d915f85368ea854bd1da2ac5ef9153d12f6dff1bdd44a5303274266f9c665", "Title": "protobufjs: protobufjs: Denial of Service via crafted schema", "Description": "protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs allowed certain schema option paths to traverse through inherited object properties while applying options. A crafted protobuf schema or JSON descriptor could cause option handling to write to properties on global JavaScript constructors, corrupting process-wide built-in functionality. This vulnerability is fixed in 7.5.6 and 8.0.2.", "Severity": "HIGH", "CweIDs": [ "CWE-1321" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-44290", "https://advisory.echohq.com/cve/CVE-2026-44290", "https://github.com/advisories/GHSA-jvwf-75h9-cwgg", "https://github.com/protobufjs/protobuf.js", "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v7.5.6", "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v8.0.2", "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-jvwf-75h9-cwgg", "https://nvd.nist.gov/vuln/detail/CVE-2026-44290", "https://www.cve.org/CVERecord?id=CVE-2026-44290" ], "PublishedDate": "2026-05-13T16:16:55.847Z", "LastModifiedDate": "2026-06-17T10:50:27.12Z" }, { "VulnerabilityID": "CVE-2026-44291", "VendorIDs": [ "GHSA-75px-5xx7-5xc7" ], "PkgID": "protobufjs@7.2.6", "PkgName": "protobufjs", "PkgPath": "app/node_modules/protobufjs/package.json", "PkgIdentifier": { "PURL": "pkg:npm/protobufjs@7.2.6", "UID": "855c5ee310c62e6d" }, "InstalledVersion": "7.2.6", "FixedVersion": "7.5.6, 8.0.2", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44291", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:833bf0183953229c2272a486552f3a979dab1c64fd4e924f58ec5f6ab43c1de1", "Title": "protobufjs: protobufjs: Arbitrary Code Execution via prototype pollution", "Description": "protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs used plain objects with inherited prototypes for internal type lookup tables used by generated encode and decode functions. If Object.prototype had already been polluted, those lookup tables could resolve attacker-controlled inherited properties as valid protobuf type information. This could cause attacker-controlled strings to be emitted into generated JavaScript code. This vulnerability is fixed in 7.5.6 and 8.0.2.", "Severity": "HIGH", "CweIDs": [ "CWE-94" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-44291", "https://advisory.echohq.com/cve/CVE-2026-44291", "https://github.com/advisories/GHSA-75px-5xx7-5xc7", "https://github.com/protobufjs/protobuf.js", "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v7.5.6", "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v8.0.2", "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-75px-5xx7-5xc7", "https://nvd.nist.gov/vuln/detail/CVE-2026-44291", "https://www.cve.org/CVERecord?id=CVE-2026-44291" ], "PublishedDate": "2026-05-13T16:16:55.987Z", "LastModifiedDate": "2026-06-17T10:50:27.223Z" }, { "VulnerabilityID": "CVE-2026-44293", "VendorIDs": [ "GHSA-66ff-xgx4-vchm" ], "PkgID": "protobufjs@7.2.6", "PkgName": "protobufjs", "PkgPath": "app/node_modules/protobufjs/package.json", "PkgIdentifier": { "PURL": "pkg:npm/protobufjs@7.2.6", "UID": "855c5ee310c62e6d" }, "InstalledVersion": "7.2.6", "FixedVersion": "7.5.6, 8.0.2", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44293", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:fee5e65ca49b077132772c66eeb6812f418cec937963b4484daf467c119232b6", "Title": "protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors", "Description": "protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated JavaScript for toObject conversion could include an unsafe expression derived from a schema-controlled bytes field default value. A crafted descriptor with a non-string default value for a bytes field could cause attacker-controlled code to be emitted into the generated conversion function. This vulnerability is fixed in 7.5.6 and 8.0.2.", "Severity": "HIGH", "CweIDs": [ "CWE-94" ], "VendorSeverity": { "ghsa": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:26090", "https://access.redhat.com/errata/RHSA-2026:26234", "https://access.redhat.com/errata/RHSA-2026:29795", "https://access.redhat.com/errata/RHSA-2026:34160", "https://access.redhat.com/errata/RHSA-2026:34374", "https://access.redhat.com/errata/RHSA-2026:37186", "https://access.redhat.com/errata/RHSA-2026:37385", "https://access.redhat.com/errata/RHSA-2026:37628", "https://access.redhat.com/errata/RHSA-2026:54555", "https://access.redhat.com/errata/RHSA-2026:57487", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/security/cve/CVE-2026-44293", "https://advisory.echohq.com/cve/CVE-2026-44293", "https://bugzilla.redhat.com/show_bug.cgi?id=2477104", "https://github.com/advisories/GHSA-66ff-xgx4-vchm", "https://github.com/protobufjs/protobuf.js", "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v7.5.6", "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v8.0.2", "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-66ff-xgx4-vchm", "https://nvd.nist.gov/vuln/detail/CVE-2026-44293", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44293.json", "https://www.cve.org/CVERecord?id=CVE-2026-44293" ], "PublishedDate": "2026-05-13T16:16:56.253Z", "LastModifiedDate": "2026-09-09T13:20:07.537Z" }, { "VulnerabilityID": "CVE-2026-48712", "VendorIDs": [ "GHSA-wcpc-wj8m-hjx6" ], "PkgID": "protobufjs@7.2.6", "PkgName": "protobufjs", "PkgPath": "app/node_modules/protobufjs/package.json", "PkgIdentifier": { "PURL": "pkg:npm/protobufjs@7.2.6", "UID": "855c5ee310c62e6d" }, "InstalledVersion": "7.2.6", "FixedVersion": "7.6.1, 8.4.1", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48712", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:ce716af053263a919f7390ece5f54c40e06c6a5e6e08aa14937d0ae81044eeed", "Title": "protobufjs: protobufjs: Denial of Service via uncontrolled recursion with crafted protobuf payload", "Description": "protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.1 and 8.4.1, protobufjs could recurse without a depth limit while converting decoded messages to plain objects or JSON. This affected generated toObject() conversion and the custom google.protobuf.Any JSON conversion path. A crafted protobuf binary payload containing deeply nested Any values could cause the JavaScript call stack to be exhausted during conversion to JSON. This vulnerability is fixed in 7.6.1 and 8.4.1.", "Severity": "HIGH", "CweIDs": [ "CWE-674" ], "VendorSeverity": { "ghsa": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-48712", "https://advisory.echohq.com/cve/CVE-2026-48712", "https://github.com/advisories/GHSA-wcpc-wj8m-hjx6", "https://github.com/protobufjs/protobuf.js", "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-wcpc-wj8m-hjx6", "https://nvd.nist.gov/vuln/detail/CVE-2026-48712", "https://www.cve.org/CVERecord?id=CVE-2026-48712" ], "PublishedDate": "2026-06-22T18:16:39.64Z", "LastModifiedDate": "2026-10-25T23:10:00.167Z" }, { "VulnerabilityID": "CVE-2026-90711", "VendorIDs": [ "GHSA-jqcg-44mw-7w3h" ], "PkgID": "proxy-addr@2.0.7", "PkgName": "proxy-addr", "PkgPath": "app/node_modules/proxy-addr/package.json", "PkgIdentifier": { "PURL": "pkg:npm/proxy-addr@2.0.7", "UID": "de768ad757b6600d" }, "InstalledVersion": "2.0.7", "FixedVersion": "2.0.8", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-90711", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:1201714d006e0f7c6b4d7475f7e85054e0610c3fd21e0caa1b795722fa2e4f8e", "Title": "proxy-addr: proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet", "Description": "proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips. In versions 1.1.0 through 2.0.7, a trust subnet written in IPv4-mapped IPv6 notation with an IPv4-sized prefix, such as ::ffff:10.0.0.0/8 instead of the correct ::ffff:10.0.0.0/104, is accepted without error but trusts every IPv4 address on the internet rather than the block it names. Because the socket peer then becomes trusted at hop 0, any unauthenticated client can supply an arbitrary X-Forwarded-For header and control the address the application reads, which defeats IP-based access control, rate limiting, geolocation, and audit logging. This is a fail-open regression introduced in version 1.1.0. The issue is fixed in proxy-addr 2.0.8, and users should upgrade to 2.0.8 or later. As a workaround, ensure any IPv4-mapped IPv6 trust subnet uses a prefix length of at least 97, or express the range in plain IPv4 notation.", "Severity": "CRITICAL", "CweIDs": [ "CWE-290", "CWE-348", "CWE-697" ], "VendorSeverity": { "ghsa": 4, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-90711", "https://advisory.echohq.com/cve/CVE-2026-90711", "https://cna.openjsf.org/security-advisories.html", "https://github.com/jshttp/proxy-addr", "https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965", "https://github.com/jshttp/proxy-addr/releases/tag/v2.0.8", "https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h", "https://nvd.nist.gov/vuln/detail/CVE-2026-90711", "https://www.cve.org/CVERecord?id=CVE-2026-90711" ], "PublishedDate": "2026-09-15T07:16:33.683Z", "LastModifiedDate": "2026-09-16T19:40:00.317Z" }, { "VulnerabilityID": "CVE-2026-48815", "VendorIDs": [ "GHSA-52v5-jr5w-gjxr" ], "PkgID": "sigstore@2.3.0", "PkgName": "sigstore", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/sigstore/package.json", "PkgIdentifier": { "PURL": "pkg:npm/sigstore@2.3.0", "UID": "15711876702e7d7a" }, "InstalledVersion": "2.3.0", "FixedVersion": "4.1.1", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48815", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:2ca185fdd3f9bb72f74be878b5d85512ad280564558617874bc9ffa6da973c71", "Title": "sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option", "Description": "sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 4.1.1, the documented certificateOIDs option in sigstore.verify() is accepted by the public API but discarded before verification, so required certificate extension OIDs are never checked and applications relying on certificateOIDs to restrict which certificates may sign artifacts can accept unauthorized certificates. This issue is fixed in version 4.1.1.", "Severity": "HIGH", "CweIDs": [ "CWE-347" ], "VendorSeverity": { "amazon": 3, "ghsa": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-48815", "https://github.com/sigstore/sigstore-js", "https://github.com/sigstore/sigstore-js/commit/7845532f9d17f6f765363dbee82b01bd159fb52b", "https://github.com/sigstore/sigstore-js/pull/1658", "https://github.com/sigstore/sigstore-js/pull/1658/changes", "https://github.com/sigstore/sigstore-js/releases/tag/sigstore@4.1.1", "https://github.com/sigstore/sigstore-js/security/advisories/GHSA-52v5-jr5w-gjxr", "https://nvd.nist.gov/vuln/detail/CVE-2026-48815", "https://www.cve.org/CVERecord?id=CVE-2026-48815" ], "PublishedDate": "2026-07-14T21:17:01.37Z", "LastModifiedDate": "2026-10-24T21:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-33151", "VendorIDs": [ "GHSA-677m-j7p3-52f9" ], "PkgID": "socket.io-parser@4.2.4", "PkgName": "socket.io-parser", "PkgPath": "app/node_modules/socket.io-parser/package.json", "PkgIdentifier": { "PURL": "pkg:npm/socket.io-parser@4.2.4", "UID": "a3ee475c77390766" }, "InstalledVersion": "4.2.4", "FixedVersion": "3.3.5, 3.4.4, 4.2.6", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33151", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:bcec4a00fcd0534e9e0c6420dcc9fcd2d694f4a2f4ca365073f0f5f379e71b26", "Title": "socket.io: Socket.IO: Denial of Service due to excessive buffering of specially crafted packets", "Description": "Socket.IO is an open source, real-time, bidirectional, event-based, communication framework. Prior to versions 3.3.5, 3.4.4, and 4.2.6, a specially crafted Socket.IO packet can make the server wait for a large number of binary attachments and buffer them, which can be exploited to make the server run out of memory. This issue has been patched in versions 3.3.5, 3.4.4, and 4.2.6.", "Severity": "HIGH", "CweIDs": [ "CWE-20", "CWE-754" ], "VendorSeverity": { "ghsa": 3, "nvd": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-33151", "https://github.com/socketio/socket.io", "https://github.com/socketio/socket.io/commit/719f9ebab0772ffb882bd614b387e585c1aa75d4", "https://github.com/socketio/socket.io/commit/9d39f1f080510f036782f2177fac701cc041faaf", "https://github.com/socketio/socket.io/commit/b25738c416c4e32fbff62ee182afa8f6d0dacf78", "https://github.com/socketio/socket.io/security/advisories/GHSA-677m-j7p3-52f9", "https://nvd.nist.gov/vuln/detail/CVE-2026-33151", "https://www.cve.org/CVERecord?id=CVE-2026-33151" ], "PublishedDate": "2026-03-20T21:17:15.573Z", "LastModifiedDate": "2026-06-17T10:37:02.107Z" }, { "VulnerabilityID": "CVE-2026-69185", "VendorIDs": [ "GHSA-2m8v-j782-fhvr" ], "PkgID": "socket.io-parser@4.2.4", "PkgName": "socket.io-parser", "PkgPath": "app/node_modules/socket.io-parser/package.json", "PkgIdentifier": { "PURL": "pkg:npm/socket.io-parser@4.2.4", "UID": "a3ee475c77390766" }, "InstalledVersion": "4.2.4", "FixedVersion": "4.2.7, 3.4.5, 3.3.6", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-69185", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:301bed5e5ee0d2776a92be12f98ca68bc84840fe30985bfed7cfb21f17bb9e9c", "Title": "socket.io-parser: Socket.IO: Denial of Service via memory exhaustion from crafted packets", "Description": "Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 4.2.7, 3.4.5, and 3.3.6, a specially crafted Socket.IO packet can make the server wait for a large number of binary attachments and buffer them, which can be exploited to make the server run out of memory. This vulnerability is fixed in 4.2.7, 3.4.5, and 3.3.6.", "Severity": "HIGH", "CweIDs": [ "CWE-20", "CWE-754" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-69185", "https://github.com/socketio/socket.io", "https://github.com/socketio/socket.io/commit/7c6ef571a00656718e9e05e3b948fd1758b2a7b4", "https://github.com/socketio/socket.io/commit/9c6323e5cde41bd75df3379b5fc9293664a5f240", "https://github.com/socketio/socket.io/commit/ced94ffa3ac020a8f3c14eb98a3bf34acb14d291", "https://github.com/socketio/socket.io/security/advisories/GHSA-2m8v-j782-fhvr", "https://nvd.nist.gov/vuln/detail/CVE-2026-69185", "https://www.cve.org/CVERecord?id=CVE-2026-69185" ], "PublishedDate": "2026-08-03T20:17:29.797Z", "LastModifiedDate": "2026-10-23T21:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-59873", "VendorIDs": [ "GHSA-23hp-3jrh-7fpw" ], "PkgID": "tar@6.2.1", "PkgName": "tar", "PkgPath": "app/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.2.1", "UID": "be3a0b7d2887a4f4" }, "InstalledVersion": "6.2.1", "FixedVersion": "7.5.19", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59873", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:4106d0e8d98aed4466a1e3c58f03bd8765fb30469e26026e71614b416ea18297", "Title": "tar: node-tar: Denial of Service via crafted gzip bomb", "Description": "node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry counts, or decompression ratio in extraction and parsing paths such as src/extract.ts, allowing a small crafted gzip bomb to exhaust disk space and CPU. This issue is fixed in version 7.5.19.", "Severity": "CRITICAL", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 4, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H", "V3Score": 7.5, "V40Score": 9.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:47058", "https://access.redhat.com/security/cve/CVE-2026-59873", "https://advisory.echohq.com/cve/CVE-2026-59873", "https://bugzilla.redhat.com/2494813", "https://bugzilla.redhat.com/2498116", "https://bugzilla.redhat.com/2498120", "https://bugzilla.redhat.com/show_bug.cgi?id=2494813", "https://bugzilla.redhat.com/show_bug.cgi?id=2498116", "https://bugzilla.redhat.com/show_bug.cgi?id=2498120", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13149", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59873", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59874", "https://errata.almalinux.org/9/ALSA-2026-47058.html", "https://errata.rockylinux.org/RLSA-2026:47058", "https://github.com/advisories/GHSA-23hp-3jrh-7fpw", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3", "https://github.com/isaacs/node-tar/releases/tag/v7.5.19", "https://github.com/isaacs/node-tar/security/advisories/GHSA-23hp-3jrh-7fpw", "https://linux.oracle.com/cve/CVE-2026-59873.html", "https://linux.oracle.com/errata/ELSA-2026-48034.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-59873", "https://www.cve.org/CVERecord?id=CVE-2026-59873" ], "PublishedDate": "2026-07-08T16:16:33.867Z", "LastModifiedDate": "2026-10-25T17:10:00.197Z" }, { "VulnerabilityID": "CVE-2026-59873", "VendorIDs": [ "GHSA-23hp-3jrh-7fpw" ], "PkgID": "tar@6.2.1", "PkgName": "tar", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.2.1", "UID": "da51341d82b508b9" }, "InstalledVersion": "6.2.1", "FixedVersion": "7.5.19", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59873", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:4106d0e8d98aed4466a1e3c58f03bd8765fb30469e26026e71614b416ea18297", "Title": "tar: node-tar: Denial of Service via crafted gzip bomb", "Description": "node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry counts, or decompression ratio in extraction and parsing paths such as src/extract.ts, allowing a small crafted gzip bomb to exhaust disk space and CPU. This issue is fixed in version 7.5.19.", "Severity": "CRITICAL", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 4, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H", "V3Score": 7.5, "V40Score": 9.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:47058", "https://access.redhat.com/security/cve/CVE-2026-59873", "https://advisory.echohq.com/cve/CVE-2026-59873", "https://bugzilla.redhat.com/2494813", "https://bugzilla.redhat.com/2498116", "https://bugzilla.redhat.com/2498120", "https://bugzilla.redhat.com/show_bug.cgi?id=2494813", "https://bugzilla.redhat.com/show_bug.cgi?id=2498116", "https://bugzilla.redhat.com/show_bug.cgi?id=2498120", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13149", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59873", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59874", "https://errata.almalinux.org/9/ALSA-2026-47058.html", "https://errata.rockylinux.org/RLSA-2026:47058", "https://github.com/advisories/GHSA-23hp-3jrh-7fpw", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3", "https://github.com/isaacs/node-tar/releases/tag/v7.5.19", "https://github.com/isaacs/node-tar/security/advisories/GHSA-23hp-3jrh-7fpw", "https://linux.oracle.com/cve/CVE-2026-59873.html", "https://linux.oracle.com/errata/ELSA-2026-48034.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-59873", "https://www.cve.org/CVERecord?id=CVE-2026-59873" ], "PublishedDate": "2026-07-08T16:16:33.867Z", "LastModifiedDate": "2026-10-25T17:10:00.197Z" }, { "VulnerabilityID": "CVE-2026-23745", "VendorIDs": [ "GHSA-8qq5-rm4j-mr97" ], "PkgID": "tar@6.2.1", "PkgName": "tar", "PkgPath": "app/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.2.1", "UID": "be3a0b7d2887a4f4" }, "InstalledVersion": "6.2.1", "FixedVersion": "7.5.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-23745", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:e5f782d1c4b7b7bab0d64ad6dace12cac8cf2d755927f02d37fec0afea16cac9", "Title": "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives", "Description": "node-tar is a Tar for Node.js. The node-tar library (\u003c= 7.5.2) fails to sanitize the linkpath of Link (hardlink) and SymbolicLink entries when preservePaths is false (the default secure behavior). This allows malicious archives to bypass the extraction root restriction, leading to Arbitrary File Overwrite via hardlinks and Symlink Poisoning via absolute symlink targets. This vulnerability is fixed in 7.5.3.", "Severity": "HIGH", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "nvd": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", "V3Score": 6.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:18480", "https://access.redhat.com/errata/RHSA-2026:18868", "https://access.redhat.com/errata/RHSA-2026:19712", "https://access.redhat.com/errata/RHSA-2026:2144", "https://access.redhat.com/errata/RHSA-2026:2900", "https://access.redhat.com/errata/RHSA-2026:2926", "https://access.redhat.com/errata/RHSA-2026:3782", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:6192", "https://access.redhat.com/security/cve/CVE-2026-23745", "https://advisory.echohq.com/cve/CVE-2026-23745", "https://bugzilla.redhat.com/2425946", "https://bugzilla.redhat.com/2430538", "https://bugzilla.redhat.com/2431036", "https://bugzilla.redhat.com/2431740", "https://bugzilla.redhat.com/2433645", "https://bugzilla.redhat.com/show_bug.cgi?id=2425946", "https://bugzilla.redhat.com/show_bug.cgi?id=2430538", "https://bugzilla.redhat.com/show_bug.cgi?id=2431036", "https://bugzilla.redhat.com/show_bug.cgi?id=2431740", "https://bugzilla.redhat.com/show_bug.cgi?id=2433645", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15284", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23745", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23950", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24842", "https://errata.almalinux.org/9/ALSA-2026-18868.html", "https://errata.rockylinux.org/RLSA-2026:18868", "https://github.com/advisories/GHSA-8qq5-rm4j-mr97", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e", "https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97", "https://linux.oracle.com/cve/CVE-2026-23745.html", "https://linux.oracle.com/errata/ELSA-2026-18868.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-23745", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23745.json", "https://www.cve.org/CVERecord?id=CVE-2026-23745" ], "PublishedDate": "2026-01-16T22:16:26.83Z", "LastModifiedDate": "2026-09-07T13:18:15.473Z" }, { "VulnerabilityID": "CVE-2026-23745", "VendorIDs": [ "GHSA-8qq5-rm4j-mr97" ], "PkgID": "tar@6.2.1", "PkgName": "tar", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.2.1", "UID": "da51341d82b508b9" }, "InstalledVersion": "6.2.1", "FixedVersion": "7.5.3", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-23745", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:e5f782d1c4b7b7bab0d64ad6dace12cac8cf2d755927f02d37fec0afea16cac9", "Title": "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives", "Description": "node-tar is a Tar for Node.js. The node-tar library (\u003c= 7.5.2) fails to sanitize the linkpath of Link (hardlink) and SymbolicLink entries when preservePaths is false (the default secure behavior). This allows malicious archives to bypass the extraction root restriction, leading to Arbitrary File Overwrite via hardlinks and Symlink Poisoning via absolute symlink targets. This vulnerability is fixed in 7.5.3.", "Severity": "HIGH", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "nvd": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", "V3Score": 6.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:18480", "https://access.redhat.com/errata/RHSA-2026:18868", "https://access.redhat.com/errata/RHSA-2026:19712", "https://access.redhat.com/errata/RHSA-2026:2144", "https://access.redhat.com/errata/RHSA-2026:2900", "https://access.redhat.com/errata/RHSA-2026:2926", "https://access.redhat.com/errata/RHSA-2026:3782", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:6192", "https://access.redhat.com/security/cve/CVE-2026-23745", "https://advisory.echohq.com/cve/CVE-2026-23745", "https://bugzilla.redhat.com/2425946", "https://bugzilla.redhat.com/2430538", "https://bugzilla.redhat.com/2431036", "https://bugzilla.redhat.com/2431740", "https://bugzilla.redhat.com/2433645", "https://bugzilla.redhat.com/show_bug.cgi?id=2425946", "https://bugzilla.redhat.com/show_bug.cgi?id=2430538", "https://bugzilla.redhat.com/show_bug.cgi?id=2431036", "https://bugzilla.redhat.com/show_bug.cgi?id=2431740", "https://bugzilla.redhat.com/show_bug.cgi?id=2433645", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15284", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23745", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23950", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24842", "https://errata.almalinux.org/9/ALSA-2026-18868.html", "https://errata.rockylinux.org/RLSA-2026:18868", "https://github.com/advisories/GHSA-8qq5-rm4j-mr97", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e", "https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97", "https://linux.oracle.com/cve/CVE-2026-23745.html", "https://linux.oracle.com/errata/ELSA-2026-18868.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-23745", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23745.json", "https://www.cve.org/CVERecord?id=CVE-2026-23745" ], "PublishedDate": "2026-01-16T22:16:26.83Z", "LastModifiedDate": "2026-09-07T13:18:15.473Z" }, { "VulnerabilityID": "CVE-2026-23950", "VendorIDs": [ "GHSA-r6q2-hw4h-h46w" ], "PkgID": "tar@6.2.1", "PkgName": "tar", "PkgPath": "app/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.2.1", "UID": "be3a0b7d2887a4f4" }, "InstalledVersion": "6.2.1", "FixedVersion": "7.5.4", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-23950", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:c71ac376d0a050fc2c7ec11a560c4f336c27dcd849e1bd0669d98707bb9acc9d", "Title": "node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition", "Description": "node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path collisions in the `path-reservations` system. On case-insensitive or normalization-insensitive filesystems (such as macOS APFS, In which it has been tested), the library fails to lock colliding paths (e.g., `ß` and `ss`), allowing them to be processed in parallel. This bypasses the library's internal concurrency safeguards and permits Symlink Poisoning attacks via race conditions. The library uses a `PathReservations` system to ensure that metadata checks and file operations for the same path are serialized. This prevents race conditions where one entry might clobber another concurrently. This is a Race Condition which enables Arbitrary File Overwrite. This vulnerability affects users and systems using node-tar on macOS (APFS/HFS+). Because of using `NFD` Unicode normalization (in which `ß` and `ss` are different), conflicting paths do not have their order properly preserved under filesystems that ignore Unicode normalization (e.g., APFS (in which `ß` causes an inode collision with `ss`)). This enables an attacker to circumvent internal parallelization locks (`PathReservations`) using conflicting filenames within a malicious tar archive. The patch in version 7.5.4 updates `path-reservations.js` to use a normalization form that matches the target filesystem's behavior (e.g., `NFKD`), followed by first `toLocaleLowerCase('en')` and then `toLocaleUpperCase('en')`. As a workaround, users who cannot upgrade promptly, and who are programmatically using `node-tar` to extract arbitrary tarball data should filter out all `SymbolicLink` entries (as npm does) to defend against arbitrary file writes via this file system entry name collision issue.", "Severity": "HIGH", "CweIDs": [ "CWE-176", "CWE-352", "CWE-367" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "nvd": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L", "V3Score": 8.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 5.9 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:18480", "https://access.redhat.com/errata/RHSA-2026:18868", "https://access.redhat.com/errata/RHSA-2026:2144", "https://access.redhat.com/errata/RHSA-2026:2926", "https://access.redhat.com/errata/RHSA-2026:6192", "https://access.redhat.com/security/cve/CVE-2026-23950", "https://advisory.echohq.com/cve/CVE-2026-23950", "https://bugzilla.redhat.com/2425946", "https://bugzilla.redhat.com/2430538", "https://bugzilla.redhat.com/2431036", "https://bugzilla.redhat.com/2431740", "https://bugzilla.redhat.com/2433645", "https://bugzilla.redhat.com/show_bug.cgi?id=2425946", "https://bugzilla.redhat.com/show_bug.cgi?id=2430538", "https://bugzilla.redhat.com/show_bug.cgi?id=2431036", "https://bugzilla.redhat.com/show_bug.cgi?id=2431740", "https://bugzilla.redhat.com/show_bug.cgi?id=2433645", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15284", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23745", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23950", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24842", "https://errata.almalinux.org/9/ALSA-2026-18868.html", "https://errata.rockylinux.org/RLSA-2026:18868", "https://github.com/advisories/GHSA-r6q2-hw4h-h46w", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/3b1abfae650056edfabcbe0a0df5954d390521e6", "https://github.com/isaacs/node-tar/security/advisories/GHSA-r6q2-hw4h-h46w", "https://linux.oracle.com/cve/CVE-2026-23950.html", "https://linux.oracle.com/errata/ELSA-2026-18868.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-23950", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23950.json", "https://www.cve.org/CVERecord?id=CVE-2026-23950" ], "PublishedDate": "2026-01-20T01:15:57.87Z", "LastModifiedDate": "2026-08-24T13:17:36.63Z" }, { "VulnerabilityID": "CVE-2026-23950", "VendorIDs": [ "GHSA-r6q2-hw4h-h46w" ], "PkgID": "tar@6.2.1", "PkgName": "tar", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.2.1", "UID": "da51341d82b508b9" }, "InstalledVersion": "6.2.1", "FixedVersion": "7.5.4", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-23950", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:c71ac376d0a050fc2c7ec11a560c4f336c27dcd849e1bd0669d98707bb9acc9d", "Title": "node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition", "Description": "node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path collisions in the `path-reservations` system. On case-insensitive or normalization-insensitive filesystems (such as macOS APFS, In which it has been tested), the library fails to lock colliding paths (e.g., `ß` and `ss`), allowing them to be processed in parallel. This bypasses the library's internal concurrency safeguards and permits Symlink Poisoning attacks via race conditions. The library uses a `PathReservations` system to ensure that metadata checks and file operations for the same path are serialized. This prevents race conditions where one entry might clobber another concurrently. This is a Race Condition which enables Arbitrary File Overwrite. This vulnerability affects users and systems using node-tar on macOS (APFS/HFS+). Because of using `NFD` Unicode normalization (in which `ß` and `ss` are different), conflicting paths do not have their order properly preserved under filesystems that ignore Unicode normalization (e.g., APFS (in which `ß` causes an inode collision with `ss`)). This enables an attacker to circumvent internal parallelization locks (`PathReservations`) using conflicting filenames within a malicious tar archive. The patch in version 7.5.4 updates `path-reservations.js` to use a normalization form that matches the target filesystem's behavior (e.g., `NFKD`), followed by first `toLocaleLowerCase('en')` and then `toLocaleUpperCase('en')`. As a workaround, users who cannot upgrade promptly, and who are programmatically using `node-tar` to extract arbitrary tarball data should filter out all `SymbolicLink` entries (as npm does) to defend against arbitrary file writes via this file system entry name collision issue.", "Severity": "HIGH", "CweIDs": [ "CWE-176", "CWE-352", "CWE-367" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "nvd": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L", "V3Score": 8.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 5.9 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:18480", "https://access.redhat.com/errata/RHSA-2026:18868", "https://access.redhat.com/errata/RHSA-2026:2144", "https://access.redhat.com/errata/RHSA-2026:2926", "https://access.redhat.com/errata/RHSA-2026:6192", "https://access.redhat.com/security/cve/CVE-2026-23950", "https://advisory.echohq.com/cve/CVE-2026-23950", "https://bugzilla.redhat.com/2425946", "https://bugzilla.redhat.com/2430538", "https://bugzilla.redhat.com/2431036", "https://bugzilla.redhat.com/2431740", "https://bugzilla.redhat.com/2433645", "https://bugzilla.redhat.com/show_bug.cgi?id=2425946", "https://bugzilla.redhat.com/show_bug.cgi?id=2430538", "https://bugzilla.redhat.com/show_bug.cgi?id=2431036", "https://bugzilla.redhat.com/show_bug.cgi?id=2431740", "https://bugzilla.redhat.com/show_bug.cgi?id=2433645", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15284", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23745", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23950", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24842", "https://errata.almalinux.org/9/ALSA-2026-18868.html", "https://errata.rockylinux.org/RLSA-2026:18868", "https://github.com/advisories/GHSA-r6q2-hw4h-h46w", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/3b1abfae650056edfabcbe0a0df5954d390521e6", "https://github.com/isaacs/node-tar/security/advisories/GHSA-r6q2-hw4h-h46w", "https://linux.oracle.com/cve/CVE-2026-23950.html", "https://linux.oracle.com/errata/ELSA-2026-18868.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-23950", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23950.json", "https://www.cve.org/CVERecord?id=CVE-2026-23950" ], "PublishedDate": "2026-01-20T01:15:57.87Z", "LastModifiedDate": "2026-08-24T13:17:36.63Z" }, { "VulnerabilityID": "CVE-2026-24842", "VendorIDs": [ "GHSA-34x7-hfp2-rc4v" ], "PkgID": "tar@6.2.1", "PkgName": "tar", "PkgPath": "app/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.2.1", "UID": "be3a0b7d2887a4f4" }, "InstalledVersion": "6.2.1", "FixedVersion": "7.5.7", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-24842", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:5c2a38bab809b1b353765c371c1d19360b4a15392fd045de8f00fac41f7b7d93", "Title": "node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check", "Description": "node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution semantics than the actual hardlink creation logic. This mismatch allows an attacker to craft a malicious TAR archive that bypasses path traversal protections and creates hardlinks to arbitrary files outside the extraction directory. Version 7.5.7 contains a fix for the issue.", "Severity": "HIGH", "CweIDs": [ "CWE-22", "CWE-59" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "V3Score": 8.2 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:18480", "https://access.redhat.com/errata/RHSA-2026:18868", "https://access.redhat.com/errata/RHSA-2026:2900", "https://access.redhat.com/errata/RHSA-2026:33371", "https://access.redhat.com/errata/RHSA-2026:5447", "https://access.redhat.com/errata/RHSA-2026:6192", "https://access.redhat.com/security/cve/CVE-2026-24842", "https://advisory.echohq.com/cve/CVE-2026-24842", "https://bugzilla.redhat.com/2425946", "https://bugzilla.redhat.com/2430538", "https://bugzilla.redhat.com/2431036", "https://bugzilla.redhat.com/2431740", "https://bugzilla.redhat.com/2433645", "https://bugzilla.redhat.com/show_bug.cgi?id=2425946", "https://bugzilla.redhat.com/show_bug.cgi?id=2430538", "https://bugzilla.redhat.com/show_bug.cgi?id=2431036", "https://bugzilla.redhat.com/show_bug.cgi?id=2431740", "https://bugzilla.redhat.com/show_bug.cgi?id=2433645", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15284", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23745", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23950", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24842", "https://errata.almalinux.org/9/ALSA-2026-18868.html", "https://errata.rockylinux.org/RLSA-2026:18868", "https://github.com/advisories/GHSA-34x7-hfp2-rc4v", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/f4a7aa9bc3d717c987fdf1480ff7a64e87ffdb46", "https://github.com/isaacs/node-tar/security/advisories/GHSA-34x7-hfp2-rc4v", "https://linux.oracle.com/cve/CVE-2026-24842.html", "https://linux.oracle.com/errata/ELSA-2026-18868.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-24842", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24842.json", "https://www.cve.org/CVERecord?id=CVE-2026-24842" ], "PublishedDate": "2026-01-28T01:16:14.947Z", "LastModifiedDate": "2026-09-07T13:18:17.38Z" }, { "VulnerabilityID": "CVE-2026-24842", "VendorIDs": [ "GHSA-34x7-hfp2-rc4v" ], "PkgID": "tar@6.2.1", "PkgName": "tar", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.2.1", "UID": "da51341d82b508b9" }, "InstalledVersion": "6.2.1", "FixedVersion": "7.5.7", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-24842", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:5c2a38bab809b1b353765c371c1d19360b4a15392fd045de8f00fac41f7b7d93", "Title": "node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check", "Description": "node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution semantics than the actual hardlink creation logic. This mismatch allows an attacker to craft a malicious TAR archive that bypasses path traversal protections and creates hardlinks to arbitrary files outside the extraction directory. Version 7.5.7 contains a fix for the issue.", "Severity": "HIGH", "CweIDs": [ "CWE-22", "CWE-59" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "V3Score": 8.2 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:18480", "https://access.redhat.com/errata/RHSA-2026:18868", "https://access.redhat.com/errata/RHSA-2026:2900", "https://access.redhat.com/errata/RHSA-2026:33371", "https://access.redhat.com/errata/RHSA-2026:5447", "https://access.redhat.com/errata/RHSA-2026:6192", "https://access.redhat.com/security/cve/CVE-2026-24842", "https://advisory.echohq.com/cve/CVE-2026-24842", "https://bugzilla.redhat.com/2425946", "https://bugzilla.redhat.com/2430538", "https://bugzilla.redhat.com/2431036", "https://bugzilla.redhat.com/2431740", "https://bugzilla.redhat.com/2433645", "https://bugzilla.redhat.com/show_bug.cgi?id=2425946", "https://bugzilla.redhat.com/show_bug.cgi?id=2430538", "https://bugzilla.redhat.com/show_bug.cgi?id=2431036", "https://bugzilla.redhat.com/show_bug.cgi?id=2431740", "https://bugzilla.redhat.com/show_bug.cgi?id=2433645", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15284", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23745", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23950", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24842", "https://errata.almalinux.org/9/ALSA-2026-18868.html", "https://errata.rockylinux.org/RLSA-2026:18868", "https://github.com/advisories/GHSA-34x7-hfp2-rc4v", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/f4a7aa9bc3d717c987fdf1480ff7a64e87ffdb46", "https://github.com/isaacs/node-tar/security/advisories/GHSA-34x7-hfp2-rc4v", "https://linux.oracle.com/cve/CVE-2026-24842.html", "https://linux.oracle.com/errata/ELSA-2026-18868.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-24842", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24842.json", "https://www.cve.org/CVERecord?id=CVE-2026-24842" ], "PublishedDate": "2026-01-28T01:16:14.947Z", "LastModifiedDate": "2026-09-07T13:18:17.38Z" }, { "VulnerabilityID": "CVE-2026-26960", "VendorIDs": [ "GHSA-83g3-92jg-28cx" ], "PkgID": "tar@6.2.1", "PkgName": "tar", "PkgPath": "app/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.2.1", "UID": "be3a0b7d2887a4f4" }, "InstalledVersion": "6.2.1", "FixedVersion": "7.5.8", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-26960", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:5dce3dca80aba46475e0e514ab04daf0bb9e7e8e266f71cb5b0a2eb2ecc2223e", "Title": "node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation", "Description": "node-tar is a full-featured Tar for Node.js. When using default options in versions 7.5.7 and below, an attacker-controlled archive can create a hardlink inside the extraction directory that points to a file outside the extraction root, enabling arbitrary file read and write as the extracting user. Severity is high because the primitive bypasses path protections and turns archive extraction into a direct filesystem access primitive. This issue has been fixed in version 7.5.8.", "Severity": "HIGH", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "amazon": 3, "ghsa": 3, "nvd": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 7.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-26960", "https://advisory.echohq.com/cve/CVE-2026-26960", "https://github.com/advisories/GHSA-83g3-92jg-28cx", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/2cb1120bcefe28d7ecc719b41441ade59c52e384", "https://github.com/isaacs/node-tar/commit/d18e4e1f846f4ddddc153b0f536a19c050e7499f", "https://github.com/isaacs/node-tar/security/advisories/GHSA-83g3-92jg-28cx", "https://nvd.nist.gov/vuln/detail/CVE-2026-26960", "https://www.cve.org/CVERecord?id=CVE-2026-26960" ], "PublishedDate": "2026-02-20T02:16:53.883Z", "LastModifiedDate": "2026-06-17T10:26:27.197Z" }, { "VulnerabilityID": "CVE-2026-26960", "VendorIDs": [ "GHSA-83g3-92jg-28cx" ], "PkgID": "tar@6.2.1", "PkgName": "tar", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.2.1", "UID": "da51341d82b508b9" }, "InstalledVersion": "6.2.1", "FixedVersion": "7.5.8", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-26960", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:5dce3dca80aba46475e0e514ab04daf0bb9e7e8e266f71cb5b0a2eb2ecc2223e", "Title": "node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation", "Description": "node-tar is a full-featured Tar for Node.js. When using default options in versions 7.5.7 and below, an attacker-controlled archive can create a hardlink inside the extraction directory that points to a file outside the extraction root, enabling arbitrary file read and write as the extracting user. Severity is high because the primitive bypasses path protections and turns archive extraction into a direct filesystem access primitive. This issue has been fixed in version 7.5.8.", "Severity": "HIGH", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "amazon": 3, "ghsa": 3, "nvd": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 7.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-26960", "https://advisory.echohq.com/cve/CVE-2026-26960", "https://github.com/advisories/GHSA-83g3-92jg-28cx", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/2cb1120bcefe28d7ecc719b41441ade59c52e384", "https://github.com/isaacs/node-tar/commit/d18e4e1f846f4ddddc153b0f536a19c050e7499f", "https://github.com/isaacs/node-tar/security/advisories/GHSA-83g3-92jg-28cx", "https://nvd.nist.gov/vuln/detail/CVE-2026-26960", "https://www.cve.org/CVERecord?id=CVE-2026-26960" ], "PublishedDate": "2026-02-20T02:16:53.883Z", "LastModifiedDate": "2026-06-17T10:26:27.197Z" }, { "VulnerabilityID": "CVE-2026-29786", "VendorIDs": [ "GHSA-qffp-2rhf-9h96" ], "PkgID": "tar@6.2.1", "PkgName": "tar", "PkgPath": "app/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.2.1", "UID": "be3a0b7d2887a4f4" }, "InstalledVersion": "6.2.1", "FixedVersion": "7.5.10", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-29786", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:4349bb6423e793b9f4ba81a16031837fb4e47b5606321b4a0a41467015ceb042", "Title": "node-tar: hardlink path traversal via drive-relative linkpath", "Description": "node-tar is a full-featured Tar for Node.js. Prior to version 7.5.10, tar can be tricked into creating a hardlink that points outside the extraction directory by using a drive-relative link target such as C:../target.txt, which enables file overwrite outside cwd during normal tar.x() extraction. This issue has been patched in version 7.5.10.", "Severity": "HIGH", "CweIDs": [ "CWE-22", "CWE-59" ], "VendorSeverity": { "amazon": 2, "ghsa": 3, "nvd": 2, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N", "V3Score": 6.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", "V3Score": 8.6 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-29786", "https://advisory.echohq.com/cve/CVE-2026-29786", "https://bugzilla.redhat.com/show_bug.cgi?id=2445476", "https://github.com/advisories/GHSA-qffp-2rhf-9h96", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/7bc755dd85e623c0279e08eb3784909e6d7e4b9f", "https://github.com/isaacs/node-tar/security/advisories/GHSA-qffp-2rhf-9h96", "https://nvd.nist.gov/vuln/detail/CVE-2026-29786", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29786.json", "https://www.cve.org/CVERecord?id=CVE-2026-29786" ], "PublishedDate": "2026-03-07T16:15:55.587Z", "LastModifiedDate": "2026-09-01T13:18:36.727Z" }, { "VulnerabilityID": "CVE-2026-29786", "VendorIDs": [ "GHSA-qffp-2rhf-9h96" ], "PkgID": "tar@6.2.1", "PkgName": "tar", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.2.1", "UID": "da51341d82b508b9" }, "InstalledVersion": "6.2.1", "FixedVersion": "7.5.10", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-29786", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:4349bb6423e793b9f4ba81a16031837fb4e47b5606321b4a0a41467015ceb042", "Title": "node-tar: hardlink path traversal via drive-relative linkpath", "Description": "node-tar is a full-featured Tar for Node.js. Prior to version 7.5.10, tar can be tricked into creating a hardlink that points outside the extraction directory by using a drive-relative link target such as C:../target.txt, which enables file overwrite outside cwd during normal tar.x() extraction. This issue has been patched in version 7.5.10.", "Severity": "HIGH", "CweIDs": [ "CWE-22", "CWE-59" ], "VendorSeverity": { "amazon": 2, "ghsa": 3, "nvd": 2, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N", "V3Score": 6.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", "V3Score": 8.6 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-29786", "https://advisory.echohq.com/cve/CVE-2026-29786", "https://bugzilla.redhat.com/show_bug.cgi?id=2445476", "https://github.com/advisories/GHSA-qffp-2rhf-9h96", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/7bc755dd85e623c0279e08eb3784909e6d7e4b9f", "https://github.com/isaacs/node-tar/security/advisories/GHSA-qffp-2rhf-9h96", "https://nvd.nist.gov/vuln/detail/CVE-2026-29786", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29786.json", "https://www.cve.org/CVERecord?id=CVE-2026-29786" ], "PublishedDate": "2026-03-07T16:15:55.587Z", "LastModifiedDate": "2026-09-01T13:18:36.727Z" }, { "VulnerabilityID": "CVE-2026-31802", "VendorIDs": [ "GHSA-9ppj-qmqm-q256" ], "PkgID": "tar@6.2.1", "PkgName": "tar", "PkgPath": "app/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.2.1", "UID": "be3a0b7d2887a4f4" }, "InstalledVersion": "6.2.1", "FixedVersion": "7.5.11", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-31802", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:6d7372e72f54227cef6dd15e4c6071bc8f1a397253103f060c317cb7e296385f", "Title": "tar: tar: File overwrite via drive-relative symlink traversal", "Description": "node-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, tar (npm) can be tricked into creating a symlink that points outside the extraction directory by using a drive-relative symlink target such as C:../../../target.txt, which enables file overwrite outside cwd during normal tar.x() extraction. This vulnerability is fixed in 7.5.11.", "Severity": "HIGH", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "ghsa": 3, "nvd": 2, "redhat": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "V3Score": 5.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 6.2 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-31802", "https://advisory.echohq.com/cve/CVE-2026-31802", "https://github.com/advisories/GHSA-9ppj-qmqm-q256", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/f48b5fa3b7985ddab96dc0f2125a4ffc9911b6ad", "https://github.com/isaacs/node-tar/security/advisories/GHSA-9ppj-qmqm-q256", "https://nvd.nist.gov/vuln/detail/CVE-2026-31802", "https://www.cve.org/CVERecord?id=CVE-2026-31802" ], "PublishedDate": "2026-03-10T07:44:58.02Z", "LastModifiedDate": "2026-06-17T10:34:29.49Z" }, { "VulnerabilityID": "CVE-2026-31802", "VendorIDs": [ "GHSA-9ppj-qmqm-q256" ], "PkgID": "tar@6.2.1", "PkgName": "tar", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.2.1", "UID": "da51341d82b508b9" }, "InstalledVersion": "6.2.1", "FixedVersion": "7.5.11", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-31802", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:6d7372e72f54227cef6dd15e4c6071bc8f1a397253103f060c317cb7e296385f", "Title": "tar: tar: File overwrite via drive-relative symlink traversal", "Description": "node-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, tar (npm) can be tricked into creating a symlink that points outside the extraction directory by using a drive-relative symlink target such as C:../../../target.txt, which enables file overwrite outside cwd during normal tar.x() extraction. This vulnerability is fixed in 7.5.11.", "Severity": "HIGH", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "ghsa": 3, "nvd": 2, "redhat": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "V3Score": 5.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 6.2 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-31802", "https://advisory.echohq.com/cve/CVE-2026-31802", "https://github.com/advisories/GHSA-9ppj-qmqm-q256", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/f48b5fa3b7985ddab96dc0f2125a4ffc9911b6ad", "https://github.com/isaacs/node-tar/security/advisories/GHSA-9ppj-qmqm-q256", "https://nvd.nist.gov/vuln/detail/CVE-2026-31802", "https://www.cve.org/CVERecord?id=CVE-2026-31802" ], "PublishedDate": "2026-03-10T07:44:58.02Z", "LastModifiedDate": "2026-06-17T10:34:29.49Z" }, { "VulnerabilityID": "CVE-2026-59874", "VendorIDs": [ "GHSA-8x88-c5mf-7j5w" ], "PkgID": "tar@6.2.1", "PkgName": "tar", "PkgPath": "app/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.2.1", "UID": "be3a0b7d2887a4f4" }, "InstalledVersion": "6.2.1", "FixedVersion": "7.5.18", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59874", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:a8c6abf2520d8bc5afa60e0607a238459d3025c802094a434b5577038faea452", "Title": "tar: Node-tar: Denial of Service via malformed tar archive header", "Description": "node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsing the same header. This issue is fixed in version 7.5.18.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:47058", "https://access.redhat.com/security/cve/CVE-2026-59874", "https://advisory.echohq.com/cve/CVE-2026-59874", "https://bugzilla.redhat.com/2494813", "https://bugzilla.redhat.com/2498116", "https://bugzilla.redhat.com/2498120", "https://bugzilla.redhat.com/show_bug.cgi?id=2494813", "https://bugzilla.redhat.com/show_bug.cgi?id=2498116", "https://bugzilla.redhat.com/show_bug.cgi?id=2498120", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13149", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59873", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59874", "https://errata.almalinux.org/9/ALSA-2026-47058.html", "https://errata.rockylinux.org/RLSA-2026:47058", "https://github.com/advisories/GHSA-8x88-c5mf-7j5w", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5", "https://github.com/isaacs/node-tar/releases/tag/v7.5.18", "https://github.com/isaacs/node-tar/security/advisories/GHSA-8x88-c5mf-7j5w", "https://linux.oracle.com/cve/CVE-2026-59874.html", "https://linux.oracle.com/errata/ELSA-2026-48034.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-59874", "https://www.cve.org/CVERecord?id=CVE-2026-59874" ], "PublishedDate": "2026-07-08T16:16:33.99Z", "LastModifiedDate": "2026-10-25T17:10:00.197Z" }, { "VulnerabilityID": "CVE-2026-59874", "VendorIDs": [ "GHSA-8x88-c5mf-7j5w" ], "PkgID": "tar@6.2.1", "PkgName": "tar", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.2.1", "UID": "da51341d82b508b9" }, "InstalledVersion": "6.2.1", "FixedVersion": "7.5.18", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59874", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:a8c6abf2520d8bc5afa60e0607a238459d3025c802094a434b5577038faea452", "Title": "tar: Node-tar: Denial of Service via malformed tar archive header", "Description": "node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsing the same header. This issue is fixed in version 7.5.18.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:47058", "https://access.redhat.com/security/cve/CVE-2026-59874", "https://advisory.echohq.com/cve/CVE-2026-59874", "https://bugzilla.redhat.com/2494813", "https://bugzilla.redhat.com/2498116", "https://bugzilla.redhat.com/2498120", "https://bugzilla.redhat.com/show_bug.cgi?id=2494813", "https://bugzilla.redhat.com/show_bug.cgi?id=2498116", "https://bugzilla.redhat.com/show_bug.cgi?id=2498120", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13149", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59873", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59874", "https://errata.almalinux.org/9/ALSA-2026-47058.html", "https://errata.rockylinux.org/RLSA-2026:47058", "https://github.com/advisories/GHSA-8x88-c5mf-7j5w", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5", "https://github.com/isaacs/node-tar/releases/tag/v7.5.18", "https://github.com/isaacs/node-tar/security/advisories/GHSA-8x88-c5mf-7j5w", "https://linux.oracle.com/cve/CVE-2026-59874.html", "https://linux.oracle.com/errata/ELSA-2026-48034.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-59874", "https://www.cve.org/CVERecord?id=CVE-2026-59874" ], "PublishedDate": "2026-07-08T16:16:33.99Z", "LastModifiedDate": "2026-10-25T17:10:00.197Z" }, { "VulnerabilityID": "CVE-2026-73566", "VendorIDs": [ "GHSA-r292-9mhp-454m" ], "PkgID": "tar@6.2.1", "PkgName": "tar", "PkgPath": "app/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.2.1", "UID": "be3a0b7d2887a4f4" }, "InstalledVersion": "6.2.1", "FixedVersion": "7.5.21", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-73566", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:6ad310200ceab7866f5d5c0a60d4e8eb257583e7407a3117ca196fe982caaf37", "Title": "tar: node-tar: Denial of Service via crafted long-path tar archive", "Description": "node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the recursive mapHas helper to walk an archive entry path upward with path.dirname() and no segment cap when tar.t(...) or tar.x(...) receives a non-empty member-selection list. A crafted GNU L or PAX x long-path header with thousands of slash-separated segments reaches this.filter(entry.path, entry) in Parser[CONSUMEHEADER] in src/parse.ts before Unpack[CHECKPATH] applies maxDepth, causing an uncatchable RangeError stack overflow that terminates asynchronous and streaming Node.js consumers. This issue is fixed in version 7.5.21.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-674" ], "VendorSeverity": { "amazon": 3, "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-73566", "https://advisory.echohq.com/cve/CVE-2026-73566", "https://github.com/advisories/GHSA-r292-9mhp-454m", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/631ae59121bf8fc8a22bbae35f074cb9b789cd4a", "https://github.com/isaacs/node-tar/releases/tag/v7.5.21", "https://github.com/isaacs/node-tar/security/advisories/GHSA-r292-9mhp-454m", "https://nvd.nist.gov/vuln/detail/CVE-2026-73566", "https://www.cve.org/CVERecord?id=CVE-2026-73566" ], "PublishedDate": "2026-08-13T18:18:19.25Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-73566", "VendorIDs": [ "GHSA-r292-9mhp-454m" ], "PkgID": "tar@6.2.1", "PkgName": "tar", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.2.1", "UID": "da51341d82b508b9" }, "InstalledVersion": "6.2.1", "FixedVersion": "7.5.21", "Status": "fixed", "Layer": { "DiffID": "sha256:62650121e9730f27a4b172c21143b5fab34813860e90059b7755e7f1d62c5e42" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-73566", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:6ad310200ceab7866f5d5c0a60d4e8eb257583e7407a3117ca196fe982caaf37", "Title": "tar: node-tar: Denial of Service via crafted long-path tar archive", "Description": "node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the recursive mapHas helper to walk an archive entry path upward with path.dirname() and no segment cap when tar.t(...) or tar.x(...) receives a non-empty member-selection list. A crafted GNU L or PAX x long-path header with thousands of slash-separated segments reaches this.filter(entry.path, entry) in Parser[CONSUMEHEADER] in src/parse.ts before Unpack[CHECKPATH] applies maxDepth, causing an uncatchable RangeError stack overflow that terminates asynchronous and streaming Node.js consumers. This issue is fixed in version 7.5.21.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-674" ], "VendorSeverity": { "amazon": 3, "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-73566", "https://advisory.echohq.com/cve/CVE-2026-73566", "https://github.com/advisories/GHSA-r292-9mhp-454m", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/631ae59121bf8fc8a22bbae35f074cb9b789cd4a", "https://github.com/isaacs/node-tar/releases/tag/v7.5.21", "https://github.com/isaacs/node-tar/security/advisories/GHSA-r292-9mhp-454m", "https://nvd.nist.gov/vuln/detail/CVE-2026-73566", "https://www.cve.org/CVERecord?id=CVE-2026-73566" ], "PublishedDate": "2026-08-13T18:18:19.25Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-27601", "VendorIDs": [ "GHSA-qpx9-hpmf-5gmw" ], "PkgID": "underscore@1.13.7", "PkgName": "underscore", "PkgPath": "app/node_modules/underscore/package.json", "PkgIdentifier": { "PURL": "pkg:npm/underscore@1.13.7", "UID": "42c579b17a3122d9" }, "InstalledVersion": "1.13.7", "FixedVersion": "1.13.8", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27601", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:80154c597d81b18f570db34f3522972f8990b1c283923b040a0a61a97fe935b2", "Title": "Underscore.js: Underscore.js: Denial of Service via recursive data structures in flatten and isEqual functions", "Description": "Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the _.flatten and _.isEqual functions use recursion without a depth limit. Under very specific conditions, detailed below, an attacker could exploit this in a Denial of Service (DoS) attack by triggering a stack overflow. Untrusted input must be used to create a recursive datastructure, for example using JSON.parse, with no enforced depth limit. The datastructure thus created must be passed to _.flatten or _.isEqual. In the case of _.flatten, the vulnerability can only be exploited if it is possible for a remote client to prepare a datastructure that consists of arrays at all levels AND if no finite depth limit is passed as the second argument to _.flatten. In the case of _.isEqual, the vulnerability can only be exploited if there exists a code path in which two distinct datastructures that were submitted by the same remote client are compared using _.isEqual. For example, if a client submits data that are stored in a database, and the same client can later submit another datastructure that is then compared to the data that were saved in the database previously, OR if a client submits a single request, but its data are parsed twice, creating two non-identical but equivalent datastructures that are then compared. Exceptions originating from the call to _.flatten or _.isEqual, as a result of a stack overflow, are not being caught. This vulnerability is fixed in 1.13.8.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "ghsa": 3, "nvd": 2, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 5.9, "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-27601", "https://github.com/jashkenas/underscore", "https://github.com/jashkenas/underscore/commit/411e222eb0ca5d570cc4f6315c02c05b830ed2b4", "https://github.com/jashkenas/underscore/commit/a6e23ae9647461ec33ad9f92a2ecfc220eea0a84", "https://github.com/jashkenas/underscore/issues/3011", "https://github.com/jashkenas/underscore/security/advisories/GHSA-qpx9-hpmf-5gmw", "https://nvd.nist.gov/vuln/detail/CVE-2026-27601", "https://underscorejs.org/#1.13.8", "https://underscorejs.org/#flatten", "https://underscorejs.org/#isEqual", "https://www.cve.org/CVERecord?id=CVE-2026-27601" ], "PublishedDate": "2026-03-03T23:15:55.56Z", "LastModifiedDate": "2026-06-17T10:27:22.407Z" }, { "VulnerabilityID": "CVE-2026-48779", "VendorIDs": [ "GHSA-96hv-2xvq-fx4p" ], "PkgID": "ws@7.5.10", "PkgName": "ws", "PkgPath": "app/node_modules/mqtt/node_modules/ws/package.json", "PkgIdentifier": { "PURL": "pkg:npm/ws@7.5.10", "UID": "eb9b06552c313f42" }, "InstalledVersion": "7.5.10", "FixedVersion": "5.2.5, 6.2.4, 7.5.11, 8.21.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48779", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:fdf6d42c05f1aff840dbe4ba5324cf39e5ac15329ff42224db7ab75190218898", "Title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments", "Description": "ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process termination due to OOM. This issue has been fixed in versions 5.2.5, 6.2.4, 7.5.11, and 8.21.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-770", "CWE-1050" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:26638", "https://access.redhat.com/errata/RHSA-2026:27171", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:37272", "https://access.redhat.com/errata/RHSA-2026:40984", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41941", "https://access.redhat.com/errata/RHSA-2026:41944", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:56366", "https://access.redhat.com/errata/RHSA-2026:56431", "https://access.redhat.com/errata/RHSA-2026:57013", "https://access.redhat.com/errata/RHSA-2026:57590", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:66488", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-48779", "https://advisory.echohq.com/cve/CVE-2026-48779", "https://bugzilla.redhat.com/show_bug.cgi?id=2489661", "https://github.com/advisories/GHSA-96hv-2xvq-fx4p", "https://github.com/websockets/ws", "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7", "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53", "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94", "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8", "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p", "https://nvd.nist.gov/vuln/detail/CVE-2026-48779", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48779.json", "https://www.cve.org/CVERecord?id=CVE-2026-48779" ], "PublishedDate": "2026-06-17T13:20:42.887Z", "LastModifiedDate": "2026-10-26T12:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-48779", "VendorIDs": [ "GHSA-96hv-2xvq-fx4p" ], "PkgID": "ws@8.17.1", "PkgName": "ws", "PkgPath": "app/node_modules/engine.io-client/node_modules/ws/package.json", "PkgIdentifier": { "PURL": "pkg:npm/ws@8.17.1", "UID": "6a43b3102963ef99" }, "InstalledVersion": "8.17.1", "FixedVersion": "5.2.5, 6.2.4, 7.5.11, 8.21.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48779", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:9cd9cd33374b1d8c94895e46829897603554f3646351fbf4b3e5f428131be94f", "Title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments", "Description": "ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process termination due to OOM. This issue has been fixed in versions 5.2.5, 6.2.4, 7.5.11, and 8.21.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-770", "CWE-1050" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:26638", "https://access.redhat.com/errata/RHSA-2026:27171", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:37272", "https://access.redhat.com/errata/RHSA-2026:40984", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41941", "https://access.redhat.com/errata/RHSA-2026:41944", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:56366", "https://access.redhat.com/errata/RHSA-2026:56431", "https://access.redhat.com/errata/RHSA-2026:57013", "https://access.redhat.com/errata/RHSA-2026:57590", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:66488", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-48779", "https://advisory.echohq.com/cve/CVE-2026-48779", "https://bugzilla.redhat.com/show_bug.cgi?id=2489661", "https://github.com/advisories/GHSA-96hv-2xvq-fx4p", "https://github.com/websockets/ws", "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7", "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53", "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94", "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8", "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p", "https://nvd.nist.gov/vuln/detail/CVE-2026-48779", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48779.json", "https://www.cve.org/CVERecord?id=CVE-2026-48779" ], "PublishedDate": "2026-06-17T13:20:42.887Z", "LastModifiedDate": "2026-10-26T12:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-48779", "VendorIDs": [ "GHSA-96hv-2xvq-fx4p" ], "PkgID": "ws@8.17.1", "PkgName": "ws", "PkgPath": "app/node_modules/engine.io/node_modules/ws/package.json", "PkgIdentifier": { "PURL": "pkg:npm/ws@8.17.1", "UID": "d92f529cbd9c8ae8" }, "InstalledVersion": "8.17.1", "FixedVersion": "5.2.5, 6.2.4, 7.5.11, 8.21.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48779", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:9cd9cd33374b1d8c94895e46829897603554f3646351fbf4b3e5f428131be94f", "Title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments", "Description": "ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process termination due to OOM. This issue has been fixed in versions 5.2.5, 6.2.4, 7.5.11, and 8.21.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-770", "CWE-1050" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:26638", "https://access.redhat.com/errata/RHSA-2026:27171", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:37272", "https://access.redhat.com/errata/RHSA-2026:40984", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41941", "https://access.redhat.com/errata/RHSA-2026:41944", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:56366", "https://access.redhat.com/errata/RHSA-2026:56431", "https://access.redhat.com/errata/RHSA-2026:57013", "https://access.redhat.com/errata/RHSA-2026:57590", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:66488", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-48779", "https://advisory.echohq.com/cve/CVE-2026-48779", "https://bugzilla.redhat.com/show_bug.cgi?id=2489661", "https://github.com/advisories/GHSA-96hv-2xvq-fx4p", "https://github.com/websockets/ws", "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7", "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53", "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94", "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8", "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p", "https://nvd.nist.gov/vuln/detail/CVE-2026-48779", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48779.json", "https://www.cve.org/CVERecord?id=CVE-2026-48779" ], "PublishedDate": "2026-06-17T13:20:42.887Z", "LastModifiedDate": "2026-10-26T12:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-48779", "VendorIDs": [ "GHSA-96hv-2xvq-fx4p" ], "PkgID": "ws@8.17.1", "PkgName": "ws", "PkgPath": "app/node_modules/socket.io-adapter/node_modules/ws/package.json", "PkgIdentifier": { "PURL": "pkg:npm/ws@8.17.1", "UID": "33348278d890da5b" }, "InstalledVersion": "8.17.1", "FixedVersion": "5.2.5, 6.2.4, 7.5.11, 8.21.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48779", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:9cd9cd33374b1d8c94895e46829897603554f3646351fbf4b3e5f428131be94f", "Title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments", "Description": "ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process termination due to OOM. This issue has been fixed in versions 5.2.5, 6.2.4, 7.5.11, and 8.21.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-770", "CWE-1050" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:26638", "https://access.redhat.com/errata/RHSA-2026:27171", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:37272", "https://access.redhat.com/errata/RHSA-2026:40984", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41941", "https://access.redhat.com/errata/RHSA-2026:41944", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:56366", "https://access.redhat.com/errata/RHSA-2026:56431", "https://access.redhat.com/errata/RHSA-2026:57013", "https://access.redhat.com/errata/RHSA-2026:57590", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:66488", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-48779", "https://advisory.echohq.com/cve/CVE-2026-48779", "https://bugzilla.redhat.com/show_bug.cgi?id=2489661", "https://github.com/advisories/GHSA-96hv-2xvq-fx4p", "https://github.com/websockets/ws", "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7", "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53", "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94", "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8", "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p", "https://nvd.nist.gov/vuln/detail/CVE-2026-48779", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48779.json", "https://www.cve.org/CVERecord?id=CVE-2026-48779" ], "PublishedDate": "2026-06-17T13:20:42.887Z", "LastModifiedDate": "2026-10-26T12:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-48779", "VendorIDs": [ "GHSA-96hv-2xvq-fx4p" ], "PkgID": "ws@8.18.3", "PkgName": "ws", "PkgPath": "app/node_modules/ws/package.json", "PkgIdentifier": { "PURL": "pkg:npm/ws@8.18.3", "UID": "4eedf4d87d177cc6" }, "InstalledVersion": "8.18.3", "FixedVersion": "5.2.5, 6.2.4, 7.5.11, 8.21.0", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48779", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:7bf4acfde9ab205964c8c0a91556299f88c49e8eff49e40b096fe210dbb42ddc", "Title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments", "Description": "ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process termination due to OOM. This issue has been fixed in versions 5.2.5, 6.2.4, 7.5.11, and 8.21.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-770", "CWE-1050" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:26638", "https://access.redhat.com/errata/RHSA-2026:27171", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:37272", "https://access.redhat.com/errata/RHSA-2026:40984", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41941", "https://access.redhat.com/errata/RHSA-2026:41944", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:56366", "https://access.redhat.com/errata/RHSA-2026:56431", "https://access.redhat.com/errata/RHSA-2026:57013", "https://access.redhat.com/errata/RHSA-2026:57590", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:66488", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-48779", "https://advisory.echohq.com/cve/CVE-2026-48779", "https://bugzilla.redhat.com/show_bug.cgi?id=2489661", "https://github.com/advisories/GHSA-96hv-2xvq-fx4p", "https://github.com/websockets/ws", "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7", "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53", "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94", "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8", "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p", "https://nvd.nist.gov/vuln/detail/CVE-2026-48779", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48779.json", "https://www.cve.org/CVERecord?id=CVE-2026-48779" ], "PublishedDate": "2026-06-17T13:20:42.887Z", "LastModifiedDate": "2026-10-26T12:10:00.13Z" } ] }, { "Target": "Python", "Class": "lang-pkgs", "Type": "python-pkg", "Packages": [ { "Name": "apprise", "Identifier": { "PURL": "pkg:pypi/apprise@1.6.0", "UID": "9cdd12c1964062a3" }, "Version": "1.6.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:6d3d5133301ac37fb89d4b4727e9c9aa85932d266441a18b9a0ff9bd5efd26cb" }, "FilePath": "usr/local/lib/python3.7/dist-packages/apprise-1.6.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" } ] }, { "Target": "app/extra/healthcheck", "Class": "lang-pkgs", "Type": "gobinary", "Packages": [ { "ID": "stdlib@v1.20.5", "Name": "stdlib", "Identifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "Version": "v1.20.5", "Relationship": "direct", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "AnalyzedBy": "gobinary" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2024-24790", "VendorIDs": [ "GO-2024-2887" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.21.11, 1.22.4", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-24790", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:8fc0f363474b38e50efc7d5083a8ae398d20c5dca6134702a51ab6ca4a809a58", "Title": "golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses", "Description": "The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.", "Severity": "CRITICAL", "VendorSeverity": { "alma": 2, "amazon": 3, "bitnami": 4, "bottlerocket": 2, "cbl-mariner": 4, "nvd": 4, "oracle-oval": 2, "photon": 4, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 6.7 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24790", "http://www.openwall.com/lists/oss-security/2024/06/04/1", "https://access.redhat.com/errata/RHSA-2025:7256", "https://access.redhat.com/security/cve/CVE-2024-24790", "https://bugzilla.redhat.com/2237777", "https://bugzilla.redhat.com/2237778", "https://bugzilla.redhat.com/2279814", "https://bugzilla.redhat.com/2292787", "https://bugzilla.redhat.com/2295310", "https://bugzilla.redhat.com/2315719", "https://bugzilla.redhat.com/show_bug.cgi?id=2237777", "https://bugzilla.redhat.com/show_bug.cgi?id=2237778", "https://bugzilla.redhat.com/show_bug.cgi?id=2279814", "https://bugzilla.redhat.com/show_bug.cgi?id=2292787", "https://bugzilla.redhat.com/show_bug.cgi?id=2295310", "https://bugzilla.redhat.com/show_bug.cgi?id=2315719", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24788", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24790", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9355", "https://errata.almalinux.org/9/ALSA-2025-7256.html", "https://errata.rockylinux.org/RLSA-2025:7256", "https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/develop/advisories/2.9.0/BRSA-glvb5gspjgq6.toml", "https://github.com/golang/go/commit/051bdf3fd12a40307606ff9381138039c5f452f0%20%281.21%29", "https://github.com/golang/go/commit/12d5810cdb1f73cf23d7a86462143e9463317fca%20%281.22%29", "https://github.com/golang/go/issues/67680", "https://go.dev/cl/590316", "https://go.dev/issue/67680", "https://groups.google.com/g/golang-announce/c/XbxouI9gY7k", "https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ", "https://linux.oracle.com/cve/CVE-2024-24790.html", "https://linux.oracle.com/errata/ELSA-2025-7256.html", "https://nvd.nist.gov/vuln/detail/CVE-2024-24790", "https://pkg.go.dev/vuln/GO-2024-2887", "https://security.netapp.com/advisory/ntap-20240905-0002/", "https://ubuntu.com/security/notices/USN-6886-1", "https://ubuntu.com/security/notices/USN-7109-1", "https://www.cve.org/CVERecord?id=CVE-2024-24790" ], "PublishedDate": "2024-06-05T16:15:10.56Z", "LastModifiedDate": "2026-06-17T07:14:52.097Z" }, { "VulnerabilityID": "CVE-2025-68121", "VendorIDs": [ "GO-2026-4337" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.24.13, 1.25.7, 1.26.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-68121", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:a16a3094ba014642d88a2353bc9f3d52e4481580b3a67b486e044c2411b2febd", "Title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption", "Description": "During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.", "Severity": "CRITICAL", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "bitnami": 4, "cbl-mariner": 2, "nvd": 4, "oracle-oval": 3, "photon": 4, "redhat": 2, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "V3Score": 10 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:4177", "https://access.redhat.com/security/cve/CVE-2025-68121", "https://bugzilla.redhat.com/2434432", "https://bugzilla.redhat.com/2437111", "https://bugzilla.redhat.com/show_bug.cgi?id=2434432", "https://bugzilla.redhat.com/show_bug.cgi?id=2437111", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121", "https://errata.almalinux.org/9/ALSA-2026-4177.html", "https://errata.rockylinux.org/RLSA-2026:4177", "https://github.com/golang/go/issues/77113", "https://go.dev/cl/737700", "https://go.dev/issue/77217", "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk", "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc", "https://linux.oracle.com/cve/CVE-2025-68121.html", "https://linux.oracle.com/errata/ELSA-2026-5146.html", "https://nvd.nist.gov/vuln/detail/CVE-2025-68121", "https://pkg.go.dev/vuln/GO-2026-4337", "https://www.cve.org/CVERecord?id=CVE-2025-68121" ], "PublishedDate": "2026-02-05T18:16:10.857Z", "LastModifiedDate": "2026-06-17T09:58:33.833Z" }, { "VulnerabilityID": "CVE-2023-39325", "VendorIDs": [ "GHSA-4374-p667-p6c8", "GO-2023-2102" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.20.10, 1.21.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-39325", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:6aeb92019242ae96ab3debc06cfb5d989cf8f627758d0792e8c9de90db932cc1", "Title": "golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)", "Description": "A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 2, "amazon": 3, "azure": 3, "bitnami": 3, "bottlerocket": 3, "cbl-mariner": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 3, "rocky": 2, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39325", "https://access.redhat.com/errata/RHSA-2023:6077", "https://access.redhat.com/security/cve/CVE-2023-39325", "https://access.redhat.com/security/cve/CVE-2023-44487", "https://bugzilla.redhat.com/2242803", "https://bugzilla.redhat.com/2243296", "https://bugzilla.redhat.com/show_bug.cgi?id=2242803", "https://bugzilla.redhat.com/show_bug.cgi?id=2243296", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39325", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487", "https://errata.almalinux.org/9/ALSA-2023-6077.html", "https://errata.rockylinux.org/RLSA-2023:6077", "https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-48vh-q3rp-4grw", "https://github.com/golang/go/commit/24ae2d927285c697440fdde3ad7f26028354bcf3%20%5Bgolang-%201.21%5D", "https://github.com/golang/go/commit/e175f27f58aa7b9cd4d79607ae65d2cd5baaee68%20%5Bgolang-1.20%5D", "https://github.com/golang/go/issues/63417", "https://go.dev/cl/534215", "https://go.dev/cl/534235", "https://go.dev/issue/63417", "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ", "https://linux.oracle.com/cve/CVE-2023-39325.html", "https://linux.oracle.com/errata/ELSA-2023-5867.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/", "https://nvd.nist.gov/vuln/detail/CVE-2023-39325", "https://pkg.go.dev/vuln/GO-2023-2102", "https://security.gentoo.org/glsa/202311-09", "https://security.netapp.com/advisory/ntap-20231110-0008/", "https://ubuntu.com/security/notices/USN-6574-1", "https://ubuntu.com/security/notices/USN-7061-1", "https://ubuntu.com/security/notices/USN-7109-1", "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487", "https://www.cve.org/CVERecord?id=CVE-2023-39325" ], "PublishedDate": "2023-10-11T22:15:09.88Z", "LastModifiedDate": "2026-06-17T06:12:02.173Z" }, { "VulnerabilityID": "CVE-2023-45283", "VendorIDs": [ "GO-2023-2185" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.20.11, 1.21.4, 1.20.12, 1.21.5", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-45283", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:2044f418d78cb0437d354040356526117b7190f62fcf47a2be25e9985300d5b9", "Title": "The filepath package does not recognize paths with a \\??\\ prefix as sp ...", "Description": "The filepath package does not recognize paths with a \\??\\ prefix as special. On Windows, a path beginning with \\??\\ is a Root Local Device path equivalent to a path beginning with \\\\?\\. Paths with a \\??\\ prefix may be used to access arbitrary locations on the system. For example, the path \\??\\c:\\x is equivalent to the more common path c:\\x. Before fix, Clean could convert a rooted path such as \\a\\..\\??\\b into the root local device path \\??\\b. Clean will now convert this to .\\??\\b. Similarly, Join(\\, ??, b) could convert a seemingly innocent sequence of path elements into the root local device path \\??\\b. Join will now convert this to \\.\\??\\b. In addition, with fix, IsAbs now correctly reports paths beginning with \\??\\ as absolute, and VolumeName correctly reports the \\??\\ prefix as a volume name. UPDATE: Go 1.20.11 and Go 1.21.4 inadvertently changed the definition of the volume name in Windows paths starting with \\?, resulting in filepath.Clean(\\?\\c:) returning \\?\\c: rather than \\?\\c:\\ (among other effects). The previous behavior has been restored.", "Severity": "HIGH", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "amazon": 2, "bitnami": 3, "cbl-mariner": 3, "nvd": 3, "photon": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2023/12/05/2", "https://go.dev/cl/540277", "https://go.dev/cl/541175", "https://go.dev/issue/63713", "https://go.dev/issue/64028", "https://groups.google.com/g/golang-announce/c/4tU8LZfBFkY", "https://groups.google.com/g/golang-dev/c/6ypN5EjibjM/m/KmLVYH_uAgAJ", "https://nvd.nist.gov/vuln/detail/CVE-2023-45283", "https://pkg.go.dev/vuln/GO-2023-2185", "https://security.netapp.com/advisory/ntap-20231214-0008/" ], "PublishedDate": "2023-11-09T17:15:08.757Z", "LastModifiedDate": "2026-06-17T06:28:34.863Z" }, { "VulnerabilityID": "CVE-2023-45288", "VendorIDs": [ "GHSA-4v7x-pqxf-cx7m", "GO-2024-2687" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.21.9, 1.22.2", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-45288", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:9da6837de0a126ebd9a4ccabf9757504ad0f1444de59654ee12d42d420267f26", "Title": "golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS", "Description": "An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no memory is allocated to store the excess headers, but they are still parsed. This permits an attacker to cause an HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the receiver to decode than for an attacker to send. The fix sets a limit on the amount of excess header frames we will process before closing a connection.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "bitnami": 3, "bottlerocket": 2, "cbl-mariner": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288", "http://www.openwall.com/lists/oss-security/2024/04/03/16", "http://www.openwall.com/lists/oss-security/2024/04/05/4", "https://access.redhat.com/errata/RHSA-2024:2724", "https://access.redhat.com/security/cve/CVE-2023-45288", "https://bugzilla.redhat.com/2268017", "https://bugzilla.redhat.com/2268018", "https://bugzilla.redhat.com/2268019", "https://bugzilla.redhat.com/2268273", "https://bugzilla.redhat.com/show_bug.cgi?id=2268017", "https://bugzilla.redhat.com/show_bug.cgi?id=2268018", "https://bugzilla.redhat.com/show_bug.cgi?id=2268019", "https://bugzilla.redhat.com/show_bug.cgi?id=2268273", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783", "https://errata.almalinux.org/9/ALSA-2024-2724.html", "https://errata.rockylinux.org/RLSA-2024:2724", "https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-c9wf-j9h6-m2r9", "https://go.dev/cl/576155", "https://go.dev/issue/65051", "https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M", "https://kb.cert.org/vuls/id/421644", "https://linux.oracle.com/cve/CVE-2023-45288.html", "https://linux.oracle.com/errata/ELSA-2024-3346.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT/", "https://nowotarski.info/http2-continuation-flood/", "https://nvd.nist.gov/vuln/detail/CVE-2023-45288", "https://pkg.go.dev/vuln/GO-2024-2687", "https://security.netapp.com/advisory/ntap-20240419-0009/", "https://ubuntu.com/security/notices/USN-6886-1", "https://ubuntu.com/security/notices/USN-7109-1", "https://ubuntu.com/security/notices/USN-7111-1", "https://www.cve.org/CVERecord?id=CVE-2023-45288", "https://www.kb.cert.org/vuls/id/421644" ], "PublishedDate": "2024-04-04T21:15:16.113Z", "LastModifiedDate": "2026-06-17T06:28:35.58Z" }, { "VulnerabilityID": "CVE-2024-34156", "VendorIDs": [ "GO-2024-3106" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.22.7, 1.23.1", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-34156", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:a7b9258a6587c9fbd827e23773882f3ebec6372671f0443b71b30435da72f3bf", "Title": "encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion", "Description": "Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2025:3773", "https://access.redhat.com/security/cve/CVE-2024-34156", "https://bugzilla.redhat.com/2310528", "https://bugzilla.redhat.com/show_bug.cgi?id=2310528", "https://bugzilla.redhat.com/show_bug.cgi?id=2341750", "https://bugzilla.redhat.com/show_bug.cgi?id=2341751", "https://bugzilla.redhat.com/show_bug.cgi?id=2344219", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45336", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45341", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22866", "https://errata.almalinux.org/9/ALSA-2025-3773.html", "https://errata.rockylinux.org/RLSA-2025:3773", "https://github.com/golang/go/commit/2092294f2b097c5828f4eace6c98a322c1510b01%20%28go1.22.7%29", "https://github.com/golang/go/commit/fa8ff1a46deb6c816304441ec6740ec112e19012%20%28go1.23.1%29", "https://go.dev/cl/611239", "https://go.dev/issue/69139", "https://groups.google.com/g/golang-announce/c/K-cEzDeCtpc", "https://groups.google.com/g/golang-dev/c/S9POB9NCTdk", "https://linux.oracle.com/cve/CVE-2024-34156.html", "https://linux.oracle.com/errata/ELSA-2025-3773.html", "https://nvd.nist.gov/vuln/detail/CVE-2024-34156", "https://pkg.go.dev/vuln/GO-2024-3106", "https://security.netapp.com/advisory/ntap-20240926-0004/", "https://ubuntu.com/security/notices/USN-7081-1", "https://ubuntu.com/security/notices/USN-7109-1", "https://ubuntu.com/security/notices/USN-7111-1", "https://www.cve.org/CVERecord?id=CVE-2024-34156" ], "PublishedDate": "2024-09-06T21:15:12.02Z", "LastModifiedDate": "2026-06-17T07:33:00.72Z" }, { "VulnerabilityID": "CVE-2025-61726", "VendorIDs": [ "GO-2026-4341" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.24.12, 1.25.6", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-61726", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:be72bc6fcd73bbd77d11b2a414851030f6c1174cb45af20f91fa3c41fc76b74d", "Title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url", "Description": "The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a large form containing many unique query parameters can cause excessive memory consumption.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "bitnami": 3, "cbl-mariner": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10096", "https://access.redhat.com/errata/RHSA-2026:10104", "https://access.redhat.com/errata/RHSA-2026:10184", "https://access.redhat.com/errata/RHSA-2026:10225", "https://access.redhat.com/errata/RHSA-2026:10250", "https://access.redhat.com/errata/RHSA-2026:11408", "https://access.redhat.com/errata/RHSA-2026:11414", "https://access.redhat.com/errata/RHSA-2026:11747", "https://access.redhat.com/errata/RHSA-2026:11749", "https://access.redhat.com/errata/RHSA-2026:12028", "https://access.redhat.com/errata/RHSA-2026:12029", "https://access.redhat.com/errata/RHSA-2026:12030", "https://access.redhat.com/errata/RHSA-2026:12031", "https://access.redhat.com/errata/RHSA-2026:12032", "https://access.redhat.com/errata/RHSA-2026:12033", "https://access.redhat.com/errata/RHSA-2026:12279", "https://access.redhat.com/errata/RHSA-2026:12282", "https://access.redhat.com/errata/RHSA-2026:13542", "https://access.redhat.com/errata/RHSA-2026:13548", "https://access.redhat.com/errata/RHSA-2026:13571", "https://access.redhat.com/errata/RHSA-2026:14100", "https://access.redhat.com/errata/RHSA-2026:14774", "https://access.redhat.com/errata/RHSA-2026:14868", "https://access.redhat.com/errata/RHSA-2026:14879", "https://access.redhat.com/errata/RHSA-2026:15091", "https://access.redhat.com/errata/RHSA-2026:15984", "https://access.redhat.com/errata/RHSA-2026:16102", "https://access.redhat.com/errata/RHSA-2026:16696", "https://access.redhat.com/errata/RHSA-2026:17040", "https://access.redhat.com/errata/RHSA-2026:17084", "https://access.redhat.com/errata/RHSA-2026:17446", "https://access.redhat.com/errata/RHSA-2026:17460", "https://access.redhat.com/errata/RHSA-2026:17463", "https://access.redhat.com/errata/RHSA-2026:17468", "https://access.redhat.com/errata/RHSA-2026:17595", "https://access.redhat.com/errata/RHSA-2026:17598", "https://access.redhat.com/errata/RHSA-2026:18913", "https://access.redhat.com/errata/RHSA-2026:19013", "https://access.redhat.com/errata/RHSA-2026:19132", "https://access.redhat.com/errata/RHSA-2026:19375", "https://access.redhat.com/errata/RHSA-2026:19634", "https://access.redhat.com/errata/RHSA-2026:19712", "https://access.redhat.com/errata/RHSA-2026:20041", "https://access.redhat.com/errata/RHSA-2026:21017", "https://access.redhat.com/errata/RHSA-2026:21657", "https://access.redhat.com/errata/RHSA-2026:21691", "https://access.redhat.com/errata/RHSA-2026:22450", "https://access.redhat.com/errata/RHSA-2026:22627", "https://access.redhat.com/errata/RHSA-2026:22714", "https://access.redhat.com/errata/RHSA-2026:22937", "https://access.redhat.com/errata/RHSA-2026:23228", "https://access.redhat.com/errata/RHSA-2026:23361", "https://access.redhat.com/errata/RHSA-2026:24977", "https://access.redhat.com/errata/RHSA-2026:25089", "https://access.redhat.com/errata/RHSA-2026:25127", "https://access.redhat.com/errata/RHSA-2026:25248", "https://access.redhat.com/errata/RHSA-2026:25250", "https://access.redhat.com/errata/RHSA-2026:25251", "https://access.redhat.com/errata/RHSA-2026:25252", "https://access.redhat.com/errata/RHSA-2026:25253", "https://access.redhat.com/errata/RHSA-2026:26420", "https://access.redhat.com/errata/RHSA-2026:26527", "https://access.redhat.com/errata/RHSA-2026:26541", "https://access.redhat.com/errata/RHSA-2026:26636", "https://access.redhat.com/errata/RHSA-2026:2681", "https://access.redhat.com/errata/RHSA-2026:2706", "https://access.redhat.com/errata/RHSA-2026:2708", "https://access.redhat.com/errata/RHSA-2026:2709", "https://access.redhat.com/errata/RHSA-2026:2754", "https://access.redhat.com/errata/RHSA-2026:28047", "https://access.redhat.com/errata/RHSA-2026:2844", "https://access.redhat.com/errata/RHSA-2026:28441", "https://access.redhat.com/errata/RHSA-2026:28886", "https://access.redhat.com/errata/RHSA-2026:28961", "https://access.redhat.com/errata/RHSA-2026:2914", "https://access.redhat.com/errata/RHSA-2026:2920", "https://access.redhat.com/errata/RHSA-2026:3035", "https://access.redhat.com/errata/RHSA-2026:3040", "https://access.redhat.com/errata/RHSA-2026:3089", "https://access.redhat.com/errata/RHSA-2026:3092", "https://access.redhat.com/errata/RHSA-2026:3184", "https://access.redhat.com/errata/RHSA-2026:3186", "https://access.redhat.com/errata/RHSA-2026:3187", "https://access.redhat.com/errata/RHSA-2026:3188", "https://access.redhat.com/errata/RHSA-2026:3192", "https://access.redhat.com/errata/RHSA-2026:3193", "https://access.redhat.com/errata/RHSA-2026:3291", "https://access.redhat.com/errata/RHSA-2026:3296", "https://access.redhat.com/errata/RHSA-2026:3297", "https://access.redhat.com/errata/RHSA-2026:3298", "https://access.redhat.com/errata/RHSA-2026:3336", "https://access.redhat.com/errata/RHSA-2026:3337", "https://access.redhat.com/errata/RHSA-2026:3340", "https://access.redhat.com/errata/RHSA-2026:3341", "https://access.redhat.com/errata/RHSA-2026:3343", "https://access.redhat.com/errata/RHSA-2026:3391", "https://access.redhat.com/errata/RHSA-2026:3416", "https://access.redhat.com/errata/RHSA-2026:3427", "https://access.redhat.com/errata/RHSA-2026:3459", "https://access.redhat.com/errata/RHSA-2026:3468", "https://access.redhat.com/errata/RHSA-2026:3469", "https://access.redhat.com/errata/RHSA-2026:3470", "https://access.redhat.com/errata/RHSA-2026:3471", "https://access.redhat.com/errata/RHSA-2026:3472", "https://access.redhat.com/errata/RHSA-2026:3473", "https://access.redhat.com/errata/RHSA-2026:3489", "https://access.redhat.com/errata/RHSA-2026:3506", "https://access.redhat.com/errata/RHSA-2026:3556", "https://access.redhat.com/errata/RHSA-2026:3559", "https://access.redhat.com/errata/RHSA-2026:3668", "https://access.redhat.com/errata/RHSA-2026:3669", "https://access.redhat.com/errata/RHSA-2026:36873", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:3699", "https://access.redhat.com/errata/RHSA-2026:3713", "https://access.redhat.com/errata/RHSA-2026:37275", "https://access.redhat.com/errata/RHSA-2026:3752", "https://access.redhat.com/errata/RHSA-2026:3753", "https://access.redhat.com/errata/RHSA-2026:3782", "https://access.redhat.com/errata/RHSA-2026:3812", "https://access.redhat.com/errata/RHSA-2026:3813", "https://access.redhat.com/errata/RHSA-2026:3814", "https://access.redhat.com/errata/RHSA-2026:3815", "https://access.redhat.com/errata/RHSA-2026:3816", "https://access.redhat.com/errata/RHSA-2026:3817", "https://access.redhat.com/errata/RHSA-2026:3818", "https://access.redhat.com/errata/RHSA-2026:3820", "https://access.redhat.com/errata/RHSA-2026:3821", "https://access.redhat.com/errata/RHSA-2026:3822", "https://access.redhat.com/errata/RHSA-2026:3831", "https://access.redhat.com/errata/RHSA-2026:3833", "https://access.redhat.com/errata/RHSA-2026:3835", "https://access.redhat.com/errata/RHSA-2026:3836", "https://access.redhat.com/errata/RHSA-2026:3838", "https://access.redhat.com/errata/RHSA-2026:3839", "https://access.redhat.com/errata/RHSA-2026:3840", "https://access.redhat.com/errata/RHSA-2026:3841", "https://access.redhat.com/errata/RHSA-2026:3843", "https://access.redhat.com/errata/RHSA-2026:3854", "https://access.redhat.com/errata/RHSA-2026:3855", "https://access.redhat.com/errata/RHSA-2026:3856", "https://access.redhat.com/errata/RHSA-2026:3864", "https://access.redhat.com/errata/RHSA-2026:3869", "https://access.redhat.com/errata/RHSA-2026:3874", "https://access.redhat.com/errata/RHSA-2026:3875", "https://access.redhat.com/errata/RHSA-2026:3879", "https://access.redhat.com/errata/RHSA-2026:3880", "https://access.redhat.com/errata/RHSA-2026:3884", "https://access.redhat.com/errata/RHSA-2026:3898", "https://access.redhat.com/errata/RHSA-2026:3905", "https://access.redhat.com/errata/RHSA-2026:3906", "https://access.redhat.com/errata/RHSA-2026:3928", "https://access.redhat.com/errata/RHSA-2026:3929", "https://access.redhat.com/errata/RHSA-2026:3930", "https://access.redhat.com/errata/RHSA-2026:3931", "https://access.redhat.com/errata/RHSA-2026:3932", "https://access.redhat.com/errata/RHSA-2026:3958", "https://access.redhat.com/errata/RHSA-2026:3959", "https://access.redhat.com/errata/RHSA-2026:3960", "https://access.redhat.com/errata/RHSA-2026:3970", "https://access.redhat.com/errata/RHSA-2026:3971", "https://access.redhat.com/errata/RHSA-2026:3972", "https://access.redhat.com/errata/RHSA-2026:3973", "https://access.redhat.com/errata/RHSA-2026:3974", "https://access.redhat.com/errata/RHSA-2026:3977", "https://access.redhat.com/errata/RHSA-2026:39810", "https://access.redhat.com/errata/RHSA-2026:3985", "https://access.redhat.com/errata/RHSA-2026:40924", "https://access.redhat.com/errata/RHSA-2026:4164", "https://access.redhat.com/errata/RHSA-2026:4166", "https://access.redhat.com/errata/RHSA-2026:4170", "https://access.redhat.com/errata/RHSA-2026:4174", "https://access.redhat.com/errata/RHSA-2026:4177", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41941", "https://access.redhat.com/errata/RHSA-2026:4211", "https://access.redhat.com/errata/RHSA-2026:4220", "https://access.redhat.com/errata/RHSA-2026:4256", "https://access.redhat.com/errata/RHSA-2026:4264", "https://access.redhat.com/errata/RHSA-2026:4267", "https://access.redhat.com/errata/RHSA-2026:4270", "https://access.redhat.com/errata/RHSA-2026:4276", "https://access.redhat.com/errata/RHSA-2026:4434", "https://access.redhat.com/errata/RHSA-2026:4435", "https://access.redhat.com/errata/RHSA-2026:4460", "https://access.redhat.com/errata/RHSA-2026:4466", "https://access.redhat.com/errata/RHSA-2026:4467", "https://access.redhat.com/errata/RHSA-2026:4498", "https://access.redhat.com/errata/RHSA-2026:4500", "https://access.redhat.com/errata/RHSA-2026:4510", "https://access.redhat.com/errata/RHSA-2026:4511", "https://access.redhat.com/errata/RHSA-2026:4672", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:4753", "https://access.redhat.com/errata/RHSA-2026:4892", "https://access.redhat.com/errata/RHSA-2026:4901", "https://access.redhat.com/errata/RHSA-2026:4907", "https://access.redhat.com/errata/RHSA-2026:4939", "https://access.redhat.com/errata/RHSA-2026:4942", "https://access.redhat.com/errata/RHSA-2026:4943", "https://access.redhat.com/errata/RHSA-2026:4952", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:5022", "https://access.redhat.com/errata/RHSA-2026:5030", "https://access.redhat.com/errata/RHSA-2026:5031", "https://access.redhat.com/errata/RHSA-2026:5076", "https://access.redhat.com/errata/RHSA-2026:5077", "https://access.redhat.com/errata/RHSA-2026:5078", "https://access.redhat.com/errata/RHSA-2026:5079", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:5110", "https://access.redhat.com/errata/RHSA-2026:51288", "https://access.redhat.com/errata/RHSA-2026:5129", "https://access.redhat.com/errata/RHSA-2026:5130", "https://access.redhat.com/errata/RHSA-2026:5131", "https://access.redhat.com/errata/RHSA-2026:5132", "https://access.redhat.com/errata/RHSA-2026:5145", "https://access.redhat.com/errata/RHSA-2026:5146", "https://access.redhat.com/errata/RHSA-2026:5168", "https://access.redhat.com/errata/RHSA-2026:5327", "https://access.redhat.com/errata/RHSA-2026:5394", "https://access.redhat.com/errata/RHSA-2026:5439", "https://access.redhat.com/errata/RHSA-2026:5444", "https://access.redhat.com/errata/RHSA-2026:5447", "https://access.redhat.com/errata/RHSA-2026:5452", "https://access.redhat.com/errata/RHSA-2026:5461", "https://access.redhat.com/errata/RHSA-2026:5463", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:5533", "https://access.redhat.com/errata/RHSA-2026:5544", "https://access.redhat.com/errata/RHSA-2026:5549", "https://access.redhat.com/errata/RHSA-2026:5636", "https://access.redhat.com/errata/RHSA-2026:56366", "https://access.redhat.com/errata/RHSA-2026:56431", "https://access.redhat.com/errata/RHSA-2026:5645", "https://access.redhat.com/errata/RHSA-2026:5649", "https://access.redhat.com/errata/RHSA-2026:5665", "https://access.redhat.com/errata/RHSA-2026:57013", "https://access.redhat.com/errata/RHSA-2026:5807", "https://access.redhat.com/errata/RHSA-2026:5851", "https://access.redhat.com/errata/RHSA-2026:5852", "https://access.redhat.com/errata/RHSA-2026:5853", "https://access.redhat.com/errata/RHSA-2026:5948", "https://access.redhat.com/errata/RHSA-2026:5950", "https://access.redhat.com/errata/RHSA-2026:5952", "https://access.redhat.com/errata/RHSA-2026:5968", "https://access.redhat.com/errata/RHSA-2026:6184", "https://access.redhat.com/errata/RHSA-2026:6192", "https://access.redhat.com/errata/RHSA-2026:6226", "https://access.redhat.com/errata/RHSA-2026:6251", "https://access.redhat.com/errata/RHSA-2026:6277", "https://access.redhat.com/errata/RHSA-2026:6278", "https://access.redhat.com/errata/RHSA-2026:6428", "https://access.redhat.com/errata/RHSA-2026:6429", "https://access.redhat.com/errata/RHSA-2026:6497", "https://access.redhat.com/errata/RHSA-2026:6554", "https://access.redhat.com/errata/RHSA-2026:6564", "https://access.redhat.com/errata/RHSA-2026:6567", "https://access.redhat.com/errata/RHSA-2026:6568", "https://access.redhat.com/errata/RHSA-2026:66401", "https://access.redhat.com/errata/RHSA-2026:7052", "https://access.redhat.com/errata/RHSA-2026:7249", "https://access.redhat.com/errata/RHSA-2026:7291", "https://access.redhat.com/errata/RHSA-2026:7385", "https://access.redhat.com/errata/RHSA-2026:7676", "https://access.redhat.com/errata/RHSA-2026:7854", "https://access.redhat.com/errata/RHSA-2026:7942", "https://access.redhat.com/errata/RHSA-2026:8151", "https://access.redhat.com/errata/RHSA-2026:8167", "https://access.redhat.com/errata/RHSA-2026:8218", "https://access.redhat.com/errata/RHSA-2026:8229", "https://access.redhat.com/errata/RHSA-2026:8337", "https://access.redhat.com/errata/RHSA-2026:8338", "https://access.redhat.com/errata/RHSA-2026:8431", "https://access.redhat.com/errata/RHSA-2026:8433", "https://access.redhat.com/errata/RHSA-2026:8483", "https://access.redhat.com/errata/RHSA-2026:9097", "https://access.redhat.com/errata/RHSA-2026:9098", "https://access.redhat.com/errata/RHSA-2026:9108", "https://access.redhat.com/errata/RHSA-2026:9109", "https://access.redhat.com/errata/RHSA-2026:9848", "https://access.redhat.com/security/cve/CVE-2025-61726", "https://bugzilla.redhat.com/2434432", "https://bugzilla.redhat.com/2437111", "https://bugzilla.redhat.com/show_bug.cgi?id=2434432", "https://bugzilla.redhat.com/show_bug.cgi?id=2437111", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121", "https://errata.almalinux.org/9/ALSA-2026-4177.html", "https://errata.rockylinux.org/RLSA-2026:4177", "https://go.dev/cl/736712", "https://go.dev/issue/77101", "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc", "https://linux.oracle.com/cve/CVE-2025-61726.html", "https://linux.oracle.com/errata/ELSA-2026-5146.html", "https://nvd.nist.gov/vuln/detail/CVE-2025-61726", "https://pkg.go.dev/vuln/GO-2026-4341", "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61726.json", "https://www.cve.org/CVERecord?id=CVE-2025-61726" ], "PublishedDate": "2026-01-28T20:16:09.713Z", "LastModifiedDate": "2026-09-17T12:17:11.443Z" }, { "VulnerabilityID": "CVE-2025-61729", "VendorIDs": [ "GO-2025-4155" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.24.11, 1.25.5", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-61729", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:503eea08f0d4b3affdc45553a08c7f8319e2b155b35f4c010ff9f78c2695c04d", "Title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate", "Description": "Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.", "Severity": "HIGH", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "cbl-mariner": 1, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:3928", "https://access.redhat.com/security/cve/CVE-2025-61729", "https://bugzilla.redhat.com/2418462", "https://bugzilla.redhat.com/2434432", "https://bugzilla.redhat.com/2437111", "https://bugzilla.redhat.com/show_bug.cgi?id=2418462", "https://bugzilla.redhat.com/show_bug.cgi?id=2434432", "https://bugzilla.redhat.com/show_bug.cgi?id=2437111", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61729", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121", "https://errata.almalinux.org/9/ALSA-2026-3928.html", "https://errata.rockylinux.org/RLSA-2026:3928", "https://go.dev/cl/725920", "https://go.dev/issue/76445", "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4", "https://linux.oracle.com/cve/CVE-2025-61729.html", "https://linux.oracle.com/errata/ELSA-2026-5146.html", "https://nvd.nist.gov/vuln/detail/CVE-2025-61729", "https://pkg.go.dev/vuln/GO-2025-4155", "https://www.cve.org/CVERecord?id=CVE-2025-61729" ], "PublishedDate": "2025-12-02T19:15:51.447Z", "LastModifiedDate": "2026-10-18T18:10:00.1Z" }, { "VulnerabilityID": "CVE-2026-111943", "VendorIDs": [ "GO-2026-6809" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.26.10, 1.27.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-111943", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:e98ba7f90ad3761730798445ed6c1a1110be4d0e27634493636661d24cba4464", "Title": "crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates", "Description": "On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.", "Severity": "HIGH", "CweIDs": [ "CWE-299" ], "VendorSeverity": { "alma": 3, "amazon": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 6.8 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/10/20/29", "https://access.redhat.com/errata/RHSA-2026:95518", "https://access.redhat.com/security/cve/CVE-2026-111943", "https://bugzilla.redhat.com/2548336", "https://bugzilla.redhat.com/2556068", "https://bugzilla.redhat.com/show_bug.cgi?id=2548336", "https://bugzilla.redhat.com/show_bug.cgi?id=2556068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97031", "https://errata.almalinux.org/9/ALSA-2026-95518.html", "https://errata.rockylinux.org/RLSA-2026:95518", "https://github.com/golang/go/issues/82345", "https://go.dev/cl/851047", "https://go.dev/issue/82345", "https://groups.google.com/g/golang-announce/c/66pojueaQek", "https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU", "https://linux.oracle.com/cve/CVE-2026-111943.html", "https://linux.oracle.com/errata/ELSA-2026-95519.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-111943", "https://pkg.go.dev/vuln/GO-2026-6809", "https://www.cve.org/CVERecord?id=CVE-2026-111943" ], "PublishedDate": "2026-10-21T01:17:20.797Z", "LastModifiedDate": "2026-10-30T13:18:28.74Z" }, { "VulnerabilityID": "CVE-2026-25679", "VendorIDs": [ "GO-2026-4601" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.25.8, 1.26.1", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-25679", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:6b2d7f3b32e53ac43499b5709798df268e1121b752ea010f0b325b0adc6a2acd", "Title": "net/url: Incorrect parsing of IPv6 host literals in net/url", "Description": "url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.", "Severity": "HIGH", "CweIDs": [ "CWE-425", "CWE-1286" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10065", "https://access.redhat.com/errata/RHSA-2026:10125", "https://access.redhat.com/errata/RHSA-2026:10133", "https://access.redhat.com/errata/RHSA-2026:10140", "https://access.redhat.com/errata/RHSA-2026:10141", "https://access.redhat.com/errata/RHSA-2026:10158", "https://access.redhat.com/errata/RHSA-2026:10169", "https://access.redhat.com/errata/RHSA-2026:10175", "https://access.redhat.com/errata/RHSA-2026:10184", "https://access.redhat.com/errata/RHSA-2026:10225", "https://access.redhat.com/errata/RHSA-2026:10250", "https://access.redhat.com/errata/RHSA-2026:10701", "https://access.redhat.com/errata/RHSA-2026:10712", "https://access.redhat.com/errata/RHSA-2026:10929", "https://access.redhat.com/errata/RHSA-2026:11217", "https://access.redhat.com/errata/RHSA-2026:11375", "https://access.redhat.com/errata/RHSA-2026:11412", "https://access.redhat.com/errata/RHSA-2026:11413", "https://access.redhat.com/errata/RHSA-2026:11686", "https://access.redhat.com/errata/RHSA-2026:11688", "https://access.redhat.com/errata/RHSA-2026:11747", "https://access.redhat.com/errata/RHSA-2026:11749", "https://access.redhat.com/errata/RHSA-2026:11768", "https://access.redhat.com/errata/RHSA-2026:11800", "https://access.redhat.com/errata/RHSA-2026:11856", "https://access.redhat.com/errata/RHSA-2026:11916", "https://access.redhat.com/errata/RHSA-2026:11996", "https://access.redhat.com/errata/RHSA-2026:12028", "https://access.redhat.com/errata/RHSA-2026:12029", "https://access.redhat.com/errata/RHSA-2026:12030", "https://access.redhat.com/errata/RHSA-2026:12031", "https://access.redhat.com/errata/RHSA-2026:12032", "https://access.redhat.com/errata/RHSA-2026:12033", "https://access.redhat.com/errata/RHSA-2026:12282", "https://access.redhat.com/errata/RHSA-2026:13508", "https://access.redhat.com/errata/RHSA-2026:13512", "https://access.redhat.com/errata/RHSA-2026:13545", "https://access.redhat.com/errata/RHSA-2026:13642", "https://access.redhat.com/errata/RHSA-2026:13643", "https://access.redhat.com/errata/RHSA-2026:13671", "https://access.redhat.com/errata/RHSA-2026:13791", "https://access.redhat.com/errata/RHSA-2026:13829", "https://access.redhat.com/errata/RHSA-2026:14020", "https://access.redhat.com/errata/RHSA-2026:14100", "https://access.redhat.com/errata/RHSA-2026:14774", "https://access.redhat.com/errata/RHSA-2026:14868", "https://access.redhat.com/errata/RHSA-2026:14879", "https://access.redhat.com/errata/RHSA-2026:15091", "https://access.redhat.com/errata/RHSA-2026:16102", "https://access.redhat.com/errata/RHSA-2026:16696", "https://access.redhat.com/errata/RHSA-2026:16874", "https://access.redhat.com/errata/RHSA-2026:16875", "https://access.redhat.com/errata/RHSA-2026:17040", "https://access.redhat.com/errata/RHSA-2026:17084", "https://access.redhat.com/errata/RHSA-2026:17287", "https://access.redhat.com/errata/RHSA-2026:17598", "https://access.redhat.com/errata/RHSA-2026:19017", "https://access.redhat.com/errata/RHSA-2026:19022", "https://access.redhat.com/errata/RHSA-2026:19026", "https://access.redhat.com/errata/RHSA-2026:19027", "https://access.redhat.com/errata/RHSA-2026:19031", "https://access.redhat.com/errata/RHSA-2026:19032", "https://access.redhat.com/errata/RHSA-2026:19049", "https://access.redhat.com/errata/RHSA-2026:19055", "https://access.redhat.com/errata/RHSA-2026:19126", "https://access.redhat.com/errata/RHSA-2026:19128", "https://access.redhat.com/errata/RHSA-2026:19132", "https://access.redhat.com/errata/RHSA-2026:19133", "https://access.redhat.com/errata/RHSA-2026:19135", "https://access.redhat.com/errata/RHSA-2026:19181", "https://access.redhat.com/errata/RHSA-2026:19184", "https://access.redhat.com/errata/RHSA-2026:19185", "https://access.redhat.com/errata/RHSA-2026:19207", "https://access.redhat.com/errata/RHSA-2026:19350", "https://access.redhat.com/errata/RHSA-2026:19353", "https://access.redhat.com/errata/RHSA-2026:19375", "https://access.redhat.com/errata/RHSA-2026:19475", "https://access.redhat.com/errata/RHSA-2026:19634", "https://access.redhat.com/errata/RHSA-2026:19719", "https://access.redhat.com/errata/RHSA-2026:19720", "https://access.redhat.com/errata/RHSA-2026:19721", "https://access.redhat.com/errata/RHSA-2026:19750", "https://access.redhat.com/errata/RHSA-2026:20041", "https://access.redhat.com/errata/RHSA-2026:20088", "https://access.redhat.com/errata/RHSA-2026:20581", "https://access.redhat.com/errata/RHSA-2026:20582", "https://access.redhat.com/errata/RHSA-2026:20584", "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:21017", "https://access.redhat.com/errata/RHSA-2026:21655", "https://access.redhat.com/errata/RHSA-2026:21657", "https://access.redhat.com/errata/RHSA-2026:21691", "https://access.redhat.com/errata/RHSA-2026:21696", "https://access.redhat.com/errata/RHSA-2026:21769", "https://access.redhat.com/errata/RHSA-2026:22347", "https://access.redhat.com/errata/RHSA-2026:22423", "https://access.redhat.com/errata/RHSA-2026:22450", "https://access.redhat.com/errata/RHSA-2026:22627", "https://access.redhat.com/errata/RHSA-2026:22714", "https://access.redhat.com/errata/RHSA-2026:22733", "https://access.redhat.com/errata/RHSA-2026:22862", "https://access.redhat.com/errata/RHSA-2026:22937", "https://access.redhat.com/errata/RHSA-2026:23228", "https://access.redhat.com/errata/RHSA-2026:23345", "https://access.redhat.com/errata/RHSA-2026:24386", "https://access.redhat.com/errata/RHSA-2026:24853", "https://access.redhat.com/errata/RHSA-2026:25043", "https://access.redhat.com/errata/RHSA-2026:25127", "https://access.redhat.com/errata/RHSA-2026:25180", "https://access.redhat.com/errata/RHSA-2026:25248", "https://access.redhat.com/errata/RHSA-2026:25250", "https://access.redhat.com/errata/RHSA-2026:25251", "https://access.redhat.com/errata/RHSA-2026:25252", "https://access.redhat.com/errata/RHSA-2026:25253", "https://access.redhat.com/errata/RHSA-2026:26445", "https://access.redhat.com/errata/RHSA-2026:26527", "https://access.redhat.com/errata/RHSA-2026:26541", "https://access.redhat.com/errata/RHSA-2026:26568", "https://access.redhat.com/errata/RHSA-2026:26585", "https://access.redhat.com/errata/RHSA-2026:26636", "https://access.redhat.com/errata/RHSA-2026:27076", "https://access.redhat.com/errata/RHSA-2026:28047", "https://access.redhat.com/errata/RHSA-2026:28441", "https://access.redhat.com/errata/RHSA-2026:28886", "https://access.redhat.com/errata/RHSA-2026:28893", "https://access.redhat.com/errata/RHSA-2026:28961", "https://access.redhat.com/errata/RHSA-2026:29035", "https://access.redhat.com/errata/RHSA-2026:29195", "https://access.redhat.com/errata/RHSA-2026:29455", "https://access.redhat.com/errata/RHSA-2026:29702", "https://access.redhat.com/errata/RHSA-2026:29703", "https://access.redhat.com/errata/RHSA-2026:29854", "https://access.redhat.com/errata/RHSA-2026:33722", "https://access.redhat.com/errata/RHSA-2026:34097", "https://access.redhat.com/errata/RHSA-2026:34365", "https://access.redhat.com/errata/RHSA-2026:36317", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:39810", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42150", "https://access.redhat.com/errata/RHSA-2026:42151", "https://access.redhat.com/errata/RHSA-2026:48036", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:5110", "https://access.redhat.com/errata/RHSA-2026:51288", "https://access.redhat.com/errata/RHSA-2026:52389", "https://access.redhat.com/errata/RHSA-2026:52390", "https://access.redhat.com/errata/RHSA-2026:52391", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:5549", "https://access.redhat.com/errata/RHSA-2026:56785", "https://access.redhat.com/errata/RHSA-2026:56852", "https://access.redhat.com/errata/RHSA-2026:56910", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:5941", "https://access.redhat.com/errata/RHSA-2026:5942", "https://access.redhat.com/errata/RHSA-2026:5943", "https://access.redhat.com/errata/RHSA-2026:5944", "https://access.redhat.com/errata/RHSA-2026:59830", "https://access.redhat.com/errata/RHSA-2026:60018", "https://access.redhat.com/errata/RHSA-2026:6341", "https://access.redhat.com/errata/RHSA-2026:6344", "https://access.redhat.com/errata/RHSA-2026:6382", "https://access.redhat.com/errata/RHSA-2026:6383", "https://access.redhat.com/errata/RHSA-2026:6388", "https://access.redhat.com/errata/RHSA-2026:6564", "https://access.redhat.com/errata/RHSA-2026:65838", "https://access.redhat.com/errata/RHSA-2026:66401", "https://access.redhat.com/errata/RHSA-2026:6720", "https://access.redhat.com/errata/RHSA-2026:6802", "https://access.redhat.com/errata/RHSA-2026:6949", "https://access.redhat.com/errata/RHSA-2026:7005", "https://access.redhat.com/errata/RHSA-2026:7009", "https://access.redhat.com/errata/RHSA-2026:7011", "https://access.redhat.com/errata/RHSA-2026:7259", "https://access.redhat.com/errata/RHSA-2026:7291", "https://access.redhat.com/errata/RHSA-2026:7315", "https://access.redhat.com/errata/RHSA-2026:7328", "https://access.redhat.com/errata/RHSA-2026:7385", "https://access.redhat.com/errata/RHSA-2026:7665", "https://access.redhat.com/errata/RHSA-2026:7669", "https://access.redhat.com/errata/RHSA-2026:7674", "https://access.redhat.com/errata/RHSA-2026:7833", "https://access.redhat.com/errata/RHSA-2026:7834", "https://access.redhat.com/errata/RHSA-2026:7876", "https://access.redhat.com/errata/RHSA-2026:7877", "https://access.redhat.com/errata/RHSA-2026:7878", "https://access.redhat.com/errata/RHSA-2026:7879", "https://access.redhat.com/errata/RHSA-2026:7883", "https://access.redhat.com/errata/RHSA-2026:7992", "https://access.redhat.com/errata/RHSA-2026:8151", "https://access.redhat.com/errata/RHSA-2026:8167", "https://access.redhat.com/errata/RHSA-2026:8314", "https://access.redhat.com/errata/RHSA-2026:8322", "https://access.redhat.com/errata/RHSA-2026:8324", "https://access.redhat.com/errata/RHSA-2026:8337", "https://access.redhat.com/errata/RHSA-2026:8338", "https://access.redhat.com/errata/RHSA-2026:8433", "https://access.redhat.com/errata/RHSA-2026:8434", "https://access.redhat.com/errata/RHSA-2026:8456", "https://access.redhat.com/errata/RHSA-2026:8483", "https://access.redhat.com/errata/RHSA-2026:8484", "https://access.redhat.com/errata/RHSA-2026:8490", "https://access.redhat.com/errata/RHSA-2026:8491", "https://access.redhat.com/errata/RHSA-2026:8493", "https://access.redhat.com/errata/RHSA-2026:8840", "https://access.redhat.com/errata/RHSA-2026:8841", "https://access.redhat.com/errata/RHSA-2026:8842", "https://access.redhat.com/errata/RHSA-2026:8845", "https://access.redhat.com/errata/RHSA-2026:8847", "https://access.redhat.com/errata/RHSA-2026:8848", "https://access.redhat.com/errata/RHSA-2026:8849", "https://access.redhat.com/errata/RHSA-2026:8851", "https://access.redhat.com/errata/RHSA-2026:8852", "https://access.redhat.com/errata/RHSA-2026:8853", "https://access.redhat.com/errata/RHSA-2026:8855", "https://access.redhat.com/errata/RHSA-2026:8856", "https://access.redhat.com/errata/RHSA-2026:8860", "https://access.redhat.com/errata/RHSA-2026:8877", "https://access.redhat.com/errata/RHSA-2026:8878", "https://access.redhat.com/errata/RHSA-2026:8879", "https://access.redhat.com/errata/RHSA-2026:8881", "https://access.redhat.com/errata/RHSA-2026:8882", "https://access.redhat.com/errata/RHSA-2026:8930", "https://access.redhat.com/errata/RHSA-2026:8931", "https://access.redhat.com/errata/RHSA-2026:8949", "https://access.redhat.com/errata/RHSA-2026:9043", "https://access.redhat.com/errata/RHSA-2026:9044", "https://access.redhat.com/errata/RHSA-2026:9052", "https://access.redhat.com/errata/RHSA-2026:9090", "https://access.redhat.com/errata/RHSA-2026:9093", "https://access.redhat.com/errata/RHSA-2026:9094", "https://access.redhat.com/errata/RHSA-2026:9097", "https://access.redhat.com/errata/RHSA-2026:9098", "https://access.redhat.com/errata/RHSA-2026:9108", "https://access.redhat.com/errata/RHSA-2026:9109", "https://access.redhat.com/errata/RHSA-2026:9385", "https://access.redhat.com/errata/RHSA-2026:9434", "https://access.redhat.com/errata/RHSA-2026:9435", "https://access.redhat.com/errata/RHSA-2026:9436", "https://access.redhat.com/errata/RHSA-2026:9439", "https://access.redhat.com/errata/RHSA-2026:9440", "https://access.redhat.com/errata/RHSA-2026:9448", "https://access.redhat.com/errata/RHSA-2026:9453", "https://access.redhat.com/errata/RHSA-2026:9461", "https://access.redhat.com/errata/RHSA-2026:9695", "https://access.redhat.com/errata/RHSA-2026:9742", "https://access.redhat.com/errata/RHSA-2026:9872", "https://access.redhat.com/security/cve/CVE-2026-25679", "https://bugzilla.redhat.com/2445356", "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "https://errata.almalinux.org/9/ALSA-2026-9044.html", "https://errata.rockylinux.org/RLSA-2026:9044", "https://go.dev/cl/752180", "https://go.dev/issue/77578", "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk", "https://linux.oracle.com/cve/CVE-2026-25679.html", "https://linux.oracle.com/errata/ELSA-2026-9044.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-25679", "https://pkg.go.dev/vuln/GO-2026-4601", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json", "https://www.cve.org/CVERecord?id=CVE-2026-25679" ], "PublishedDate": "2026-03-06T22:16:00.72Z", "LastModifiedDate": "2026-09-18T13:17:30.067Z" }, { "VulnerabilityID": "CVE-2026-27145", "VendorIDs": [ "GO-2026-5037" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.25.11, 1.26.4", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27145", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:bee6039a1b83a3e1c07d8219c4dc9acd128d4daaee8ee789adf7931eb17b0e1a", "Title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries", "Description": "(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \".\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.", "Severity": "HIGH", "CweIDs": [ "CWE-606" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:29980", "https://access.redhat.com/errata/RHSA-2026:29981", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34357", "https://access.redhat.com/errata/RHSA-2026:34359", "https://access.redhat.com/errata/RHSA-2026:35832", "https://access.redhat.com/errata/RHSA-2026:36317", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:38995", "https://access.redhat.com/errata/RHSA-2026:39005", "https://access.redhat.com/errata/RHSA-2026:39573", "https://access.redhat.com/errata/RHSA-2026:39879", "https://access.redhat.com/errata/RHSA-2026:41030", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41930", "https://access.redhat.com/errata/RHSA-2026:42043", "https://access.redhat.com/errata/RHSA-2026:42047", "https://access.redhat.com/errata/RHSA-2026:42049", "https://access.redhat.com/errata/RHSA-2026:42050", "https://access.redhat.com/errata/RHSA-2026:42051", "https://access.redhat.com/errata/RHSA-2026:42079", "https://access.redhat.com/errata/RHSA-2026:42080", "https://access.redhat.com/errata/RHSA-2026:42082", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42150", "https://access.redhat.com/errata/RHSA-2026:42151", "https://access.redhat.com/errata/RHSA-2026:42240", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42946", "https://access.redhat.com/errata/RHSA-2026:44622", "https://access.redhat.com/errata/RHSA-2026:46394", "https://access.redhat.com/errata/RHSA-2026:46395", "https://access.redhat.com/errata/RHSA-2026:47149", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47737", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49703", "https://access.redhat.com/errata/RHSA-2026:49705", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:49729", "https://access.redhat.com/errata/RHSA-2026:49744", "https://access.redhat.com/errata/RHSA-2026:49765", "https://access.redhat.com/errata/RHSA-2026:49770", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:50319", "https://access.redhat.com/errata/RHSA-2026:51057", "https://access.redhat.com/errata/RHSA-2026:51187", "https://access.redhat.com/errata/RHSA-2026:52946", "https://access.redhat.com/errata/RHSA-2026:53374", "https://access.redhat.com/errata/RHSA-2026:53412", "https://access.redhat.com/errata/RHSA-2026:53413", "https://access.redhat.com/errata/RHSA-2026:53415", "https://access.redhat.com/errata/RHSA-2026:53416", "https://access.redhat.com/errata/RHSA-2026:53530", "https://access.redhat.com/errata/RHSA-2026:54168", "https://access.redhat.com/errata/RHSA-2026:54401", "https://access.redhat.com/errata/RHSA-2026:54427", "https://access.redhat.com/errata/RHSA-2026:54432", "https://access.redhat.com/errata/RHSA-2026:54435", "https://access.redhat.com/errata/RHSA-2026:54441", "https://access.redhat.com/errata/RHSA-2026:54500", "https://access.redhat.com/errata/RHSA-2026:54525", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:54603", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:55899", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:57488", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:59556", "https://access.redhat.com/errata/RHSA-2026:59557", "https://access.redhat.com/errata/RHSA-2026:59558", "https://access.redhat.com/errata/RHSA-2026:59559", "https://access.redhat.com/errata/RHSA-2026:59579", "https://access.redhat.com/errata/RHSA-2026:59593", "https://access.redhat.com/errata/RHSA-2026:60025", "https://access.redhat.com/errata/RHSA-2026:60315", "https://access.redhat.com/errata/RHSA-2026:60354", "https://access.redhat.com/errata/RHSA-2026:60386", "https://access.redhat.com/errata/RHSA-2026:60387", "https://access.redhat.com/errata/RHSA-2026:60388", "https://access.redhat.com/errata/RHSA-2026:60390", "https://access.redhat.com/errata/RHSA-2026:60391", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:61314", "https://access.redhat.com/errata/RHSA-2026:63016", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:68334", "https://access.redhat.com/errata/RHSA-2026:68335", "https://access.redhat.com/security/cve/CVE-2026-27145", "https://bugzilla.redhat.com/2445356", "https://bugzilla.redhat.com/2484207", "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "https://bugzilla.redhat.com/show_bug.cgi?id=2484207", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27145", "https://errata.almalinux.org/9/ALSA-2026-36317.html", "https://errata.rockylinux.org/RLSA-2026:36317", "https://go.dev/cl/783621", "https://go.dev/issue/79694", "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw", "https://linux.oracle.com/cve/CVE-2026-27145.html", "https://linux.oracle.com/errata/ELSA-2026-53416.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-27145", "https://pkg.go.dev/vuln/GO-2026-5037", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json", "https://www.cve.org/CVERecord?id=CVE-2026-27145" ], "PublishedDate": "2026-06-02T23:16:35.57Z", "LastModifiedDate": "2026-09-18T13:17:43.283Z" }, { "VulnerabilityID": "CVE-2026-32280", "VendorIDs": [ "GO-2026-4947" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.25.9, 1.26.2", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-32280", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:bb8443b66117982f845daa40826826f6160090e4e99a1034d41b23a83b470521", "Title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building", "Description": "During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10217", "https://access.redhat.com/errata/RHSA-2026:10219", "https://access.redhat.com/errata/RHSA-2026:10704", "https://access.redhat.com/errata/RHSA-2026:11507", "https://access.redhat.com/errata/RHSA-2026:11514", "https://access.redhat.com/errata/RHSA-2026:11688", "https://access.redhat.com/errata/RHSA-2026:13545", "https://access.redhat.com/errata/RHSA-2026:13791", "https://access.redhat.com/errata/RHSA-2026:13826", "https://access.redhat.com/errata/RHSA-2026:13829", "https://access.redhat.com/errata/RHSA-2026:14020", "https://access.redhat.com/errata/RHSA-2026:14162", "https://access.redhat.com/errata/RHSA-2026:14200", "https://access.redhat.com/errata/RHSA-2026:14391", "https://access.redhat.com/errata/RHSA-2026:15980", "https://access.redhat.com/errata/RHSA-2026:16021", "https://access.redhat.com/errata/RHSA-2026:16024", "https://access.redhat.com/errata/RHSA-2026:16101", "https://access.redhat.com/errata/RHSA-2026:16476", "https://access.redhat.com/errata/RHSA-2026:16477", "https://access.redhat.com/errata/RHSA-2026:16505", "https://access.redhat.com/errata/RHSA-2026:16508", "https://access.redhat.com/errata/RHSA-2026:16532", "https://access.redhat.com/errata/RHSA-2026:16534", "https://access.redhat.com/errata/RHSA-2026:16535", "https://access.redhat.com/errata/RHSA-2026:16537", "https://access.redhat.com/errata/RHSA-2026:16542", "https://access.redhat.com/errata/RHSA-2026:16874", "https://access.redhat.com/errata/RHSA-2026:16875", "https://access.redhat.com/errata/RHSA-2026:17084", "https://access.redhat.com/errata/RHSA-2026:17287", "https://access.redhat.com/errata/RHSA-2026:18027", "https://access.redhat.com/errata/RHSA-2026:18032", "https://access.redhat.com/errata/RHSA-2026:19133", "https://access.redhat.com/errata/RHSA-2026:19135", "https://access.redhat.com/errata/RHSA-2026:19144", "https://access.redhat.com/errata/RHSA-2026:19350", "https://access.redhat.com/errata/RHSA-2026:19353", "https://access.redhat.com/errata/RHSA-2026:19375", "https://access.redhat.com/errata/RHSA-2026:19450", "https://access.redhat.com/errata/RHSA-2026:19550", "https://access.redhat.com/errata/RHSA-2026:19634", "https://access.redhat.com/errata/RHSA-2026:19714", "https://access.redhat.com/errata/RHSA-2026:19715", "https://access.redhat.com/errata/RHSA-2026:19719", "https://access.redhat.com/errata/RHSA-2026:19720", "https://access.redhat.com/errata/RHSA-2026:19721", "https://access.redhat.com/errata/RHSA-2026:19722", "https://access.redhat.com/errata/RHSA-2026:19750", "https://access.redhat.com/errata/RHSA-2026:19839", "https://access.redhat.com/errata/RHSA-2026:20556", "https://access.redhat.com/errata/RHSA-2026:20569", "https://access.redhat.com/errata/RHSA-2026:20570", "https://access.redhat.com/errata/RHSA-2026:20571", "https://access.redhat.com/errata/RHSA-2026:20607", "https://access.redhat.com/errata/RHSA-2026:20608", "https://access.redhat.com/errata/RHSA-2026:20609", "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:21017", "https://access.redhat.com/errata/RHSA-2026:21338", "https://access.redhat.com/errata/RHSA-2026:21655", "https://access.redhat.com/errata/RHSA-2026:21769", "https://access.redhat.com/errata/RHSA-2026:21772", "https://access.redhat.com/errata/RHSA-2026:22130", "https://access.redhat.com/errata/RHSA-2026:22141", "https://access.redhat.com/errata/RHSA-2026:22258", "https://access.redhat.com/errata/RHSA-2026:22260", "https://access.redhat.com/errata/RHSA-2026:22268", "https://access.redhat.com/errata/RHSA-2026:22309", "https://access.redhat.com/errata/RHSA-2026:22347", "https://access.redhat.com/errata/RHSA-2026:22415", "https://access.redhat.com/errata/RHSA-2026:22422", "https://access.redhat.com/errata/RHSA-2026:22465", "https://access.redhat.com/errata/RHSA-2026:22485", "https://access.redhat.com/errata/RHSA-2026:22709", "https://access.redhat.com/errata/RHSA-2026:22713", "https://access.redhat.com/errata/RHSA-2026:22840", "https://access.redhat.com/errata/RHSA-2026:22862", "https://access.redhat.com/errata/RHSA-2026:22958", "https://access.redhat.com/errata/RHSA-2026:22959", "https://access.redhat.com/errata/RHSA-2026:22960", "https://access.redhat.com/errata/RHSA-2026:22961", "https://access.redhat.com/errata/RHSA-2026:22962", "https://access.redhat.com/errata/RHSA-2026:23102", "https://access.redhat.com/errata/RHSA-2026:23103", "https://access.redhat.com/errata/RHSA-2026:23244", "https://access.redhat.com/errata/RHSA-2026:23345", "https://access.redhat.com/errata/RHSA-2026:23361", "https://access.redhat.com/errata/RHSA-2026:24337", "https://access.redhat.com/errata/RHSA-2026:24359", "https://access.redhat.com/errata/RHSA-2026:24470", "https://access.redhat.com/errata/RHSA-2026:24478", "https://access.redhat.com/errata/RHSA-2026:24716", "https://access.redhat.com/errata/RHSA-2026:24761", "https://access.redhat.com/errata/RHSA-2026:24762", "https://access.redhat.com/errata/RHSA-2026:24853", "https://access.redhat.com/errata/RHSA-2026:24977", "https://access.redhat.com/errata/RHSA-2026:25089", "https://access.redhat.com/errata/RHSA-2026:25127", "https://access.redhat.com/errata/RHSA-2026:25180", "https://access.redhat.com/errata/RHSA-2026:25248", "https://access.redhat.com/errata/RHSA-2026:25250", "https://access.redhat.com/errata/RHSA-2026:25251", "https://access.redhat.com/errata/RHSA-2026:25252", "https://access.redhat.com/errata/RHSA-2026:25253", "https://access.redhat.com/errata/RHSA-2026:26447", "https://access.redhat.com/errata/RHSA-2026:26568", "https://access.redhat.com/errata/RHSA-2026:26571", "https://access.redhat.com/errata/RHSA-2026:26585", "https://access.redhat.com/errata/RHSA-2026:26636", "https://access.redhat.com/errata/RHSA-2026:27076", "https://access.redhat.com/errata/RHSA-2026:28038", "https://access.redhat.com/errata/RHSA-2026:28047", "https://access.redhat.com/errata/RHSA-2026:28074", "https://access.redhat.com/errata/RHSA-2026:28196", "https://access.redhat.com/errata/RHSA-2026:28198", "https://access.redhat.com/errata/RHSA-2026:28441", "https://access.redhat.com/errata/RHSA-2026:28886", "https://access.redhat.com/errata/RHSA-2026:28961", "https://access.redhat.com/errata/RHSA-2026:29035", "https://access.redhat.com/errata/RHSA-2026:29195", "https://access.redhat.com/errata/RHSA-2026:29455", "https://access.redhat.com/errata/RHSA-2026:29702", "https://access.redhat.com/errata/RHSA-2026:29703", "https://access.redhat.com/errata/RHSA-2026:29854", "https://access.redhat.com/errata/RHSA-2026:33722", "https://access.redhat.com/errata/RHSA-2026:34097", "https://access.redhat.com/errata/RHSA-2026:34192", "https://access.redhat.com/errata/RHSA-2026:34196", "https://access.redhat.com/errata/RHSA-2026:34197", "https://access.redhat.com/errata/RHSA-2026:34365", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:39810", "https://access.redhat.com/errata/RHSA-2026:39894", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42043", "https://access.redhat.com/errata/RHSA-2026:42047", "https://access.redhat.com/errata/RHSA-2026:42049", "https://access.redhat.com/errata/RHSA-2026:42050", "https://access.redhat.com/errata/RHSA-2026:42051", "https://access.redhat.com/errata/RHSA-2026:47712", "https://access.redhat.com/errata/RHSA-2026:47714", "https://access.redhat.com/errata/RHSA-2026:47716", "https://access.redhat.com/errata/RHSA-2026:47719", "https://access.redhat.com/errata/RHSA-2026:47721", "https://access.redhat.com/errata/RHSA-2026:47722", "https://access.redhat.com/errata/RHSA-2026:47910", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:48036", "https://access.redhat.com/errata/RHSA-2026:48790", "https://access.redhat.com/errata/RHSA-2026:49509", "https://access.redhat.com/errata/RHSA-2026:49526", "https://access.redhat.com/errata/RHSA-2026:49600", "https://access.redhat.com/errata/RHSA-2026:49838", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51288", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54603", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:56785", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:56852", "https://access.redhat.com/errata/RHSA-2026:56855", "https://access.redhat.com/errata/RHSA-2026:56910", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:56913", "https://access.redhat.com/errata/RHSA-2026:57409", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:57488", "https://access.redhat.com/errata/RHSA-2026:59830", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:59834", "https://access.redhat.com/errata/RHSA-2026:60018", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61685", "https://access.redhat.com/errata/RHSA-2026:61906", "https://access.redhat.com/errata/RHSA-2026:61907", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65838", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:66401", "https://access.redhat.com/errata/RHSA-2026:67319", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/errata/RHSA-2026:9385", "https://access.redhat.com/security/cve/CVE-2026-32280", "https://bugzilla.redhat.com/2456333", "https://bugzilla.redhat.com/2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-49838.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/758320", "https://go.dev/issue/78282", "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "https://linux.oracle.com/cve/CVE-2026-32280.html", "https://linux.oracle.com/errata/ELSA-2026-65886-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-32280", "https://pkg.go.dev/vuln/GO-2026-4947", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32280.json", "https://www.cve.org/CVERecord?id=CVE-2026-32280" ], "PublishedDate": "2026-04-08T02:16:03.247Z", "LastModifiedDate": "2026-09-18T13:17:45.92Z" }, { "VulnerabilityID": "CVE-2026-32281", "VendorIDs": [ "GO-2026-4946" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.25.9, 1.26.2", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-32281", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:0027313c397d170b337f5c378a6ff89e8f26e78df8132db8bd1ca2ff141115ba", "Title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation", "Description": "Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.", "Severity": "HIGH", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:49838", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/security/cve/CVE-2026-32281", "https://bugzilla.redhat.com/2456333", "https://bugzilla.redhat.com/2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-49838.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/758061", "https://go.dev/issue/78281", "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "https://linux.oracle.com/cve/CVE-2026-32281.html", "https://linux.oracle.com/errata/ELSA-2026-67148-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-32281", "https://pkg.go.dev/vuln/GO-2026-4946", "https://www.cve.org/CVERecord?id=CVE-2026-32281" ], "PublishedDate": "2026-04-08T02:16:03.35Z", "LastModifiedDate": "2026-07-25T10:10:00.167Z" }, { "VulnerabilityID": "CVE-2026-32283", "VendorIDs": [ "GO-2026-4870" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.25.9, 1.26.2", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-32283", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:fcd6125feff4283d51508ea64a8b4605b1dafcf54912b3a5efcc0e6be61fb31a", "Title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages", "Description": "If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.", "Severity": "HIGH", "CweIDs": [ "CWE-770", "CWE-764" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10217", "https://access.redhat.com/errata/RHSA-2026:10219", "https://access.redhat.com/errata/RHSA-2026:10704", "https://access.redhat.com/errata/RHSA-2026:11507", "https://access.redhat.com/errata/RHSA-2026:11514", "https://access.redhat.com/errata/RHSA-2026:11704", "https://access.redhat.com/errata/RHSA-2026:11711", "https://access.redhat.com/errata/RHSA-2026:11712", "https://access.redhat.com/errata/RHSA-2026:11863", "https://access.redhat.com/errata/RHSA-2026:11881", "https://access.redhat.com/errata/RHSA-2026:14162", "https://access.redhat.com/errata/RHSA-2026:14200", "https://access.redhat.com/errata/RHSA-2026:14391", "https://access.redhat.com/errata/RHSA-2026:15980", "https://access.redhat.com/errata/RHSA-2026:16021", "https://access.redhat.com/errata/RHSA-2026:16024", "https://access.redhat.com/errata/RHSA-2026:16101", "https://access.redhat.com/errata/RHSA-2026:16102", "https://access.redhat.com/errata/RHSA-2026:16875", "https://access.redhat.com/errata/RHSA-2026:17075", "https://access.redhat.com/errata/RHSA-2026:17084", "https://access.redhat.com/errata/RHSA-2026:17287", "https://access.redhat.com/errata/RHSA-2026:18027", "https://access.redhat.com/errata/RHSA-2026:18032", "https://access.redhat.com/errata/RHSA-2026:19126", "https://access.redhat.com/errata/RHSA-2026:19132", "https://access.redhat.com/errata/RHSA-2026:19133", "https://access.redhat.com/errata/RHSA-2026:19134", "https://access.redhat.com/errata/RHSA-2026:19135", "https://access.redhat.com/errata/RHSA-2026:19136", "https://access.redhat.com/errata/RHSA-2026:19137", "https://access.redhat.com/errata/RHSA-2026:19139", "https://access.redhat.com/errata/RHSA-2026:19144", "https://access.redhat.com/errata/RHSA-2026:19156", "https://access.redhat.com/errata/RHSA-2026:19350", "https://access.redhat.com/errata/RHSA-2026:19351", "https://access.redhat.com/errata/RHSA-2026:19352", "https://access.redhat.com/errata/RHSA-2026:19353", "https://access.redhat.com/errata/RHSA-2026:19369", "https://access.redhat.com/errata/RHSA-2026:19450", "https://access.redhat.com/errata/RHSA-2026:19550", "https://access.redhat.com/errata/RHSA-2026:19634", "https://access.redhat.com/errata/RHSA-2026:19714", "https://access.redhat.com/errata/RHSA-2026:19715", "https://access.redhat.com/errata/RHSA-2026:19719", "https://access.redhat.com/errata/RHSA-2026:19720", "https://access.redhat.com/errata/RHSA-2026:19721", "https://access.redhat.com/errata/RHSA-2026:19722", "https://access.redhat.com/errata/RHSA-2026:19750", "https://access.redhat.com/errata/RHSA-2026:19839", "https://access.redhat.com/errata/RHSA-2026:20556", "https://access.redhat.com/errata/RHSA-2026:20569", "https://access.redhat.com/errata/RHSA-2026:20570", "https://access.redhat.com/errata/RHSA-2026:20571", "https://access.redhat.com/errata/RHSA-2026:20607", "https://access.redhat.com/errata/RHSA-2026:20608", "https://access.redhat.com/errata/RHSA-2026:20609", "https://access.redhat.com/errata/RHSA-2026:21769", "https://access.redhat.com/errata/RHSA-2026:22347", "https://access.redhat.com/errata/RHSA-2026:22423", "https://access.redhat.com/errata/RHSA-2026:22450", "https://access.redhat.com/errata/RHSA-2026:22485", "https://access.redhat.com/errata/RHSA-2026:22709", "https://access.redhat.com/errata/RHSA-2026:22713", "https://access.redhat.com/errata/RHSA-2026:22714", "https://access.redhat.com/errata/RHSA-2026:22937", "https://access.redhat.com/errata/RHSA-2026:23102", "https://access.redhat.com/errata/RHSA-2026:23103", "https://access.redhat.com/errata/RHSA-2026:23228", "https://access.redhat.com/errata/RHSA-2026:23345", "https://access.redhat.com/errata/RHSA-2026:24337", "https://access.redhat.com/errata/RHSA-2026:24470", "https://access.redhat.com/errata/RHSA-2026:24761", "https://access.redhat.com/errata/RHSA-2026:24762", "https://access.redhat.com/errata/RHSA-2026:25248", "https://access.redhat.com/errata/RHSA-2026:25250", "https://access.redhat.com/errata/RHSA-2026:25251", "https://access.redhat.com/errata/RHSA-2026:25252", "https://access.redhat.com/errata/RHSA-2026:26447", "https://access.redhat.com/errata/RHSA-2026:26571", "https://access.redhat.com/errata/RHSA-2026:26636", "https://access.redhat.com/errata/RHSA-2026:27076", "https://access.redhat.com/errata/RHSA-2026:28038", "https://access.redhat.com/errata/RHSA-2026:28047", "https://access.redhat.com/errata/RHSA-2026:28074", "https://access.redhat.com/errata/RHSA-2026:29035", "https://access.redhat.com/errata/RHSA-2026:29195", "https://access.redhat.com/errata/RHSA-2026:29455", "https://access.redhat.com/errata/RHSA-2026:29703", "https://access.redhat.com/errata/RHSA-2026:33722", "https://access.redhat.com/errata/RHSA-2026:34192", "https://access.redhat.com/errata/RHSA-2026:34196", "https://access.redhat.com/errata/RHSA-2026:34197", "https://access.redhat.com/errata/RHSA-2026:34365", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:39810", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:47712", "https://access.redhat.com/errata/RHSA-2026:47714", "https://access.redhat.com/errata/RHSA-2026:47716", "https://access.redhat.com/errata/RHSA-2026:47719", "https://access.redhat.com/errata/RHSA-2026:47721", "https://access.redhat.com/errata/RHSA-2026:47722", "https://access.redhat.com/errata/RHSA-2026:47910", "https://access.redhat.com/errata/RHSA-2026:48036", "https://access.redhat.com/errata/RHSA-2026:48790", "https://access.redhat.com/errata/RHSA-2026:49509", "https://access.redhat.com/errata/RHSA-2026:49600", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:51288", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54435", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:55898", "https://access.redhat.com/errata/RHSA-2026:55900", "https://access.redhat.com/errata/RHSA-2026:55901", "https://access.redhat.com/errata/RHSA-2026:55902", "https://access.redhat.com/errata/RHSA-2026:55903", "https://access.redhat.com/errata/RHSA-2026:56910", "https://access.redhat.com/errata/RHSA-2026:57409", "https://access.redhat.com/errata/RHSA-2026:57801", "https://access.redhat.com/errata/RHSA-2026:57802", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:65343", "https://access.redhat.com/errata/RHSA-2026:65514", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66084", "https://access.redhat.com/errata/RHSA-2026:66401", "https://access.redhat.com/errata/RHSA-2026:66523", "https://access.redhat.com/errata/RHSA-2026:67319", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/errata/RHSA-2026:7291", "https://access.redhat.com/errata/RHSA-2026:7385", "https://access.redhat.com/security/cve/CVE-2026-32283", "https://bugzilla.redhat.com/2445356", "https://bugzilla.redhat.com/2456333", "https://bugzilla.redhat.com/2456338", "https://bugzilla.redhat.com/2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456338", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32283", "https://errata.almalinux.org/9/ALSA-2026-29703.html", "https://errata.rockylinux.org/RLSA-2026:29703", "https://go.dev/cl/763767", "https://go.dev/issue/78334", "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "https://linux.oracle.com/cve/CVE-2026-32283.html", "https://linux.oracle.com/errata/ELSA-2026-48790.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-32283", "https://pkg.go.dev/vuln/GO-2026-4870", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32283.json", "https://www.cve.org/CVERecord?id=CVE-2026-32283" ], "PublishedDate": "2026-04-08T02:16:03.58Z", "LastModifiedDate": "2026-09-18T13:17:48.437Z" }, { "VulnerabilityID": "CVE-2026-33811", "VendorIDs": [ "GO-2026-4981" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.25.10, 1.26.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33811", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:8e0d0e25d82d21f1ef63a2fe584f55c78dd50783299c2c45068b2196f1464c51", "Title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME", "Description": "When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.", "Severity": "HIGH", "CweIDs": [ "CWE-415", "CWE-1341" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22112", "https://access.redhat.com/errata/RHSA-2026:22120", "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:33120", "https://access.redhat.com/errata/RHSA-2026:33123", "https://access.redhat.com/errata/RHSA-2026:33142", "https://access.redhat.com/errata/RHSA-2026:33150", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34357", "https://access.redhat.com/errata/RHSA-2026:34359", "https://access.redhat.com/errata/RHSA-2026:34364", "https://access.redhat.com/errata/RHSA-2026:35832", "https://access.redhat.com/errata/RHSA-2026:35993", "https://access.redhat.com/errata/RHSA-2026:35994", "https://access.redhat.com/errata/RHSA-2026:35995", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36617", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36776", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:38504", "https://access.redhat.com/errata/RHSA-2026:39266", "https://access.redhat.com/errata/RHSA-2026:39272", "https://access.redhat.com/errata/RHSA-2026:39319", "https://access.redhat.com/errata/RHSA-2026:39573", "https://access.redhat.com/errata/RHSA-2026:39810", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40119", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41030", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42043", "https://access.redhat.com/errata/RHSA-2026:42047", "https://access.redhat.com/errata/RHSA-2026:42048", "https://access.redhat.com/errata/RHSA-2026:42049", "https://access.redhat.com/errata/RHSA-2026:42050", "https://access.redhat.com/errata/RHSA-2026:42051", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42079", "https://access.redhat.com/errata/RHSA-2026:42082", "https://access.redhat.com/errata/RHSA-2026:42132", "https://access.redhat.com/errata/RHSA-2026:42150", "https://access.redhat.com/errata/RHSA-2026:42151", "https://access.redhat.com/errata/RHSA-2026:42240", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42852", "https://access.redhat.com/errata/RHSA-2026:42946", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:44622", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:47149", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49703", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50319", "https://access.redhat.com/errata/RHSA-2026:50336", "https://access.redhat.com/errata/RHSA-2026:50843", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51057", "https://access.redhat.com/errata/RHSA-2026:51187", "https://access.redhat.com/errata/RHSA-2026:51194", "https://access.redhat.com/errata/RHSA-2026:51341", "https://access.redhat.com/errata/RHSA-2026:53412", "https://access.redhat.com/errata/RHSA-2026:53413", "https://access.redhat.com/errata/RHSA-2026:53415", "https://access.redhat.com/errata/RHSA-2026:53530", "https://access.redhat.com/errata/RHSA-2026:54168", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:54435", "https://access.redhat.com/errata/RHSA-2026:54441", "https://access.redhat.com/errata/RHSA-2026:54500", "https://access.redhat.com/errata/RHSA-2026:54552", "https://access.redhat.com/errata/RHSA-2026:54556", "https://access.redhat.com/errata/RHSA-2026:54584", "https://access.redhat.com/errata/RHSA-2026:54602", "https://access.redhat.com/errata/RHSA-2026:54603", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:56340", "https://access.redhat.com/errata/RHSA-2026:56785", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:56790", "https://access.redhat.com/errata/RHSA-2026:56852", "https://access.redhat.com/errata/RHSA-2026:56855", "https://access.redhat.com/errata/RHSA-2026:56910", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:56913", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:57488", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59559", "https://access.redhat.com/errata/RHSA-2026:60018", "https://access.redhat.com/errata/RHSA-2026:60025", "https://access.redhat.com/errata/RHSA-2026:60302", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:61313", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:67149", "https://access.redhat.com/errata/RHSA-2026:67287", "https://access.redhat.com/errata/RHSA-2026:67319", "https://access.redhat.com/security/cve/CVE-2026-33811", "https://bugzilla.redhat.com/2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-39319.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/767860", "https://go.dev/issue/78803", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-33811.html", "https://linux.oracle.com/errata/ELSA-2026-65886-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-33811", "https://pkg.go.dev/vuln/GO-2026-4981", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json", "https://www.cve.org/CVERecord?id=CVE-2026-33811" ], "PublishedDate": "2026-05-07T20:16:42.77Z", "LastModifiedDate": "2026-10-26T00:10:00.15Z" }, { "VulnerabilityID": "CVE-2026-33814", "VendorIDs": [ "GO-2026-4918" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.25.10, 1.26.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33814", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:c85c79942e95a3c264377868a416ceffa673ddd1b513b5214867595da532d440", "Title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame", "Description": "When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.", "Severity": "HIGH", "CweIDs": [ "CWE-835", "CWE-606" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22112", "https://access.redhat.com/errata/RHSA-2026:22120", "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:33120", "https://access.redhat.com/errata/RHSA-2026:33123", "https://access.redhat.com/errata/RHSA-2026:33142", "https://access.redhat.com/errata/RHSA-2026:33150", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:56854", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57365", "https://access.redhat.com/errata/RHSA-2026:57367", "https://access.redhat.com/errata/RHSA-2026:57408", "https://access.redhat.com/errata/RHSA-2026:57545", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:57845", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60023", "https://access.redhat.com/errata/RHSA-2026:60025", "https://access.redhat.com/errata/RHSA-2026:60441", "https://access.redhat.com/errata/RHSA-2026:60442", "https://access.redhat.com/errata/RHSA-2026:60446", "https://access.redhat.com/errata/RHSA-2026:60447", "https://access.redhat.com/errata/RHSA-2026:60454", "https://access.redhat.com/errata/RHSA-2026:60477", "https://access.redhat.com/errata/RHSA-2026:60478", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:60668", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:62410", "https://access.redhat.com/errata/RHSA-2026:62550", "https://access.redhat.com/errata/RHSA-2026:62551", "https://access.redhat.com/errata/RHSA-2026:63046", "https://access.redhat.com/errata/RHSA-2026:63047", "https://access.redhat.com/errata/RHSA-2026:63048", "https://access.redhat.com/errata/RHSA-2026:63050", "https://access.redhat.com/errata/RHSA-2026:63091", "https://access.redhat.com/errata/RHSA-2026:63096", "https://access.redhat.com/errata/RHSA-2026:63097", "https://access.redhat.com/errata/RHSA-2026:63103", "https://access.redhat.com/errata/RHSA-2026:63104", "https://access.redhat.com/errata/RHSA-2026:63636", "https://access.redhat.com/errata/RHSA-2026:63637", "https://access.redhat.com/errata/RHSA-2026:63639", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:66350", "https://access.redhat.com/security/cve/CVE-2026-33814", "https://bugzilla.redhat.com/2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467810", "https://bugzilla.redhat.com/show_bug.cgi?id=2467811", "https://bugzilla.redhat.com/show_bug.cgi?id=2467813", "https://bugzilla.redhat.com/show_bug.cgi?id=2467815", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2467823", "https://bugzilla.redhat.com/show_bug.cgi?id=2467825", "https://bugzilla.redhat.com/show_bug.cgi?id=2467826", "https://bugzilla.redhat.com/show_bug.cgi?id=2467827", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33814", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39817", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39819", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39823", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39825", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39826", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39836", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42501", "https://errata.almalinux.org/9/ALSA-2026-22121.html", "https://errata.rockylinux.org/RLSA-2026:22121", "https://github.com/golang/go/issues/78476", "https://go-review.googlesource.com/c/go/+/761581", "https://go-review.googlesource.com/c/net/+/761640", "https://go.dev/cl/761581", "https://go.dev/cl/761640", "https://go.dev/issue/78476", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-33814.html", "https://linux.oracle.com/errata/ELSA-2026-22121.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-33814", "https://pkg.go.dev/vuln/GO-2026-4918", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33814.json", "https://ubuntu.com/security/notices/USN-8430-1", "https://ubuntu.com/security/notices/USN-8471-1", "https://ubuntu.com/security/notices/USN-8472-1", "https://ubuntu.com/security/notices/USN-8473-1", "https://www.cve.org/CVERecord?id=CVE-2026-33814" ], "PublishedDate": "2026-05-07T20:16:42.88Z", "LastModifiedDate": "2026-10-26T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2026-33818", "VendorIDs": [ "GO-2026-5972" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33818", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:9e7791b142ee2be8a6eba934b4dec1f58ef896f7d0e3b1772129f85a494e4efc", "Title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal", "Description": "Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.", "Severity": "HIGH", "CweIDs": [ "CWE-400" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70641", "https://access.redhat.com/security/cve/CVE-2026-33818", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11395", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-70641.html", "https://errata.rockylinux.org/RLSA-2026:70641", "https://github.com/golang/go/issues/80405", "https://go.dev/cl/814980", "https://go.dev/issue/80405", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-33818.html", "https://linux.oracle.com/errata/ELSA-2026-70641.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-33818", "https://pkg.go.dev/vuln/GO-2026-5972", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-33818" ], "PublishedDate": "2026-08-13T22:17:19.84Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-39820", "VendorIDs": [ "GO-2026-4986" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.25.10, 1.26.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39820", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:ad1f3a5943083effc5babf2d8a1494df2b042e41d4093d6dad4234f39960dace", "Title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs", "Description": "Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.", "Severity": "HIGH", "CweIDs": [ "CWE-770", "CWE-606" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22112", "https://access.redhat.com/errata/RHSA-2026:22120", "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:33120", "https://access.redhat.com/errata/RHSA-2026:33123", "https://access.redhat.com/errata/RHSA-2026:33142", "https://access.redhat.com/errata/RHSA-2026:33150", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34364", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50319", "https://access.redhat.com/errata/RHSA-2026:50336", "https://access.redhat.com/errata/RHSA-2026:50843", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51112", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:54552", "https://access.redhat.com/errata/RHSA-2026:54555", "https://access.redhat.com/errata/RHSA-2026:54583", "https://access.redhat.com/errata/RHSA-2026:54602", "https://access.redhat.com/errata/RHSA-2026:54883", "https://access.redhat.com/errata/RHSA-2026:56340", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:56852", "https://access.redhat.com/errata/RHSA-2026:56854", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57401", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:57487", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:57845", "https://access.redhat.com/errata/RHSA-2026:57914", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59830", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60018", "https://access.redhat.com/errata/RHSA-2026:60023", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:62260", "https://access.redhat.com/errata/RHSA-2026:62406", "https://access.redhat.com/errata/RHSA-2026:62407", "https://access.redhat.com/errata/RHSA-2026:62753", "https://access.redhat.com/errata/RHSA-2026:62754", "https://access.redhat.com/errata/RHSA-2026:62803", "https://access.redhat.com/errata/RHSA-2026:63022", "https://access.redhat.com/errata/RHSA-2026:65116", "https://access.redhat.com/errata/RHSA-2026:65117", "https://access.redhat.com/errata/RHSA-2026:65153", "https://access.redhat.com/errata/RHSA-2026:65335", "https://access.redhat.com/errata/RHSA-2026:65336", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65838", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:65895", "https://access.redhat.com/errata/RHSA-2026:66016", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66327", "https://access.redhat.com/errata/RHSA-2026:67517", "https://access.redhat.com/errata/RHSA-2026:67974", "https://access.redhat.com/errata/RHSA-2026:67975", "https://access.redhat.com/errata/RHSA-2026:68334", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/errata/RHSA-2026:68527", "https://access.redhat.com/security/cve/CVE-2026-39820", "https://bugzilla.redhat.com/2467809", "https://bugzilla.redhat.com/2467820", "https://bugzilla.redhat.com/2480756", "https://bugzilla.redhat.com/2484204", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-65153.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/759940", "https://go.dev/issue/78566", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-39820.html", "https://linux.oracle.com/errata/ELSA-2026-65895-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39820", "https://pkg.go.dev/vuln/GO-2026-4986", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39820.json", "https://www.cve.org/CVERecord?id=CVE-2026-39820" ], "PublishedDate": "2026-05-07T20:16:43.187Z", "LastModifiedDate": "2026-10-26T00:10:00.15Z" }, { "VulnerabilityID": "CVE-2026-39821", "VendorIDs": [ "GO-2026-5026" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39821", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:d03ea32672beb86070ba8675e3a7349bd6bb7098a0b88a447cf114e5485d422e", "Title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing", "Description": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\".", "Severity": "HIGH", "CweIDs": [ "CWE-1289" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 4, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:30853", "https://access.redhat.com/errata/RHSA-2026:30854", "https://access.redhat.com/errata/RHSA-2026:30855", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33524", "https://access.redhat.com/errata/RHSA-2026:33531", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:34357", "https://access.redhat.com/errata/RHSA-2026:34359", "https://access.redhat.com/errata/RHSA-2026:34364", "https://access.redhat.com/errata/RHSA-2026:34789", "https://access.redhat.com/errata/RHSA-2026:35826", "https://access.redhat.com/errata/RHSA-2026:35827", "https://access.redhat.com/errata/RHSA-2026:35828", "https://access.redhat.com/errata/RHSA-2026:35829", "https://access.redhat.com/errata/RHSA-2026:35830", "https://access.redhat.com/errata/RHSA-2026:35831", "https://access.redhat.com/errata/RHSA-2026:35993", "https://access.redhat.com/errata/RHSA-2026:35994", "https://access.redhat.com/errata/RHSA-2026:36105", "https://access.redhat.com/errata/RHSA-2026:36167", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:37435", "https://access.redhat.com/errata/RHSA-2026:37436", "https://access.redhat.com/errata/RHSA-2026:38995", "https://access.redhat.com/errata/RHSA-2026:39005", "https://access.redhat.com/errata/RHSA-2026:39573", "https://access.redhat.com/errata/RHSA-2026:39879", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41030", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41930", "https://access.redhat.com/errata/RHSA-2026:42043", "https://access.redhat.com/errata/RHSA-2026:42047", "https://access.redhat.com/errata/RHSA-2026:42048", "https://access.redhat.com/errata/RHSA-2026:42049", "https://access.redhat.com/errata/RHSA-2026:42050", "https://access.redhat.com/errata/RHSA-2026:42051", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42079", "https://access.redhat.com/errata/RHSA-2026:42080", "https://access.redhat.com/errata/RHSA-2026:42082", "https://access.redhat.com/errata/RHSA-2026:42132", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42150", "https://access.redhat.com/errata/RHSA-2026:42151", "https://access.redhat.com/errata/RHSA-2026:42240", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:42852", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:44622", "https://access.redhat.com/errata/RHSA-2026:44624", "https://access.redhat.com/errata/RHSA-2026:46395", "https://access.redhat.com/errata/RHSA-2026:47149", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47737", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50843", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51112", "https://access.redhat.com/errata/RHSA-2026:51187", "https://access.redhat.com/errata/RHSA-2026:51194", "https://access.redhat.com/errata/RHSA-2026:51341", "https://access.redhat.com/errata/RHSA-2026:52826", "https://access.redhat.com/errata/RHSA-2026:53374", "https://access.redhat.com/errata/RHSA-2026:53412", "https://access.redhat.com/errata/RHSA-2026:53413", "https://access.redhat.com/errata/RHSA-2026:53415", "https://access.redhat.com/errata/RHSA-2026:53530", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:54395", "https://access.redhat.com/errata/RHSA-2026:54401", "https://access.redhat.com/errata/RHSA-2026:54435", "https://access.redhat.com/errata/RHSA-2026:54441", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:54580", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:56143", "https://access.redhat.com/errata/RHSA-2026:56223", "https://access.redhat.com/errata/RHSA-2026:56340", "https://access.redhat.com/errata/RHSA-2026:56431", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57541", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:57845", "https://access.redhat.com/errata/RHSA-2026:59546", "https://access.redhat.com/errata/RHSA-2026:59549", "https://access.redhat.com/errata/RHSA-2026:59562", "https://access.redhat.com/errata/RHSA-2026:60315", "https://access.redhat.com/errata/RHSA-2026:60354", "https://access.redhat.com/errata/RHSA-2026:60387", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61245", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:62549", "https://access.redhat.com/errata/RHSA-2026:63134", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:65153", "https://access.redhat.com/errata/RHSA-2026:65359", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65851", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:66016", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66350", "https://access.redhat.com/errata/RHSA-2026:66432", "https://access.redhat.com/errata/RHSA-2026:67149", "https://access.redhat.com/errata/RHSA-2026:67159", "https://access.redhat.com/errata/RHSA-2026:67160", "https://access.redhat.com/errata/RHSA-2026:67287", "https://access.redhat.com/errata/RHSA-2026:67319", "https://access.redhat.com/errata/RHSA-2026:67517", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/security/cve/CVE-2026-39821", "https://bugzilla.redhat.com/2467809", "https://bugzilla.redhat.com/2467820", "https://bugzilla.redhat.com/2480756", "https://bugzilla.redhat.com/2484204", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-65153.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/767220", "https://go.dev/issue/78760", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8", "https://linux.oracle.com/cve/CVE-2026-39821.html", "https://linux.oracle.com/errata/ELSA-2026-66432-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39821", "https://pkg.go.dev/vuln/GO-2026-5026", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json", "https://ubuntu.com/security/notices/USN-8416-1", "https://ubuntu.com/security/notices/USN-8883-1", "https://ubuntu.com/security/notices/USN-8883-2", "https://ubuntu.com/security/notices/USN-8900-1", "https://ubuntu.com/security/notices/USN-8914-1", "https://www.cve.org/CVERecord?id=CVE-2026-39821" ], "PublishedDate": "2026-05-22T16:16:20.41Z", "LastModifiedDate": "2026-09-17T12:18:05.767Z" }, { "VulnerabilityID": "CVE-2026-39822", "VendorIDs": [ "GO-2026-4970" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.25.12, 1.26.5, 1.27.0-rc.2", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39822", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:310da6a5eaf17c85d838b4acf9f2929981ecb900964ac1f4b7e886f0777c6548", "Title": "golang: Go os.Root: Symlink following vulnerability allows directory traversal", "Description": "On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open(\"symlink/\")' will open \"symlink\" even when \"symlink\" is a symbolic link pointing outside of the root.", "Severity": "HIGH", "CweIDs": [ "CWE-61" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:38878", "https://access.redhat.com/security/cve/CVE-2026-39822", "https://bugzilla.redhat.com/2498152", "https://bugzilla.redhat.com/show_bug.cgi?id=2498152", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39822", "https://errata.almalinux.org/9/ALSA-2026-38878.html", "https://errata.rockylinux.org/RLSA-2026:38878", "https://github.com/golang/go/issues/79005", "https://go.dev/cl/797880", "https://go.dev/issue/79005", "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc", "https://linux.oracle.com/cve/CVE-2026-39822.html", "https://linux.oracle.com/errata/ELSA-2026-38995.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39822", "https://pkg.go.dev/vuln/GO-2026-4970", "https://www.cve.org/CVERecord?id=CVE-2026-39822" ], "PublishedDate": "2026-07-08T17:17:21.31Z", "LastModifiedDate": "2026-10-25T17:10:00.197Z" }, { "VulnerabilityID": "CVE-2026-39836", "VendorIDs": [ "GO-2026-4971" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.25.10, 1.26.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39836", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:e6450bc7534dc7f83905fad176fb38327fe3bf8b06e50edcb855fe6b8c10f11f", "Title": "net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows", "Description": "The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0).", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/security/cve/CVE-2026-39836", "https://bugzilla.redhat.com/2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467810", "https://bugzilla.redhat.com/show_bug.cgi?id=2467811", "https://bugzilla.redhat.com/show_bug.cgi?id=2467813", "https://bugzilla.redhat.com/show_bug.cgi?id=2467815", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2467823", "https://bugzilla.redhat.com/show_bug.cgi?id=2467825", "https://bugzilla.redhat.com/show_bug.cgi?id=2467826", "https://bugzilla.redhat.com/show_bug.cgi?id=2467827", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33814", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39817", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39819", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39823", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39825", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39826", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39836", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42501", "https://errata.almalinux.org/9/ALSA-2026-22121.html", "https://errata.rockylinux.org/RLSA-2026:22121", "https://go.dev/cl/775320", "https://go.dev/issue/79006", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-39836.html", "https://linux.oracle.com/errata/ELSA-2026-22121.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39836", "https://pkg.go.dev/vuln/GO-2026-4971", "https://www.cve.org/CVERecord?id=CVE-2026-39836" ], "PublishedDate": "2026-05-07T20:16:43.593Z", "LastModifiedDate": "2026-10-26T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2026-42499", "VendorIDs": [ "GO-2026-4977" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.25.10, 1.26.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42499", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:79b2b3c2dc26622fda488616e7ae4788fee1151f113ef764e72eccd59cb1ce25", "Title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing", "Description": "Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.", "Severity": "HIGH", "CweIDs": [ "CWE-1046" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:17713", "https://access.redhat.com/errata/RHSA-2026:17714", "https://access.redhat.com/errata/RHSA-2026:22112", "https://access.redhat.com/errata/RHSA-2026:22120", "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/errata/RHSA-2026:33120", "https://access.redhat.com/errata/RHSA-2026:33123", "https://access.redhat.com/errata/RHSA-2026:33142", "https://access.redhat.com/errata/RHSA-2026:33150", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34364", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50319", "https://access.redhat.com/errata/RHSA-2026:50336", "https://access.redhat.com/errata/RHSA-2026:50843", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51112", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:54552", "https://access.redhat.com/errata/RHSA-2026:54555", "https://access.redhat.com/errata/RHSA-2026:54583", "https://access.redhat.com/errata/RHSA-2026:54602", "https://access.redhat.com/errata/RHSA-2026:56340", "https://access.redhat.com/errata/RHSA-2026:56785", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:56852", "https://access.redhat.com/errata/RHSA-2026:56854", "https://access.redhat.com/errata/RHSA-2026:56910", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:57487", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:57845", "https://access.redhat.com/errata/RHSA-2026:57914", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59830", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60018", "https://access.redhat.com/errata/RHSA-2026:60023", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:62260", "https://access.redhat.com/errata/RHSA-2026:62406", "https://access.redhat.com/errata/RHSA-2026:62407", "https://access.redhat.com/errata/RHSA-2026:62753", "https://access.redhat.com/errata/RHSA-2026:62754", "https://access.redhat.com/errata/RHSA-2026:62803", "https://access.redhat.com/errata/RHSA-2026:63022", "https://access.redhat.com/errata/RHSA-2026:63163", "https://access.redhat.com/errata/RHSA-2026:63332", "https://access.redhat.com/errata/RHSA-2026:63636", "https://access.redhat.com/errata/RHSA-2026:64818", "https://access.redhat.com/errata/RHSA-2026:65116", "https://access.redhat.com/errata/RHSA-2026:65117", "https://access.redhat.com/errata/RHSA-2026:65153", "https://access.redhat.com/errata/RHSA-2026:65335", "https://access.redhat.com/errata/RHSA-2026:65336", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65838", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:65895", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66327", "https://access.redhat.com/errata/RHSA-2026:67148", "https://access.redhat.com/errata/RHSA-2026:67517", "https://access.redhat.com/errata/RHSA-2026:67974", "https://access.redhat.com/errata/RHSA-2026:67975", "https://access.redhat.com/errata/RHSA-2026:68334", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/errata/RHSA-2026:68527", "https://access.redhat.com/security/cve/CVE-2026-42499", "https://bugzilla.redhat.com/2467809", "https://bugzilla.redhat.com/2467820", "https://bugzilla.redhat.com/2480756", "https://bugzilla.redhat.com/2484204", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-65153.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/771520", "https://go.dev/issue/78987", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-42499.html", "https://linux.oracle.com/errata/ELSA-2026-70201.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-42499", "https://pkg.go.dev/vuln/GO-2026-4977", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42499.json", "https://www.cve.org/CVERecord?id=CVE-2026-42499" ], "PublishedDate": "2026-05-07T20:16:44.54Z", "LastModifiedDate": "2026-10-26T00:10:00.15Z" }, { "VulnerabilityID": "CVE-2026-42504", "VendorIDs": [ "GO-2026-5038" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.25.11, 1.26.4", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42504", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:22c963f6e4cc36bb79d3ac33e5e2de9a8e9d8f7dfeeaa4c8b1a79e07eacd3de1", "Title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header", "Description": "Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:65153", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/security/cve/CVE-2026-42504", "https://bugzilla.redhat.com/2467809", "https://bugzilla.redhat.com/2467820", "https://bugzilla.redhat.com/2480756", "https://bugzilla.redhat.com/2484204", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-65153.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/774481", "https://go.dev/issue/79217", "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw", "https://linux.oracle.com/cve/CVE-2026-42504.html", "https://linux.oracle.com/errata/ELSA-2026-69308.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-42504", "https://pkg.go.dev/vuln/GO-2026-5038", "https://www.cve.org/CVERecord?id=CVE-2026-42504" ], "PublishedDate": "2026-06-02T23:16:37.927Z", "LastModifiedDate": "2026-07-22T19:10:00.12Z" }, { "VulnerabilityID": "CVE-2026-56853", "VendorIDs": [ "GO-2026-6089" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56853", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:ac148e7e857ce892d2e813bca41962008370814a58c57cc24902fb69792f117f", "Title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service", "Description": "When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70641", "https://access.redhat.com/security/cve/CVE-2026-56853", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11395", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-70641.html", "https://errata.rockylinux.org/RLSA-2026:70641", "https://go.dev/cl/795540", "https://go.dev/issue/80205", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-56853.html", "https://linux.oracle.com/errata/ELSA-2026-89752.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56853", "https://pkg.go.dev/vuln/GO-2026-6089", "https://www.cve.org/CVERecord?id=CVE-2026-56853" ], "PublishedDate": "2026-08-13T22:17:22.093Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-56858", "VendorIDs": [ "GO-2026-6091" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56858", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:a03d4c1dfbeab8186acdb3c67bd71bc8ef716f7194ea3090133e295997db5a34", "Title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input", "Description": "Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.", "Severity": "HIGH", "CweIDs": [ "CWE-79" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 2, "oracle-oval": 3, "photon": 2, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "V3Score": 6.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70641", "https://access.redhat.com/security/cve/CVE-2026-56858", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11395", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-70641.html", "https://errata.rockylinux.org/RLSA-2026:70641", "https://go.dev/cl/807100", "https://go.dev/issue/80435", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-56858.html", "https://linux.oracle.com/errata/ELSA-2026-70641.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56858", "https://pkg.go.dev/vuln/GO-2026-6091", "https://www.cve.org/CVERecord?id=CVE-2026-56858" ], "PublishedDate": "2026-08-13T22:17:22.207Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-56859", "VendorIDs": [ "GO-2026-6088" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56859", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:8665bd528455e5d3bd1746a8f81bb17f356e7bc368c68fa208b3d2d36b6d8769", "Title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue", "Description": "Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69961", "https://access.redhat.com/security/cve/CVE-2026-56859", "https://bugzilla.redhat.com/2480684", "https://bugzilla.redhat.com/2508234", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2480684", "https://bugzilla.redhat.com/show_bug.cgi?id=2508234", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2518147", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17106", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19730", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39830", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-69961.html", "https://errata.rockylinux.org/RLSA-2026:69961", "https://github.com/golang/go/issues/80481", "https://go.dev/cl/803320", "https://go.dev/issue/80481", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-56859.html", "https://linux.oracle.com/errata/ELSA-2026-70201.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56859", "https://pkg.go.dev/vuln/GO-2026-6088", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-56859" ], "PublishedDate": "2026-08-13T22:17:22.32Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-56860", "VendorIDs": [ "GO-2026-6218" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56860", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:a738033721880dd88b8359faba74a309b59630a61a54ef85969c6d3f7e5eea88", "Title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution", "Description": "Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 2, "oracle-oval": 3, "photon": 2, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70641", "https://access.redhat.com/security/cve/CVE-2026-56860", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11395", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-70641.html", "https://errata.rockylinux.org/RLSA-2026:70641", "https://go.dev/cl/803681", "https://go.dev/issue/80494", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-56860.html", "https://linux.oracle.com/errata/ELSA-2026-71619.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56860", "https://pkg.go.dev/vuln/GO-2026-6218", "https://www.cve.org/CVERecord?id=CVE-2026-56860" ], "PublishedDate": "2026-08-13T22:17:22.44Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-56862", "VendorIDs": [ "GO-2026-6090" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56862", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:62caca91ec73bb7f624c06c4058c7d9f26c620140fe04155cf4de78b1e851c6e", "Title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages", "Description": "Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70641", "https://access.redhat.com/security/cve/CVE-2026-56862", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11395", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-70641.html", "https://errata.rockylinux.org/RLSA-2026:70641", "https://github.com/golang/go/issues/80528", "https://go.dev/cl/804261", "https://go.dev/issue/80528", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-56862.html", "https://linux.oracle.com/errata/ELSA-2026-70641.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56862", "https://pkg.go.dev/vuln/GO-2026-6090", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-56862" ], "PublishedDate": "2026-08-13T22:17:22.55Z", "LastModifiedDate": "2026-10-24T16:10:00.153Z" }, { "VulnerabilityID": "CVE-2026-78667", "VendorIDs": [ "GO-2026-6609" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.26.9, 1.27.2", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78667", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:3000a7b02e928265f3c2377feb9cc5dc7cc565e61488a8d2953832ecc09ccf8c", "Title": "net/http: golang: golang: Denial of Service via crafted HTTP Range headers", "Description": "When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93617", "https://access.redhat.com/security/cve/CVE-2026-78667", "https://bugzilla.redhat.com/2548334", "https://bugzilla.redhat.com/2548336", "https://bugzilla.redhat.com/2548341", "https://bugzilla.redhat.com/2548344", "https://bugzilla.redhat.com/2556068", "https://bugzilla.redhat.com/show_bug.cgi?id=2548334", "https://bugzilla.redhat.com/show_bug.cgi?id=2548336", "https://bugzilla.redhat.com/show_bug.cgi?id=2548341", "https://bugzilla.redhat.com/show_bug.cgi?id=2548344", "https://bugzilla.redhat.com/show_bug.cgi?id=2556068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78667", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94440", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97031", "https://errata.almalinux.org/9/ALSA-2026-93617.html", "https://errata.rockylinux.org/RLSA-2026:93617", "https://github.com/golang/go/issues/81858", "https://go.dev/cl/847309", "https://go.dev/issue/81858", "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI", "https://linux.oracle.com/cve/CVE-2026-78667.html", "https://linux.oracle.com/errata/ELSA-2026-95519.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78667", "https://pkg.go.dev/vuln/GO-2026-6609", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-78667", "https://www.openwall.com/lists/oss-security/2026/10/08/9" ], "PublishedDate": "2026-10-08T23:17:03.88Z", "LastModifiedDate": "2026-10-09T17:16:49.69Z" }, { "VulnerabilityID": "CVE-2026-78669", "VendorIDs": [ "GO-2026-6611" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.26.9, 1.27.2", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78669", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:eb1eb73708d99d507ae9e45266508aded5fd81ef05119a1342c18db212b37be2", "Title": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames", "Description": "A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.", "Severity": "HIGH", "CweIDs": [ "CWE-405" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93617", "https://access.redhat.com/security/cve/CVE-2026-78669", "https://bugzilla.redhat.com/2548334", "https://bugzilla.redhat.com/2548336", "https://bugzilla.redhat.com/2548341", "https://bugzilla.redhat.com/2548344", "https://bugzilla.redhat.com/2556068", "https://bugzilla.redhat.com/show_bug.cgi?id=2548334", "https://bugzilla.redhat.com/show_bug.cgi?id=2548336", "https://bugzilla.redhat.com/show_bug.cgi?id=2548341", "https://bugzilla.redhat.com/show_bug.cgi?id=2548344", "https://bugzilla.redhat.com/show_bug.cgi?id=2556068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78667", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94440", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97031", "https://errata.almalinux.org/9/ALSA-2026-93617.html", "https://errata.rockylinux.org/RLSA-2026:93617", "https://github.com/golang/go/issues/81742", "https://go.dev/cl/847186", "https://go.dev/cl/847308", "https://go.dev/issue/81742", "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI", "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs", "https://linux.oracle.com/cve/CVE-2026-78669.html", "https://linux.oracle.com/errata/ELSA-2026-95519.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78669", "https://pkg.go.dev/vuln/GO-2026-6611", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-78669", "https://www.openwall.com/lists/oss-security/2026/10/08/9" ], "PublishedDate": "2026-10-08T23:17:04.01Z", "LastModifiedDate": "2026-10-09T17:16:49.857Z" }, { "VulnerabilityID": "CVE-2026-97031", "VendorIDs": [ "GO-2026-6607" ], "PkgID": "stdlib@v1.20.5", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.20.5", "UID": "dc1a486d89e6da03" }, "InstalledVersion": "v1.20.5", "FixedVersion": "1.26.9, 1.27.2", "Status": "fixed", "Layer": { "DiffID": "sha256:c3030f13f27ca0553b5400cab8e93681167732cd05e1823c3db2cf1545f7a983" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-97031", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:e73994bb2e9878c2f65b542b8de7bac78dab25fb66969c801b82e337fae283a8", "Title": "crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references", "Description": "Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result.", "Severity": "HIGH", "CweIDs": [ "CWE-405" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:95518", "https://access.redhat.com/security/cve/CVE-2026-97031", "https://bugzilla.redhat.com/2548336", "https://bugzilla.redhat.com/2556068", "https://bugzilla.redhat.com/show_bug.cgi?id=2548336", "https://bugzilla.redhat.com/show_bug.cgi?id=2556068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97031", "https://errata.almalinux.org/9/ALSA-2026-95518.html", "https://errata.rockylinux.org/RLSA-2026:95518", "https://go.dev/cl/847312", "https://go.dev/issue/81855", "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI", "https://linux.oracle.com/cve/CVE-2026-97031.html", "https://linux.oracle.com/errata/ELSA-2026-95519.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-97031", "https://pkg.go.dev/vuln/GO-2026-6607", "https://www.cve.org/CVERecord?id=CVE-2026-97031" ], "PublishedDate": "2026-10-08T23:17:06.037Z", "LastModifiedDate": "2026-10-09T16:35:35.9Z" } ] }, { "Target": "usr/bin/cloudflared", "Class": "lang-pkgs", "Type": "gobinary", "Packages": [ { "ID": "github.com/cloudflare/cloudflared@v2025.7.0", "Name": "github.com/cloudflare/cloudflared", "Identifier": { "PURL": "pkg:golang/github.com/cloudflare/cloudflared@2025.7.0", "UID": "cf303a3a7ae2019e" }, "Version": "2025.7.0", "Relationship": "root", "DependsOn": [ "github.com/BurntSushi/toml@v1.2.0", "github.com/apparentlymart/go-cidr@v1.1.0", "github.com/beorn7/perks@v1.0.1", "github.com/cespare/xxhash/v2@v2.3.0", "github.com/chungthuang/quic-go@v0.45.1-0.20250428085412-43229ad201fd", "github.com/coredns/caddy@v1.1.2-0.20241029205200-8de985351a98", "github.com/coredns/coredns@v1.12.2", "github.com/coreos/go-oidc/v3@v3.10.0", "github.com/coreos/go-systemd/v22@v22.5.0", "github.com/cpuguy83/go-md2man/v2@v2.0.0", "github.com/facebookgo/grace@v0.0.0-20180706040059-75cf19382434", "github.com/flynn/go-shlex@v0.0.0-20150515145356-3f9db97f8568", "github.com/fsnotify/fsnotify@v1.4.9", "github.com/getsentry/sentry-go@v0.16.0", "github.com/go-chi/chi/v5@v5.0.10", "github.com/go-chi/cors@v1.2.1", "github.com/go-jose/go-jose/v4@v4.1.0", "github.com/go-logr/logr@v1.4.3", "github.com/go-logr/stdr@v1.2.2", "github.com/gobwas/httphead@v0.1.0", "github.com/gobwas/pool@v0.2.1", "github.com/gobwas/ws@v1.2.1", "github.com/google/gopacket@v1.1.19", "github.com/google/uuid@v1.6.0", "github.com/gorilla/websocket@v1.5.0", "github.com/grpc-ecosystem/grpc-gateway/v2@v2.26.3", "github.com/grpc-ecosystem/grpc-opentracing@v0.0.0-20180507213350-8e809c8a8645", "github.com/ipostelnik/cli/v2@v2.3.1-0.20210324024421-b6ea8234fe3d", "github.com/json-iterator/go@v1.1.12", "github.com/klauspost/compress@v1.18.0", "github.com/mattn/go-colorable@v0.1.13", "github.com/mattn/go-isatty@v0.0.20", "github.com/miekg/dns@v1.1.66", "github.com/mitchellh/go-homedir@v1.1.0", "github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", "github.com/modern-go/reflect2@v1.0.2", "github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", "github.com/opentracing/opentracing-go@v1.2.0", "github.com/pkg/errors@v0.9.1", "github.com/prometheus/client_golang@v1.22.0", "github.com/prometheus/client_model@v0.6.2", "github.com/prometheus/common@v0.64.0", "github.com/prometheus/procfs@v0.15.1", "github.com/rs/zerolog@v1.20.0", "github.com/russross/blackfriday/v2@v2.1.0", "go.opentelemetry.io/auto/sdk@v1.1.0", "go.opentelemetry.io/contrib/propagators@v0.22.0", "go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.26.0", "go.opentelemetry.io/otel/metric@v1.35.0", "go.opentelemetry.io/otel/sdk@v1.35.0", "go.opentelemetry.io/otel/trace@v1.35.0", "go.opentelemetry.io/otel@v1.35.0", "go.opentelemetry.io/proto/otlp@v1.2.0", "go.uber.org/automaxprocs@v1.6.0", "golang.org/x/crypto@v0.38.0", "golang.org/x/net@v0.40.0", "golang.org/x/oauth2@v0.30.0", "golang.org/x/sync@v0.14.0", "golang.org/x/sys@v0.33.0", "golang.org/x/term@v0.32.0", "golang.org/x/text@v0.25.0", "google.golang.org/genproto/googleapis/api@v0.0.0-20250505200425-f936aa4a68b2", "google.golang.org/genproto/googleapis/rpc@v0.0.0-20250512202823-5a2f75b736a9", "google.golang.org/grpc@v1.72.2", "google.golang.org/protobuf@v1.36.6", "gopkg.in/natefinch/lumberjack.v2@v2.0.0", "gopkg.in/yaml.v2@v2.4.0", "gopkg.in/yaml.v3@v3.0.1", "nhooyr.io/websocket@v1.8.7", "stdlib@v1.24.4", "zombiezen.com/go/capnproto2@v2.18.0+incompatible" ], "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "stdlib@v1.24.4", "Name": "stdlib", "Identifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "Version": "v1.24.4", "Relationship": "direct", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/BurntSushi/toml@v1.2.0", "Name": "github.com/BurntSushi/toml", "Identifier": { "PURL": "pkg:golang/github.com/burntsushi/toml@v1.2.0", "UID": "6496997f6ef06b62" }, "Version": "v1.2.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/apparentlymart/go-cidr@v1.1.0", "Name": "github.com/apparentlymart/go-cidr", "Identifier": { "PURL": "pkg:golang/github.com/apparentlymart/go-cidr@v1.1.0", "UID": "d8afb25d301ddd4e" }, "Version": "v1.1.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/beorn7/perks@v1.0.1", "Name": "github.com/beorn7/perks", "Identifier": { "PURL": "pkg:golang/github.com/beorn7/perks@v1.0.1", "UID": "b0aef3ce9bff80ef" }, "Version": "v1.0.1", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/cespare/xxhash/v2@v2.3.0", "Name": "github.com/cespare/xxhash/v2", "Identifier": { "PURL": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0", "UID": "231fd6fbb60b2062" }, "Version": "v2.3.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/chungthuang/quic-go@v0.45.1-0.20250428085412-43229ad201fd", "Name": "github.com/chungthuang/quic-go", "Identifier": { "PURL": "pkg:golang/github.com/chungthuang/quic-go@v0.45.1-0.20250428085412-43229ad201fd", "UID": "14efb930e587b085" }, "Version": "v0.45.1-0.20250428085412-43229ad201fd", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/coredns/caddy@v1.1.2-0.20241029205200-8de985351a98", "Name": "github.com/coredns/caddy", "Identifier": { "PURL": "pkg:golang/github.com/coredns/caddy@v1.1.2-0.20241029205200-8de985351a98", "UID": "80fccea48f69e10f" }, "Version": "v1.1.2-0.20241029205200-8de985351a98", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/coredns/coredns@v1.12.2", "Name": "github.com/coredns/coredns", "Identifier": { "PURL": "pkg:golang/github.com/coredns/coredns@v1.12.2", "UID": "cb5a5653784d2b34" }, "Version": "v1.12.2", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/coreos/go-oidc/v3@v3.10.0", "Name": "github.com/coreos/go-oidc/v3", "Identifier": { "PURL": "pkg:golang/github.com/coreos/go-oidc/v3@v3.10.0", "UID": "661c5d192a806632" }, "Version": "v3.10.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/coreos/go-systemd/v22@v22.5.0", "Name": "github.com/coreos/go-systemd/v22", "Identifier": { "PURL": "pkg:golang/github.com/coreos/go-systemd/v22@v22.5.0", "UID": "a503e85833ef73a" }, "Version": "v22.5.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/cpuguy83/go-md2man/v2@v2.0.0", "Name": "github.com/cpuguy83/go-md2man/v2", "Identifier": { "PURL": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0", "UID": "b43469fa5e936084" }, "Version": "v2.0.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/facebookgo/grace@v0.0.0-20180706040059-75cf19382434", "Name": "github.com/facebookgo/grace", "Identifier": { "PURL": "pkg:golang/github.com/facebookgo/grace@v0.0.0-20180706040059-75cf19382434", "UID": "51474b81316357ad" }, "Version": "v0.0.0-20180706040059-75cf19382434", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/flynn/go-shlex@v0.0.0-20150515145356-3f9db97f8568", "Name": "github.com/flynn/go-shlex", "Identifier": { "PURL": "pkg:golang/github.com/flynn/go-shlex@v0.0.0-20150515145356-3f9db97f8568", "UID": "b4a0e1dcb53fc563" }, "Version": "v0.0.0-20150515145356-3f9db97f8568", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/fsnotify/fsnotify@v1.4.9", "Name": "github.com/fsnotify/fsnotify", "Identifier": { "PURL": "pkg:golang/github.com/fsnotify/fsnotify@v1.4.9", "UID": "9bcb5aa6a936fd6b" }, "Version": "v1.4.9", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/getsentry/sentry-go@v0.16.0", "Name": "github.com/getsentry/sentry-go", "Identifier": { "PURL": "pkg:golang/github.com/getsentry/sentry-go@v0.16.0", "UID": "1dc5c2ddf9217e1f" }, "Version": "v0.16.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/go-chi/chi/v5@v5.0.10", "Name": "github.com/go-chi/chi/v5", "Identifier": { "PURL": "pkg:golang/github.com/go-chi/chi/v5@v5.0.10", "UID": "3124a52e36457b70" }, "Version": "v5.0.10", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/go-chi/cors@v1.2.1", "Name": "github.com/go-chi/cors", "Identifier": { "PURL": "pkg:golang/github.com/go-chi/cors@v1.2.1", "UID": "900db759cee495e7" }, "Version": "v1.2.1", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/go-jose/go-jose/v4@v4.1.0", "Name": "github.com/go-jose/go-jose/v4", "Identifier": { "PURL": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.0", "UID": "6e9b869d876de727" }, "Version": "v4.1.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/go-logr/logr@v1.4.3", "Name": "github.com/go-logr/logr", "Identifier": { "PURL": "pkg:golang/github.com/go-logr/logr@v1.4.3", "UID": "21b2e2b534e0c0cc" }, "Version": "v1.4.3", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/go-logr/stdr@v1.2.2", "Name": "github.com/go-logr/stdr", "Identifier": { "PURL": "pkg:golang/github.com/go-logr/stdr@v1.2.2", "UID": "fdab72c30138a3af" }, "Version": "v1.2.2", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/gobwas/httphead@v0.1.0", "Name": "github.com/gobwas/httphead", "Identifier": { "PURL": "pkg:golang/github.com/gobwas/httphead@v0.1.0", "UID": "c8cc637ac0e99c85" }, "Version": "v0.1.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/gobwas/pool@v0.2.1", "Name": "github.com/gobwas/pool", "Identifier": { "PURL": "pkg:golang/github.com/gobwas/pool@v0.2.1", "UID": "b2b62ac73c700aff" }, "Version": "v0.2.1", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/gobwas/ws@v1.2.1", "Name": "github.com/gobwas/ws", "Identifier": { "PURL": "pkg:golang/github.com/gobwas/ws@v1.2.1", "UID": "9a4d204d773c049c" }, "Version": "v1.2.1", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/google/gopacket@v1.1.19", "Name": "github.com/google/gopacket", "Identifier": { "PURL": "pkg:golang/github.com/google/gopacket@v1.1.19", "UID": "f660c33f526da3a8" }, "Version": "v1.1.19", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/google/uuid@v1.6.0", "Name": "github.com/google/uuid", "Identifier": { "PURL": "pkg:golang/github.com/google/uuid@v1.6.0", "UID": "97d623804c079ca5" }, "Version": "v1.6.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/gorilla/websocket@v1.5.0", "Name": "github.com/gorilla/websocket", "Identifier": { "PURL": "pkg:golang/github.com/gorilla/websocket@v1.5.0", "UID": "aaf65079e3eaccb2" }, "Version": "v1.5.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/grpc-ecosystem/grpc-gateway/v2@v2.26.3", "Name": "github.com/grpc-ecosystem/grpc-gateway/v2", "Identifier": { "PURL": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.26.3", "UID": "69fd297079f5b45" }, "Version": "v2.26.3", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/grpc-ecosystem/grpc-opentracing@v0.0.0-20180507213350-8e809c8a8645", "Name": "github.com/grpc-ecosystem/grpc-opentracing", "Identifier": { "PURL": "pkg:golang/github.com/grpc-ecosystem/grpc-opentracing@v0.0.0-20180507213350-8e809c8a8645", "UID": "5043c951cd60d4d4" }, "Version": "v0.0.0-20180507213350-8e809c8a8645", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/ipostelnik/cli/v2@v2.3.1-0.20210324024421-b6ea8234fe3d", "Name": "github.com/ipostelnik/cli/v2", "Identifier": { "PURL": "pkg:golang/github.com/ipostelnik/cli/v2@v2.3.1-0.20210324024421-b6ea8234fe3d", "UID": "b53414f1ca774be2" }, "Version": "v2.3.1-0.20210324024421-b6ea8234fe3d", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/json-iterator/go@v1.1.12", "Name": "github.com/json-iterator/go", "Identifier": { "PURL": "pkg:golang/github.com/json-iterator/go@v1.1.12", "UID": "c8af7f56d54fe95b" }, "Version": "v1.1.12", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/klauspost/compress@v1.18.0", "Name": "github.com/klauspost/compress", "Identifier": { "PURL": "pkg:golang/github.com/klauspost/compress@v1.18.0", "UID": "4aedf97a5cb74b50" }, "Version": "v1.18.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/mattn/go-colorable@v0.1.13", "Name": "github.com/mattn/go-colorable", "Identifier": { "PURL": "pkg:golang/github.com/mattn/go-colorable@v0.1.13", "UID": "6601ba0066f9d63d" }, "Version": "v0.1.13", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/mattn/go-isatty@v0.0.20", "Name": "github.com/mattn/go-isatty", "Identifier": { "PURL": "pkg:golang/github.com/mattn/go-isatty@v0.0.20", "UID": "ceeac774355d8b14" }, "Version": "v0.0.20", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/miekg/dns@v1.1.66", "Name": "github.com/miekg/dns", "Identifier": { "PURL": "pkg:golang/github.com/miekg/dns@v1.1.66", "UID": "92be07b1695b125d" }, "Version": "v1.1.66", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/mitchellh/go-homedir@v1.1.0", "Name": "github.com/mitchellh/go-homedir", "Identifier": { "PURL": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0", "UID": "c307b5b8d530184c" }, "Version": "v1.1.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", "Name": "github.com/modern-go/concurrent", "Identifier": { "PURL": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", "UID": "7a16a82f65e623e9" }, "Version": "v0.0.0-20180306012644-bacd9c7ef1dd", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/modern-go/reflect2@v1.0.2", "Name": "github.com/modern-go/reflect2", "Identifier": { "PURL": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", "UID": "9fbe8c02bbef0531" }, "Version": "v1.0.2", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", "Name": "github.com/munnerz/goautoneg", "Identifier": { "PURL": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", "UID": "2263607fd96b2e3" }, "Version": "v0.0.0-20191010083416-a7dc8b61c822", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/opentracing/opentracing-go@v1.2.0", "Name": "github.com/opentracing/opentracing-go", "Identifier": { "PURL": "pkg:golang/github.com/opentracing/opentracing-go@v1.2.0", "UID": "789a5b9e14bef3cc" }, "Version": "v1.2.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/pkg/errors@v0.9.1", "Name": "github.com/pkg/errors", "Identifier": { "PURL": "pkg:golang/github.com/pkg/errors@v0.9.1", "UID": "33a1b16b448f1831" }, "Version": "v0.9.1", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/prometheus/client_golang@v1.22.0", "Name": "github.com/prometheus/client_golang", "Identifier": { "PURL": "pkg:golang/github.com/prometheus/client_golang@v1.22.0", "UID": "91249032fceb4bb7" }, "Version": "v1.22.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/prometheus/client_model@v0.6.2", "Name": "github.com/prometheus/client_model", "Identifier": { "PURL": "pkg:golang/github.com/prometheus/client_model@v0.6.2", "UID": "4be2e35b191b4beb" }, "Version": "v0.6.2", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/prometheus/common@v0.64.0", "Name": "github.com/prometheus/common", "Identifier": { "PURL": "pkg:golang/github.com/prometheus/common@v0.64.0", "UID": "7738df5c3dccd6e" }, "Version": "v0.64.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/prometheus/procfs@v0.15.1", "Name": "github.com/prometheus/procfs", "Identifier": { "PURL": "pkg:golang/github.com/prometheus/procfs@v0.15.1", "UID": "c71950d0ac3bf4da" }, "Version": "v0.15.1", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/rs/zerolog@v1.20.0", "Name": "github.com/rs/zerolog", "Identifier": { "PURL": "pkg:golang/github.com/rs/zerolog@v1.20.0", "UID": "e875938f6e2984f5" }, "Version": "v1.20.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/russross/blackfriday/v2@v2.1.0", "Name": "github.com/russross/blackfriday/v2", "Identifier": { "PURL": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0", "UID": "36a1de69fefa7c93" }, "Version": "v2.1.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "go.opentelemetry.io/auto/sdk@v1.1.0", "Name": "go.opentelemetry.io/auto/sdk", "Identifier": { "PURL": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.1.0", "UID": "b99a587b86f46d18" }, "Version": "v1.1.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "go.opentelemetry.io/contrib/propagators@v0.22.0", "Name": "go.opentelemetry.io/contrib/propagators", "Identifier": { "PURL": "pkg:golang/go.opentelemetry.io/contrib/propagators@v0.22.0", "UID": "c5d35aacdc41cb7f" }, "Version": "v0.22.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "go.opentelemetry.io/otel@v1.35.0", "Name": "go.opentelemetry.io/otel", "Identifier": { "PURL": "pkg:golang/go.opentelemetry.io/otel@v1.35.0", "UID": "7a87ae5333960b41" }, "Version": "v1.35.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.26.0", "Name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace", "Identifier": { "PURL": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.26.0", "UID": "2e0159c88acd3f3" }, "Version": "v1.26.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "go.opentelemetry.io/otel/metric@v1.35.0", "Name": "go.opentelemetry.io/otel/metric", "Identifier": { "PURL": "pkg:golang/go.opentelemetry.io/otel/metric@v1.35.0", "UID": "6d026e8c0285d54c" }, "Version": "v1.35.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "go.opentelemetry.io/otel/sdk@v1.35.0", "Name": "go.opentelemetry.io/otel/sdk", "Identifier": { "PURL": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.35.0", "UID": "b9ca47d5d92202cb" }, "Version": "v1.35.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "go.opentelemetry.io/otel/trace@v1.35.0", "Name": "go.opentelemetry.io/otel/trace", "Identifier": { "PURL": "pkg:golang/go.opentelemetry.io/otel/trace@v1.35.0", "UID": "10907cebb3da9677" }, "Version": "v1.35.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "go.opentelemetry.io/proto/otlp@v1.2.0", "Name": "go.opentelemetry.io/proto/otlp", "Identifier": { "PURL": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.2.0", "UID": "1fb37bccfdc6883b" }, "Version": "v1.2.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "go.uber.org/automaxprocs@v1.6.0", "Name": "go.uber.org/automaxprocs", "Identifier": { "PURL": "pkg:golang/go.uber.org/automaxprocs@v1.6.0", "UID": "3fc07f7dea5d7679" }, "Version": "v1.6.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "golang.org/x/crypto@v0.38.0", "Name": "golang.org/x/crypto", "Identifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.38.0", "UID": "e6ac58f59e0a1906" }, "Version": "v0.38.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "golang.org/x/net@v0.40.0", "Name": "golang.org/x/net", "Identifier": { "PURL": "pkg:golang/golang.org/x/net@v0.40.0", "UID": "85f9a88b9d9ac04e" }, "Version": "v0.40.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "golang.org/x/oauth2@v0.30.0", "Name": "golang.org/x/oauth2", "Identifier": { "PURL": "pkg:golang/golang.org/x/oauth2@v0.30.0", "UID": "bdcd7858e8624e9e" }, "Version": "v0.30.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "golang.org/x/sync@v0.14.0", "Name": "golang.org/x/sync", "Identifier": { "PURL": "pkg:golang/golang.org/x/sync@v0.14.0", "UID": "18da3248dc1c49a" }, "Version": "v0.14.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "golang.org/x/sys@v0.33.0", "Name": "golang.org/x/sys", "Identifier": { "PURL": "pkg:golang/golang.org/x/sys@v0.33.0", "UID": "f79e622145bc53e" }, "Version": "v0.33.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "golang.org/x/term@v0.32.0", "Name": "golang.org/x/term", "Identifier": { "PURL": "pkg:golang/golang.org/x/term@v0.32.0", "UID": "112b70b832505c91" }, "Version": "v0.32.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "golang.org/x/text@v0.25.0", "Name": "golang.org/x/text", "Identifier": { "PURL": "pkg:golang/golang.org/x/text@v0.25.0", "UID": "3718c2074f633615" }, "Version": "v0.25.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "google.golang.org/genproto/googleapis/api@v0.0.0-20250505200425-f936aa4a68b2", "Name": "google.golang.org/genproto/googleapis/api", "Identifier": { "PURL": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20250505200425-f936aa4a68b2", "UID": "a9c6cf6d13a4ad25" }, "Version": "v0.0.0-20250505200425-f936aa4a68b2", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "google.golang.org/genproto/googleapis/rpc@v0.0.0-20250512202823-5a2f75b736a9", "Name": "google.golang.org/genproto/googleapis/rpc", "Identifier": { "PURL": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20250512202823-5a2f75b736a9", "UID": "dc04470b0ac5e76f" }, "Version": "v0.0.0-20250512202823-5a2f75b736a9", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "google.golang.org/grpc@v1.72.2", "Name": "google.golang.org/grpc", "Identifier": { "PURL": "pkg:golang/google.golang.org/grpc@v1.72.2", "UID": "b21509ef29e90a88" }, "Version": "v1.72.2", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "google.golang.org/protobuf@v1.36.6", "Name": "google.golang.org/protobuf", "Identifier": { "PURL": "pkg:golang/google.golang.org/protobuf@v1.36.6", "UID": "8739818b1d03b8d6" }, "Version": "v1.36.6", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "gopkg.in/natefinch/lumberjack.v2@v2.0.0", "Name": "gopkg.in/natefinch/lumberjack.v2", "Identifier": { "PURL": "pkg:golang/gopkg.in/natefinch/lumberjack.v2@v2.0.0", "UID": "973d3cb94cd1735e" }, "Version": "v2.0.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "gopkg.in/yaml.v2@v2.4.0", "Name": "gopkg.in/yaml.v2", "Identifier": { "PURL": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", "UID": "aeb5d852eb4b4c0f" }, "Version": "v2.4.0", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "gopkg.in/yaml.v3@v3.0.1", "Name": "gopkg.in/yaml.v3", "Identifier": { "PURL": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", "UID": "9330d3757ec7ec5f" }, "Version": "v3.0.1", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "nhooyr.io/websocket@v1.8.7", "Name": "nhooyr.io/websocket", "Identifier": { "PURL": "pkg:golang/nhooyr.io/websocket@v1.8.7", "UID": "6f3f49f876f61d9f" }, "Version": "v1.8.7", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" }, { "ID": "zombiezen.com/go/capnproto2@v2.18.0+incompatible", "Name": "zombiezen.com/go/capnproto2", "Identifier": { "PURL": "pkg:golang/zombiezen.com/go/capnproto2@v2.18.0%2Bincompatible", "UID": "bc05bbcb7c3e043c" }, "Version": "v2.18.0+incompatible", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "AnalyzedBy": "gobinary" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2025-58063", "VendorIDs": [ "GHSA-93mf-426m-g6x9" ], "PkgID": "github.com/coredns/coredns@v1.12.2", "PkgName": "github.com/coredns/coredns", "PkgIdentifier": { "PURL": "pkg:golang/github.com/coredns/coredns@v1.12.2", "UID": "cb5a5653784d2b34" }, "InstalledVersion": "v1.12.2", "FixedVersion": "1.12.4", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-58063", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Go", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" }, "Fingerprint": "sha256:4ca898972d6c76cf34a55cd412ad73d21a5a3ab5a297214e2f339ce7bfd5297a", "Title": "github.com/coredns/coredns: CoreDNS Lease ID Confusion", "Description": "CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for DNS resolution of affected services. The `TTL()` function in `plugin/etcd/etcd.go` incorrectly casts etcd lease IDs (64-bit integers) to uint32 and uses them as TTL values. Large lease IDs become very large TTLs when cast to uint32. This enables cache pinning attacks. Version 1.12.4 contains a fix for the issue.", "Severity": "HIGH", "CweIDs": [ "CWE-681" ], "VendorSeverity": { "azure": 3, "cbl-mariner": 3, "ghsa": 3, "photon": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "V3Score": 5.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-58063", "https://github.com/coredns/coredns", "https://github.com/coredns/coredns/commit/e1768a5d272e9da649dfb8588595e5c6e4e640bf", "https://github.com/coredns/coredns/security/advisories/GHSA-93mf-426m-g6x9", "https://nvd.nist.gov/vuln/detail/CVE-2025-58063", "https://www.cve.org/CVERecord?id=CVE-2025-58063" ], "PublishedDate": "2025-09-09T20:15:48.057Z", "LastModifiedDate": "2026-10-19T17:10:00.173Z" }, { "VulnerabilityID": "CVE-2026-26017", "VendorIDs": [ "GHSA-c9v3-4pv7-87pr" ], "PkgID": "github.com/coredns/coredns@v1.12.2", "PkgName": "github.com/coredns/coredns", "PkgIdentifier": { "PURL": "pkg:golang/github.com/coredns/coredns@v1.12.2", "UID": "cb5a5653784d2b34" }, "InstalledVersion": "v1.12.2", "FixedVersion": "1.14.2", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-26017", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Go", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" }, "Fingerprint": "sha256:9fa25148c00fcb430f1a9b7b34e0c4293b201bf5edc55019d1f26dcf8bf62216", "Title": "github.com/coredns/coredns: CoreDNS: DNS access control bypass due to plugin execution order flaw", "Description": "CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a logical vulnerability in CoreDNS allows DNS access controls to be bypassed due to the default execution order of plugins. Security plugins such as acl are evaluated before the rewrite plugin, resulting in a Time-of-Check Time-of-Use (TOCTOU) flaw. This issue has been patched in version 1.14.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "azure": 3, "cbl-mariner": 3, "ghsa": 3, "nvd": 2, "photon": 2, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "V3Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", "V3Score": 6.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "V3Score": 7.7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:25127", "https://access.redhat.com/errata/RHSA-2026:36873", "https://access.redhat.com/errata/RHSA-2026:8151", "https://access.redhat.com/security/cve/CVE-2026-26017", "https://bugzilla.redhat.com/show_bug.cgi?id=2445244", "https://github.com/coredns/coredns", "https://github.com/coredns/coredns/releases/tag/v1.14.2", "https://github.com/coredns/coredns/security/advisories/GHSA-c9v3-4pv7-87pr", "https://nvd.nist.gov/vuln/detail/CVE-2026-26017", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26017.json", "https://www.cve.org/CVERecord?id=CVE-2026-26017" ], "PublishedDate": "2026-03-06T16:16:10.397Z", "LastModifiedDate": "2026-07-15T02:18:59.347Z" }, { "VulnerabilityID": "CVE-2026-26018", "VendorIDs": [ "GHSA-h75p-j8xm-m278" ], "PkgID": "github.com/coredns/coredns@v1.12.2", "PkgName": "github.com/coredns/coredns", "PkgIdentifier": { "PURL": "pkg:golang/github.com/coredns/coredns@v1.12.2", "UID": "cb5a5653784d2b34" }, "InstalledVersion": "v1.12.2", "FixedVersion": "1.14.2", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-26018", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Go", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" }, "Fingerprint": "sha256:e4f0a7f389e5ac8600e13b51da5e430d0d5ed7ea3710b9242fb4f84196db1124", "Title": "github.com/coredns/coredns: CoreDNS: Denial of Service vulnerability due to predictable pseudo-random number generation", "Description": "CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a denial of service vulnerability exists in CoreDNS's loop detection plugin that allows an attacker to crash the DNS server by sending specially crafted DNS queries. The vulnerability stems from the use of a predictable pseudo-random number generator (PRNG) for generating a secret query name, combined with a fatal error handler that terminates the entire process. This issue has been patched in version 1.14.2.", "Severity": "HIGH", "CweIDs": [ "CWE-337", "CWE-400", "CWE-770", "CWE-1241" ], "VendorSeverity": { "azure": 3, "cbl-mariner": 3, "ghsa": 3, "photon": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:25127", "https://access.redhat.com/errata/RHSA-2026:36873", "https://access.redhat.com/errata/RHSA-2026:8151", "https://access.redhat.com/security/cve/CVE-2026-26018", "https://bugzilla.redhat.com/show_bug.cgi?id=2445242", "https://github.com/coredns/coredns", "https://github.com/coredns/coredns/releases/tag/v1.14.2", "https://github.com/coredns/coredns/security/advisories/GHSA-h75p-j8xm-m278", "https://nvd.nist.gov/vuln/detail/CVE-2026-26018", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26018.json", "https://www.cve.org/CVERecord?id=CVE-2026-26018" ], "PublishedDate": "2026-03-06T16:16:10.557Z", "LastModifiedDate": "2026-07-15T02:18:59.577Z" }, { "VulnerabilityID": "CVE-2026-32934", "VendorIDs": [ "GHSA-2wpx-qpw2-g5h5" ], "PkgID": "github.com/coredns/coredns@v1.12.2", "PkgName": "github.com/coredns/coredns", "PkgIdentifier": { "PURL": "pkg:golang/github.com/coredns/coredns@v1.12.2", "UID": "cb5a5653784d2b34" }, "InstalledVersion": "v1.12.2", "FixedVersion": "1.14.3", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-32934", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Go", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" }, "Fingerprint": "sha256:bc158cc330c6d1c8012b5f29f373527c59a0b11048341e31760527685f243912", "Title": "coredns: github.com/coredns/coredns: CoreDNS: Denial of Service due to unbounded resource growth in DNS-over-QUIC (DoQ) stream handling", "Description": "CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the DNS-over-QUIC (DoQ) server can be driven into unbounded goroutine and memory growth by a remote client that opens many QUIC streams and sends only 1 byte per stream. When the worker pool is full, CoreDNS still spawns a goroutine per accepted stream to wait for a worker token. Additionally, active workers block indefinitely in io.ReadFull() with no per-stream read deadline, allowing an attacker to pin all workers by sending a single byte so the read blocks waiting for the second byte of the DoQ length prefix. This enables an unauthenticated remote attacker to cause memory exhaustion and OOM-kill. This issue has been fixed in version 1.14.3. No known workarounds exist.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "azure": 3, "ghsa": 3, "nvd": 3, "photon": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-32934", "https://github.com/coredns/coredns", "https://github.com/coredns/coredns/releases/tag/v1.14.3", "https://github.com/coredns/coredns/security/advisories/GHSA-2wpx-qpw2-g5h5", "https://github.com/coredns/coredns/security/advisories/GHSA-cvx7-x8pj-x2gw", "https://nvd.nist.gov/vuln/detail/CVE-2026-32934", "https://www.cve.org/CVERecord?id=CVE-2026-32934" ], "PublishedDate": "2026-05-05T20:16:35.853Z", "LastModifiedDate": "2026-07-25T11:10:00.1Z" }, { "VulnerabilityID": "CVE-2026-32936", "VendorIDs": [ "GHSA-63cw-r7xf-jmwr" ], "PkgID": "github.com/coredns/coredns@v1.12.2", "PkgName": "github.com/coredns/coredns", "PkgIdentifier": { "PURL": "pkg:golang/github.com/coredns/coredns@v1.12.2", "UID": "cb5a5653784d2b34" }, "InstalledVersion": "v1.12.2", "FixedVersion": "1.14.3", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-32936", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Go", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" }, "Fingerprint": "sha256:b0bfa043cc892e0b2acb1f468188181f44f0321aa6f71c41aaef6adf68d3caeb", "Title": "github.com/coredns/coredns: CoreDNS: Denial of Service via oversized DNS-over-HTTPS GET requests", "Description": "CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the DNS-over-HTTPS (DoH) GET path accepts oversized dns= query parameter values and performs URL query parsing, base64 decoding, and DNS message unpacking before rejecting the request. Unlike the POST path, which applies a bounded read via http.MaxBytesReader limited to 65536 bytes, the GET path has no equivalent size validation before expensive processing. A remote, unauthenticated attacker can repeatedly send oversized DoH GET requests to force high CPU usage, large transient memory allocations, and elevated garbage-collection pressure, leading to denial of service. This issue has been fixed in version 1.14.3.", "Severity": "HIGH", "CweIDs": [ "CWE-400" ], "VendorSeverity": { "azure": 3, "ghsa": 3, "nvd": 3, "photon": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-32936", "https://github.com/coredns/coredns", "https://github.com/coredns/coredns/releases/tag/v1.14.3", "https://github.com/coredns/coredns/security/advisories/GHSA-63cw-r7xf-jmwr", "https://nvd.nist.gov/vuln/detail/CVE-2026-32936", "https://www.cve.org/CVERecord?id=CVE-2026-32936" ], "PublishedDate": "2026-05-05T20:16:36.01Z", "LastModifiedDate": "2026-07-25T11:10:00.1Z" }, { "VulnerabilityID": "CVE-2026-33190", "VendorIDs": [ "GHSA-qhmp-q7xh-99rh" ], "PkgID": "github.com/coredns/coredns@v1.12.2", "PkgName": "github.com/coredns/coredns", "PkgIdentifier": { "PURL": "pkg:golang/github.com/coredns/coredns@v1.12.2", "UID": "cb5a5653784d2b34" }, "InstalledVersion": "v1.12.2", "FixedVersion": "1.14.3", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33190", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Go", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" }, "Fingerprint": "sha256:b85b4edbad1f2f2953b263b4fbccb492f9aa4eedd916a0b652868952b12bd484", "Title": "github.com/coredns/coredns: CoreDNS: Authentication bypass via flawed TSIG plugin verification on non-plain-DNS transports", "Description": "CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the tsig plugin can be bypassed on non-plain-DNS transports (DoT, DoH, DoH3, DoQ, and gRPC) because it trusts the transport writer's TsigStatus() instead of performing verification itself. The DoH and DoH3 writer's TsigStatus() always returns nil, the DoT server does not set TsigSecret on the dns.Server, and the DoQ and gRPC writers also unconditionally return nil. This allows an unauthenticated remote client to bypass TSIG-based authentication and access resources intended to be restricted behind a tsig require all policy. Plain DNS over TCP and UDP are not affected. This issue has been fixed in version 1.14.3.", "Severity": "HIGH", "CweIDs": [ "CWE-303" ], "VendorSeverity": { "azure": 3, "ghsa": 3, "nvd": 3, "photon": 3, "redhat": 1 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-33190", "https://github.com/coredns/coredns", "https://github.com/coredns/coredns/releases/tag/v1.14.3", "https://github.com/coredns/coredns/security/advisories/GHSA-qhmp-q7xh-99rh", "https://nvd.nist.gov/vuln/detail/CVE-2026-33190", "https://www.cve.org/CVERecord?id=CVE-2026-33190" ], "PublishedDate": "2026-05-05T20:16:36.167Z", "LastModifiedDate": "2026-07-24T23:10:00.563Z" }, { "VulnerabilityID": "CVE-2026-33489", "VendorIDs": [ "GHSA-h8mm-c463-wjq3" ], "PkgID": "github.com/coredns/coredns@v1.12.2", "PkgName": "github.com/coredns/coredns", "PkgIdentifier": { "PURL": "pkg:golang/github.com/coredns/coredns@v1.12.2", "UID": "cb5a5653784d2b34" }, "InstalledVersion": "v1.12.2", "FixedVersion": "1.14.3", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33489", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Go", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" }, "Fingerprint": "sha256:407ec99ec42215b9c2be9543106e53c69f27971acbb684e2f89f80e0e9a5f8b0", "Title": "CoreDNS: github.com/coredns/coredns: CoreDNS: Information disclosure via incorrect ACL stanza selection in transfer plugin", "Description": "CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the transfer plugin can select the wrong ACL stanza when both a parent zone and a more-specific subzone are configured. The longestMatch() function in plugin/transfer/transfer.go uses a lexicographic string comparison instead of an actual longest-suffix match to select the winning zone. As a result, a permissive parent-zone transfer rule can override a restrictive subzone rule depending on zone name ordering (e.g., \"example.org.\" \u003e \"a.example.org.\" lexicographically). This allows an unauthorized remote client to perform AXFR/IXFR for the subzone and retrieve its full zone contents. This issue has been fixed in version 1.14.3.", "Severity": "HIGH", "CweIDs": [ "CWE-863" ], "VendorSeverity": { "azure": 3, "ghsa": 3, "nvd": 3, "photon": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-33489", "https://github.com/coredns/coredns", "https://github.com/coredns/coredns/releases/tag/v1.14.3", "https://github.com/coredns/coredns/security/advisories/GHSA-h8mm-c463-wjq3", "https://nvd.nist.gov/vuln/detail/CVE-2026-33489", "https://www.cve.org/CVERecord?id=CVE-2026-33489" ], "PublishedDate": "2026-05-05T20:16:36.627Z", "LastModifiedDate": "2026-07-24T23:10:00.563Z" }, { "VulnerabilityID": "CVE-2026-35579", "VendorIDs": [ "GHSA-vp29-5652-4fw9" ], "PkgID": "github.com/coredns/coredns@v1.12.2", "PkgName": "github.com/coredns/coredns", "PkgIdentifier": { "PURL": "pkg:golang/github.com/coredns/coredns@v1.12.2", "UID": "cb5a5653784d2b34" }, "InstalledVersion": "v1.12.2", "FixedVersion": "1.14.3", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-35579", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Go", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" }, "Fingerprint": "sha256:74625b8f2ac44649b4c9873e5811ec72779ad6d4eb1cecd79521ad965dcb9b5d", "Title": "github.com/coredns/coredns: CoreDNS: Authentication bypass allows unauthorized access to TSIG-protected functionalities", "Description": "CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 transport implementations incorrectly handle TSIG authentication. For gRPC and QUIC, the server checks whether the TSIG key name exists in the configuration but never calls dns.TsigVerify() to validate the HMAC. If the key name matches a configured key, the tsigStatus field remains nil and the tsig plugin treats the request as successfully authenticated regardless of the MAC value. For DoH and DoH3, the issue is more severe: the DoHWriter.TsigStatus() method unconditionally returns nil, and the server never inspects the TSIG record at all. Any request containing a TSIG record is treated as authenticated over DoH and DoH3, even if the key name is invalid and the MAC is arbitrary.\n\nAn unauthenticated network attacker can exploit this to bypass TSIG-protected functionality such as AXFR/IXFR zone transfers, dynamic DNS updates, or other TSIG-gated plugin behavior. The DoH and DoH3 variants have a lower exploitation bar because the attacker does not need to know a valid TSIG key name.\n\nThis issue has been fixed in version 1.14.3. As a workaround, disable gRPC, QUIC, DoH, and DoH3 listeners where TSIG authentication is required, or restrict network-level access to affected transport ports to trusted sources only.", "Severity": "HIGH", "CweIDs": [ "CWE-287", "CWE-303" ], "VendorSeverity": { "azure": 3, "ghsa": 3, "nvd": 4, "photon": 4, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:25127", "https://access.redhat.com/security/cve/CVE-2026-35579", "https://bugzilla.redhat.com/show_bug.cgi?id=2466905", "https://github.com/coredns/coredns", "https://github.com/coredns/coredns/releases/tag/v1.14.3", "https://github.com/coredns/coredns/security/advisories/GHSA-vp29-5652-4fw9", "https://nvd.nist.gov/vuln/detail/CVE-2026-35579", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35579.json", "https://www.cve.org/CVERecord?id=CVE-2026-35579" ], "PublishedDate": "2026-05-05T21:16:22.247Z", "LastModifiedDate": "2026-07-24T21:10:00.143Z" }, { "VulnerabilityID": "CVE-2026-82399", "VendorIDs": [ "GHSA-mrg3-qvqr-jw29" ], "PkgID": "github.com/coredns/coredns@v1.12.2", "PkgName": "github.com/coredns/coredns", "PkgIdentifier": { "PURL": "pkg:golang/github.com/coredns/coredns@v1.12.2", "UID": "cb5a5653784d2b34" }, "InstalledVersion": "v1.12.2", "FixedVersion": "1.14.7", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-82399", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Go", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" }, "Fingerprint": "sha256:16874a574408f574d30bb7ea8ec6b363dea6612b48357379b2704bcb5a08febc", "Title": "github.com/coredns/coredns: CoreDNS: Denial of Service due to unauthenticated memory exhaustion in custom transports", "Description": "CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC request paths in plugin/pkg/doh/doh.go, core/dnsserver/server_quic.go, and core/dnsserver/server_grpc.go call dns.Msg.Unpack on attacker-controlled DNS section counts before dns.DefaultMsgAcceptFunc validates the fixed header. An unauthenticated client can use DNS name compression and excessive section counts to amplify allocation before the plugin chain, so plugin-level rate limiting cannot prevent concurrent requests from exhausting memory and terminating CoreDNS. The ordinary UDP and TCP listeners are not affected because they validate the header first. This issue is fixed in version 1.14.7.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "azure": 3, "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-82399", "https://github.com/coredns/coredns", "https://github.com/coredns/coredns/commit/530b0a5ff2ad68cc0421f10dd93568945cc671c9", "https://github.com/coredns/coredns/releases/tag/v1.14.7", "https://github.com/coredns/coredns/security/advisories/GHSA-mrg3-qvqr-jw29", "https://nvd.nist.gov/vuln/detail/CVE-2026-82399", "https://www.cve.org/CVERecord?id=CVE-2026-82399" ], "PublishedDate": "2026-09-16T19:17:44.627Z", "LastModifiedDate": "2026-09-24T21:16:28.12Z" }, { "VulnerabilityID": "CVE-2026-86003", "VendorIDs": [ "GHSA-9gm5-9rfh-m6vx" ], "PkgID": "github.com/coredns/coredns@v1.12.2", "PkgName": "github.com/coredns/coredns", "PkgIdentifier": { "PURL": "pkg:golang/github.com/coredns/coredns@v1.12.2", "UID": "cb5a5653784d2b34" }, "InstalledVersion": "v1.12.2", "FixedVersion": "1.14.7", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86003", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Go", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" }, "Fingerprint": "sha256:b5647a247073001dbb21e477cf28c851dc4356b806013306ecb03a0f5c529594", "Title": "github.com/coredns/coredns: CoreDNS: Unauthorized DNS record modification via unvalidated DNS updates", "Description": "CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC listeners in plugin/pkg/doh/doh.go, core/dnsserver/server_quic.go, and core/dnsserver/server_grpc.go call dns.Msg.Unpack without the dns.DefaultMsgAcceptFunc request policy used by UDP, TCP, and DNS-over-TLS. An unauthenticated client can send an RFC 2136 UPDATE that the proxy or forward plugin passes unchanged to an update-capable upstream. If that upstream trusts CoreDNS's source address or connection and does not require an attacker-unknown end-to-end TSIG, the request appears to originate from CoreDNS and can add, replace, or delete DNS records, redirect traffic, take over names, alter mail routing, or disrupt the writable zone. This issue is fixed in version 1.14.7.", "Severity": "HIGH", "CweIDs": [ "CWE-441" ], "VendorSeverity": { "azure": 2, "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-86003", "https://github.com/coredns/coredns", "https://github.com/coredns/coredns/commit/530b0a5ff2ad68cc0421f10dd93568945cc671c9", "https://github.com/coredns/coredns/releases/tag/v1.14.7", "https://github.com/coredns/coredns/security/advisories/GHSA-9gm5-9rfh-m6vx", "https://nvd.nist.gov/vuln/detail/CVE-2026-86003", "https://www.cve.org/CVERecord?id=CVE-2026-86003" ], "PublishedDate": "2026-09-16T19:17:51.76Z", "LastModifiedDate": "2026-09-24T21:24:11.25Z" }, { "VulnerabilityID": "CVE-2026-116587", "VendorIDs": [ "GHSA-mgcc-cww5-fp2q" ], "PkgID": "github.com/go-jose/go-jose/v4@v4.1.0", "PkgName": "github.com/go-jose/go-jose/v4", "PkgIdentifier": { "PURL": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.0", "UID": "6e9b869d876de727" }, "InstalledVersion": "v4.1.0", "FixedVersion": "4.1.6", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-116587", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Go", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" }, "Fingerprint": "sha256:c70d9eb99c5a542250fefed3804f220949c441754fed949e6ba72ee6ea380c50", "Title": "github.com/go-jose/go-jose: go-jose: Denial of Service via crafted RSA parameters in JWKs", "Description": "Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.6, go-jose parses attacker-controlled RSA modulus and prime values from JWKs without enforcing size and consistency bounds before passing them to crypto/rsa.PrivateKey.Validate. On Go 1.24 and later, crafted large or degenerate RSA parameters can make that validation consume cubic CPU time, allowing remote denial of service in applications that parse JWKs from untrusted sources. This issue is fixed in version 4.1.6.", "Severity": "HIGH", "CweIDs": [ "CWE-407", "CWE-770" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-116587", "https://github.com/go-jose/go-jose", "https://github.com/go-jose/go-jose/commit/a0111f82742fa92bceec9ede40845e73319e6230", "https://github.com/go-jose/go-jose/releases/tag/v4.1.6", "https://github.com/go-jose/go-jose/security/advisories/GHSA-mgcc-cww5-fp2q", "https://nvd.nist.gov/vuln/detail/CVE-2026-116587", "https://www.cve.org/CVERecord?id=CVE-2026-116587" ], "PublishedDate": "2026-10-26T22:16:55.193Z", "LastModifiedDate": "2026-10-27T15:16:40.99Z" }, { "VulnerabilityID": "CVE-2026-34986", "VendorIDs": [ "GHSA-78h2-9frx-2jm8" ], "PkgID": "github.com/go-jose/go-jose/v4@v4.1.0", "PkgName": "github.com/go-jose/go-jose/v4", "PkgIdentifier": { "PURL": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.0", "UID": "6e9b869d876de727" }, "InstalledVersion": "v4.1.0", "FixedVersion": "4.1.4", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-34986", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Go", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" }, "Fingerprint": "sha256:db09c0206e73368f36185ae30147197d567379864140ae8c85fd26e2f117f43c", "Title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object", "Description": "Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.", "Severity": "HIGH", "CweIDs": [ "CWE-248", "CWE-131" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10125", "https://access.redhat.com/errata/RHSA-2026:10130", "https://access.redhat.com/errata/RHSA-2026:10135", "https://access.redhat.com/errata/RHSA-2026:10175", "https://access.redhat.com/errata/RHSA-2026:11070", "https://access.redhat.com/errata/RHSA-2026:11217", "https://access.redhat.com/errata/RHSA-2026:11512", "https://access.redhat.com/errata/RHSA-2026:11688", "https://access.redhat.com/errata/RHSA-2026:11856", "https://access.redhat.com/errata/RHSA-2026:11916", "https://access.redhat.com/errata/RHSA-2026:11996", "https://access.redhat.com/errata/RHSA-2026:12116", "https://access.redhat.com/errata/RHSA-2026:12277", "https://access.redhat.com/errata/RHSA-2026:12279", "https://access.redhat.com/errata/RHSA-2026:13791", "https://access.redhat.com/errata/RHSA-2026:13829", "https://access.redhat.com/errata/RHSA-2026:16696", "https://access.redhat.com/errata/RHSA-2026:17040", "https://access.redhat.com/errata/RHSA-2026:17121", "https://access.redhat.com/errata/RHSA-2026:17123", "https://access.redhat.com/errata/RHSA-2026:17287", "https://access.redhat.com/errata/RHSA-2026:17448", "https://access.redhat.com/errata/RHSA-2026:17458", "https://access.redhat.com/errata/RHSA-2026:17459", "https://access.redhat.com/errata/RHSA-2026:17468", "https://access.redhat.com/errata/RHSA-2026:17474", "https://access.redhat.com/errata/RHSA-2026:17547", "https://access.redhat.com/errata/RHSA-2026:17550", "https://access.redhat.com/errata/RHSA-2026:17598", "https://access.redhat.com/errata/RHSA-2026:17789", "https://access.redhat.com/errata/RHSA-2026:18584", "https://access.redhat.com/errata/RHSA-2026:18585", "https://access.redhat.com/errata/RHSA-2026:19017", "https://access.redhat.com/errata/RHSA-2026:19099", "https://access.redhat.com/errata/RHSA-2026:19108", "https://access.redhat.com/errata/RHSA-2026:19135", "https://access.redhat.com/errata/RHSA-2026:19173", "https://access.redhat.com/errata/RHSA-2026:19186", "https://access.redhat.com/errata/RHSA-2026:19353", "https://access.redhat.com/errata/RHSA-2026:19375", "https://access.redhat.com/errata/RHSA-2026:19712", "https://access.redhat.com/errata/RHSA-2026:19719", "https://access.redhat.com/errata/RHSA-2026:19720", "https://access.redhat.com/errata/RHSA-2026:19721", "https://access.redhat.com/errata/RHSA-2026:20034", "https://access.redhat.com/errata/RHSA-2026:20041", "https://access.redhat.com/errata/RHSA-2026:20569", "https://access.redhat.com/errata/RHSA-2026:20607", "https://access.redhat.com/errata/RHSA-2026:20609", "https://access.redhat.com/errata/RHSA-2026:20946", "https://access.redhat.com/errata/RHSA-2026:21017", "https://access.redhat.com/errata/RHSA-2026:21703", "https://access.redhat.com/errata/RHSA-2026:21709", "https://access.redhat.com/errata/RHSA-2026:21769", "https://access.redhat.com/errata/RHSA-2026:21931", "https://access.redhat.com/errata/RHSA-2026:21932", "https://access.redhat.com/errata/RHSA-2026:22258", "https://access.redhat.com/errata/RHSA-2026:22260", "https://access.redhat.com/errata/RHSA-2026:22347", "https://access.redhat.com/errata/RHSA-2026:22423", "https://access.redhat.com/errata/RHSA-2026:22450", "https://access.redhat.com/errata/RHSA-2026:22465", "https://access.redhat.com/errata/RHSA-2026:22629", "https://access.redhat.com/errata/RHSA-2026:22714", "https://access.redhat.com/errata/RHSA-2026:22840", "https://access.redhat.com/errata/RHSA-2026:22937", "https://access.redhat.com/errata/RHSA-2026:23228", "https://access.redhat.com/errata/RHSA-2026:23241", "https://access.redhat.com/errata/RHSA-2026:23345", "https://access.redhat.com/errata/RHSA-2026:23361", "https://access.redhat.com/errata/RHSA-2026:24471", "https://access.redhat.com/errata/RHSA-2026:24475", "https://access.redhat.com/errata/RHSA-2026:24477", "https://access.redhat.com/errata/RHSA-2026:24479", "https://access.redhat.com/errata/RHSA-2026:24482", "https://access.redhat.com/errata/RHSA-2026:24484", "https://access.redhat.com/errata/RHSA-2026:24853", "https://access.redhat.com/errata/RHSA-2026:24977", "https://access.redhat.com/errata/RHSA-2026:25127", "https://access.redhat.com/errata/RHSA-2026:25187", "https://access.redhat.com/errata/RHSA-2026:25194", "https://access.redhat.com/errata/RHSA-2026:25206", "https://access.redhat.com/errata/RHSA-2026:25248", "https://access.redhat.com/errata/RHSA-2026:25250", "https://access.redhat.com/errata/RHSA-2026:25252", "https://access.redhat.com/errata/RHSA-2026:26054", "https://access.redhat.com/errata/RHSA-2026:26568", "https://access.redhat.com/errata/RHSA-2026:26585", "https://access.redhat.com/errata/RHSA-2026:26636", "https://access.redhat.com/errata/RHSA-2026:27001", "https://access.redhat.com/errata/RHSA-2026:27004", "https://access.redhat.com/errata/RHSA-2026:27044", "https://access.redhat.com/errata/RHSA-2026:27063", "https://access.redhat.com/errata/RHSA-2026:27856", "https://access.redhat.com/errata/RHSA-2026:28198", "https://access.redhat.com/errata/RHSA-2026:29854", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:32991", "https://access.redhat.com/errata/RHSA-2026:33722", "https://access.redhat.com/errata/RHSA-2026:34099", "https://access.redhat.com/errata/RHSA-2026:34192", "https://access.redhat.com/errata/RHSA-2026:34196", "https://access.redhat.com/errata/RHSA-2026:34197", "https://access.redhat.com/errata/RHSA-2026:34364", "https://access.redhat.com/errata/RHSA-2026:34794", "https://access.redhat.com/errata/RHSA-2026:35833", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:40984", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41941", "https://access.redhat.com/errata/RHSA-2026:41944", "https://access.redhat.com/errata/RHSA-2026:44267", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:48085", "https://access.redhat.com/errata/RHSA-2026:48676", "https://access.redhat.com/errata/RHSA-2026:48790", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:54602", "https://access.redhat.com/errata/RHSA-2026:56366", "https://access.redhat.com/errata/RHSA-2026:56431", "https://access.redhat.com/errata/RHSA-2026:56968", "https://access.redhat.com/errata/RHSA-2026:57013", "https://access.redhat.com/errata/RHSA-2026:57408", "https://access.redhat.com/errata/RHSA-2026:57487", "https://access.redhat.com/errata/RHSA-2026:57590", "https://access.redhat.com/errata/RHSA-2026:60023", "https://access.redhat.com/errata/RHSA-2026:60444", "https://access.redhat.com/errata/RHSA-2026:60449", "https://access.redhat.com/errata/RHSA-2026:60452", "https://access.redhat.com/errata/RHSA-2026:62260", "https://access.redhat.com/errata/RHSA-2026:62548", "https://access.redhat.com/errata/RHSA-2026:62550", "https://access.redhat.com/errata/RHSA-2026:65838", "https://access.redhat.com/errata/RHSA-2026:65906", "https://access.redhat.com/errata/RHSA-2026:66385", "https://access.redhat.com/errata/RHSA-2026:8490", "https://access.redhat.com/errata/RHSA-2026:8491", "https://access.redhat.com/errata/RHSA-2026:8493", "https://access.redhat.com/errata/RHSA-2026:9385", "https://access.redhat.com/errata/RHSA-2026:9388", "https://access.redhat.com/errata/RHSA-2026:9448", "https://access.redhat.com/errata/RHSA-2026:9453", "https://access.redhat.com/security/cve/CVE-2026-34986", "https://bugzilla.redhat.com/2445356", "https://bugzilla.redhat.com/2449833", "https://bugzilla.redhat.com/2455470", "https://bugzilla.redhat.com/2456333", "https://bugzilla.redhat.com/2456335", "https://bugzilla.redhat.com/2456336", "https://bugzilla.redhat.com/2456338", "https://bugzilla.redhat.com/2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2434432", "https://bugzilla.redhat.com/show_bug.cgi?id=2437111", "https://bugzilla.redhat.com/show_bug.cgi?id=2445345", "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "https://bugzilla.redhat.com/show_bug.cgi?id=2449833", "https://bugzilla.redhat.com/show_bug.cgi?id=2455470", "https://bugzilla.redhat.com/show_bug.cgi?id=2456336", "https://bugzilla.redhat.com/show_bug.cgi?id=2456338", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27137", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32282", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32283", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33186", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34986", "https://errata.almalinux.org/9/ALSA-2026-19353.html", "https://errata.rockylinux.org/RLSA-2026:23228", "https://github.com/go-jose/go-jose", "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8", "https://linux.oracle.com/cve/CVE-2026-34986.html", "https://linux.oracle.com/errata/ELSA-2026-48790.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-34986", "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34986.json", "https://www.cve.org/CVERecord?id=CVE-2026-34986" ], "PublishedDate": "2026-04-06T17:17:11.87Z", "LastModifiedDate": "2026-10-23T23:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-63209", "VendorIDs": [ "GHSA-259r-337f-4rfw" ], "PkgID": "github.com/klauspost/compress@v1.18.0", "PkgName": "github.com/klauspost/compress", "PkgIdentifier": { "PURL": "pkg:golang/github.com/klauspost/compress@v1.18.0", "UID": "4aedf97a5cb74b50" }, "InstalledVersion": "v1.18.0", "FixedVersion": "1.18.7", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-63209", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Go", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" }, "Fingerprint": "sha256:657a240d31a002b95dc3703e311c649ffdb86b8ff016aee64be5c63812fbcfa3", "Title": "github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing", "Description": "compress provides various compression algorithms. Prior to version 1.18.7, a signed integer overflow vulnerability in s2.NewDict() allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding MaxInt64. When Dict.Encode() is subsequently called, the overflowed negative repeat value causes an out-of-bounds memory access via unsafe.Pointer arithmetic, crashing the process with SIGSEGV. This issue has been patched in version 1.18.7.", "Severity": "HIGH", "CweIDs": [ "CWE-190", "CWE-787" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-63209", "https://github.com/klauspost/compress", "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536", "https://github.com/klauspost/compress/commit/8668e357e776d5152ed62f33c17f21b8690664fa", "https://github.com/klauspost/compress/pull/1163", "https://github.com/klauspost/compress/releases/tag/v1.18.7", "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw", "https://nvd.nist.gov/vuln/detail/CVE-2026-63209", "https://www.cve.org/CVERecord?id=CVE-2026-63209" ], "PublishedDate": "2026-09-29T15:17:27.13Z", "LastModifiedDate": "2026-09-30T19:57:08.043Z" }, { "VulnerabilityID": "CVE-2026-24051", "VendorIDs": [ "GHSA-9h8m-3fm2-qjrq" ], "PkgID": "go.opentelemetry.io/otel/sdk@v1.35.0", "PkgName": "go.opentelemetry.io/otel/sdk", "PkgIdentifier": { "PURL": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.35.0", "UID": "b9ca47d5d92202cb" }, "InstalledVersion": "v1.35.0", "FixedVersion": "1.40.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-24051", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Go", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" }, "Fingerprint": "sha256:3a1898580a865de3f6303b0f651c122658c70cae529dbfde45b1388b6d6a1313", "Title": "opentelemetry-go: OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking", "Description": "OpenTelemetry-Go is the Go implementation of OpenTelemetry. The OpenTelemetry Go SDK in version v1.20.0-1.39.0 is vulnerable to Path Hijacking (Untrusted Search Paths) on macOS/Darwin systems. The resource detection code in sdk/resource/host_id.go executes the ioreg system command using a search path. An attacker with the ability to locally modify the PATH environment variable can achieve Arbitrary Code Execution (ACE) within the context of the application. A fix was released with v1.40.0.", "Severity": "HIGH", "CweIDs": [ "CWE-426" ], "VendorSeverity": { "ghsa": 3, "redhat": 1 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-24051", "https://github.com/open-telemetry/opentelemetry-go", "https://github.com/open-telemetry/opentelemetry-go/commit/d45961bcda453fcbdb6469c22d6e88a1f9970a53", "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-9h8m-3fm2-qjrq", "https://nvd.nist.gov/vuln/detail/CVE-2026-24051", "https://pkg.go.dev/vuln/GO-2026-4394", "https://www.cve.org/CVERecord?id=CVE-2026-24051" ], "PublishedDate": "2026-02-02T23:16:07.963Z", "LastModifiedDate": "2026-10-19T11:53:38.957Z" }, { "VulnerabilityID": "CVE-2026-39883", "VendorIDs": [ "GHSA-hfvc-g4fc-pqhx" ], "PkgID": "go.opentelemetry.io/otel/sdk@v1.35.0", "PkgName": "go.opentelemetry.io/otel/sdk", "PkgIdentifier": { "PURL": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.35.0", "UID": "b9ca47d5d92202cb" }, "InstalledVersion": "v1.35.0", "FixedVersion": "1.43.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39883", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Go", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" }, "Fingerprint": "sha256:c4134ce2e2c2dc62b467376a0ede974cc8051002563fc4cba5ab85320f758846", "Title": "github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Arbitrary code execution via PATH hijacking on BSD/Solaris", "Description": "OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.15.0 to 1.42.0, the fix for CVE-2026-24051 changed the Darwin ioreg command to use an absolute path but left the BSD kenv command using a bare name, allowing the same PATH hijacking attack on BSD and Solaris platforms. This vulnerability is fixed in 1.43.0.", "Severity": "HIGH", "CweIDs": [ "CWE-426" ], "VendorSeverity": { "ghsa": 3, "nvd": 3, "photon": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.3 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "http://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0", "https://access.redhat.com/errata/RHSA-2026:26254", "https://access.redhat.com/errata/RHSA-2026:26257", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:63140", "https://access.redhat.com/security/cve/CVE-2026-39883", "https://bugzilla.redhat.com/show_bug.cgi?id=2456718", "https://github.com/open-telemetry/opentelemetry-go", "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hfvc-g4fc-pqhx", "https://nvd.nist.gov/vuln/detail/CVE-2026-39883", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39883.json", "https://www.cve.org/CVERecord?id=CVE-2026-39883" ], "PublishedDate": "2026-04-08T21:17:00.697Z", "LastModifiedDate": "2026-09-09T13:19:48.837Z" }, { "VulnerabilityID": "CVE-2025-47913", "VendorIDs": [ "GO-2025-4116" ], "PkgID": "golang.org/x/crypto@v0.38.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.38.0", "UID": "e6ac58f59e0a1906" }, "InstalledVersion": "v0.38.0", "FixedVersion": "0.43.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-47913", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:59c99baf8ceb68d1f574c0eac879bfb370350a488ff239c2213151f2f4c06812", "Title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS", "Description": "SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.", "Severity": "HIGH", "CweIDs": [ "CWE-617" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "cbl-mariner": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:0470", "https://access.redhat.com/security/cve/CVE-2025-47913", "https://bugzilla.redhat.com/2414943", "https://bugzilla.redhat.com/show_bug.cgi?id=2414943", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47913", "https://errata.almalinux.org/9/ALSA-2026-0470.html", "https://errata.rockylinux.org/RLSA-2026:0470", "https://github.com/advisories/GHSA-56w8-48fp-6mgv", "https://github.com/advisories/GHSA-hcg3-q754-cr77", "https://go-review.googlesource.com/c/crypto/+/700295", "https://go.dev/cl/700295", "https://go.dev/issue/75178", "https://linux.oracle.com/cve/CVE-2025-47913.html", "https://linux.oracle.com/errata/ELSA-2026-0753.html", "https://nvd.nist.gov/vuln/detail/CVE-2025-47913", "https://pkg.go.dev/vuln/GO-2025-4116", "https://ubuntu.com/security/notices/USN-8519-1", "https://www.cve.org/CVERecord?id=CVE-2025-47913" ], "PublishedDate": "2025-11-13T22:15:51.28Z", "LastModifiedDate": "2026-10-18T20:10:00.11Z" }, { "VulnerabilityID": "CVE-2026-39828", "VendorIDs": [ "GO-2026-5014" ], "PkgID": "golang.org/x/crypto@v0.38.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.38.0", "UID": "e6ac58f59e0a1906" }, "InstalledVersion": "v0.38.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39828", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:b1bd236320cc9309a9a600939d90b59ba5c005c73f0dfe40147d8478b6661e13", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions", "Description": "When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.", "Severity": "HIGH", "CweIDs": [ "CWE-295", "CWE-281" ], "VendorSeverity": { "amazon": 2, "azure": 2, "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:36105", "https://access.redhat.com/errata/RHSA-2026:36167", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:37268", "https://access.redhat.com/errata/RHSA-2026:37271", "https://access.redhat.com/errata/RHSA-2026:37272", "https://access.redhat.com/errata/RHSA-2026:37278", "https://access.redhat.com/errata/RHSA-2026:37286", "https://access.redhat.com/errata/RHSA-2026:37296", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:40969", "https://access.redhat.com/errata/RHSA-2026:40972", "https://access.redhat.com/errata/RHSA-2026:40974", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51038", "https://access.redhat.com/errata/RHSA-2026:52857", "https://access.redhat.com/errata/RHSA-2026:52910", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66521", "https://access.redhat.com/security/cve/CVE-2026-39828", "https://bugzilla.redhat.com/show_bug.cgi?id=2480687", "https://go.dev/cl/781621", "https://go.dev/issue/79562", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://nvd.nist.gov/vuln/detail/CVE-2026-39828", "https://pkg.go.dev/vuln/GO-2026-5014", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39828.json", "https://www.cve.org/CVERecord?id=CVE-2026-39828" ], "PublishedDate": "2026-05-22T04:16:22.19Z", "LastModifiedDate": "2026-09-11T13:17:51.26Z" }, { "VulnerabilityID": "CVE-2026-39829", "VendorIDs": [ "GO-2026-5018" ], "PkgID": "golang.org/x/crypto@v0.38.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.38.0", "UID": "e6ac58f59e0a1906" }, "InstalledVersion": "v0.38.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39829", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:e6fc7e93c78e0b3eed15143d91b8e0ef97a7410043a90ed0c8b6643276f20907", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters", "Description": "The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.", "Severity": "HIGH", "CweIDs": [ "CWE-347", "CWE-1284" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:29455", "https://access.redhat.com/errata/RHSA-2026:35833", "https://access.redhat.com/errata/RHSA-2026:36199", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:37072", "https://access.redhat.com/errata/RHSA-2026:37123", "https://access.redhat.com/errata/RHSA-2026:37268", "https://access.redhat.com/errata/RHSA-2026:37271", "https://access.redhat.com/errata/RHSA-2026:37272", "https://access.redhat.com/errata/RHSA-2026:37278", "https://access.redhat.com/errata/RHSA-2026:37286", "https://access.redhat.com/errata/RHSA-2026:37296", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:40969", "https://access.redhat.com/errata/RHSA-2026:40972", "https://access.redhat.com/errata/RHSA-2026:40974", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47949", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:48693", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:52857", "https://access.redhat.com/errata/RHSA-2026:52910", "https://access.redhat.com/errata/RHSA-2026:54400", "https://access.redhat.com/errata/RHSA-2026:54432", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57365", "https://access.redhat.com/errata/RHSA-2026:57801", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59559", "https://access.redhat.com/errata/RHSA-2026:59593", "https://access.redhat.com/errata/RHSA-2026:60446", "https://access.redhat.com/errata/RHSA-2026:60454", "https://access.redhat.com/errata/RHSA-2026:60477", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61314", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:65964", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:67450", "https://access.redhat.com/security/cve/CVE-2026-39829", "https://bugzilla.redhat.com/2480680", "https://bugzilla.redhat.com/2480681", "https://bugzilla.redhat.com/2480685", "https://bugzilla.redhat.com/2480688", "https://bugzilla.redhat.com/2480757", "https://bugzilla.redhat.com/2480761", "https://bugzilla.redhat.com/2493620", "https://bugzilla.redhat.com/show_bug.cgi?id=2480680", "https://bugzilla.redhat.com/show_bug.cgi?id=2480681", "https://bugzilla.redhat.com/show_bug.cgi?id=2480685", "https://bugzilla.redhat.com/show_bug.cgi?id=2480688", "https://bugzilla.redhat.com/show_bug.cgi?id=2480757", "https://bugzilla.redhat.com/show_bug.cgi?id=2480761", "https://bugzilla.redhat.com/show_bug.cgi?id=2493620", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25681", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27136", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39829", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39832", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39835", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42508", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-57231", "https://errata.almalinux.org/9/ALSA-2026-37123.html", "https://errata.rockylinux.org/RLSA-2026:37123", "https://go.dev/cl/781641", "https://go.dev/cl/781661", "https://go.dev/issue/79565", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://linux.oracle.com/cve/CVE-2026-39829.html", "https://linux.oracle.com/errata/ELSA-2026-37123.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39829", "https://pkg.go.dev/vuln/GO-2026-5018", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39829.json", "https://www.cve.org/CVERecord?id=CVE-2026-39829" ], "PublishedDate": "2026-05-22T04:16:22.31Z", "LastModifiedDate": "2026-09-16T13:17:52.28Z" }, { "VulnerabilityID": "CVE-2026-39830", "VendorIDs": [ "GO-2026-5017" ], "PkgID": "golang.org/x/crypto@v0.38.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.38.0", "UID": "e6ac58f59e0a1906" }, "InstalledVersion": "v0.38.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39830", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:5fabe407bbcbc2e85b94c4613315a3061727c934124cc917f34ac799b2207a11", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses", "Description": "A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by calling Close(), resulting in a resource leak per connection. Unsolicited global responses are now discarded.", "Severity": "HIGH", "CweIDs": [ "CWE-119", "CWE-772" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:29455", "https://access.redhat.com/errata/RHSA-2026:35833", "https://access.redhat.com/errata/RHSA-2026:36199", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:37072", "https://access.redhat.com/errata/RHSA-2026:37268", "https://access.redhat.com/errata/RHSA-2026:37271", "https://access.redhat.com/errata/RHSA-2026:37272", "https://access.redhat.com/errata/RHSA-2026:37275", "https://access.redhat.com/errata/RHSA-2026:37278", "https://access.redhat.com/errata/RHSA-2026:37286", "https://access.redhat.com/errata/RHSA-2026:37296", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:40969", "https://access.redhat.com/errata/RHSA-2026:40972", "https://access.redhat.com/errata/RHSA-2026:40974", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:52857", "https://access.redhat.com/errata/RHSA-2026:52910", "https://access.redhat.com/errata/RHSA-2026:54400", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57801", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61314", "https://access.redhat.com/errata/RHSA-2026:65964", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66521", "https://access.redhat.com/errata/RHSA-2026:67450", "https://access.redhat.com/errata/RHSA-2026:69961", "https://access.redhat.com/security/cve/CVE-2026-39830", "https://bugzilla.redhat.com/2480684", "https://bugzilla.redhat.com/2508234", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2480684", "https://bugzilla.redhat.com/show_bug.cgi?id=2508234", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2518147", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17106", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19730", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39830", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-69961.html", "https://errata.rockylinux.org/RLSA-2026:69961", "https://github.com/golang/crypto/commit/4e7a7384ecbc8d519f6f4c11b36fa9d761fc8946", "https://go.dev/cl/781640", "https://go.dev/cl/781664", "https://go.dev/issue/79564", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://linux.oracle.com/cve/CVE-2026-39830.html", "https://linux.oracle.com/errata/ELSA-2026-69961.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39830", "https://pkg.go.dev/vuln/GO-2026-5017", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39830.json", "https://ubuntu.com/security/notices/USN-8447-1", "https://ubuntu.com/security/notices/USN-8447-2", "https://ubuntu.com/security/notices/USN-8447-3", "https://www.cve.org/CVERecord?id=CVE-2026-39830" ], "PublishedDate": "2026-05-22T04:16:22.44Z", "LastModifiedDate": "2026-09-16T13:17:53.697Z" }, { "VulnerabilityID": "CVE-2026-39831", "VendorIDs": [ "GO-2026-5019" ], "PkgID": "golang.org/x/crypto@v0.38.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.38.0", "UID": "e6ac58f59e0a1906" }, "InstalledVersion": "v0.38.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39831", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:c042a247224ec7f65969afc1f1390a2a46fe43c63a4fddc8cd7021dcb6db9a26", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check", "Description": "The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a \"no-touch-required\" extension in Permissions.Extensions from PublicKeyCallback.", "Severity": "HIGH", "CweIDs": [ "CWE-862" ], "VendorSeverity": { "amazon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-39831", "https://github.com/golang/crypto/commit/b61cf853a89d82cad68da5e12a6beca2116f8456", "https://go.dev/cl/781662", "https://go.dev/issue/79566", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://nvd.nist.gov/vuln/detail/CVE-2026-39831", "https://pkg.go.dev/vuln/GO-2026-5019", "https://ubuntu.com/security/notices/USN-8447-1", "https://ubuntu.com/security/notices/USN-8447-3", "https://www.cve.org/CVERecord?id=CVE-2026-39831" ], "PublishedDate": "2026-05-22T04:16:22.553Z", "LastModifiedDate": "2026-07-23T16:10:00.137Z" }, { "VulnerabilityID": "CVE-2026-39832", "VendorIDs": [ "GHSA-f5wc-c3c7-36mc", "GO-2026-5006" ], "PkgID": "golang.org/x/crypto@v0.38.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.38.0", "UID": "e6ac58f59e0a1906" }, "InstalledVersion": "v0.38.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39832", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:d4d28ed7856cf4cb9aaed3bf848519a3155db6967da8a4dd83d70146b95349d8", "Title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions", "Description": "When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request. Destination restrictions were silently stripped when forwarding keys, allowing unrestricted use of the key on the remote host. The client now serializes all constraint extensions. Additionally, the in-memory keyring returned by NewKeyring() now rejects keys with unsupported constraint extensions instead of silently ignoring them.", "Severity": "HIGH", "CweIDs": [ "CWE-502", "CWE-281" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "V3Score": 8.7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:35833", "https://access.redhat.com/errata/RHSA-2026:36199", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:37072", "https://access.redhat.com/errata/RHSA-2026:37123", "https://access.redhat.com/errata/RHSA-2026:37271", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:37410", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:40972", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:52857", "https://access.redhat.com/errata/RHSA-2026:52910", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:59579", "https://access.redhat.com/errata/RHSA-2026:61314", "https://access.redhat.com/errata/RHSA-2026:66521", "https://access.redhat.com/errata/RHSA-2026:67450", "https://access.redhat.com/security/cve/CVE-2026-39832", "https://bugzilla.redhat.com/2480680", "https://bugzilla.redhat.com/2480685", "https://bugzilla.redhat.com/show_bug.cgi?id=2480680", "https://bugzilla.redhat.com/show_bug.cgi?id=2480685", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39832", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39835", "https://errata.almalinux.org/9/ALSA-2026-37410.html", "https://errata.rockylinux.org/RLSA-2026:37410", "https://github.com/golang/crypto/commit/e3d1254f1e7e60baa086142c46174bf6d8d0fe50", "https://go.dev/cl/778640", "https://go.dev/cl/778641", "https://go.dev/cl/778642", "https://go.dev/issue/79435", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://linux.oracle.com/cve/CVE-2026-39832.html", "https://linux.oracle.com/errata/ELSA-2026-37410.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39832", "https://pkg.go.dev/vuln/GO-2026-5006", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39832.json", "https://ubuntu.com/security/notices/USN-8447-1", "https://www.cve.org/CVERecord?id=CVE-2026-39832" ], "PublishedDate": "2026-05-22T04:16:22.663Z", "LastModifiedDate": "2026-09-15T12:17:40.787Z" }, { "VulnerabilityID": "CVE-2026-39835", "VendorIDs": [ "GO-2026-5015" ], "PkgID": "golang.org/x/crypto@v0.38.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.38.0", "UID": "e6ac58f59e0a1906" }, "InstalledVersion": "v0.38.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39835", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:5af20ca8b04c73622d1edb38bfc55b2d4b4b9ed17b7e8f6630945b776a6ad17d", "Title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate", "Description": "SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.", "Severity": "HIGH", "CweIDs": [ "CWE-295", "CWE-476" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:36199", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:37072", "https://access.redhat.com/errata/RHSA-2026:37123", "https://access.redhat.com/errata/RHSA-2026:37268", "https://access.redhat.com/errata/RHSA-2026:37271", "https://access.redhat.com/errata/RHSA-2026:37272", "https://access.redhat.com/errata/RHSA-2026:37286", "https://access.redhat.com/errata/RHSA-2026:37296", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:37410", "https://access.redhat.com/errata/RHSA-2026:38504", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:40969", "https://access.redhat.com/errata/RHSA-2026:40972", "https://access.redhat.com/errata/RHSA-2026:40974", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47949", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51036", "https://access.redhat.com/errata/RHSA-2026:51038", "https://access.redhat.com/errata/RHSA-2026:52857", "https://access.redhat.com/errata/RHSA-2026:52910", "https://access.redhat.com/errata/RHSA-2026:54525", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59593", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:62260", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66521", "https://access.redhat.com/security/cve/CVE-2026-39835", "https://bugzilla.redhat.com/2480680", "https://bugzilla.redhat.com/2480685", "https://bugzilla.redhat.com/show_bug.cgi?id=2480680", "https://bugzilla.redhat.com/show_bug.cgi?id=2480685", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39832", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39835", "https://errata.almalinux.org/9/ALSA-2026-37410.html", "https://errata.rockylinux.org/RLSA-2026:37410", "https://go.dev/cl/781660", "https://go.dev/issue/79563", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://linux.oracle.com/cve/CVE-2026-39835.html", "https://linux.oracle.com/errata/ELSA-2026-38504.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39835", "https://pkg.go.dev/vuln/GO-2026-5015", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39835.json", "https://www.cve.org/CVERecord?id=CVE-2026-39835" ], "PublishedDate": "2026-05-22T04:16:24.53Z", "LastModifiedDate": "2026-09-18T13:18:12.74Z" }, { "VulnerabilityID": "CVE-2026-42508", "VendorIDs": [ "GHSA-5cgq-3rg8-m6cv", "GO-2026-5021" ], "PkgID": "golang.org/x/crypto@v0.38.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.38.0", "UID": "e6ac58f59e0a1906" }, "InstalledVersion": "v0.38.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42508", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:2de257b5d5fd8d54eb01a770dc4362de1d41a8edd16b719c262a82b8d6d0c1a1", "Title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey", "Description": "Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.", "Severity": "HIGH", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:35833", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:37072", "https://access.redhat.com/errata/RHSA-2026:37123", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47737", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51288", "https://access.redhat.com/errata/RHSA-2026:52857", "https://access.redhat.com/errata/RHSA-2026:52910", "https://access.redhat.com/errata/RHSA-2026:54400", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61314", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66521", "https://access.redhat.com/errata/RHSA-2026:67450", "https://access.redhat.com/security/cve/CVE-2026-42508", "https://bugzilla.redhat.com/2480680", "https://bugzilla.redhat.com/2480681", "https://bugzilla.redhat.com/2480685", "https://bugzilla.redhat.com/2480688", "https://bugzilla.redhat.com/2480757", "https://bugzilla.redhat.com/2480761", "https://bugzilla.redhat.com/2493620", "https://bugzilla.redhat.com/show_bug.cgi?id=2480680", "https://bugzilla.redhat.com/show_bug.cgi?id=2480681", "https://bugzilla.redhat.com/show_bug.cgi?id=2480685", "https://bugzilla.redhat.com/show_bug.cgi?id=2480688", "https://bugzilla.redhat.com/show_bug.cgi?id=2480757", "https://bugzilla.redhat.com/show_bug.cgi?id=2480761", "https://bugzilla.redhat.com/show_bug.cgi?id=2493620", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25681", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27136", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39829", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39832", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39835", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42508", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-57231", "https://errata.almalinux.org/9/ALSA-2026-37123.html", "https://errata.rockylinux.org/RLSA-2026:37123", "https://github.com/golang/crypto/commit/f717e29698a271c548239ed56bf5dd9516d6f7e8", "https://go.dev/cl/781220", "https://go.dev/issue/79568", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://linux.oracle.com/cve/CVE-2026-42508.html", "https://linux.oracle.com/errata/ELSA-2026-37123.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-42508", "https://pkg.go.dev/vuln/GO-2026-5021", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42508.json", "https://ubuntu.com/security/notices/USN-8447-1", "https://ubuntu.com/security/notices/USN-8447-2", "https://www.cve.org/CVERecord?id=CVE-2026-42508" ], "PublishedDate": "2026-05-22T04:16:25.44Z", "LastModifiedDate": "2026-09-15T12:17:45.777Z" }, { "VulnerabilityID": "CVE-2026-46595", "VendorIDs": [ "GO-2026-5023" ], "PkgID": "golang.org/x/crypto@v0.38.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.38.0", "UID": "e6ac58f59e0a1906" }, "InstalledVersion": "v0.38.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-46595", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:6fe1cff08354a535d657f6114dbab29da12277ccfc1e4677a162c4a516fa6192", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation", "Description": "Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.", "Severity": "HIGH", "CweIDs": [ "CWE-863", "CWE-303" ], "VendorSeverity": { "amazon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:33524", "https://access.redhat.com/errata/RHSA-2026:33531", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:37275", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:47737", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59558", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61314", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66521", "https://access.redhat.com/security/cve/CVE-2026-46595", "https://bugzilla.redhat.com/show_bug.cgi?id=2480689", "https://github.com/golang/crypto/commit/533fb3f7e4a5ae23f69d1837cd851d35ff5b76ce", "https://go.dev/cl/781642", "https://go.dev/issue/79570", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://nvd.nist.gov/vuln/detail/CVE-2026-46595", "https://pkg.go.dev/vuln/GO-2026-5023", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46595.json", "https://ubuntu.com/security/notices/USN-8447-1", "https://ubuntu.com/security/notices/USN-8447-3", "https://www.cve.org/CVERecord?id=CVE-2026-46595" ], "PublishedDate": "2026-05-22T04:16:25.55Z", "LastModifiedDate": "2026-09-11T13:18:12.367Z" }, { "VulnerabilityID": "CVE-2026-46597", "VendorIDs": [ "GO-2026-5013" ], "PkgID": "golang.org/x/crypto@v0.38.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.38.0", "UID": "e6ac58f59e0a1906" }, "InstalledVersion": "v0.38.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-46597", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:702a16eb74840e69d4ddd9a9308da2cf573780a0812722f2b4059beae048f6d7", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs", "Description": "An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.", "Severity": "HIGH", "CweIDs": [ "CWE-704" ], "VendorSeverity": { "amazon": 2, "azure": 3, "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-46597", "https://go.dev/cl/781620", "https://go.dev/issue/79561", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://nvd.nist.gov/vuln/detail/CVE-2026-46597", "https://pkg.go.dev/vuln/GO-2026-5013", "https://www.cve.org/CVERecord?id=CVE-2026-46597" ], "PublishedDate": "2026-05-22T04:16:26.003Z", "LastModifiedDate": "2026-07-23T16:10:00.137Z" }, { "VulnerabilityID": "CVE-2026-56854", "VendorIDs": [ "GO-2026-6303" ], "PkgID": "golang.org/x/crypto@v0.38.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.38.0", "UID": "e6ac58f59e0a1906" }, "InstalledVersion": "v0.38.0", "FixedVersion": "0.55.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56854", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:d7fe6e5d30ffa215f19bc63b18a07732341f7f9de39f7aeecabef118ce95d13b", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions", "Description": "The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback, NoClientAuthCallback, and GSSAPIWithMICConfig.AllowLogin callbacks were not validated against the client's remote address, so a source-address restriction set by those callbacks was silently ignored. The check is now applied to the Permissions returned by any authentication callback.", "Severity": "HIGH", "CweIDs": [ "CWE-863" ], "VendorSeverity": { "amazon": 3, "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "V3Score": 6.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-56854", "https://go.dev/cl/797040", "https://go.dev/issue/80213", "https://nvd.nist.gov/vuln/detail/CVE-2026-56854", "https://pkg.go.dev/vuln/GO-2026-6303", "https://www.cve.org/CVERecord?id=CVE-2026-56854" ], "PublishedDate": "2026-08-28T16:18:17.607Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-25681", "VendorIDs": [ "GO-2026-5029" ], "PkgID": "golang.org/x/net@v0.40.0", "PkgName": "golang.org/x/net", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/net@v0.40.0", "UID": "85f9a88b9d9ac04e" }, "InstalledVersion": "v0.40.0", "FixedVersion": "0.55.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-25681", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:41d7e66b55d99735f75e460b5b4dc320d8b99bceb7fc8da4f455b388cc1e3125", "Title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting", "Description": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.", "Severity": "HIGH", "CweIDs": [ "CWE-1021" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69293", "https://access.redhat.com/security/cve/CVE-2026-25681", "https://bugzilla.redhat.com/2480757", "https://bugzilla.redhat.com/2480761", "https://bugzilla.redhat.com/2480762", "https://bugzilla.redhat.com/2484830", "https://bugzilla.redhat.com/2493622", "https://bugzilla.redhat.com/show_bug.cgi?id=2480757", "https://bugzilla.redhat.com/show_bug.cgi?id=2480761", "https://bugzilla.redhat.com/show_bug.cgi?id=2480762", "https://bugzilla.redhat.com/show_bug.cgi?id=2484830", "https://bugzilla.redhat.com/show_bug.cgi?id=2493622", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25681", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27136", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41178", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42502", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55677", "https://errata.almalinux.org/9/ALSA-2026-69293.html", "https://errata.rockylinux.org/RLSA-2026:69293", "https://go.dev/cl/781703", "https://go.dev/issue/79574", "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8", "https://linux.oracle.com/cve/CVE-2026-25681.html", "https://linux.oracle.com/errata/ELSA-2026-69293.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-25681", "https://pkg.go.dev/vuln/GO-2026-5029", "https://www.cve.org/CVERecord?id=CVE-2026-25681" ], "PublishedDate": "2026-05-22T16:16:19.863Z", "LastModifiedDate": "2026-07-23T16:10:00.137Z" }, { "VulnerabilityID": "CVE-2026-27136", "VendorIDs": [ "GO-2026-5030" ], "PkgID": "golang.org/x/net@v0.40.0", "PkgName": "golang.org/x/net", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/net@v0.40.0", "UID": "85f9a88b9d9ac04e" }, "InstalledVersion": "v0.40.0", "FixedVersion": "0.55.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27136", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:1d1e7d842bbdc0d86631d65d22b4f93018ff0146867f4ddded9f7393c2980d85", "Title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass", "Description": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.", "Severity": "HIGH", "CweIDs": [ "CWE-1021" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69293", "https://access.redhat.com/security/cve/CVE-2026-27136", "https://bugzilla.redhat.com/2480757", "https://bugzilla.redhat.com/2480761", "https://bugzilla.redhat.com/2480762", "https://bugzilla.redhat.com/2484830", "https://bugzilla.redhat.com/2493622", "https://bugzilla.redhat.com/show_bug.cgi?id=2480757", "https://bugzilla.redhat.com/show_bug.cgi?id=2480761", "https://bugzilla.redhat.com/show_bug.cgi?id=2480762", "https://bugzilla.redhat.com/show_bug.cgi?id=2484830", "https://bugzilla.redhat.com/show_bug.cgi?id=2493622", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25681", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27136", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41178", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42502", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55677", "https://errata.almalinux.org/9/ALSA-2026-69293.html", "https://errata.rockylinux.org/RLSA-2026:69293", "https://go.dev/cl/781685", "https://go.dev/issue/79575", "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8", "https://linux.oracle.com/cve/CVE-2026-27136.html", "https://linux.oracle.com/errata/ELSA-2026-69293.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-27136", "https://pkg.go.dev/vuln/GO-2026-5030", "https://www.cve.org/CVERecord?id=CVE-2026-27136" ], "PublishedDate": "2026-05-22T16:16:20.087Z", "LastModifiedDate": "2026-07-23T16:10:00.137Z" }, { "VulnerabilityID": "CVE-2026-33814", "VendorIDs": [ "GO-2026-4918" ], "PkgID": "golang.org/x/net@v0.40.0", "PkgName": "golang.org/x/net", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/net@v0.40.0", "UID": "85f9a88b9d9ac04e" }, "InstalledVersion": "v0.40.0", "FixedVersion": "0.53.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33814", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:54e7cf0a570afd3e22d112b498a679d82d35aad8da42d60b7ef06ff31d2541ba", "Title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame", "Description": "When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.", "Severity": "HIGH", "CweIDs": [ "CWE-835", "CWE-606" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22112", "https://access.redhat.com/errata/RHSA-2026:22120", "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:33120", "https://access.redhat.com/errata/RHSA-2026:33123", "https://access.redhat.com/errata/RHSA-2026:33142", "https://access.redhat.com/errata/RHSA-2026:33150", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:56854", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57365", "https://access.redhat.com/errata/RHSA-2026:57367", "https://access.redhat.com/errata/RHSA-2026:57408", "https://access.redhat.com/errata/RHSA-2026:57545", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:57845", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60023", "https://access.redhat.com/errata/RHSA-2026:60025", "https://access.redhat.com/errata/RHSA-2026:60441", "https://access.redhat.com/errata/RHSA-2026:60442", "https://access.redhat.com/errata/RHSA-2026:60446", "https://access.redhat.com/errata/RHSA-2026:60447", "https://access.redhat.com/errata/RHSA-2026:60454", "https://access.redhat.com/errata/RHSA-2026:60477", "https://access.redhat.com/errata/RHSA-2026:60478", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:60668", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:62410", "https://access.redhat.com/errata/RHSA-2026:62550", "https://access.redhat.com/errata/RHSA-2026:62551", "https://access.redhat.com/errata/RHSA-2026:63046", "https://access.redhat.com/errata/RHSA-2026:63047", "https://access.redhat.com/errata/RHSA-2026:63048", "https://access.redhat.com/errata/RHSA-2026:63050", "https://access.redhat.com/errata/RHSA-2026:63091", "https://access.redhat.com/errata/RHSA-2026:63096", "https://access.redhat.com/errata/RHSA-2026:63097", "https://access.redhat.com/errata/RHSA-2026:63103", "https://access.redhat.com/errata/RHSA-2026:63104", "https://access.redhat.com/errata/RHSA-2026:63636", "https://access.redhat.com/errata/RHSA-2026:63637", "https://access.redhat.com/errata/RHSA-2026:63639", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:66350", "https://access.redhat.com/security/cve/CVE-2026-33814", "https://bugzilla.redhat.com/2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467810", "https://bugzilla.redhat.com/show_bug.cgi?id=2467811", "https://bugzilla.redhat.com/show_bug.cgi?id=2467813", "https://bugzilla.redhat.com/show_bug.cgi?id=2467815", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2467823", "https://bugzilla.redhat.com/show_bug.cgi?id=2467825", "https://bugzilla.redhat.com/show_bug.cgi?id=2467826", "https://bugzilla.redhat.com/show_bug.cgi?id=2467827", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33814", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39817", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39819", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39823", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39825", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39826", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39836", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42501", "https://errata.almalinux.org/9/ALSA-2026-22121.html", "https://errata.rockylinux.org/RLSA-2026:22121", "https://github.com/golang/go/issues/78476", "https://go-review.googlesource.com/c/go/+/761581", "https://go-review.googlesource.com/c/net/+/761640", "https://go.dev/cl/761581", "https://go.dev/cl/761640", "https://go.dev/issue/78476", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-33814.html", "https://linux.oracle.com/errata/ELSA-2026-22121.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-33814", "https://pkg.go.dev/vuln/GO-2026-4918", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33814.json", "https://ubuntu.com/security/notices/USN-8430-1", "https://ubuntu.com/security/notices/USN-8471-1", "https://ubuntu.com/security/notices/USN-8472-1", "https://ubuntu.com/security/notices/USN-8473-1", "https://www.cve.org/CVERecord?id=CVE-2026-33814" ], "PublishedDate": "2026-05-07T20:16:42.88Z", "LastModifiedDate": "2026-10-26T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2026-39821", "VendorIDs": [ "GO-2026-5026" ], "PkgID": "golang.org/x/net@v0.40.0", "PkgName": "golang.org/x/net", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/net@v0.40.0", "UID": "85f9a88b9d9ac04e" }, "InstalledVersion": "v0.40.0", "FixedVersion": "0.55.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39821", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:aeaabe96e520a13f92b5cd8855daffc25918a703ab8d8f220f278ab432444ca7", "Title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing", "Description": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\".", "Severity": "HIGH", "CweIDs": [ "CWE-1289" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 4, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:30853", "https://access.redhat.com/errata/RHSA-2026:30854", "https://access.redhat.com/errata/RHSA-2026:30855", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33524", "https://access.redhat.com/errata/RHSA-2026:33531", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:34357", "https://access.redhat.com/errata/RHSA-2026:34359", "https://access.redhat.com/errata/RHSA-2026:34364", "https://access.redhat.com/errata/RHSA-2026:34789", "https://access.redhat.com/errata/RHSA-2026:35826", "https://access.redhat.com/errata/RHSA-2026:35827", "https://access.redhat.com/errata/RHSA-2026:35828", "https://access.redhat.com/errata/RHSA-2026:35829", "https://access.redhat.com/errata/RHSA-2026:35830", "https://access.redhat.com/errata/RHSA-2026:35831", "https://access.redhat.com/errata/RHSA-2026:35993", "https://access.redhat.com/errata/RHSA-2026:35994", "https://access.redhat.com/errata/RHSA-2026:36105", "https://access.redhat.com/errata/RHSA-2026:36167", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:37435", "https://access.redhat.com/errata/RHSA-2026:37436", "https://access.redhat.com/errata/RHSA-2026:38995", "https://access.redhat.com/errata/RHSA-2026:39005", "https://access.redhat.com/errata/RHSA-2026:39573", "https://access.redhat.com/errata/RHSA-2026:39879", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41030", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41930", "https://access.redhat.com/errata/RHSA-2026:42043", "https://access.redhat.com/errata/RHSA-2026:42047", "https://access.redhat.com/errata/RHSA-2026:42048", "https://access.redhat.com/errata/RHSA-2026:42049", "https://access.redhat.com/errata/RHSA-2026:42050", "https://access.redhat.com/errata/RHSA-2026:42051", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42079", "https://access.redhat.com/errata/RHSA-2026:42080", "https://access.redhat.com/errata/RHSA-2026:42082", "https://access.redhat.com/errata/RHSA-2026:42132", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42150", "https://access.redhat.com/errata/RHSA-2026:42151", "https://access.redhat.com/errata/RHSA-2026:42240", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:42852", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:44622", "https://access.redhat.com/errata/RHSA-2026:44624", "https://access.redhat.com/errata/RHSA-2026:46395", "https://access.redhat.com/errata/RHSA-2026:47149", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47737", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50843", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51112", "https://access.redhat.com/errata/RHSA-2026:51187", "https://access.redhat.com/errata/RHSA-2026:51194", "https://access.redhat.com/errata/RHSA-2026:51341", "https://access.redhat.com/errata/RHSA-2026:52826", "https://access.redhat.com/errata/RHSA-2026:53374", "https://access.redhat.com/errata/RHSA-2026:53412", "https://access.redhat.com/errata/RHSA-2026:53413", "https://access.redhat.com/errata/RHSA-2026:53415", "https://access.redhat.com/errata/RHSA-2026:53530", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:54395", "https://access.redhat.com/errata/RHSA-2026:54401", "https://access.redhat.com/errata/RHSA-2026:54435", "https://access.redhat.com/errata/RHSA-2026:54441", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:54580", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:56143", "https://access.redhat.com/errata/RHSA-2026:56223", "https://access.redhat.com/errata/RHSA-2026:56340", "https://access.redhat.com/errata/RHSA-2026:56431", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57541", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:57845", "https://access.redhat.com/errata/RHSA-2026:59546", "https://access.redhat.com/errata/RHSA-2026:59549", "https://access.redhat.com/errata/RHSA-2026:59562", "https://access.redhat.com/errata/RHSA-2026:60315", "https://access.redhat.com/errata/RHSA-2026:60354", "https://access.redhat.com/errata/RHSA-2026:60387", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61245", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:62549", "https://access.redhat.com/errata/RHSA-2026:63134", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:65153", "https://access.redhat.com/errata/RHSA-2026:65359", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65851", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:66016", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66350", "https://access.redhat.com/errata/RHSA-2026:66432", "https://access.redhat.com/errata/RHSA-2026:67149", "https://access.redhat.com/errata/RHSA-2026:67159", "https://access.redhat.com/errata/RHSA-2026:67160", "https://access.redhat.com/errata/RHSA-2026:67287", "https://access.redhat.com/errata/RHSA-2026:67319", "https://access.redhat.com/errata/RHSA-2026:67517", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/security/cve/CVE-2026-39821", "https://bugzilla.redhat.com/2467809", "https://bugzilla.redhat.com/2467820", "https://bugzilla.redhat.com/2480756", "https://bugzilla.redhat.com/2484204", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-65153.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/767220", "https://go.dev/issue/78760", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8", "https://linux.oracle.com/cve/CVE-2026-39821.html", "https://linux.oracle.com/errata/ELSA-2026-66432-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39821", "https://pkg.go.dev/vuln/GO-2026-5026", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json", "https://ubuntu.com/security/notices/USN-8416-1", "https://ubuntu.com/security/notices/USN-8883-1", "https://ubuntu.com/security/notices/USN-8883-2", "https://ubuntu.com/security/notices/USN-8900-1", "https://ubuntu.com/security/notices/USN-8914-1", "https://www.cve.org/CVERecord?id=CVE-2026-39821" ], "PublishedDate": "2026-05-22T16:16:20.41Z", "LastModifiedDate": "2026-09-17T12:18:05.767Z" }, { "VulnerabilityID": "CVE-2026-46600", "VendorIDs": [ "GO-2026-5942" ], "PkgID": "golang.org/x/net@v0.40.0", "PkgName": "golang.org/x/net", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/net@v0.40.0", "UID": "85f9a88b9d9ac04e" }, "InstalledVersion": "v0.40.0", "FixedVersion": "0.56.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-46600", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:ab1f80a7f88e1fe18ae0ee8c8f50b5265de8dab6528711be19e43970bc1170fc", "Title": "golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing", "Description": "Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "azure": 2, "bitnami": 3, "redhat": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-46600", "https://go.dev/cl/786345", "https://go.dev/issue/79795", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://nvd.nist.gov/vuln/detail/CVE-2026-46600", "https://pkg.go.dev/vuln/GO-2026-5942", "https://www.cve.org/CVERecord?id=CVE-2026-46600" ], "PublishedDate": "2026-07-21T20:17:01.213Z", "LastModifiedDate": "2026-10-24T19:10:00.127Z" }, { "VulnerabilityID": "CVE-2026-78661", "VendorIDs": [ "GO-2026-6860" ], "PkgID": "golang.org/x/net@v0.40.0", "PkgName": "golang.org/x/net", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/net@v0.40.0", "UID": "85f9a88b9d9ac04e" }, "InstalledVersion": "v0.40.0", "FixedVersion": "0.62.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78661", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:8f779bae67c0063f40bfaef202079eff593dc3f9ab9500ee2bffd10715264887", "Title": "golang.org/x/net/html: golang.org/x/net/html: Denial of Service via crafted HTML input", "Description": "When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as \"a\u003c/x\u003e\") caused O(n^2) allocations and byte copies. Accumulate coalesced text in per-node byte slices during parsing and materialize Data strings once at the end of parse.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-78661", "https://go.dev/cl/849365", "https://go.dev/issue/82224", "https://groups.google.com/g/golang-announce/c/sqrs2vTx_Xs", "https://nvd.nist.gov/vuln/detail/CVE-2026-78661", "https://pkg.go.dev/vuln/GO-2026-6860", "https://www.cve.org/CVERecord?id=CVE-2026-78661" ], "PublishedDate": "2026-10-27T22:18:05.93Z", "LastModifiedDate": "2026-11-04T17:17:37.673Z" }, { "VulnerabilityID": "CVE-2026-78669", "VendorIDs": [ "GO-2026-6611" ], "PkgID": "golang.org/x/net@v0.40.0", "PkgName": "golang.org/x/net", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/net@v0.40.0", "UID": "85f9a88b9d9ac04e" }, "InstalledVersion": "v0.40.0", "FixedVersion": "0.60.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78669", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:ded4fbfd883a26f7d88d063460f94934f64d07adb157f0f9849c673269ed2cc7", "Title": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames", "Description": "A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.", "Severity": "HIGH", "CweIDs": [ "CWE-405" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93617", "https://access.redhat.com/security/cve/CVE-2026-78669", "https://bugzilla.redhat.com/2548334", "https://bugzilla.redhat.com/2548336", "https://bugzilla.redhat.com/2548341", "https://bugzilla.redhat.com/2548344", "https://bugzilla.redhat.com/2556068", "https://bugzilla.redhat.com/show_bug.cgi?id=2548334", "https://bugzilla.redhat.com/show_bug.cgi?id=2548336", "https://bugzilla.redhat.com/show_bug.cgi?id=2548341", "https://bugzilla.redhat.com/show_bug.cgi?id=2548344", "https://bugzilla.redhat.com/show_bug.cgi?id=2556068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78667", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94440", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97031", "https://errata.almalinux.org/9/ALSA-2026-93617.html", "https://errata.rockylinux.org/RLSA-2026:93617", "https://github.com/golang/go/issues/81742", "https://go.dev/cl/847186", "https://go.dev/cl/847308", "https://go.dev/issue/81742", "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI", "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs", "https://linux.oracle.com/cve/CVE-2026-78669.html", "https://linux.oracle.com/errata/ELSA-2026-95519.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78669", "https://pkg.go.dev/vuln/GO-2026-6611", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-78669", "https://www.openwall.com/lists/oss-security/2026/10/08/9" ], "PublishedDate": "2026-10-08T23:17:04.01Z", "LastModifiedDate": "2026-10-09T17:16:49.857Z" }, { "VulnerabilityID": "CVE-2026-56851", "VendorIDs": [ "GO-2026-6629" ], "PkgID": "golang.org/x/text@v0.25.0", "PkgName": "golang.org/x/text", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/text@v0.25.0", "UID": "3718c2074f633615" }, "InstalledVersion": "v0.25.0", "FixedVersion": "0.41.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56851", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:137bbdf12aa067b599b93f0e70806fd7a1ded83788e138b6194406b604af2e18", "Title": "golang.org/x/text: golang.org/x/text: Denial of Service via out-of-bounds slice error in Nickname profile", "Description": "The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "azure": 3, "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-56851", "https://go.dev/cl/793360", "https://go.dev/issue/80112", "https://nvd.nist.gov/vuln/detail/CVE-2026-56851", "https://pkg.go.dev/vuln/GO-2026-6629", "https://www.cve.org/CVERecord?id=CVE-2026-56851" ], "PublishedDate": "2026-10-07T18:17:20.903Z", "LastModifiedDate": "2026-10-08T21:35:53.89Z" }, { "VulnerabilityID": "CVE-2026-56852", "VendorIDs": [ "GO-2026-5970" ], "PkgID": "golang.org/x/text@v0.25.0", "PkgName": "golang.org/x/text", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/text@v0.25.0", "UID": "3718c2074f633615" }, "InstalledVersion": "v0.25.0", "FixedVersion": "0.39.0", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56852", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:7c9a1b77f4de6bad824997a1b1e5fcd6e70a7b08df56cbb3b1f8c50781cc11fd", "Title": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input", "Description": "A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70201", "https://access.redhat.com/security/cve/CVE-2026-56852", "https://bugzilla.redhat.com/2456335", "https://bugzilla.redhat.com/2467809", "https://bugzilla.redhat.com/2504233", "https://bugzilla.redhat.com/2508234", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2456335", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2504233", "https://bugzilla.redhat.com/show_bug.cgi?id=2508234", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2518147", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17106", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19730", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33810", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56852", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/10/ALSA-2026-70201.html", "https://errata.rockylinux.org/RLSA-2026:70201", "https://go.dev/cl/794100", "https://go.dev/issue/80142", "https://linux.oracle.com/cve/CVE-2026-56852.html", "https://linux.oracle.com/errata/ELSA-2026-70201.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56852", "https://pkg.go.dev/vuln/GO-2026-5970", "https://www.cve.org/CVERecord?id=CVE-2026-56852" ], "PublishedDate": "2026-07-21T20:17:02.867Z", "LastModifiedDate": "2026-10-24T19:10:00.127Z" }, { "VulnerabilityID": "CVE-2026-33186", "VendorIDs": [ "GHSA-p77j-4mvh-x3m3" ], "PkgID": "google.golang.org/grpc@v1.72.2", "PkgName": "google.golang.org/grpc", "PkgIdentifier": { "PURL": "pkg:golang/google.golang.org/grpc@v1.72.2", "UID": "b21509ef29e90a88" }, "InstalledVersion": "v1.72.2", "FixedVersion": "1.79.3", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33186", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Go", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" }, "Fingerprint": "sha256:468a5bfe761fc96129fac560a30f119be33f7c758f6dfe025094e404beb3691a", "Title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation", "Description": "gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, \"deny\" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback \"allow\" rule was present. This affects gRPC-Go servers that use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`; AND that have a security policy contains specific \"deny\" rules for canonical paths but allows other requests by default (a fallback \"allow\" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. The fix in version 1.79.3 ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: Use a validating interceptor (recommended mitigation); infrastructure-level normalization; and/or policy hardening.", "Severity": "CRITICAL", "CweIDs": [ "CWE-285", "CWE-551" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 4, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10093", "https://access.redhat.com/errata/RHSA-2026:10094", "https://access.redhat.com/errata/RHSA-2026:10105", "https://access.redhat.com/errata/RHSA-2026:10107", "https://access.redhat.com/errata/RHSA-2026:10125", "https://access.redhat.com/errata/RHSA-2026:10126", "https://access.redhat.com/errata/RHSA-2026:10130", "https://access.redhat.com/errata/RHSA-2026:10131", "https://access.redhat.com/errata/RHSA-2026:10153", "https://access.redhat.com/errata/RHSA-2026:10155", "https://access.redhat.com/errata/RHSA-2026:10158", "https://access.redhat.com/errata/RHSA-2026:10172", "https://access.redhat.com/errata/RHSA-2026:10175", "https://access.redhat.com/errata/RHSA-2026:10698", "https://access.redhat.com/errata/RHSA-2026:10705", "https://access.redhat.com/errata/RHSA-2026:10706", "https://access.redhat.com/errata/RHSA-2026:11070", "https://access.redhat.com/errata/RHSA-2026:11408", "https://access.redhat.com/errata/RHSA-2026:11803", "https://access.redhat.com/errata/RHSA-2026:11856", "https://access.redhat.com/errata/RHSA-2026:11916", "https://access.redhat.com/errata/RHSA-2026:11996", "https://access.redhat.com/errata/RHSA-2026:12116", "https://access.redhat.com/errata/RHSA-2026:12118", "https://access.redhat.com/errata/RHSA-2026:12119", "https://access.redhat.com/errata/RHSA-2026:12277", "https://access.redhat.com/errata/RHSA-2026:12279", "https://access.redhat.com/errata/RHSA-2026:12283", "https://access.redhat.com/errata/RHSA-2026:12337", "https://access.redhat.com/errata/RHSA-2026:13548", "https://access.redhat.com/errata/RHSA-2026:13791", "https://access.redhat.com/errata/RHSA-2026:13829", "https://access.redhat.com/errata/RHSA-2026:14775", "https://access.redhat.com/errata/RHSA-2026:15092", "https://access.redhat.com/errata/RHSA-2026:17123", "https://access.redhat.com/errata/RHSA-2026:17448", "https://access.redhat.com/errata/RHSA-2026:17459", "https://access.redhat.com/errata/RHSA-2026:17468", "https://access.redhat.com/errata/RHSA-2026:17474", "https://access.redhat.com/errata/RHSA-2026:17475", "https://access.redhat.com/errata/RHSA-2026:17598", "https://access.redhat.com/errata/RHSA-2026:17599", "https://access.redhat.com/errata/RHSA-2026:17789", "https://access.redhat.com/errata/RHSA-2026:18068", "https://access.redhat.com/errata/RHSA-2026:18585", "https://access.redhat.com/errata/RHSA-2026:19099", "https://access.redhat.com/errata/RHSA-2026:19108", "https://access.redhat.com/errata/RHSA-2026:19109", "https://access.redhat.com/errata/RHSA-2026:19135", "https://access.redhat.com/errata/RHSA-2026:19207", "https://access.redhat.com/errata/RHSA-2026:19353", "https://access.redhat.com/errata/RHSA-2026:19375", "https://access.redhat.com/errata/RHSA-2026:19712", "https://access.redhat.com/errata/RHSA-2026:19719", "https://access.redhat.com/errata/RHSA-2026:19720", "https://access.redhat.com/errata/RHSA-2026:19721", "https://access.redhat.com/errata/RHSA-2026:20034", "https://access.redhat.com/errata/RHSA-2026:20035", "https://access.redhat.com/errata/RHSA-2026:20041", "https://access.redhat.com/errata/RHSA-2026:20042", "https://access.redhat.com/errata/RHSA-2026:20088", "https://access.redhat.com/errata/RHSA-2026:20089", "https://access.redhat.com/errata/RHSA-2026:20322", "https://access.redhat.com/errata/RHSA-2026:20436", "https://access.redhat.com/errata/RHSA-2026:20943", "https://access.redhat.com/errata/RHSA-2026:20946", "https://access.redhat.com/errata/RHSA-2026:21017", "https://access.redhat.com/errata/RHSA-2026:21657", "https://access.redhat.com/errata/RHSA-2026:21658", "https://access.redhat.com/errata/RHSA-2026:21691", "https://access.redhat.com/errata/RHSA-2026:21692", "https://access.redhat.com/errata/RHSA-2026:21696", "https://access.redhat.com/errata/RHSA-2026:21697", "https://access.redhat.com/errata/RHSA-2026:21703", "https://access.redhat.com/errata/RHSA-2026:21704", "https://access.redhat.com/errata/RHSA-2026:21709", "https://access.redhat.com/errata/RHSA-2026:21710", "https://access.redhat.com/errata/RHSA-2026:21769", "https://access.redhat.com/errata/RHSA-2026:21931", "https://access.redhat.com/errata/RHSA-2026:21932", "https://access.redhat.com/errata/RHSA-2026:22347", "https://access.redhat.com/errata/RHSA-2026:22423", "https://access.redhat.com/errata/RHSA-2026:22450", "https://access.redhat.com/errata/RHSA-2026:22465", "https://access.redhat.com/errata/RHSA-2026:22485", "https://access.redhat.com/errata/RHSA-2026:22645", "https://access.redhat.com/errata/RHSA-2026:22689", "https://access.redhat.com/errata/RHSA-2026:22714", "https://access.redhat.com/errata/RHSA-2026:22800", "https://access.redhat.com/errata/RHSA-2026:22937", "https://access.redhat.com/errata/RHSA-2026:22959", "https://access.redhat.com/errata/RHSA-2026:22961", "https://access.redhat.com/errata/RHSA-2026:23228", "https://access.redhat.com/errata/RHSA-2026:23234", "https://access.redhat.com/errata/RHSA-2026:23235", "https://access.redhat.com/errata/RHSA-2026:23241", "https://access.redhat.com/errata/RHSA-2026:23246", "https://access.redhat.com/errata/RHSA-2026:23247", "https://access.redhat.com/errata/RHSA-2026:23345", "https://access.redhat.com/errata/RHSA-2026:24484", "https://access.redhat.com/errata/RHSA-2026:24506", "https://access.redhat.com/errata/RHSA-2026:24535", "https://access.redhat.com/errata/RHSA-2026:24536", "https://access.redhat.com/errata/RHSA-2026:24759", "https://access.redhat.com/errata/RHSA-2026:24853", "https://access.redhat.com/errata/RHSA-2026:24977", "https://access.redhat.com/errata/RHSA-2026:25009", "https://access.redhat.com/errata/RHSA-2026:25045", "https://access.redhat.com/errata/RHSA-2026:25127", "https://access.redhat.com/errata/RHSA-2026:25182", "https://access.redhat.com/errata/RHSA-2026:25183", "https://access.redhat.com/errata/RHSA-2026:25187", "https://access.redhat.com/errata/RHSA-2026:25194", "https://access.redhat.com/errata/RHSA-2026:25195", "https://access.redhat.com/errata/RHSA-2026:25201", "https://access.redhat.com/errata/RHSA-2026:26412", "https://access.redhat.com/errata/RHSA-2026:26413", "https://access.redhat.com/errata/RHSA-2026:26416", "https://access.redhat.com/errata/RHSA-2026:26420", "https://access.redhat.com/errata/RHSA-2026:26519", "https://access.redhat.com/errata/RHSA-2026:26568", "https://access.redhat.com/errata/RHSA-2026:26997", "https://access.redhat.com/errata/RHSA-2026:26999", "https://access.redhat.com/errata/RHSA-2026:27001", "https://access.redhat.com/errata/RHSA-2026:27004", "https://access.redhat.com/errata/RHSA-2026:27063", "https://access.redhat.com/errata/RHSA-2026:27076", "https://access.redhat.com/errata/RHSA-2026:27712", "https://access.redhat.com/errata/RHSA-2026:27856", "https://access.redhat.com/errata/RHSA-2026:27892", "https://access.redhat.com/errata/RHSA-2026:27893", "https://access.redhat.com/errata/RHSA-2026:27901", "https://access.redhat.com/errata/RHSA-2026:27957", "https://access.redhat.com/errata/RHSA-2026:28047", "https://access.redhat.com/errata/RHSA-2026:28893", "https://access.redhat.com/errata/RHSA-2026:28964", "https://access.redhat.com/errata/RHSA-2026:29079", "https://access.redhat.com/errata/RHSA-2026:29082", "https://access.redhat.com/errata/RHSA-2026:29854", "https://access.redhat.com/errata/RHSA-2026:34049", "https://access.redhat.com/errata/RHSA-2026:34097", "https://access.redhat.com/errata/RHSA-2026:34099", "https://access.redhat.com/errata/RHSA-2026:34100", "https://access.redhat.com/errata/RHSA-2026:34364", "https://access.redhat.com/errata/RHSA-2026:34769", "https://access.redhat.com/errata/RHSA-2026:34794", "https://access.redhat.com/errata/RHSA-2026:34795", "https://access.redhat.com/errata/RHSA-2026:36611", "https://access.redhat.com/errata/RHSA-2026:36621", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:37192", "https://access.redhat.com/errata/RHSA-2026:37275", "https://access.redhat.com/errata/RHSA-2026:37580", "https://access.redhat.com/errata/RHSA-2026:37585", "https://access.redhat.com/errata/RHSA-2026:40022", "https://access.redhat.com/errata/RHSA-2026:40030", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40792", "https://access.redhat.com/errata/RHSA-2026:40795", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:40984", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41941", "https://access.redhat.com/errata/RHSA-2026:41944", "https://access.redhat.com/errata/RHSA-2026:42049", "https://access.redhat.com/errata/RHSA-2026:42051", "https://access.redhat.com/errata/RHSA-2026:42150", "https://access.redhat.com/errata/RHSA-2026:42151", "https://access.redhat.com/errata/RHSA-2026:42240", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:43225", "https://access.redhat.com/errata/RHSA-2026:43227", "https://access.redhat.com/errata/RHSA-2026:43253", "https://access.redhat.com/errata/RHSA-2026:43331", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:44233", "https://access.redhat.com/errata/RHSA-2026:44235", "https://access.redhat.com/errata/RHSA-2026:47728", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:48699", "https://access.redhat.com/errata/RHSA-2026:48790", "https://access.redhat.com/errata/RHSA-2026:50758", "https://access.redhat.com/errata/RHSA-2026:50843", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:53728", "https://access.redhat.com/errata/RHSA-2026:53763", "https://access.redhat.com/errata/RHSA-2026:53773", "https://access.redhat.com/errata/RHSA-2026:53804", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:56366", "https://access.redhat.com/errata/RHSA-2026:56431", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:56854", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:56959", "https://access.redhat.com/errata/RHSA-2026:57013", "https://access.redhat.com/errata/RHSA-2026:57365", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60146", "https://access.redhat.com/errata/RHSA-2026:61245", "https://access.redhat.com/errata/RHSA-2026:6174", "https://access.redhat.com/errata/RHSA-2026:6428", "https://access.redhat.com/errata/RHSA-2026:6564", "https://access.redhat.com/errata/RHSA-2026:6802", "https://access.redhat.com/errata/RHSA-2026:7110", "https://access.redhat.com/errata/RHSA-2026:7128", "https://access.redhat.com/errata/RHSA-2026:7245", "https://access.redhat.com/errata/RHSA-2026:8151", "https://access.redhat.com/errata/RHSA-2026:8338", "https://access.redhat.com/errata/RHSA-2026:8433", "https://access.redhat.com/errata/RHSA-2026:8449", "https://access.redhat.com/errata/RHSA-2026:8483", "https://access.redhat.com/errata/RHSA-2026:8484", "https://access.redhat.com/errata/RHSA-2026:8490", "https://access.redhat.com/errata/RHSA-2026:8491", "https://access.redhat.com/errata/RHSA-2026:8493", "https://access.redhat.com/errata/RHSA-2026:9385", "https://access.redhat.com/errata/RHSA-2026:9388", "https://access.redhat.com/errata/RHSA-2026:9440", "https://access.redhat.com/errata/RHSA-2026:9448", "https://access.redhat.com/errata/RHSA-2026:9453", "https://access.redhat.com/errata/RHSA-2026:9872", "https://access.redhat.com/security/cve/CVE-2026-33186", "https://bugzilla.redhat.com/2445356", "https://bugzilla.redhat.com/2449833", "https://bugzilla.redhat.com/2455470", "https://bugzilla.redhat.com/2456333", "https://bugzilla.redhat.com/2456335", "https://bugzilla.redhat.com/2456336", "https://bugzilla.redhat.com/2456338", "https://bugzilla.redhat.com/2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2434432", "https://bugzilla.redhat.com/show_bug.cgi?id=2437111", "https://bugzilla.redhat.com/show_bug.cgi?id=2445345", "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "https://bugzilla.redhat.com/show_bug.cgi?id=2449833", "https://bugzilla.redhat.com/show_bug.cgi?id=2455470", "https://bugzilla.redhat.com/show_bug.cgi?id=2456336", "https://bugzilla.redhat.com/show_bug.cgi?id=2456338", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27137", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32282", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32283", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33186", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34986", "https://errata.almalinux.org/9/ALSA-2026-19353.html", "https://errata.rockylinux.org/RLSA-2026:23228", "https://github.com/grpc/grpc-go", "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3", "https://linux.oracle.com/cve/CVE-2026-33186.html", "https://linux.oracle.com/errata/ELSA-2026-48790.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-33186", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33186.json", "https://www.cve.org/CVERecord?id=CVE-2026-33186" ], "PublishedDate": "2026-03-20T23:16:45.18Z", "LastModifiedDate": "2026-09-18T13:17:50.363Z" }, { "VulnerabilityID": "CVE-2026-84304", "VendorIDs": [ "GHSA-vp52-pcj8-j9qc" ], "PkgID": "google.golang.org/grpc@v1.72.2", "PkgName": "google.golang.org/grpc", "PkgIdentifier": { "PURL": "pkg:golang/google.golang.org/grpc@v1.72.2", "UID": "b21509ef29e90a88" }, "InstalledVersion": "v1.72.2", "FixedVersion": "1.83.1", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-84304", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Go", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" }, "Fingerprint": "sha256:bde6d2bfcf0c9c475be70ea26872d910018e5aed0f0363b57cb4c858e83d646f", "Title": "google.golang.org/grpc: gRPC-Go: Denial of Service via HTTP/2 DATA Frame Fragmentation", "Description": "gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connection and stream flow-control windows. An unauthenticated remote attacker can use concurrent multiplexed streams to exhaust process memory and cause a runtime panic or out-of-memory termination. Receive-buffer compaction is enabled by default and can be controlled temporarily with GRPC_GO_EXPERIMENTAL_ENABLE_RECEIVE_BUFFER_COMPACTION. This issue is fixed in version 1.83.1.", "Severity": "HIGH", "CweIDs": [ "CWE-400" ], "VendorSeverity": { "azure": 3, "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-84304", "https://github.com/grpc/grpc-go", "https://github.com/grpc/grpc-go/commit/7354d9c8debb4bcf2225bf429857078de310c176", "https://github.com/grpc/grpc-go/commit/8cfeca0e1ee5ea0980dcc320e20240fa1079ec77", "https://github.com/grpc/grpc-go/pull/9331", "https://github.com/grpc/grpc-go/pull/9333", "https://github.com/grpc/grpc-go/releases/tag/v1.83.1", "https://github.com/grpc/grpc-go/security/advisories/GHSA-vp52-pcj8-j9qc", "https://nvd.nist.gov/vuln/detail/CVE-2026-84304", "https://www.cve.org/CVERecord?id=CVE-2026-84304" ], "PublishedDate": "2026-09-01T19:17:30.743Z", "LastModifiedDate": "2026-09-09T21:09:13.08Z" }, { "VulnerabilityID": "CVE-2026-84445", "VendorIDs": [ "GHSA-2v4p-qf9q-27wj" ], "PkgID": "google.golang.org/grpc@v1.72.2", "PkgName": "google.golang.org/grpc", "PkgIdentifier": { "PURL": "pkg:golang/google.golang.org/grpc@v1.72.2", "UID": "b21509ef29e90a88" }, "InstalledVersion": "v1.72.2", "FixedVersion": "1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-84445", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Go", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" }, "Fingerprint": "sha256:567e86c45c6e7790ea4b7cdc24816dfbb68530a9c858ef55f0b7fdb58bc5476f", "Title": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests", "Description": "gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go assumes that an authority value exists and indexes the empty slice. A remote client that can complete transport connection establishment can trigger an index-out-of-bounds panic that is not recovered by the per-RPC goroutine and terminates the entire server process. In insecure or ordinary TLS deployments the request can be unauthenticated, while strict mTLS or ALTS deployments require valid transport credentials before the malformed RPC can reach the interceptor. This issue is fixed in versions 1.82.2 and 1.83.2.", "Severity": "HIGH", "CweIDs": [ "CWE-129", "CWE-248" ], "VendorSeverity": { "alma": 3, "azure": 3, "ghsa": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:76744", "https://access.redhat.com/errata/RHSA-2026:95272", "https://access.redhat.com/security/cve/CVE-2026-84445", "https://bugzilla.redhat.com/2533175", "https://bugzilla.redhat.com/show_bug.cgi?id=2533175", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84445", "https://errata.almalinux.org/9/ALSA-2026-76744.html", "https://errata.rockylinux.org/RLSA-2026:95272", "https://github.com/grpc/grpc-go", "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7", "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4", "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f", "https://github.com/grpc/grpc-go/issues/9354", "https://github.com/grpc/grpc-go/pull/9365", "https://github.com/grpc/grpc-go/pull/9366", "https://github.com/grpc/grpc-go/pull/9367", "https://github.com/grpc/grpc-go/releases/tag/v1.82.2", "https://github.com/grpc/grpc-go/releases/tag/v1.83.2", "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj", "https://nvd.nist.gov/vuln/detail/CVE-2026-84445", "https://www.cve.org/CVERecord?id=CVE-2026-84445" ], "PublishedDate": "2026-09-14T17:17:51.743Z", "LastModifiedDate": "2026-09-25T14:10:13.927Z" }, { "VulnerabilityID": "GHSA-hrxh-6v49-42gf", "PkgID": "google.golang.org/grpc@v1.72.2", "PkgName": "google.golang.org/grpc", "PkgIdentifier": { "PURL": "pkg:golang/google.golang.org/grpc@v1.72.2", "UID": "b21509ef29e90a88" }, "InstalledVersion": "v1.72.2", "FixedVersion": "1.82.1", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-hrxh-6v49-42gf", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Go", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" }, "Fingerprint": "sha256:3df950be27f69df1206e23ca525ac172733812d9d3b5df9cbb12291e0cb826df", "Title": "gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities", "Description": "Multiple security vulnerabilities have been identified and addressed in grpc-go affecting the xDS RBAC authorization engine (internal/xds/rbac) and the HTTP/2 transport server implementation (internal/transport). These vulnerabilities could result in:\n\n- Authorization Bypass (Fail-Open) when translating xDS RBAC policies containing `Metadata` or `RequestedServerName` fields.\n- Denial of Service (High CPU Consumption) due to an HTTP/2 Rapid Reset mitigation bypass during client-initiated stream resets.\n- Denial of Service (Server Panic) when parsing crafted xDS RBAC policies containing `NOT` rules around unsupported fields.\n\n\n### Impact\n_What kind of vulnerability is it? Who is impacted?_\n\n#### xDS RBAC Authorization Bypass via `Metadata` \u0026 `RequestedServerName` matchers\n\n- Affected Component: xDS RBAC \n- Impact: When building policy matchers for gRPC RBAC from xDS configurations, unsupported `permission` and `principal` rules (specifically `Metadata` and `RequestedServerName`) were silently ignored and treated as no-ops.\n - If an authorization policy relied purely on these matchers for access control, treating those rules as no-ops effectively removed the restrictions.\n- If these unsupported rules were nested inside logical `NOT` rules (`Permission_NotRule` / `Principal_NotId`) or multi-condition `OR/AND` rules, silently dropping them changed the boolean logic flow of the authorization engine.\n\nAs a result, policy evaluation decisions could fail open, allowing unauthorized clients to access protected gRPC services or resources.\n\n#### HTTP/2 Rapid Reset Mitigation Bypass / Denial of Service via Stream Aborts\n\n- Affected Component: HTTP/2 transport\n- Impact: Earlier mitigations in grpc-go for HTTP/2 Rapid Reset only applied threshold checks to items that directly resulted in control frames being written back to the wire, such as `SETTINGS` ACKs or server-initiated `RST_STREAM`s.\n\nWhen a client initiated a rapid flood of stream creation (`HEADERS`) immediately followed by stream termination `RST_STREAM`, items queued up in the control buffer without counting against the transport response frame threshold. An attacker can repeatedly trigger this flood sequence to bypass reader blocking, resulting in high CPU usage, and Denial of Service (DoS).\n\n#### Denial of Service (Panic) in xDS RBAC Engine via Unsupported Fields inside NOT Rules\n\n- Affected Component: xDS RBAC \n- Impact: The xDS RBAC policy translators recursively generate matchers for nested rules. When a `NOT` rule wrapped an unsupported or unhandled field (such as `SourcedMetadata`), the recursive step returned an empty matcher. This could result in a runtime panic when the RBAC engine attempts to authorize an incoming request.\n\nAn attacker or misconfigured/malicious xDS management server delivering an LDS/RDS update containing a `NOT` rule around an unhandled field causes the gRPC server process to crash immediately (CWE-248 / Denial of Service).\n\n### Patches\n_Has the problem been patched? What versions should users upgrade to?_\n\nAll three issues have been fixed in `master` and will be released in 1.82.1 shortly.\n\n### Workarounds\n_Is there a way for users to fix or remediate the vulnerability without upgrading?_\n\nIf upgrading grpc-go immediately is not possible, apply the following workarounds based on your deployment architecture:\n\n* For xDS RBAC Vulnerabilities \u0026 Panics: Ensure that upstream xDS management servers do not push RBAC policies containing `Metadata`, `RequestedServerName`, or `NOT` rules wrapping unsupported fields (such as `SourcedMetadata`) to grpc-go servers.\n* For HTTP/2 Rapid Reset DOS: Configure upstream reverse proxies or load balancers (such as Envoy) with strict HTTP/2 `max_concurrent_streams` limits and active rate limiting on `RST_STREAM` frequency per connection.\n\n### Severity\n\n | Vulnerability | Qualitative Severity | Approximate CVSS v3.1 Score | Primary Impact |\n | :--- | :--- | :--- | :--- |\n | **xDS RBAC Authorization Bypass** | **High** | `8.2` | Unauthorized Access / Fail-Open |\n | **HTTP/2 Rapid Reset DOS Bypass** | **High** | `7.5` | High CPU Consumption / Denial of Service |\n | **xDS RBAC Engine Server Panic** | **Medium** | `5.9` | Process Crash / Denial of Service |", "Severity": "HIGH", "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.8 } }, "References": [ "https://github.com/grpc/grpc-go", "https://github.com/grpc/grpc-go/commit/4ea465d4ab98013f72a142fe0fc89c19770b2935", "https://github.com/grpc/grpc-go/pull/9236", "https://github.com/grpc/grpc-go/releases/tag/v1.82.1", "https://github.com/grpc/grpc-go/security/advisories/GHSA-hrxh-6v49-42gf" ], "PublishedDate": "2026-07-21T22:03:55Z", "LastModifiedDate": "2026-07-21T22:03:56Z" }, { "VulnerabilityID": "CVE-2025-68121", "VendorIDs": [ "GO-2026-4337" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.24.13, 1.25.7, 1.26.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-68121", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:89b7c58f25f031100eca79e106046236462867275bb7b9eec444aac93a05fa69", "Title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption", "Description": "During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.", "Severity": "CRITICAL", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "bitnami": 4, "cbl-mariner": 2, "nvd": 4, "oracle-oval": 3, "photon": 4, "redhat": 2, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "V3Score": 10 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:4177", "https://access.redhat.com/security/cve/CVE-2025-68121", "https://bugzilla.redhat.com/2434432", "https://bugzilla.redhat.com/2437111", "https://bugzilla.redhat.com/show_bug.cgi?id=2434432", "https://bugzilla.redhat.com/show_bug.cgi?id=2437111", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121", "https://errata.almalinux.org/9/ALSA-2026-4177.html", "https://errata.rockylinux.org/RLSA-2026:4177", "https://github.com/golang/go/issues/77113", "https://go.dev/cl/737700", "https://go.dev/issue/77217", "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk", "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc", "https://linux.oracle.com/cve/CVE-2025-68121.html", "https://linux.oracle.com/errata/ELSA-2026-5146.html", "https://nvd.nist.gov/vuln/detail/CVE-2025-68121", "https://pkg.go.dev/vuln/GO-2026-4337", "https://www.cve.org/CVERecord?id=CVE-2025-68121" ], "PublishedDate": "2026-02-05T18:16:10.857Z", "LastModifiedDate": "2026-06-17T09:58:33.833Z" }, { "VulnerabilityID": "CVE-2025-61726", "VendorIDs": [ "GO-2026-4341" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.24.12, 1.25.6", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-61726", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:5a24b9a6b91140ca4e1dcee19de4f3fc2f10fbf9bc69051c555dae776946b56b", "Title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url", "Description": "The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a large form containing many unique query parameters can cause excessive memory consumption.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "bitnami": 3, "cbl-mariner": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10096", "https://access.redhat.com/errata/RHSA-2026:10104", "https://access.redhat.com/errata/RHSA-2026:10184", "https://access.redhat.com/errata/RHSA-2026:10225", "https://access.redhat.com/errata/RHSA-2026:10250", "https://access.redhat.com/errata/RHSA-2026:11408", "https://access.redhat.com/errata/RHSA-2026:11414", "https://access.redhat.com/errata/RHSA-2026:11747", "https://access.redhat.com/errata/RHSA-2026:11749", "https://access.redhat.com/errata/RHSA-2026:12028", "https://access.redhat.com/errata/RHSA-2026:12029", "https://access.redhat.com/errata/RHSA-2026:12030", "https://access.redhat.com/errata/RHSA-2026:12031", "https://access.redhat.com/errata/RHSA-2026:12032", "https://access.redhat.com/errata/RHSA-2026:12033", "https://access.redhat.com/errata/RHSA-2026:12279", "https://access.redhat.com/errata/RHSA-2026:12282", "https://access.redhat.com/errata/RHSA-2026:13542", "https://access.redhat.com/errata/RHSA-2026:13548", "https://access.redhat.com/errata/RHSA-2026:13571", "https://access.redhat.com/errata/RHSA-2026:14100", "https://access.redhat.com/errata/RHSA-2026:14774", "https://access.redhat.com/errata/RHSA-2026:14868", "https://access.redhat.com/errata/RHSA-2026:14879", "https://access.redhat.com/errata/RHSA-2026:15091", "https://access.redhat.com/errata/RHSA-2026:15984", "https://access.redhat.com/errata/RHSA-2026:16102", "https://access.redhat.com/errata/RHSA-2026:16696", "https://access.redhat.com/errata/RHSA-2026:17040", "https://access.redhat.com/errata/RHSA-2026:17084", "https://access.redhat.com/errata/RHSA-2026:17446", "https://access.redhat.com/errata/RHSA-2026:17460", "https://access.redhat.com/errata/RHSA-2026:17463", "https://access.redhat.com/errata/RHSA-2026:17468", "https://access.redhat.com/errata/RHSA-2026:17595", "https://access.redhat.com/errata/RHSA-2026:17598", "https://access.redhat.com/errata/RHSA-2026:18913", "https://access.redhat.com/errata/RHSA-2026:19013", "https://access.redhat.com/errata/RHSA-2026:19132", "https://access.redhat.com/errata/RHSA-2026:19375", "https://access.redhat.com/errata/RHSA-2026:19634", "https://access.redhat.com/errata/RHSA-2026:19712", "https://access.redhat.com/errata/RHSA-2026:20041", "https://access.redhat.com/errata/RHSA-2026:21017", "https://access.redhat.com/errata/RHSA-2026:21657", "https://access.redhat.com/errata/RHSA-2026:21691", "https://access.redhat.com/errata/RHSA-2026:22450", "https://access.redhat.com/errata/RHSA-2026:22627", "https://access.redhat.com/errata/RHSA-2026:22714", "https://access.redhat.com/errata/RHSA-2026:22937", "https://access.redhat.com/errata/RHSA-2026:23228", "https://access.redhat.com/errata/RHSA-2026:23361", "https://access.redhat.com/errata/RHSA-2026:24977", "https://access.redhat.com/errata/RHSA-2026:25089", "https://access.redhat.com/errata/RHSA-2026:25127", "https://access.redhat.com/errata/RHSA-2026:25248", "https://access.redhat.com/errata/RHSA-2026:25250", "https://access.redhat.com/errata/RHSA-2026:25251", "https://access.redhat.com/errata/RHSA-2026:25252", "https://access.redhat.com/errata/RHSA-2026:25253", "https://access.redhat.com/errata/RHSA-2026:26420", "https://access.redhat.com/errata/RHSA-2026:26527", "https://access.redhat.com/errata/RHSA-2026:26541", "https://access.redhat.com/errata/RHSA-2026:26636", "https://access.redhat.com/errata/RHSA-2026:2681", "https://access.redhat.com/errata/RHSA-2026:2706", "https://access.redhat.com/errata/RHSA-2026:2708", "https://access.redhat.com/errata/RHSA-2026:2709", "https://access.redhat.com/errata/RHSA-2026:2754", "https://access.redhat.com/errata/RHSA-2026:28047", "https://access.redhat.com/errata/RHSA-2026:2844", "https://access.redhat.com/errata/RHSA-2026:28441", "https://access.redhat.com/errata/RHSA-2026:28886", "https://access.redhat.com/errata/RHSA-2026:28961", "https://access.redhat.com/errata/RHSA-2026:2914", "https://access.redhat.com/errata/RHSA-2026:2920", "https://access.redhat.com/errata/RHSA-2026:3035", "https://access.redhat.com/errata/RHSA-2026:3040", "https://access.redhat.com/errata/RHSA-2026:3089", "https://access.redhat.com/errata/RHSA-2026:3092", "https://access.redhat.com/errata/RHSA-2026:3184", "https://access.redhat.com/errata/RHSA-2026:3186", "https://access.redhat.com/errata/RHSA-2026:3187", "https://access.redhat.com/errata/RHSA-2026:3188", "https://access.redhat.com/errata/RHSA-2026:3192", "https://access.redhat.com/errata/RHSA-2026:3193", "https://access.redhat.com/errata/RHSA-2026:3291", "https://access.redhat.com/errata/RHSA-2026:3296", "https://access.redhat.com/errata/RHSA-2026:3297", "https://access.redhat.com/errata/RHSA-2026:3298", "https://access.redhat.com/errata/RHSA-2026:3336", "https://access.redhat.com/errata/RHSA-2026:3337", "https://access.redhat.com/errata/RHSA-2026:3340", "https://access.redhat.com/errata/RHSA-2026:3341", "https://access.redhat.com/errata/RHSA-2026:3343", "https://access.redhat.com/errata/RHSA-2026:3391", "https://access.redhat.com/errata/RHSA-2026:3416", "https://access.redhat.com/errata/RHSA-2026:3427", "https://access.redhat.com/errata/RHSA-2026:3459", "https://access.redhat.com/errata/RHSA-2026:3468", "https://access.redhat.com/errata/RHSA-2026:3469", "https://access.redhat.com/errata/RHSA-2026:3470", "https://access.redhat.com/errata/RHSA-2026:3471", "https://access.redhat.com/errata/RHSA-2026:3472", "https://access.redhat.com/errata/RHSA-2026:3473", "https://access.redhat.com/errata/RHSA-2026:3489", "https://access.redhat.com/errata/RHSA-2026:3506", "https://access.redhat.com/errata/RHSA-2026:3556", "https://access.redhat.com/errata/RHSA-2026:3559", "https://access.redhat.com/errata/RHSA-2026:3668", "https://access.redhat.com/errata/RHSA-2026:3669", "https://access.redhat.com/errata/RHSA-2026:36873", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:3699", "https://access.redhat.com/errata/RHSA-2026:3713", "https://access.redhat.com/errata/RHSA-2026:37275", "https://access.redhat.com/errata/RHSA-2026:3752", "https://access.redhat.com/errata/RHSA-2026:3753", "https://access.redhat.com/errata/RHSA-2026:3782", "https://access.redhat.com/errata/RHSA-2026:3812", "https://access.redhat.com/errata/RHSA-2026:3813", "https://access.redhat.com/errata/RHSA-2026:3814", "https://access.redhat.com/errata/RHSA-2026:3815", "https://access.redhat.com/errata/RHSA-2026:3816", "https://access.redhat.com/errata/RHSA-2026:3817", "https://access.redhat.com/errata/RHSA-2026:3818", "https://access.redhat.com/errata/RHSA-2026:3820", "https://access.redhat.com/errata/RHSA-2026:3821", "https://access.redhat.com/errata/RHSA-2026:3822", "https://access.redhat.com/errata/RHSA-2026:3831", "https://access.redhat.com/errata/RHSA-2026:3833", "https://access.redhat.com/errata/RHSA-2026:3835", "https://access.redhat.com/errata/RHSA-2026:3836", "https://access.redhat.com/errata/RHSA-2026:3838", "https://access.redhat.com/errata/RHSA-2026:3839", "https://access.redhat.com/errata/RHSA-2026:3840", "https://access.redhat.com/errata/RHSA-2026:3841", "https://access.redhat.com/errata/RHSA-2026:3843", "https://access.redhat.com/errata/RHSA-2026:3854", "https://access.redhat.com/errata/RHSA-2026:3855", "https://access.redhat.com/errata/RHSA-2026:3856", "https://access.redhat.com/errata/RHSA-2026:3864", "https://access.redhat.com/errata/RHSA-2026:3869", "https://access.redhat.com/errata/RHSA-2026:3874", "https://access.redhat.com/errata/RHSA-2026:3875", "https://access.redhat.com/errata/RHSA-2026:3879", "https://access.redhat.com/errata/RHSA-2026:3880", "https://access.redhat.com/errata/RHSA-2026:3884", "https://access.redhat.com/errata/RHSA-2026:3898", "https://access.redhat.com/errata/RHSA-2026:3905", "https://access.redhat.com/errata/RHSA-2026:3906", "https://access.redhat.com/errata/RHSA-2026:3928", "https://access.redhat.com/errata/RHSA-2026:3929", "https://access.redhat.com/errata/RHSA-2026:3930", "https://access.redhat.com/errata/RHSA-2026:3931", "https://access.redhat.com/errata/RHSA-2026:3932", "https://access.redhat.com/errata/RHSA-2026:3958", "https://access.redhat.com/errata/RHSA-2026:3959", "https://access.redhat.com/errata/RHSA-2026:3960", "https://access.redhat.com/errata/RHSA-2026:3970", "https://access.redhat.com/errata/RHSA-2026:3971", "https://access.redhat.com/errata/RHSA-2026:3972", "https://access.redhat.com/errata/RHSA-2026:3973", "https://access.redhat.com/errata/RHSA-2026:3974", "https://access.redhat.com/errata/RHSA-2026:3977", "https://access.redhat.com/errata/RHSA-2026:39810", "https://access.redhat.com/errata/RHSA-2026:3985", "https://access.redhat.com/errata/RHSA-2026:40924", "https://access.redhat.com/errata/RHSA-2026:4164", "https://access.redhat.com/errata/RHSA-2026:4166", "https://access.redhat.com/errata/RHSA-2026:4170", "https://access.redhat.com/errata/RHSA-2026:4174", "https://access.redhat.com/errata/RHSA-2026:4177", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41941", "https://access.redhat.com/errata/RHSA-2026:4211", "https://access.redhat.com/errata/RHSA-2026:4220", "https://access.redhat.com/errata/RHSA-2026:4256", "https://access.redhat.com/errata/RHSA-2026:4264", "https://access.redhat.com/errata/RHSA-2026:4267", "https://access.redhat.com/errata/RHSA-2026:4270", "https://access.redhat.com/errata/RHSA-2026:4276", "https://access.redhat.com/errata/RHSA-2026:4434", "https://access.redhat.com/errata/RHSA-2026:4435", "https://access.redhat.com/errata/RHSA-2026:4460", "https://access.redhat.com/errata/RHSA-2026:4466", "https://access.redhat.com/errata/RHSA-2026:4467", "https://access.redhat.com/errata/RHSA-2026:4498", "https://access.redhat.com/errata/RHSA-2026:4500", "https://access.redhat.com/errata/RHSA-2026:4510", "https://access.redhat.com/errata/RHSA-2026:4511", "https://access.redhat.com/errata/RHSA-2026:4672", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:4753", "https://access.redhat.com/errata/RHSA-2026:4892", "https://access.redhat.com/errata/RHSA-2026:4901", "https://access.redhat.com/errata/RHSA-2026:4907", "https://access.redhat.com/errata/RHSA-2026:4939", "https://access.redhat.com/errata/RHSA-2026:4942", "https://access.redhat.com/errata/RHSA-2026:4943", "https://access.redhat.com/errata/RHSA-2026:4952", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:5022", "https://access.redhat.com/errata/RHSA-2026:5030", "https://access.redhat.com/errata/RHSA-2026:5031", "https://access.redhat.com/errata/RHSA-2026:5076", "https://access.redhat.com/errata/RHSA-2026:5077", "https://access.redhat.com/errata/RHSA-2026:5078", "https://access.redhat.com/errata/RHSA-2026:5079", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:5110", "https://access.redhat.com/errata/RHSA-2026:51288", "https://access.redhat.com/errata/RHSA-2026:5129", "https://access.redhat.com/errata/RHSA-2026:5130", "https://access.redhat.com/errata/RHSA-2026:5131", "https://access.redhat.com/errata/RHSA-2026:5132", "https://access.redhat.com/errata/RHSA-2026:5145", "https://access.redhat.com/errata/RHSA-2026:5146", "https://access.redhat.com/errata/RHSA-2026:5168", "https://access.redhat.com/errata/RHSA-2026:5327", "https://access.redhat.com/errata/RHSA-2026:5394", "https://access.redhat.com/errata/RHSA-2026:5439", "https://access.redhat.com/errata/RHSA-2026:5444", "https://access.redhat.com/errata/RHSA-2026:5447", "https://access.redhat.com/errata/RHSA-2026:5452", "https://access.redhat.com/errata/RHSA-2026:5461", "https://access.redhat.com/errata/RHSA-2026:5463", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:5533", "https://access.redhat.com/errata/RHSA-2026:5544", "https://access.redhat.com/errata/RHSA-2026:5549", "https://access.redhat.com/errata/RHSA-2026:5636", "https://access.redhat.com/errata/RHSA-2026:56366", "https://access.redhat.com/errata/RHSA-2026:56431", "https://access.redhat.com/errata/RHSA-2026:5645", "https://access.redhat.com/errata/RHSA-2026:5649", "https://access.redhat.com/errata/RHSA-2026:5665", "https://access.redhat.com/errata/RHSA-2026:57013", "https://access.redhat.com/errata/RHSA-2026:5807", "https://access.redhat.com/errata/RHSA-2026:5851", "https://access.redhat.com/errata/RHSA-2026:5852", "https://access.redhat.com/errata/RHSA-2026:5853", "https://access.redhat.com/errata/RHSA-2026:5948", "https://access.redhat.com/errata/RHSA-2026:5950", "https://access.redhat.com/errata/RHSA-2026:5952", "https://access.redhat.com/errata/RHSA-2026:5968", "https://access.redhat.com/errata/RHSA-2026:6184", "https://access.redhat.com/errata/RHSA-2026:6192", "https://access.redhat.com/errata/RHSA-2026:6226", "https://access.redhat.com/errata/RHSA-2026:6251", "https://access.redhat.com/errata/RHSA-2026:6277", "https://access.redhat.com/errata/RHSA-2026:6278", "https://access.redhat.com/errata/RHSA-2026:6428", "https://access.redhat.com/errata/RHSA-2026:6429", "https://access.redhat.com/errata/RHSA-2026:6497", "https://access.redhat.com/errata/RHSA-2026:6554", "https://access.redhat.com/errata/RHSA-2026:6564", "https://access.redhat.com/errata/RHSA-2026:6567", "https://access.redhat.com/errata/RHSA-2026:6568", "https://access.redhat.com/errata/RHSA-2026:66401", "https://access.redhat.com/errata/RHSA-2026:7052", "https://access.redhat.com/errata/RHSA-2026:7249", "https://access.redhat.com/errata/RHSA-2026:7291", "https://access.redhat.com/errata/RHSA-2026:7385", "https://access.redhat.com/errata/RHSA-2026:7676", "https://access.redhat.com/errata/RHSA-2026:7854", "https://access.redhat.com/errata/RHSA-2026:7942", "https://access.redhat.com/errata/RHSA-2026:8151", "https://access.redhat.com/errata/RHSA-2026:8167", "https://access.redhat.com/errata/RHSA-2026:8218", "https://access.redhat.com/errata/RHSA-2026:8229", "https://access.redhat.com/errata/RHSA-2026:8337", "https://access.redhat.com/errata/RHSA-2026:8338", "https://access.redhat.com/errata/RHSA-2026:8431", "https://access.redhat.com/errata/RHSA-2026:8433", "https://access.redhat.com/errata/RHSA-2026:8483", "https://access.redhat.com/errata/RHSA-2026:9097", "https://access.redhat.com/errata/RHSA-2026:9098", "https://access.redhat.com/errata/RHSA-2026:9108", "https://access.redhat.com/errata/RHSA-2026:9109", "https://access.redhat.com/errata/RHSA-2026:9848", "https://access.redhat.com/security/cve/CVE-2025-61726", "https://bugzilla.redhat.com/2434432", "https://bugzilla.redhat.com/2437111", "https://bugzilla.redhat.com/show_bug.cgi?id=2434432", "https://bugzilla.redhat.com/show_bug.cgi?id=2437111", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121", "https://errata.almalinux.org/9/ALSA-2026-4177.html", "https://errata.rockylinux.org/RLSA-2026:4177", "https://go.dev/cl/736712", "https://go.dev/issue/77101", "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc", "https://linux.oracle.com/cve/CVE-2025-61726.html", "https://linux.oracle.com/errata/ELSA-2026-5146.html", "https://nvd.nist.gov/vuln/detail/CVE-2025-61726", "https://pkg.go.dev/vuln/GO-2026-4341", "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61726.json", "https://www.cve.org/CVERecord?id=CVE-2025-61726" ], "PublishedDate": "2026-01-28T20:16:09.713Z", "LastModifiedDate": "2026-09-17T12:17:11.443Z" }, { "VulnerabilityID": "CVE-2025-61729", "VendorIDs": [ "GO-2025-4155" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.24.11, 1.25.5", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-61729", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:9b5d5d281eae554a21214754f061c597d8b718650536b9592c33fca5b77b147b", "Title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate", "Description": "Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.", "Severity": "HIGH", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "cbl-mariner": 1, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:3928", "https://access.redhat.com/security/cve/CVE-2025-61729", "https://bugzilla.redhat.com/2418462", "https://bugzilla.redhat.com/2434432", "https://bugzilla.redhat.com/2437111", "https://bugzilla.redhat.com/show_bug.cgi?id=2418462", "https://bugzilla.redhat.com/show_bug.cgi?id=2434432", "https://bugzilla.redhat.com/show_bug.cgi?id=2437111", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61729", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121", "https://errata.almalinux.org/9/ALSA-2026-3928.html", "https://errata.rockylinux.org/RLSA-2026:3928", "https://go.dev/cl/725920", "https://go.dev/issue/76445", "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4", "https://linux.oracle.com/cve/CVE-2025-61729.html", "https://linux.oracle.com/errata/ELSA-2026-5146.html", "https://nvd.nist.gov/vuln/detail/CVE-2025-61729", "https://pkg.go.dev/vuln/GO-2025-4155", "https://www.cve.org/CVERecord?id=CVE-2025-61729" ], "PublishedDate": "2025-12-02T19:15:51.447Z", "LastModifiedDate": "2026-10-18T18:10:00.1Z" }, { "VulnerabilityID": "CVE-2026-111943", "VendorIDs": [ "GO-2026-6809" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.26.10, 1.27.3", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-111943", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:2f91873f5e7ae6843ba891e84b46794189786ab24bb73c69a90295952599bc3b", "Title": "crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates", "Description": "On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.", "Severity": "HIGH", "CweIDs": [ "CWE-299" ], "VendorSeverity": { "alma": 3, "amazon": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 6.8 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/10/20/29", "https://access.redhat.com/errata/RHSA-2026:95518", "https://access.redhat.com/security/cve/CVE-2026-111943", "https://bugzilla.redhat.com/2548336", "https://bugzilla.redhat.com/2556068", "https://bugzilla.redhat.com/show_bug.cgi?id=2548336", "https://bugzilla.redhat.com/show_bug.cgi?id=2556068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97031", "https://errata.almalinux.org/9/ALSA-2026-95518.html", "https://errata.rockylinux.org/RLSA-2026:95518", "https://github.com/golang/go/issues/82345", "https://go.dev/cl/851047", "https://go.dev/issue/82345", "https://groups.google.com/g/golang-announce/c/66pojueaQek", "https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU", "https://linux.oracle.com/cve/CVE-2026-111943.html", "https://linux.oracle.com/errata/ELSA-2026-95519.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-111943", "https://pkg.go.dev/vuln/GO-2026-6809", "https://www.cve.org/CVERecord?id=CVE-2026-111943" ], "PublishedDate": "2026-10-21T01:17:20.797Z", "LastModifiedDate": "2026-10-30T13:18:28.74Z" }, { "VulnerabilityID": "CVE-2026-25679", "VendorIDs": [ "GO-2026-4601" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.25.8, 1.26.1", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-25679", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:c6dab0540d75da9ad2d6245c77613c8a38bf46804067c14f526c5096b36bd8bb", "Title": "net/url: Incorrect parsing of IPv6 host literals in net/url", "Description": "url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.", "Severity": "HIGH", "CweIDs": [ "CWE-425", "CWE-1286" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10065", "https://access.redhat.com/errata/RHSA-2026:10125", "https://access.redhat.com/errata/RHSA-2026:10133", "https://access.redhat.com/errata/RHSA-2026:10140", "https://access.redhat.com/errata/RHSA-2026:10141", "https://access.redhat.com/errata/RHSA-2026:10158", "https://access.redhat.com/errata/RHSA-2026:10169", "https://access.redhat.com/errata/RHSA-2026:10175", "https://access.redhat.com/errata/RHSA-2026:10184", "https://access.redhat.com/errata/RHSA-2026:10225", "https://access.redhat.com/errata/RHSA-2026:10250", "https://access.redhat.com/errata/RHSA-2026:10701", "https://access.redhat.com/errata/RHSA-2026:10712", "https://access.redhat.com/errata/RHSA-2026:10929", "https://access.redhat.com/errata/RHSA-2026:11217", "https://access.redhat.com/errata/RHSA-2026:11375", "https://access.redhat.com/errata/RHSA-2026:11412", "https://access.redhat.com/errata/RHSA-2026:11413", "https://access.redhat.com/errata/RHSA-2026:11686", "https://access.redhat.com/errata/RHSA-2026:11688", "https://access.redhat.com/errata/RHSA-2026:11747", "https://access.redhat.com/errata/RHSA-2026:11749", "https://access.redhat.com/errata/RHSA-2026:11768", "https://access.redhat.com/errata/RHSA-2026:11800", "https://access.redhat.com/errata/RHSA-2026:11856", "https://access.redhat.com/errata/RHSA-2026:11916", "https://access.redhat.com/errata/RHSA-2026:11996", "https://access.redhat.com/errata/RHSA-2026:12028", "https://access.redhat.com/errata/RHSA-2026:12029", "https://access.redhat.com/errata/RHSA-2026:12030", "https://access.redhat.com/errata/RHSA-2026:12031", "https://access.redhat.com/errata/RHSA-2026:12032", "https://access.redhat.com/errata/RHSA-2026:12033", "https://access.redhat.com/errata/RHSA-2026:12282", "https://access.redhat.com/errata/RHSA-2026:13508", "https://access.redhat.com/errata/RHSA-2026:13512", "https://access.redhat.com/errata/RHSA-2026:13545", "https://access.redhat.com/errata/RHSA-2026:13642", "https://access.redhat.com/errata/RHSA-2026:13643", "https://access.redhat.com/errata/RHSA-2026:13671", "https://access.redhat.com/errata/RHSA-2026:13791", "https://access.redhat.com/errata/RHSA-2026:13829", "https://access.redhat.com/errata/RHSA-2026:14020", "https://access.redhat.com/errata/RHSA-2026:14100", "https://access.redhat.com/errata/RHSA-2026:14774", "https://access.redhat.com/errata/RHSA-2026:14868", "https://access.redhat.com/errata/RHSA-2026:14879", "https://access.redhat.com/errata/RHSA-2026:15091", "https://access.redhat.com/errata/RHSA-2026:16102", "https://access.redhat.com/errata/RHSA-2026:16696", "https://access.redhat.com/errata/RHSA-2026:16874", "https://access.redhat.com/errata/RHSA-2026:16875", "https://access.redhat.com/errata/RHSA-2026:17040", "https://access.redhat.com/errata/RHSA-2026:17084", "https://access.redhat.com/errata/RHSA-2026:17287", "https://access.redhat.com/errata/RHSA-2026:17598", "https://access.redhat.com/errata/RHSA-2026:19017", "https://access.redhat.com/errata/RHSA-2026:19022", "https://access.redhat.com/errata/RHSA-2026:19026", "https://access.redhat.com/errata/RHSA-2026:19027", "https://access.redhat.com/errata/RHSA-2026:19031", "https://access.redhat.com/errata/RHSA-2026:19032", "https://access.redhat.com/errata/RHSA-2026:19049", "https://access.redhat.com/errata/RHSA-2026:19055", "https://access.redhat.com/errata/RHSA-2026:19126", "https://access.redhat.com/errata/RHSA-2026:19128", "https://access.redhat.com/errata/RHSA-2026:19132", "https://access.redhat.com/errata/RHSA-2026:19133", "https://access.redhat.com/errata/RHSA-2026:19135", "https://access.redhat.com/errata/RHSA-2026:19181", "https://access.redhat.com/errata/RHSA-2026:19184", "https://access.redhat.com/errata/RHSA-2026:19185", "https://access.redhat.com/errata/RHSA-2026:19207", "https://access.redhat.com/errata/RHSA-2026:19350", "https://access.redhat.com/errata/RHSA-2026:19353", "https://access.redhat.com/errata/RHSA-2026:19375", "https://access.redhat.com/errata/RHSA-2026:19475", "https://access.redhat.com/errata/RHSA-2026:19634", "https://access.redhat.com/errata/RHSA-2026:19719", "https://access.redhat.com/errata/RHSA-2026:19720", "https://access.redhat.com/errata/RHSA-2026:19721", "https://access.redhat.com/errata/RHSA-2026:19750", "https://access.redhat.com/errata/RHSA-2026:20041", "https://access.redhat.com/errata/RHSA-2026:20088", "https://access.redhat.com/errata/RHSA-2026:20581", "https://access.redhat.com/errata/RHSA-2026:20582", "https://access.redhat.com/errata/RHSA-2026:20584", "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:21017", "https://access.redhat.com/errata/RHSA-2026:21655", "https://access.redhat.com/errata/RHSA-2026:21657", "https://access.redhat.com/errata/RHSA-2026:21691", "https://access.redhat.com/errata/RHSA-2026:21696", "https://access.redhat.com/errata/RHSA-2026:21769", "https://access.redhat.com/errata/RHSA-2026:22347", "https://access.redhat.com/errata/RHSA-2026:22423", "https://access.redhat.com/errata/RHSA-2026:22450", "https://access.redhat.com/errata/RHSA-2026:22627", "https://access.redhat.com/errata/RHSA-2026:22714", "https://access.redhat.com/errata/RHSA-2026:22733", "https://access.redhat.com/errata/RHSA-2026:22862", "https://access.redhat.com/errata/RHSA-2026:22937", "https://access.redhat.com/errata/RHSA-2026:23228", "https://access.redhat.com/errata/RHSA-2026:23345", "https://access.redhat.com/errata/RHSA-2026:24386", "https://access.redhat.com/errata/RHSA-2026:24853", "https://access.redhat.com/errata/RHSA-2026:25043", "https://access.redhat.com/errata/RHSA-2026:25127", "https://access.redhat.com/errata/RHSA-2026:25180", "https://access.redhat.com/errata/RHSA-2026:25248", "https://access.redhat.com/errata/RHSA-2026:25250", "https://access.redhat.com/errata/RHSA-2026:25251", "https://access.redhat.com/errata/RHSA-2026:25252", "https://access.redhat.com/errata/RHSA-2026:25253", "https://access.redhat.com/errata/RHSA-2026:26445", "https://access.redhat.com/errata/RHSA-2026:26527", "https://access.redhat.com/errata/RHSA-2026:26541", "https://access.redhat.com/errata/RHSA-2026:26568", "https://access.redhat.com/errata/RHSA-2026:26585", "https://access.redhat.com/errata/RHSA-2026:26636", "https://access.redhat.com/errata/RHSA-2026:27076", "https://access.redhat.com/errata/RHSA-2026:28047", "https://access.redhat.com/errata/RHSA-2026:28441", "https://access.redhat.com/errata/RHSA-2026:28886", "https://access.redhat.com/errata/RHSA-2026:28893", "https://access.redhat.com/errata/RHSA-2026:28961", "https://access.redhat.com/errata/RHSA-2026:29035", "https://access.redhat.com/errata/RHSA-2026:29195", "https://access.redhat.com/errata/RHSA-2026:29455", "https://access.redhat.com/errata/RHSA-2026:29702", "https://access.redhat.com/errata/RHSA-2026:29703", "https://access.redhat.com/errata/RHSA-2026:29854", "https://access.redhat.com/errata/RHSA-2026:33722", "https://access.redhat.com/errata/RHSA-2026:34097", "https://access.redhat.com/errata/RHSA-2026:34365", "https://access.redhat.com/errata/RHSA-2026:36317", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:39810", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42150", "https://access.redhat.com/errata/RHSA-2026:42151", "https://access.redhat.com/errata/RHSA-2026:48036", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:5110", "https://access.redhat.com/errata/RHSA-2026:51288", "https://access.redhat.com/errata/RHSA-2026:52389", "https://access.redhat.com/errata/RHSA-2026:52390", "https://access.redhat.com/errata/RHSA-2026:52391", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:5549", "https://access.redhat.com/errata/RHSA-2026:56785", "https://access.redhat.com/errata/RHSA-2026:56852", "https://access.redhat.com/errata/RHSA-2026:56910", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:5941", "https://access.redhat.com/errata/RHSA-2026:5942", "https://access.redhat.com/errata/RHSA-2026:5943", "https://access.redhat.com/errata/RHSA-2026:5944", "https://access.redhat.com/errata/RHSA-2026:59830", "https://access.redhat.com/errata/RHSA-2026:60018", "https://access.redhat.com/errata/RHSA-2026:6341", "https://access.redhat.com/errata/RHSA-2026:6344", "https://access.redhat.com/errata/RHSA-2026:6382", "https://access.redhat.com/errata/RHSA-2026:6383", "https://access.redhat.com/errata/RHSA-2026:6388", "https://access.redhat.com/errata/RHSA-2026:6564", "https://access.redhat.com/errata/RHSA-2026:65838", "https://access.redhat.com/errata/RHSA-2026:66401", "https://access.redhat.com/errata/RHSA-2026:6720", "https://access.redhat.com/errata/RHSA-2026:6802", "https://access.redhat.com/errata/RHSA-2026:6949", "https://access.redhat.com/errata/RHSA-2026:7005", "https://access.redhat.com/errata/RHSA-2026:7009", "https://access.redhat.com/errata/RHSA-2026:7011", "https://access.redhat.com/errata/RHSA-2026:7259", "https://access.redhat.com/errata/RHSA-2026:7291", "https://access.redhat.com/errata/RHSA-2026:7315", "https://access.redhat.com/errata/RHSA-2026:7328", "https://access.redhat.com/errata/RHSA-2026:7385", "https://access.redhat.com/errata/RHSA-2026:7665", "https://access.redhat.com/errata/RHSA-2026:7669", "https://access.redhat.com/errata/RHSA-2026:7674", "https://access.redhat.com/errata/RHSA-2026:7833", "https://access.redhat.com/errata/RHSA-2026:7834", "https://access.redhat.com/errata/RHSA-2026:7876", "https://access.redhat.com/errata/RHSA-2026:7877", "https://access.redhat.com/errata/RHSA-2026:7878", "https://access.redhat.com/errata/RHSA-2026:7879", "https://access.redhat.com/errata/RHSA-2026:7883", "https://access.redhat.com/errata/RHSA-2026:7992", "https://access.redhat.com/errata/RHSA-2026:8151", "https://access.redhat.com/errata/RHSA-2026:8167", "https://access.redhat.com/errata/RHSA-2026:8314", "https://access.redhat.com/errata/RHSA-2026:8322", "https://access.redhat.com/errata/RHSA-2026:8324", "https://access.redhat.com/errata/RHSA-2026:8337", "https://access.redhat.com/errata/RHSA-2026:8338", "https://access.redhat.com/errata/RHSA-2026:8433", "https://access.redhat.com/errata/RHSA-2026:8434", "https://access.redhat.com/errata/RHSA-2026:8456", "https://access.redhat.com/errata/RHSA-2026:8483", "https://access.redhat.com/errata/RHSA-2026:8484", "https://access.redhat.com/errata/RHSA-2026:8490", "https://access.redhat.com/errata/RHSA-2026:8491", "https://access.redhat.com/errata/RHSA-2026:8493", "https://access.redhat.com/errata/RHSA-2026:8840", "https://access.redhat.com/errata/RHSA-2026:8841", "https://access.redhat.com/errata/RHSA-2026:8842", "https://access.redhat.com/errata/RHSA-2026:8845", "https://access.redhat.com/errata/RHSA-2026:8847", "https://access.redhat.com/errata/RHSA-2026:8848", "https://access.redhat.com/errata/RHSA-2026:8849", "https://access.redhat.com/errata/RHSA-2026:8851", "https://access.redhat.com/errata/RHSA-2026:8852", "https://access.redhat.com/errata/RHSA-2026:8853", "https://access.redhat.com/errata/RHSA-2026:8855", "https://access.redhat.com/errata/RHSA-2026:8856", "https://access.redhat.com/errata/RHSA-2026:8860", "https://access.redhat.com/errata/RHSA-2026:8877", "https://access.redhat.com/errata/RHSA-2026:8878", "https://access.redhat.com/errata/RHSA-2026:8879", "https://access.redhat.com/errata/RHSA-2026:8881", "https://access.redhat.com/errata/RHSA-2026:8882", "https://access.redhat.com/errata/RHSA-2026:8930", "https://access.redhat.com/errata/RHSA-2026:8931", "https://access.redhat.com/errata/RHSA-2026:8949", "https://access.redhat.com/errata/RHSA-2026:9043", "https://access.redhat.com/errata/RHSA-2026:9044", "https://access.redhat.com/errata/RHSA-2026:9052", "https://access.redhat.com/errata/RHSA-2026:9090", "https://access.redhat.com/errata/RHSA-2026:9093", "https://access.redhat.com/errata/RHSA-2026:9094", "https://access.redhat.com/errata/RHSA-2026:9097", "https://access.redhat.com/errata/RHSA-2026:9098", "https://access.redhat.com/errata/RHSA-2026:9108", "https://access.redhat.com/errata/RHSA-2026:9109", "https://access.redhat.com/errata/RHSA-2026:9385", "https://access.redhat.com/errata/RHSA-2026:9434", "https://access.redhat.com/errata/RHSA-2026:9435", "https://access.redhat.com/errata/RHSA-2026:9436", "https://access.redhat.com/errata/RHSA-2026:9439", "https://access.redhat.com/errata/RHSA-2026:9440", "https://access.redhat.com/errata/RHSA-2026:9448", "https://access.redhat.com/errata/RHSA-2026:9453", "https://access.redhat.com/errata/RHSA-2026:9461", "https://access.redhat.com/errata/RHSA-2026:9695", "https://access.redhat.com/errata/RHSA-2026:9742", "https://access.redhat.com/errata/RHSA-2026:9872", "https://access.redhat.com/security/cve/CVE-2026-25679", "https://bugzilla.redhat.com/2445356", "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "https://errata.almalinux.org/9/ALSA-2026-9044.html", "https://errata.rockylinux.org/RLSA-2026:9044", "https://go.dev/cl/752180", "https://go.dev/issue/77578", "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk", "https://linux.oracle.com/cve/CVE-2026-25679.html", "https://linux.oracle.com/errata/ELSA-2026-9044.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-25679", "https://pkg.go.dev/vuln/GO-2026-4601", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json", "https://www.cve.org/CVERecord?id=CVE-2026-25679" ], "PublishedDate": "2026-03-06T22:16:00.72Z", "LastModifiedDate": "2026-09-18T13:17:30.067Z" }, { "VulnerabilityID": "CVE-2026-27145", "VendorIDs": [ "GO-2026-5037" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.25.11, 1.26.4", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27145", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:4456a14c5b28912614825a99d9e7023fa085e2d2b1bb6dd5bb2b5a1c8f4a27e0", "Title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries", "Description": "(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \".\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.", "Severity": "HIGH", "CweIDs": [ "CWE-606" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:29980", "https://access.redhat.com/errata/RHSA-2026:29981", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34357", "https://access.redhat.com/errata/RHSA-2026:34359", "https://access.redhat.com/errata/RHSA-2026:35832", "https://access.redhat.com/errata/RHSA-2026:36317", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:38995", "https://access.redhat.com/errata/RHSA-2026:39005", "https://access.redhat.com/errata/RHSA-2026:39573", "https://access.redhat.com/errata/RHSA-2026:39879", "https://access.redhat.com/errata/RHSA-2026:41030", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41930", "https://access.redhat.com/errata/RHSA-2026:42043", "https://access.redhat.com/errata/RHSA-2026:42047", "https://access.redhat.com/errata/RHSA-2026:42049", "https://access.redhat.com/errata/RHSA-2026:42050", "https://access.redhat.com/errata/RHSA-2026:42051", "https://access.redhat.com/errata/RHSA-2026:42079", "https://access.redhat.com/errata/RHSA-2026:42080", "https://access.redhat.com/errata/RHSA-2026:42082", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42150", "https://access.redhat.com/errata/RHSA-2026:42151", "https://access.redhat.com/errata/RHSA-2026:42240", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42946", "https://access.redhat.com/errata/RHSA-2026:44622", "https://access.redhat.com/errata/RHSA-2026:46394", "https://access.redhat.com/errata/RHSA-2026:46395", "https://access.redhat.com/errata/RHSA-2026:47149", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47737", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49703", "https://access.redhat.com/errata/RHSA-2026:49705", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:49729", "https://access.redhat.com/errata/RHSA-2026:49744", "https://access.redhat.com/errata/RHSA-2026:49765", "https://access.redhat.com/errata/RHSA-2026:49770", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:50319", "https://access.redhat.com/errata/RHSA-2026:51057", "https://access.redhat.com/errata/RHSA-2026:51187", "https://access.redhat.com/errata/RHSA-2026:52946", "https://access.redhat.com/errata/RHSA-2026:53374", "https://access.redhat.com/errata/RHSA-2026:53412", "https://access.redhat.com/errata/RHSA-2026:53413", "https://access.redhat.com/errata/RHSA-2026:53415", "https://access.redhat.com/errata/RHSA-2026:53416", "https://access.redhat.com/errata/RHSA-2026:53530", "https://access.redhat.com/errata/RHSA-2026:54168", "https://access.redhat.com/errata/RHSA-2026:54401", "https://access.redhat.com/errata/RHSA-2026:54427", "https://access.redhat.com/errata/RHSA-2026:54432", "https://access.redhat.com/errata/RHSA-2026:54435", "https://access.redhat.com/errata/RHSA-2026:54441", "https://access.redhat.com/errata/RHSA-2026:54500", "https://access.redhat.com/errata/RHSA-2026:54525", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:54603", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:55899", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:57488", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:59556", "https://access.redhat.com/errata/RHSA-2026:59557", "https://access.redhat.com/errata/RHSA-2026:59558", "https://access.redhat.com/errata/RHSA-2026:59559", "https://access.redhat.com/errata/RHSA-2026:59579", "https://access.redhat.com/errata/RHSA-2026:59593", "https://access.redhat.com/errata/RHSA-2026:60025", "https://access.redhat.com/errata/RHSA-2026:60315", "https://access.redhat.com/errata/RHSA-2026:60354", "https://access.redhat.com/errata/RHSA-2026:60386", "https://access.redhat.com/errata/RHSA-2026:60387", "https://access.redhat.com/errata/RHSA-2026:60388", "https://access.redhat.com/errata/RHSA-2026:60390", "https://access.redhat.com/errata/RHSA-2026:60391", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:61314", "https://access.redhat.com/errata/RHSA-2026:63016", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:68334", "https://access.redhat.com/errata/RHSA-2026:68335", "https://access.redhat.com/security/cve/CVE-2026-27145", "https://bugzilla.redhat.com/2445356", "https://bugzilla.redhat.com/2484207", "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "https://bugzilla.redhat.com/show_bug.cgi?id=2484207", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27145", "https://errata.almalinux.org/9/ALSA-2026-36317.html", "https://errata.rockylinux.org/RLSA-2026:36317", "https://go.dev/cl/783621", "https://go.dev/issue/79694", "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw", "https://linux.oracle.com/cve/CVE-2026-27145.html", "https://linux.oracle.com/errata/ELSA-2026-53416.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-27145", "https://pkg.go.dev/vuln/GO-2026-5037", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json", "https://www.cve.org/CVERecord?id=CVE-2026-27145" ], "PublishedDate": "2026-06-02T23:16:35.57Z", "LastModifiedDate": "2026-09-18T13:17:43.283Z" }, { "VulnerabilityID": "CVE-2026-32280", "VendorIDs": [ "GO-2026-4947" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.25.9, 1.26.2", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-32280", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:130932406a1da61e5ce357901259022cb0b9f148bbcf0c0db88263d9dc8c3fef", "Title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building", "Description": "During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10217", "https://access.redhat.com/errata/RHSA-2026:10219", "https://access.redhat.com/errata/RHSA-2026:10704", "https://access.redhat.com/errata/RHSA-2026:11507", "https://access.redhat.com/errata/RHSA-2026:11514", "https://access.redhat.com/errata/RHSA-2026:11688", "https://access.redhat.com/errata/RHSA-2026:13545", "https://access.redhat.com/errata/RHSA-2026:13791", "https://access.redhat.com/errata/RHSA-2026:13826", "https://access.redhat.com/errata/RHSA-2026:13829", "https://access.redhat.com/errata/RHSA-2026:14020", "https://access.redhat.com/errata/RHSA-2026:14162", "https://access.redhat.com/errata/RHSA-2026:14200", "https://access.redhat.com/errata/RHSA-2026:14391", "https://access.redhat.com/errata/RHSA-2026:15980", "https://access.redhat.com/errata/RHSA-2026:16021", "https://access.redhat.com/errata/RHSA-2026:16024", "https://access.redhat.com/errata/RHSA-2026:16101", "https://access.redhat.com/errata/RHSA-2026:16476", "https://access.redhat.com/errata/RHSA-2026:16477", "https://access.redhat.com/errata/RHSA-2026:16505", "https://access.redhat.com/errata/RHSA-2026:16508", "https://access.redhat.com/errata/RHSA-2026:16532", "https://access.redhat.com/errata/RHSA-2026:16534", "https://access.redhat.com/errata/RHSA-2026:16535", "https://access.redhat.com/errata/RHSA-2026:16537", "https://access.redhat.com/errata/RHSA-2026:16542", "https://access.redhat.com/errata/RHSA-2026:16874", "https://access.redhat.com/errata/RHSA-2026:16875", "https://access.redhat.com/errata/RHSA-2026:17084", "https://access.redhat.com/errata/RHSA-2026:17287", "https://access.redhat.com/errata/RHSA-2026:18027", "https://access.redhat.com/errata/RHSA-2026:18032", "https://access.redhat.com/errata/RHSA-2026:19133", "https://access.redhat.com/errata/RHSA-2026:19135", "https://access.redhat.com/errata/RHSA-2026:19144", "https://access.redhat.com/errata/RHSA-2026:19350", "https://access.redhat.com/errata/RHSA-2026:19353", "https://access.redhat.com/errata/RHSA-2026:19375", "https://access.redhat.com/errata/RHSA-2026:19450", "https://access.redhat.com/errata/RHSA-2026:19550", "https://access.redhat.com/errata/RHSA-2026:19634", "https://access.redhat.com/errata/RHSA-2026:19714", "https://access.redhat.com/errata/RHSA-2026:19715", "https://access.redhat.com/errata/RHSA-2026:19719", "https://access.redhat.com/errata/RHSA-2026:19720", "https://access.redhat.com/errata/RHSA-2026:19721", "https://access.redhat.com/errata/RHSA-2026:19722", "https://access.redhat.com/errata/RHSA-2026:19750", "https://access.redhat.com/errata/RHSA-2026:19839", "https://access.redhat.com/errata/RHSA-2026:20556", "https://access.redhat.com/errata/RHSA-2026:20569", "https://access.redhat.com/errata/RHSA-2026:20570", "https://access.redhat.com/errata/RHSA-2026:20571", "https://access.redhat.com/errata/RHSA-2026:20607", "https://access.redhat.com/errata/RHSA-2026:20608", "https://access.redhat.com/errata/RHSA-2026:20609", "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:21017", "https://access.redhat.com/errata/RHSA-2026:21338", "https://access.redhat.com/errata/RHSA-2026:21655", "https://access.redhat.com/errata/RHSA-2026:21769", "https://access.redhat.com/errata/RHSA-2026:21772", "https://access.redhat.com/errata/RHSA-2026:22130", "https://access.redhat.com/errata/RHSA-2026:22141", "https://access.redhat.com/errata/RHSA-2026:22258", "https://access.redhat.com/errata/RHSA-2026:22260", "https://access.redhat.com/errata/RHSA-2026:22268", "https://access.redhat.com/errata/RHSA-2026:22309", "https://access.redhat.com/errata/RHSA-2026:22347", "https://access.redhat.com/errata/RHSA-2026:22415", "https://access.redhat.com/errata/RHSA-2026:22422", "https://access.redhat.com/errata/RHSA-2026:22465", "https://access.redhat.com/errata/RHSA-2026:22485", "https://access.redhat.com/errata/RHSA-2026:22709", "https://access.redhat.com/errata/RHSA-2026:22713", "https://access.redhat.com/errata/RHSA-2026:22840", "https://access.redhat.com/errata/RHSA-2026:22862", "https://access.redhat.com/errata/RHSA-2026:22958", "https://access.redhat.com/errata/RHSA-2026:22959", "https://access.redhat.com/errata/RHSA-2026:22960", "https://access.redhat.com/errata/RHSA-2026:22961", "https://access.redhat.com/errata/RHSA-2026:22962", "https://access.redhat.com/errata/RHSA-2026:23102", "https://access.redhat.com/errata/RHSA-2026:23103", "https://access.redhat.com/errata/RHSA-2026:23244", "https://access.redhat.com/errata/RHSA-2026:23345", "https://access.redhat.com/errata/RHSA-2026:23361", "https://access.redhat.com/errata/RHSA-2026:24337", "https://access.redhat.com/errata/RHSA-2026:24359", "https://access.redhat.com/errata/RHSA-2026:24470", "https://access.redhat.com/errata/RHSA-2026:24478", "https://access.redhat.com/errata/RHSA-2026:24716", "https://access.redhat.com/errata/RHSA-2026:24761", "https://access.redhat.com/errata/RHSA-2026:24762", "https://access.redhat.com/errata/RHSA-2026:24853", "https://access.redhat.com/errata/RHSA-2026:24977", "https://access.redhat.com/errata/RHSA-2026:25089", "https://access.redhat.com/errata/RHSA-2026:25127", "https://access.redhat.com/errata/RHSA-2026:25180", "https://access.redhat.com/errata/RHSA-2026:25248", "https://access.redhat.com/errata/RHSA-2026:25250", "https://access.redhat.com/errata/RHSA-2026:25251", "https://access.redhat.com/errata/RHSA-2026:25252", "https://access.redhat.com/errata/RHSA-2026:25253", "https://access.redhat.com/errata/RHSA-2026:26447", "https://access.redhat.com/errata/RHSA-2026:26568", "https://access.redhat.com/errata/RHSA-2026:26571", "https://access.redhat.com/errata/RHSA-2026:26585", "https://access.redhat.com/errata/RHSA-2026:26636", "https://access.redhat.com/errata/RHSA-2026:27076", "https://access.redhat.com/errata/RHSA-2026:28038", "https://access.redhat.com/errata/RHSA-2026:28047", "https://access.redhat.com/errata/RHSA-2026:28074", "https://access.redhat.com/errata/RHSA-2026:28196", "https://access.redhat.com/errata/RHSA-2026:28198", "https://access.redhat.com/errata/RHSA-2026:28441", "https://access.redhat.com/errata/RHSA-2026:28886", "https://access.redhat.com/errata/RHSA-2026:28961", "https://access.redhat.com/errata/RHSA-2026:29035", "https://access.redhat.com/errata/RHSA-2026:29195", "https://access.redhat.com/errata/RHSA-2026:29455", "https://access.redhat.com/errata/RHSA-2026:29702", "https://access.redhat.com/errata/RHSA-2026:29703", "https://access.redhat.com/errata/RHSA-2026:29854", "https://access.redhat.com/errata/RHSA-2026:33722", "https://access.redhat.com/errata/RHSA-2026:34097", "https://access.redhat.com/errata/RHSA-2026:34192", "https://access.redhat.com/errata/RHSA-2026:34196", "https://access.redhat.com/errata/RHSA-2026:34197", "https://access.redhat.com/errata/RHSA-2026:34365", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:39810", "https://access.redhat.com/errata/RHSA-2026:39894", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42043", "https://access.redhat.com/errata/RHSA-2026:42047", "https://access.redhat.com/errata/RHSA-2026:42049", "https://access.redhat.com/errata/RHSA-2026:42050", "https://access.redhat.com/errata/RHSA-2026:42051", "https://access.redhat.com/errata/RHSA-2026:47712", "https://access.redhat.com/errata/RHSA-2026:47714", "https://access.redhat.com/errata/RHSA-2026:47716", "https://access.redhat.com/errata/RHSA-2026:47719", "https://access.redhat.com/errata/RHSA-2026:47721", "https://access.redhat.com/errata/RHSA-2026:47722", "https://access.redhat.com/errata/RHSA-2026:47910", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:48036", "https://access.redhat.com/errata/RHSA-2026:48790", "https://access.redhat.com/errata/RHSA-2026:49509", "https://access.redhat.com/errata/RHSA-2026:49526", "https://access.redhat.com/errata/RHSA-2026:49600", "https://access.redhat.com/errata/RHSA-2026:49838", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51288", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54603", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:56785", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:56852", "https://access.redhat.com/errata/RHSA-2026:56855", "https://access.redhat.com/errata/RHSA-2026:56910", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:56913", "https://access.redhat.com/errata/RHSA-2026:57409", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:57488", "https://access.redhat.com/errata/RHSA-2026:59830", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:59834", "https://access.redhat.com/errata/RHSA-2026:60018", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61685", "https://access.redhat.com/errata/RHSA-2026:61906", "https://access.redhat.com/errata/RHSA-2026:61907", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65838", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:66401", "https://access.redhat.com/errata/RHSA-2026:67319", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/errata/RHSA-2026:9385", "https://access.redhat.com/security/cve/CVE-2026-32280", "https://bugzilla.redhat.com/2456333", "https://bugzilla.redhat.com/2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-49838.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/758320", "https://go.dev/issue/78282", "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "https://linux.oracle.com/cve/CVE-2026-32280.html", "https://linux.oracle.com/errata/ELSA-2026-65886-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-32280", "https://pkg.go.dev/vuln/GO-2026-4947", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32280.json", "https://www.cve.org/CVERecord?id=CVE-2026-32280" ], "PublishedDate": "2026-04-08T02:16:03.247Z", "LastModifiedDate": "2026-09-18T13:17:45.92Z" }, { "VulnerabilityID": "CVE-2026-32281", "VendorIDs": [ "GO-2026-4946" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.25.9, 1.26.2", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-32281", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:805df88f80a1214e49d4f6deea0cc5e75548e02b3ef1d0662c23d728a8e9bb52", "Title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation", "Description": "Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.", "Severity": "HIGH", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:49838", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/security/cve/CVE-2026-32281", "https://bugzilla.redhat.com/2456333", "https://bugzilla.redhat.com/2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-49838.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/758061", "https://go.dev/issue/78281", "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "https://linux.oracle.com/cve/CVE-2026-32281.html", "https://linux.oracle.com/errata/ELSA-2026-67148-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-32281", "https://pkg.go.dev/vuln/GO-2026-4946", "https://www.cve.org/CVERecord?id=CVE-2026-32281" ], "PublishedDate": "2026-04-08T02:16:03.35Z", "LastModifiedDate": "2026-07-25T10:10:00.167Z" }, { "VulnerabilityID": "CVE-2026-32283", "VendorIDs": [ "GO-2026-4870" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.25.9, 1.26.2", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-32283", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:8ede11b49aa7dce043b1cc094e10c52ea74bbbc520019cf4740447339d362a5c", "Title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages", "Description": "If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.", "Severity": "HIGH", "CweIDs": [ "CWE-770", "CWE-764" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10217", "https://access.redhat.com/errata/RHSA-2026:10219", "https://access.redhat.com/errata/RHSA-2026:10704", "https://access.redhat.com/errata/RHSA-2026:11507", "https://access.redhat.com/errata/RHSA-2026:11514", "https://access.redhat.com/errata/RHSA-2026:11704", "https://access.redhat.com/errata/RHSA-2026:11711", "https://access.redhat.com/errata/RHSA-2026:11712", "https://access.redhat.com/errata/RHSA-2026:11863", "https://access.redhat.com/errata/RHSA-2026:11881", "https://access.redhat.com/errata/RHSA-2026:14162", "https://access.redhat.com/errata/RHSA-2026:14200", "https://access.redhat.com/errata/RHSA-2026:14391", "https://access.redhat.com/errata/RHSA-2026:15980", "https://access.redhat.com/errata/RHSA-2026:16021", "https://access.redhat.com/errata/RHSA-2026:16024", "https://access.redhat.com/errata/RHSA-2026:16101", "https://access.redhat.com/errata/RHSA-2026:16102", "https://access.redhat.com/errata/RHSA-2026:16875", "https://access.redhat.com/errata/RHSA-2026:17075", "https://access.redhat.com/errata/RHSA-2026:17084", "https://access.redhat.com/errata/RHSA-2026:17287", "https://access.redhat.com/errata/RHSA-2026:18027", "https://access.redhat.com/errata/RHSA-2026:18032", "https://access.redhat.com/errata/RHSA-2026:19126", "https://access.redhat.com/errata/RHSA-2026:19132", "https://access.redhat.com/errata/RHSA-2026:19133", "https://access.redhat.com/errata/RHSA-2026:19134", "https://access.redhat.com/errata/RHSA-2026:19135", "https://access.redhat.com/errata/RHSA-2026:19136", "https://access.redhat.com/errata/RHSA-2026:19137", "https://access.redhat.com/errata/RHSA-2026:19139", "https://access.redhat.com/errata/RHSA-2026:19144", "https://access.redhat.com/errata/RHSA-2026:19156", "https://access.redhat.com/errata/RHSA-2026:19350", "https://access.redhat.com/errata/RHSA-2026:19351", "https://access.redhat.com/errata/RHSA-2026:19352", "https://access.redhat.com/errata/RHSA-2026:19353", "https://access.redhat.com/errata/RHSA-2026:19369", "https://access.redhat.com/errata/RHSA-2026:19450", "https://access.redhat.com/errata/RHSA-2026:19550", "https://access.redhat.com/errata/RHSA-2026:19634", "https://access.redhat.com/errata/RHSA-2026:19714", "https://access.redhat.com/errata/RHSA-2026:19715", "https://access.redhat.com/errata/RHSA-2026:19719", "https://access.redhat.com/errata/RHSA-2026:19720", "https://access.redhat.com/errata/RHSA-2026:19721", "https://access.redhat.com/errata/RHSA-2026:19722", "https://access.redhat.com/errata/RHSA-2026:19750", "https://access.redhat.com/errata/RHSA-2026:19839", "https://access.redhat.com/errata/RHSA-2026:20556", "https://access.redhat.com/errata/RHSA-2026:20569", "https://access.redhat.com/errata/RHSA-2026:20570", "https://access.redhat.com/errata/RHSA-2026:20571", "https://access.redhat.com/errata/RHSA-2026:20607", "https://access.redhat.com/errata/RHSA-2026:20608", "https://access.redhat.com/errata/RHSA-2026:20609", "https://access.redhat.com/errata/RHSA-2026:21769", "https://access.redhat.com/errata/RHSA-2026:22347", "https://access.redhat.com/errata/RHSA-2026:22423", "https://access.redhat.com/errata/RHSA-2026:22450", "https://access.redhat.com/errata/RHSA-2026:22485", "https://access.redhat.com/errata/RHSA-2026:22709", "https://access.redhat.com/errata/RHSA-2026:22713", "https://access.redhat.com/errata/RHSA-2026:22714", "https://access.redhat.com/errata/RHSA-2026:22937", "https://access.redhat.com/errata/RHSA-2026:23102", "https://access.redhat.com/errata/RHSA-2026:23103", "https://access.redhat.com/errata/RHSA-2026:23228", "https://access.redhat.com/errata/RHSA-2026:23345", "https://access.redhat.com/errata/RHSA-2026:24337", "https://access.redhat.com/errata/RHSA-2026:24470", "https://access.redhat.com/errata/RHSA-2026:24761", "https://access.redhat.com/errata/RHSA-2026:24762", "https://access.redhat.com/errata/RHSA-2026:25248", "https://access.redhat.com/errata/RHSA-2026:25250", "https://access.redhat.com/errata/RHSA-2026:25251", "https://access.redhat.com/errata/RHSA-2026:25252", "https://access.redhat.com/errata/RHSA-2026:26447", "https://access.redhat.com/errata/RHSA-2026:26571", "https://access.redhat.com/errata/RHSA-2026:26636", "https://access.redhat.com/errata/RHSA-2026:27076", "https://access.redhat.com/errata/RHSA-2026:28038", "https://access.redhat.com/errata/RHSA-2026:28047", "https://access.redhat.com/errata/RHSA-2026:28074", "https://access.redhat.com/errata/RHSA-2026:29035", "https://access.redhat.com/errata/RHSA-2026:29195", "https://access.redhat.com/errata/RHSA-2026:29455", "https://access.redhat.com/errata/RHSA-2026:29703", "https://access.redhat.com/errata/RHSA-2026:33722", "https://access.redhat.com/errata/RHSA-2026:34192", "https://access.redhat.com/errata/RHSA-2026:34196", "https://access.redhat.com/errata/RHSA-2026:34197", "https://access.redhat.com/errata/RHSA-2026:34365", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:39810", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:47712", "https://access.redhat.com/errata/RHSA-2026:47714", "https://access.redhat.com/errata/RHSA-2026:47716", "https://access.redhat.com/errata/RHSA-2026:47719", "https://access.redhat.com/errata/RHSA-2026:47721", "https://access.redhat.com/errata/RHSA-2026:47722", "https://access.redhat.com/errata/RHSA-2026:47910", "https://access.redhat.com/errata/RHSA-2026:48036", "https://access.redhat.com/errata/RHSA-2026:48790", "https://access.redhat.com/errata/RHSA-2026:49509", "https://access.redhat.com/errata/RHSA-2026:49600", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:51288", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54435", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:55898", "https://access.redhat.com/errata/RHSA-2026:55900", "https://access.redhat.com/errata/RHSA-2026:55901", "https://access.redhat.com/errata/RHSA-2026:55902", "https://access.redhat.com/errata/RHSA-2026:55903", "https://access.redhat.com/errata/RHSA-2026:56910", "https://access.redhat.com/errata/RHSA-2026:57409", "https://access.redhat.com/errata/RHSA-2026:57801", "https://access.redhat.com/errata/RHSA-2026:57802", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:65343", "https://access.redhat.com/errata/RHSA-2026:65514", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66084", "https://access.redhat.com/errata/RHSA-2026:66401", "https://access.redhat.com/errata/RHSA-2026:66523", "https://access.redhat.com/errata/RHSA-2026:67319", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/errata/RHSA-2026:7291", "https://access.redhat.com/errata/RHSA-2026:7385", "https://access.redhat.com/security/cve/CVE-2026-32283", "https://bugzilla.redhat.com/2445356", "https://bugzilla.redhat.com/2456333", "https://bugzilla.redhat.com/2456338", "https://bugzilla.redhat.com/2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456338", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32283", "https://errata.almalinux.org/9/ALSA-2026-29703.html", "https://errata.rockylinux.org/RLSA-2026:29703", "https://go.dev/cl/763767", "https://go.dev/issue/78334", "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "https://linux.oracle.com/cve/CVE-2026-32283.html", "https://linux.oracle.com/errata/ELSA-2026-48790.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-32283", "https://pkg.go.dev/vuln/GO-2026-4870", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32283.json", "https://www.cve.org/CVERecord?id=CVE-2026-32283" ], "PublishedDate": "2026-04-08T02:16:03.58Z", "LastModifiedDate": "2026-09-18T13:17:48.437Z" }, { "VulnerabilityID": "CVE-2026-33811", "VendorIDs": [ "GO-2026-4981" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.25.10, 1.26.3", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33811", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:012bd66b1d753fb240692972571bb58bdf3ec6b492aed882ad66d1a4ec7ed027", "Title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME", "Description": "When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.", "Severity": "HIGH", "CweIDs": [ "CWE-415", "CWE-1341" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22112", "https://access.redhat.com/errata/RHSA-2026:22120", "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:33120", "https://access.redhat.com/errata/RHSA-2026:33123", "https://access.redhat.com/errata/RHSA-2026:33142", "https://access.redhat.com/errata/RHSA-2026:33150", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34357", "https://access.redhat.com/errata/RHSA-2026:34359", "https://access.redhat.com/errata/RHSA-2026:34364", "https://access.redhat.com/errata/RHSA-2026:35832", "https://access.redhat.com/errata/RHSA-2026:35993", "https://access.redhat.com/errata/RHSA-2026:35994", "https://access.redhat.com/errata/RHSA-2026:35995", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36617", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36776", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:38504", "https://access.redhat.com/errata/RHSA-2026:39266", "https://access.redhat.com/errata/RHSA-2026:39272", "https://access.redhat.com/errata/RHSA-2026:39319", "https://access.redhat.com/errata/RHSA-2026:39573", "https://access.redhat.com/errata/RHSA-2026:39810", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40119", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41030", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42043", "https://access.redhat.com/errata/RHSA-2026:42047", "https://access.redhat.com/errata/RHSA-2026:42048", "https://access.redhat.com/errata/RHSA-2026:42049", "https://access.redhat.com/errata/RHSA-2026:42050", "https://access.redhat.com/errata/RHSA-2026:42051", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42079", "https://access.redhat.com/errata/RHSA-2026:42082", "https://access.redhat.com/errata/RHSA-2026:42132", "https://access.redhat.com/errata/RHSA-2026:42150", "https://access.redhat.com/errata/RHSA-2026:42151", "https://access.redhat.com/errata/RHSA-2026:42240", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42852", "https://access.redhat.com/errata/RHSA-2026:42946", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:44622", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:47149", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49703", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50319", "https://access.redhat.com/errata/RHSA-2026:50336", "https://access.redhat.com/errata/RHSA-2026:50843", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51057", "https://access.redhat.com/errata/RHSA-2026:51187", "https://access.redhat.com/errata/RHSA-2026:51194", "https://access.redhat.com/errata/RHSA-2026:51341", "https://access.redhat.com/errata/RHSA-2026:53412", "https://access.redhat.com/errata/RHSA-2026:53413", "https://access.redhat.com/errata/RHSA-2026:53415", "https://access.redhat.com/errata/RHSA-2026:53530", "https://access.redhat.com/errata/RHSA-2026:54168", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:54435", "https://access.redhat.com/errata/RHSA-2026:54441", "https://access.redhat.com/errata/RHSA-2026:54500", "https://access.redhat.com/errata/RHSA-2026:54552", "https://access.redhat.com/errata/RHSA-2026:54556", "https://access.redhat.com/errata/RHSA-2026:54584", "https://access.redhat.com/errata/RHSA-2026:54602", "https://access.redhat.com/errata/RHSA-2026:54603", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:56340", "https://access.redhat.com/errata/RHSA-2026:56785", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:56790", "https://access.redhat.com/errata/RHSA-2026:56852", "https://access.redhat.com/errata/RHSA-2026:56855", "https://access.redhat.com/errata/RHSA-2026:56910", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:56913", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:57488", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59559", "https://access.redhat.com/errata/RHSA-2026:60018", "https://access.redhat.com/errata/RHSA-2026:60025", "https://access.redhat.com/errata/RHSA-2026:60302", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:61313", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:67149", "https://access.redhat.com/errata/RHSA-2026:67287", "https://access.redhat.com/errata/RHSA-2026:67319", "https://access.redhat.com/security/cve/CVE-2026-33811", "https://bugzilla.redhat.com/2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-39319.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/767860", "https://go.dev/issue/78803", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-33811.html", "https://linux.oracle.com/errata/ELSA-2026-65886-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-33811", "https://pkg.go.dev/vuln/GO-2026-4981", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json", "https://www.cve.org/CVERecord?id=CVE-2026-33811" ], "PublishedDate": "2026-05-07T20:16:42.77Z", "LastModifiedDate": "2026-10-26T00:10:00.15Z" }, { "VulnerabilityID": "CVE-2026-33814", "VendorIDs": [ "GO-2026-4918" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.25.10, 1.26.3", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33814", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:1cb42f78f386bbd2cfb0dfa499d0b61ee7454b9994143086cb943ff281bd5036", "Title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame", "Description": "When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.", "Severity": "HIGH", "CweIDs": [ "CWE-835", "CWE-606" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22112", "https://access.redhat.com/errata/RHSA-2026:22120", "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:33120", "https://access.redhat.com/errata/RHSA-2026:33123", "https://access.redhat.com/errata/RHSA-2026:33142", "https://access.redhat.com/errata/RHSA-2026:33150", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:56854", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57365", "https://access.redhat.com/errata/RHSA-2026:57367", "https://access.redhat.com/errata/RHSA-2026:57408", "https://access.redhat.com/errata/RHSA-2026:57545", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:57845", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60023", "https://access.redhat.com/errata/RHSA-2026:60025", "https://access.redhat.com/errata/RHSA-2026:60441", "https://access.redhat.com/errata/RHSA-2026:60442", "https://access.redhat.com/errata/RHSA-2026:60446", "https://access.redhat.com/errata/RHSA-2026:60447", "https://access.redhat.com/errata/RHSA-2026:60454", "https://access.redhat.com/errata/RHSA-2026:60477", "https://access.redhat.com/errata/RHSA-2026:60478", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:60668", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:62410", "https://access.redhat.com/errata/RHSA-2026:62550", "https://access.redhat.com/errata/RHSA-2026:62551", "https://access.redhat.com/errata/RHSA-2026:63046", "https://access.redhat.com/errata/RHSA-2026:63047", "https://access.redhat.com/errata/RHSA-2026:63048", "https://access.redhat.com/errata/RHSA-2026:63050", "https://access.redhat.com/errata/RHSA-2026:63091", "https://access.redhat.com/errata/RHSA-2026:63096", "https://access.redhat.com/errata/RHSA-2026:63097", "https://access.redhat.com/errata/RHSA-2026:63103", "https://access.redhat.com/errata/RHSA-2026:63104", "https://access.redhat.com/errata/RHSA-2026:63636", "https://access.redhat.com/errata/RHSA-2026:63637", "https://access.redhat.com/errata/RHSA-2026:63639", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:66350", "https://access.redhat.com/security/cve/CVE-2026-33814", "https://bugzilla.redhat.com/2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467810", "https://bugzilla.redhat.com/show_bug.cgi?id=2467811", "https://bugzilla.redhat.com/show_bug.cgi?id=2467813", "https://bugzilla.redhat.com/show_bug.cgi?id=2467815", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2467823", "https://bugzilla.redhat.com/show_bug.cgi?id=2467825", "https://bugzilla.redhat.com/show_bug.cgi?id=2467826", "https://bugzilla.redhat.com/show_bug.cgi?id=2467827", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33814", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39817", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39819", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39823", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39825", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39826", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39836", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42501", "https://errata.almalinux.org/9/ALSA-2026-22121.html", "https://errata.rockylinux.org/RLSA-2026:22121", "https://github.com/golang/go/issues/78476", "https://go-review.googlesource.com/c/go/+/761581", "https://go-review.googlesource.com/c/net/+/761640", "https://go.dev/cl/761581", "https://go.dev/cl/761640", "https://go.dev/issue/78476", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-33814.html", "https://linux.oracle.com/errata/ELSA-2026-22121.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-33814", "https://pkg.go.dev/vuln/GO-2026-4918", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33814.json", "https://ubuntu.com/security/notices/USN-8430-1", "https://ubuntu.com/security/notices/USN-8471-1", "https://ubuntu.com/security/notices/USN-8472-1", "https://ubuntu.com/security/notices/USN-8473-1", "https://www.cve.org/CVERecord?id=CVE-2026-33814" ], "PublishedDate": "2026-05-07T20:16:42.88Z", "LastModifiedDate": "2026-10-26T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2026-33818", "VendorIDs": [ "GO-2026-5972" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33818", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:8560fe9f3cabf63a2bfb8c2c8f471c9944f693b3459e39c4d8d9171c18a28a1d", "Title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal", "Description": "Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.", "Severity": "HIGH", "CweIDs": [ "CWE-400" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70641", "https://access.redhat.com/security/cve/CVE-2026-33818", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11395", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-70641.html", "https://errata.rockylinux.org/RLSA-2026:70641", "https://github.com/golang/go/issues/80405", "https://go.dev/cl/814980", "https://go.dev/issue/80405", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-33818.html", "https://linux.oracle.com/errata/ELSA-2026-70641.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-33818", "https://pkg.go.dev/vuln/GO-2026-5972", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-33818" ], "PublishedDate": "2026-08-13T22:17:19.84Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-39820", "VendorIDs": [ "GO-2026-4986" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.25.10, 1.26.3", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39820", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:bf48f59fe01a21d0b1375f0cc143f1d4af1142cfce8fded114b6341a5d7fd3b6", "Title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs", "Description": "Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.", "Severity": "HIGH", "CweIDs": [ "CWE-770", "CWE-606" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22112", "https://access.redhat.com/errata/RHSA-2026:22120", "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:33120", "https://access.redhat.com/errata/RHSA-2026:33123", "https://access.redhat.com/errata/RHSA-2026:33142", "https://access.redhat.com/errata/RHSA-2026:33150", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34364", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50319", "https://access.redhat.com/errata/RHSA-2026:50336", "https://access.redhat.com/errata/RHSA-2026:50843", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51112", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:54552", "https://access.redhat.com/errata/RHSA-2026:54555", "https://access.redhat.com/errata/RHSA-2026:54583", "https://access.redhat.com/errata/RHSA-2026:54602", "https://access.redhat.com/errata/RHSA-2026:54883", "https://access.redhat.com/errata/RHSA-2026:56340", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:56852", "https://access.redhat.com/errata/RHSA-2026:56854", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57401", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:57487", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:57845", "https://access.redhat.com/errata/RHSA-2026:57914", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59830", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60018", "https://access.redhat.com/errata/RHSA-2026:60023", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:62260", "https://access.redhat.com/errata/RHSA-2026:62406", "https://access.redhat.com/errata/RHSA-2026:62407", "https://access.redhat.com/errata/RHSA-2026:62753", "https://access.redhat.com/errata/RHSA-2026:62754", "https://access.redhat.com/errata/RHSA-2026:62803", "https://access.redhat.com/errata/RHSA-2026:63022", "https://access.redhat.com/errata/RHSA-2026:65116", "https://access.redhat.com/errata/RHSA-2026:65117", "https://access.redhat.com/errata/RHSA-2026:65153", "https://access.redhat.com/errata/RHSA-2026:65335", "https://access.redhat.com/errata/RHSA-2026:65336", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65838", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:65895", "https://access.redhat.com/errata/RHSA-2026:66016", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66327", "https://access.redhat.com/errata/RHSA-2026:67517", "https://access.redhat.com/errata/RHSA-2026:67974", "https://access.redhat.com/errata/RHSA-2026:67975", "https://access.redhat.com/errata/RHSA-2026:68334", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/errata/RHSA-2026:68527", "https://access.redhat.com/security/cve/CVE-2026-39820", "https://bugzilla.redhat.com/2467809", "https://bugzilla.redhat.com/2467820", "https://bugzilla.redhat.com/2480756", "https://bugzilla.redhat.com/2484204", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-65153.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/759940", "https://go.dev/issue/78566", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-39820.html", "https://linux.oracle.com/errata/ELSA-2026-65895-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39820", "https://pkg.go.dev/vuln/GO-2026-4986", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39820.json", "https://www.cve.org/CVERecord?id=CVE-2026-39820" ], "PublishedDate": "2026-05-07T20:16:43.187Z", "LastModifiedDate": "2026-10-26T00:10:00.15Z" }, { "VulnerabilityID": "CVE-2026-39821", "VendorIDs": [ "GO-2026-5026" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39821", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:b6eaccae50e4bfed4ebd3607f5e3f6a7d59b995e8abe49e78f69f5c85a798e9f", "Title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing", "Description": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\".", "Severity": "HIGH", "CweIDs": [ "CWE-1289" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 4, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:30853", "https://access.redhat.com/errata/RHSA-2026:30854", "https://access.redhat.com/errata/RHSA-2026:30855", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33524", "https://access.redhat.com/errata/RHSA-2026:33531", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:34357", "https://access.redhat.com/errata/RHSA-2026:34359", "https://access.redhat.com/errata/RHSA-2026:34364", "https://access.redhat.com/errata/RHSA-2026:34789", "https://access.redhat.com/errata/RHSA-2026:35826", "https://access.redhat.com/errata/RHSA-2026:35827", "https://access.redhat.com/errata/RHSA-2026:35828", "https://access.redhat.com/errata/RHSA-2026:35829", "https://access.redhat.com/errata/RHSA-2026:35830", "https://access.redhat.com/errata/RHSA-2026:35831", "https://access.redhat.com/errata/RHSA-2026:35993", "https://access.redhat.com/errata/RHSA-2026:35994", "https://access.redhat.com/errata/RHSA-2026:36105", "https://access.redhat.com/errata/RHSA-2026:36167", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:37435", "https://access.redhat.com/errata/RHSA-2026:37436", "https://access.redhat.com/errata/RHSA-2026:38995", "https://access.redhat.com/errata/RHSA-2026:39005", "https://access.redhat.com/errata/RHSA-2026:39573", "https://access.redhat.com/errata/RHSA-2026:39879", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41030", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41930", "https://access.redhat.com/errata/RHSA-2026:42043", "https://access.redhat.com/errata/RHSA-2026:42047", "https://access.redhat.com/errata/RHSA-2026:42048", "https://access.redhat.com/errata/RHSA-2026:42049", "https://access.redhat.com/errata/RHSA-2026:42050", "https://access.redhat.com/errata/RHSA-2026:42051", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42079", "https://access.redhat.com/errata/RHSA-2026:42080", "https://access.redhat.com/errata/RHSA-2026:42082", "https://access.redhat.com/errata/RHSA-2026:42132", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42150", "https://access.redhat.com/errata/RHSA-2026:42151", "https://access.redhat.com/errata/RHSA-2026:42240", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:42852", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:44622", "https://access.redhat.com/errata/RHSA-2026:44624", "https://access.redhat.com/errata/RHSA-2026:46395", "https://access.redhat.com/errata/RHSA-2026:47149", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47737", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50843", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51112", "https://access.redhat.com/errata/RHSA-2026:51187", "https://access.redhat.com/errata/RHSA-2026:51194", "https://access.redhat.com/errata/RHSA-2026:51341", "https://access.redhat.com/errata/RHSA-2026:52826", "https://access.redhat.com/errata/RHSA-2026:53374", "https://access.redhat.com/errata/RHSA-2026:53412", "https://access.redhat.com/errata/RHSA-2026:53413", "https://access.redhat.com/errata/RHSA-2026:53415", "https://access.redhat.com/errata/RHSA-2026:53530", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:54395", "https://access.redhat.com/errata/RHSA-2026:54401", "https://access.redhat.com/errata/RHSA-2026:54435", "https://access.redhat.com/errata/RHSA-2026:54441", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:54580", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:56143", "https://access.redhat.com/errata/RHSA-2026:56223", "https://access.redhat.com/errata/RHSA-2026:56340", "https://access.redhat.com/errata/RHSA-2026:56431", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57541", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:57845", "https://access.redhat.com/errata/RHSA-2026:59546", "https://access.redhat.com/errata/RHSA-2026:59549", "https://access.redhat.com/errata/RHSA-2026:59562", "https://access.redhat.com/errata/RHSA-2026:60315", "https://access.redhat.com/errata/RHSA-2026:60354", "https://access.redhat.com/errata/RHSA-2026:60387", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61245", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:62549", "https://access.redhat.com/errata/RHSA-2026:63134", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:65153", "https://access.redhat.com/errata/RHSA-2026:65359", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65851", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:66016", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66350", "https://access.redhat.com/errata/RHSA-2026:66432", "https://access.redhat.com/errata/RHSA-2026:67149", "https://access.redhat.com/errata/RHSA-2026:67159", "https://access.redhat.com/errata/RHSA-2026:67160", "https://access.redhat.com/errata/RHSA-2026:67287", "https://access.redhat.com/errata/RHSA-2026:67319", "https://access.redhat.com/errata/RHSA-2026:67517", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/security/cve/CVE-2026-39821", "https://bugzilla.redhat.com/2467809", "https://bugzilla.redhat.com/2467820", "https://bugzilla.redhat.com/2480756", "https://bugzilla.redhat.com/2484204", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-65153.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/767220", "https://go.dev/issue/78760", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8", "https://linux.oracle.com/cve/CVE-2026-39821.html", "https://linux.oracle.com/errata/ELSA-2026-66432-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39821", "https://pkg.go.dev/vuln/GO-2026-5026", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json", "https://ubuntu.com/security/notices/USN-8416-1", "https://ubuntu.com/security/notices/USN-8883-1", "https://ubuntu.com/security/notices/USN-8883-2", "https://ubuntu.com/security/notices/USN-8900-1", "https://ubuntu.com/security/notices/USN-8914-1", "https://www.cve.org/CVERecord?id=CVE-2026-39821" ], "PublishedDate": "2026-05-22T16:16:20.41Z", "LastModifiedDate": "2026-09-17T12:18:05.767Z" }, { "VulnerabilityID": "CVE-2026-39822", "VendorIDs": [ "GO-2026-4970" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.25.12, 1.26.5, 1.27.0-rc.2", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39822", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:3c6883368bf387b6dc49580fc7886a1797d26c29450a94dc5108da3592d445b1", "Title": "golang: Go os.Root: Symlink following vulnerability allows directory traversal", "Description": "On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open(\"symlink/\")' will open \"symlink\" even when \"symlink\" is a symbolic link pointing outside of the root.", "Severity": "HIGH", "CweIDs": [ "CWE-61" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:38878", "https://access.redhat.com/security/cve/CVE-2026-39822", "https://bugzilla.redhat.com/2498152", "https://bugzilla.redhat.com/show_bug.cgi?id=2498152", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39822", "https://errata.almalinux.org/9/ALSA-2026-38878.html", "https://errata.rockylinux.org/RLSA-2026:38878", "https://github.com/golang/go/issues/79005", "https://go.dev/cl/797880", "https://go.dev/issue/79005", "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc", "https://linux.oracle.com/cve/CVE-2026-39822.html", "https://linux.oracle.com/errata/ELSA-2026-38995.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39822", "https://pkg.go.dev/vuln/GO-2026-4970", "https://www.cve.org/CVERecord?id=CVE-2026-39822" ], "PublishedDate": "2026-07-08T17:17:21.31Z", "LastModifiedDate": "2026-10-25T17:10:00.197Z" }, { "VulnerabilityID": "CVE-2026-39836", "VendorIDs": [ "GO-2026-4971" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.25.10, 1.26.3", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39836", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:a65e88377107883434038e95de205bb57fd7eec1092ff97addce9f9ed5e49d40", "Title": "net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows", "Description": "The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0).", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/security/cve/CVE-2026-39836", "https://bugzilla.redhat.com/2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467810", "https://bugzilla.redhat.com/show_bug.cgi?id=2467811", "https://bugzilla.redhat.com/show_bug.cgi?id=2467813", "https://bugzilla.redhat.com/show_bug.cgi?id=2467815", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2467823", "https://bugzilla.redhat.com/show_bug.cgi?id=2467825", "https://bugzilla.redhat.com/show_bug.cgi?id=2467826", "https://bugzilla.redhat.com/show_bug.cgi?id=2467827", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33814", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39817", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39819", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39823", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39825", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39826", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39836", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42501", "https://errata.almalinux.org/9/ALSA-2026-22121.html", "https://errata.rockylinux.org/RLSA-2026:22121", "https://go.dev/cl/775320", "https://go.dev/issue/79006", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-39836.html", "https://linux.oracle.com/errata/ELSA-2026-22121.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39836", "https://pkg.go.dev/vuln/GO-2026-4971", "https://www.cve.org/CVERecord?id=CVE-2026-39836" ], "PublishedDate": "2026-05-07T20:16:43.593Z", "LastModifiedDate": "2026-10-26T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2026-42499", "VendorIDs": [ "GO-2026-4977" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.25.10, 1.26.3", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42499", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:edd9345ca49bfd774eca770df64c4b369f54a37834a528b0cd13afe68c58509c", "Title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing", "Description": "Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.", "Severity": "HIGH", "CweIDs": [ "CWE-1046" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:17713", "https://access.redhat.com/errata/RHSA-2026:17714", "https://access.redhat.com/errata/RHSA-2026:22112", "https://access.redhat.com/errata/RHSA-2026:22120", "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/errata/RHSA-2026:33120", "https://access.redhat.com/errata/RHSA-2026:33123", "https://access.redhat.com/errata/RHSA-2026:33142", "https://access.redhat.com/errata/RHSA-2026:33150", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34364", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50319", "https://access.redhat.com/errata/RHSA-2026:50336", "https://access.redhat.com/errata/RHSA-2026:50843", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51112", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:54552", "https://access.redhat.com/errata/RHSA-2026:54555", "https://access.redhat.com/errata/RHSA-2026:54583", "https://access.redhat.com/errata/RHSA-2026:54602", "https://access.redhat.com/errata/RHSA-2026:56340", "https://access.redhat.com/errata/RHSA-2026:56785", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:56852", "https://access.redhat.com/errata/RHSA-2026:56854", "https://access.redhat.com/errata/RHSA-2026:56910", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:57487", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:57845", "https://access.redhat.com/errata/RHSA-2026:57914", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59830", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60018", "https://access.redhat.com/errata/RHSA-2026:60023", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:62260", "https://access.redhat.com/errata/RHSA-2026:62406", "https://access.redhat.com/errata/RHSA-2026:62407", "https://access.redhat.com/errata/RHSA-2026:62753", "https://access.redhat.com/errata/RHSA-2026:62754", "https://access.redhat.com/errata/RHSA-2026:62803", "https://access.redhat.com/errata/RHSA-2026:63022", "https://access.redhat.com/errata/RHSA-2026:63163", "https://access.redhat.com/errata/RHSA-2026:63332", "https://access.redhat.com/errata/RHSA-2026:63636", "https://access.redhat.com/errata/RHSA-2026:64818", "https://access.redhat.com/errata/RHSA-2026:65116", "https://access.redhat.com/errata/RHSA-2026:65117", "https://access.redhat.com/errata/RHSA-2026:65153", "https://access.redhat.com/errata/RHSA-2026:65335", "https://access.redhat.com/errata/RHSA-2026:65336", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65838", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:65895", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66327", "https://access.redhat.com/errata/RHSA-2026:67148", "https://access.redhat.com/errata/RHSA-2026:67517", "https://access.redhat.com/errata/RHSA-2026:67974", "https://access.redhat.com/errata/RHSA-2026:67975", "https://access.redhat.com/errata/RHSA-2026:68334", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/errata/RHSA-2026:68527", "https://access.redhat.com/security/cve/CVE-2026-42499", "https://bugzilla.redhat.com/2467809", "https://bugzilla.redhat.com/2467820", "https://bugzilla.redhat.com/2480756", "https://bugzilla.redhat.com/2484204", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-65153.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/771520", "https://go.dev/issue/78987", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-42499.html", "https://linux.oracle.com/errata/ELSA-2026-70201.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-42499", "https://pkg.go.dev/vuln/GO-2026-4977", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42499.json", "https://www.cve.org/CVERecord?id=CVE-2026-42499" ], "PublishedDate": "2026-05-07T20:16:44.54Z", "LastModifiedDate": "2026-10-26T00:10:00.15Z" }, { "VulnerabilityID": "CVE-2026-42504", "VendorIDs": [ "GO-2026-5038" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.25.11, 1.26.4", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42504", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:e66194af9b77439443b06caf020be245c44d3ddf9b5f60c114b4dc933a69be39", "Title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header", "Description": "Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:65153", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/security/cve/CVE-2026-42504", "https://bugzilla.redhat.com/2467809", "https://bugzilla.redhat.com/2467820", "https://bugzilla.redhat.com/2480756", "https://bugzilla.redhat.com/2484204", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-65153.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/774481", "https://go.dev/issue/79217", "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw", "https://linux.oracle.com/cve/CVE-2026-42504.html", "https://linux.oracle.com/errata/ELSA-2026-69308.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-42504", "https://pkg.go.dev/vuln/GO-2026-5038", "https://www.cve.org/CVERecord?id=CVE-2026-42504" ], "PublishedDate": "2026-06-02T23:16:37.927Z", "LastModifiedDate": "2026-07-22T19:10:00.12Z" }, { "VulnerabilityID": "CVE-2026-56853", "VendorIDs": [ "GO-2026-6089" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56853", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:879c7d4059cf6efd097e5fc393b954b054215f2d45abb97c79ac875af6af06c1", "Title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service", "Description": "When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70641", "https://access.redhat.com/security/cve/CVE-2026-56853", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11395", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-70641.html", "https://errata.rockylinux.org/RLSA-2026:70641", "https://go.dev/cl/795540", "https://go.dev/issue/80205", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-56853.html", "https://linux.oracle.com/errata/ELSA-2026-89752.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56853", "https://pkg.go.dev/vuln/GO-2026-6089", "https://www.cve.org/CVERecord?id=CVE-2026-56853" ], "PublishedDate": "2026-08-13T22:17:22.093Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-56858", "VendorIDs": [ "GO-2026-6091" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56858", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:48b6602965add0eb116cbffeb091508f3f851d0548f18e08cbd5791f8ca0ccf1", "Title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input", "Description": "Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.", "Severity": "HIGH", "CweIDs": [ "CWE-79" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 2, "oracle-oval": 3, "photon": 2, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "V3Score": 6.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70641", "https://access.redhat.com/security/cve/CVE-2026-56858", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11395", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-70641.html", "https://errata.rockylinux.org/RLSA-2026:70641", "https://go.dev/cl/807100", "https://go.dev/issue/80435", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-56858.html", "https://linux.oracle.com/errata/ELSA-2026-70641.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56858", "https://pkg.go.dev/vuln/GO-2026-6091", "https://www.cve.org/CVERecord?id=CVE-2026-56858" ], "PublishedDate": "2026-08-13T22:17:22.207Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-56859", "VendorIDs": [ "GO-2026-6088" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56859", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:cf9e371fecbca80514208723562f8453a3498a373199f63bb5efb1fd04ef14d4", "Title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue", "Description": "Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69961", "https://access.redhat.com/security/cve/CVE-2026-56859", "https://bugzilla.redhat.com/2480684", "https://bugzilla.redhat.com/2508234", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2480684", "https://bugzilla.redhat.com/show_bug.cgi?id=2508234", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2518147", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17106", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19730", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39830", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-69961.html", "https://errata.rockylinux.org/RLSA-2026:69961", "https://github.com/golang/go/issues/80481", "https://go.dev/cl/803320", "https://go.dev/issue/80481", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-56859.html", "https://linux.oracle.com/errata/ELSA-2026-70201.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56859", "https://pkg.go.dev/vuln/GO-2026-6088", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-56859" ], "PublishedDate": "2026-08-13T22:17:22.32Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-56860", "VendorIDs": [ "GO-2026-6218" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56860", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:032dfa4d6377b32eccbbb33078ee058046eb8e0ff98867fbb00c70334757642f", "Title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution", "Description": "Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 2, "oracle-oval": 3, "photon": 2, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70641", "https://access.redhat.com/security/cve/CVE-2026-56860", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11395", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-70641.html", "https://errata.rockylinux.org/RLSA-2026:70641", "https://go.dev/cl/803681", "https://go.dev/issue/80494", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-56860.html", "https://linux.oracle.com/errata/ELSA-2026-71619.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56860", "https://pkg.go.dev/vuln/GO-2026-6218", "https://www.cve.org/CVERecord?id=CVE-2026-56860" ], "PublishedDate": "2026-08-13T22:17:22.44Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-56862", "VendorIDs": [ "GO-2026-6090" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56862", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:99de6b922cb6a7e607598038ad39f12634661ab601b3bd70885a17496fd9d4db", "Title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages", "Description": "Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70641", "https://access.redhat.com/security/cve/CVE-2026-56862", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11395", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-70641.html", "https://errata.rockylinux.org/RLSA-2026:70641", "https://github.com/golang/go/issues/80528", "https://go.dev/cl/804261", "https://go.dev/issue/80528", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-56862.html", "https://linux.oracle.com/errata/ELSA-2026-70641.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56862", "https://pkg.go.dev/vuln/GO-2026-6090", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-56862" ], "PublishedDate": "2026-08-13T22:17:22.55Z", "LastModifiedDate": "2026-10-24T16:10:00.153Z" }, { "VulnerabilityID": "CVE-2026-78667", "VendorIDs": [ "GO-2026-6609" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.26.9, 1.27.2", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78667", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:00be3ed1053620bf5562acf363b5556be8c78ba9c2291c503ea5e6e77c7d79fa", "Title": "net/http: golang: golang: Denial of Service via crafted HTTP Range headers", "Description": "When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93617", "https://access.redhat.com/security/cve/CVE-2026-78667", "https://bugzilla.redhat.com/2548334", "https://bugzilla.redhat.com/2548336", "https://bugzilla.redhat.com/2548341", "https://bugzilla.redhat.com/2548344", "https://bugzilla.redhat.com/2556068", "https://bugzilla.redhat.com/show_bug.cgi?id=2548334", "https://bugzilla.redhat.com/show_bug.cgi?id=2548336", "https://bugzilla.redhat.com/show_bug.cgi?id=2548341", "https://bugzilla.redhat.com/show_bug.cgi?id=2548344", "https://bugzilla.redhat.com/show_bug.cgi?id=2556068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78667", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94440", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97031", "https://errata.almalinux.org/9/ALSA-2026-93617.html", "https://errata.rockylinux.org/RLSA-2026:93617", "https://github.com/golang/go/issues/81858", "https://go.dev/cl/847309", "https://go.dev/issue/81858", "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI", "https://linux.oracle.com/cve/CVE-2026-78667.html", "https://linux.oracle.com/errata/ELSA-2026-95519.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78667", "https://pkg.go.dev/vuln/GO-2026-6609", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-78667", "https://www.openwall.com/lists/oss-security/2026/10/08/9" ], "PublishedDate": "2026-10-08T23:17:03.88Z", "LastModifiedDate": "2026-10-09T17:16:49.69Z" }, { "VulnerabilityID": "CVE-2026-78669", "VendorIDs": [ "GO-2026-6611" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.26.9, 1.27.2", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78669", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:152b218433fcb68ec9ad0d222043639f4673c453198d6b4f46133915054f2190", "Title": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames", "Description": "A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.", "Severity": "HIGH", "CweIDs": [ "CWE-405" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93617", "https://access.redhat.com/security/cve/CVE-2026-78669", "https://bugzilla.redhat.com/2548334", "https://bugzilla.redhat.com/2548336", "https://bugzilla.redhat.com/2548341", "https://bugzilla.redhat.com/2548344", "https://bugzilla.redhat.com/2556068", "https://bugzilla.redhat.com/show_bug.cgi?id=2548334", "https://bugzilla.redhat.com/show_bug.cgi?id=2548336", "https://bugzilla.redhat.com/show_bug.cgi?id=2548341", "https://bugzilla.redhat.com/show_bug.cgi?id=2548344", "https://bugzilla.redhat.com/show_bug.cgi?id=2556068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78667", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94440", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97031", "https://errata.almalinux.org/9/ALSA-2026-93617.html", "https://errata.rockylinux.org/RLSA-2026:93617", "https://github.com/golang/go/issues/81742", "https://go.dev/cl/847186", "https://go.dev/cl/847308", "https://go.dev/issue/81742", "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI", "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs", "https://linux.oracle.com/cve/CVE-2026-78669.html", "https://linux.oracle.com/errata/ELSA-2026-95519.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78669", "https://pkg.go.dev/vuln/GO-2026-6611", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-78669", "https://www.openwall.com/lists/oss-security/2026/10/08/9" ], "PublishedDate": "2026-10-08T23:17:04.01Z", "LastModifiedDate": "2026-10-09T17:16:49.857Z" }, { "VulnerabilityID": "CVE-2026-97031", "VendorIDs": [ "GO-2026-6607" ], "PkgID": "stdlib@v1.24.4", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.24.4", "UID": "4a7c9956a0ba2060" }, "InstalledVersion": "v1.24.4", "FixedVersion": "1.26.9, 1.27.2", "Status": "fixed", "Layer": { "DiffID": "sha256:d6d7059f8f563d17a0b7e77f308aaa8a924a8cde05bcb9a3b4b1ad763e16c44b" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-97031", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:e8b1a91e80559085c765578c94165713c373c43fa38ffb2022ca9aa29b1425c6", "Title": "crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references", "Description": "Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result.", "Severity": "HIGH", "CweIDs": [ "CWE-405" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:95518", "https://access.redhat.com/security/cve/CVE-2026-97031", "https://bugzilla.redhat.com/2548336", "https://bugzilla.redhat.com/2556068", "https://bugzilla.redhat.com/show_bug.cgi?id=2548336", "https://bugzilla.redhat.com/show_bug.cgi?id=2556068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97031", "https://errata.almalinux.org/9/ALSA-2026-95518.html", "https://errata.rockylinux.org/RLSA-2026:95518", "https://go.dev/cl/847312", "https://go.dev/issue/81855", "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI", "https://linux.oracle.com/cve/CVE-2026-97031.html", "https://linux.oracle.com/errata/ELSA-2026-95519.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-97031", "https://pkg.go.dev/vuln/GO-2026-6607", "https://www.cve.org/CVERecord?id=CVE-2026-97031" ], "PublishedDate": "2026-10-08T23:17:06.037Z", "LastModifiedDate": "2026-10-09T16:35:35.9Z" } ] } ] }