{"@context":"https://openvex.dev/ns/v0.2.0","@id":"pkg:docker/apm-inject@0.71.1","author":"security@datadoghq.com","author_role":"Vulnerability Management","last_updated":"2026-10-13T13:09:37.26925922Z","statements":[{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"this is a false positive in terms of exploitability. The flaw is in Go's handling of international domain names, and only matters when a program handles hostnames supplied by an attacker. APM Inject only connects to the local Datadog Agent at an address set by the operator, so the issue cannot be exploited.","justification":"vulnerable_code_cannot_be_controlled_by_adversary","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.867241Z","vulnerability":{"name":"CVE-2026-39821"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.867317Z","vulnerability":{"name":"CVE-2026-78663"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.867343Z","vulnerability":{"name":"CVE-2026-56857"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.867375Z","vulnerability":{"name":"CVE-2026-78659"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.867401Z","vulnerability":{"name":"CVE-2026-33818"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.867423Z","vulnerability":{"name":"CVE-2026-56853"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.86745Z","vulnerability":{"name":"CVE-2026-56859"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.867476Z","vulnerability":{"name":"CVE-2026-56862"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.867517Z","vulnerability":{"name":"CVE-2026-78669"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.867543Z","vulnerability":{"name":"CVE-2026-46600"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.867569Z","vulnerability":{"name":"CVE-2026-94440"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.867599Z","vulnerability":{"name":"CVE-2026-56860"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.867624Z","vulnerability":{"name":"CVE-2026-97031"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.867648Z","vulnerability":{"name":"CVE-2026-78667"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.867672Z","vulnerability":{"name":"CVE-2026-94439"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.867696Z","vulnerability":{"name":"CVE-2026-56866"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.867714Z","vulnerability":{"name":"CVE-2026-78660"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.867738Z","vulnerability":{"name":"CVE-2026-56858"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.867758Z","vulnerability":{"name":"CVE-2026-97032"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.867777Z","vulnerability":{"name":"CVE-2026-94448"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:11.432423Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:48:40.867797Z","vulnerability":{"name":"CVE-2026-97030"}}],"timestamp":"2026-09-16T12:38:33.286989591Z","tooling":"","version":20}