{"@context":"https://openvex.dev/ns/v0.2.0","@id":"pkg:docker/apm-inject@0.71.0","author":"security@datadoghq.com","author_role":"Vulnerability Management","last_updated":"2026-10-13T13:09:41.087032364Z","statements":[{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"this is a false positive in terms of exploitability. The flaw is in Go's handling of international domain names, and only matters when a program handles hostnames supplied by an attacker. APM Inject only connects to the local Datadog Agent at an address set by the operator, so the issue cannot be exploited.","justification":"vulnerable_code_cannot_be_controlled_by_adversary","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.977723Z","vulnerability":{"name":"CVE-2026-39821"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.977778Z","vulnerability":{"name":"CVE-2026-78663"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.977812Z","vulnerability":{"name":"CVE-2026-56857"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.977838Z","vulnerability":{"name":"CVE-2026-78659"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.977868Z","vulnerability":{"name":"CVE-2026-33818"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.977903Z","vulnerability":{"name":"CVE-2026-56853"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.977926Z","vulnerability":{"name":"CVE-2026-56859"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.977961Z","vulnerability":{"name":"CVE-2026-56862"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.977994Z","vulnerability":{"name":"CVE-2026-78669"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.978029Z","vulnerability":{"name":"CVE-2026-46600"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.978059Z","vulnerability":{"name":"CVE-2026-94440"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.978085Z","vulnerability":{"name":"CVE-2026-56860"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.978119Z","vulnerability":{"name":"CVE-2026-97031"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.978161Z","vulnerability":{"name":"CVE-2026-78667"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.978191Z","vulnerability":{"name":"CVE-2026-94439"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.978219Z","vulnerability":{"name":"CVE-2026-56866"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.978247Z","vulnerability":{"name":"CVE-2026-78660"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.978276Z","vulnerability":{"name":"CVE-2026-56858"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.978302Z","vulnerability":{"name":"CVE-2026-97032"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.97833Z","vulnerability":{"name":"CVE-2026-94448"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:08.978355Z","vulnerability":{"name":"CVE-2026-97030"}}],"timestamp":"2026-08-27T13:15:15.319522706Z","tooling":"","version":34}