{"@context":"https://openvex.dev/ns/v0.2.0","@id":"pkg:docker/apm-inject@0.71.2","author":"security@datadoghq.com","author_role":"Vulnerability Management","last_updated":"2026-10-13T13:09:33.54301771Z","statements":[{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"this is a false positive in terms of exploitability. The flaw is in Go's handling of international domain names, and only matters when a program handles hostnames supplied by an attacker. APM Inject only connects to the local Datadog Agent at an address set by the operator, so the issue cannot be exploited.","justification":"vulnerable_code_cannot_be_controlled_by_adversary","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184311Z","vulnerability":{"name":"CVE-2026-39821"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184358Z","vulnerability":{"name":"CVE-2026-78663"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184389Z","vulnerability":{"name":"CVE-2026-56857"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184415Z","vulnerability":{"name":"CVE-2026-78659"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184433Z","vulnerability":{"name":"CVE-2026-33818"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184463Z","vulnerability":{"name":"CVE-2026-56853"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184487Z","vulnerability":{"name":"CVE-2026-56859"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184513Z","vulnerability":{"name":"CVE-2026-56862"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184543Z","vulnerability":{"name":"CVE-2026-78669"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184569Z","vulnerability":{"name":"CVE-2026-46600"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184602Z","vulnerability":{"name":"CVE-2026-94440"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184625Z","vulnerability":{"name":"CVE-2026-56860"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184648Z","vulnerability":{"name":"CVE-2026-97031"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184675Z","vulnerability":{"name":"CVE-2026-78667"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184719Z","vulnerability":{"name":"CVE-2026-94439"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184742Z","vulnerability":{"name":"CVE-2026-56866"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184765Z","vulnerability":{"name":"CVE-2026-78660"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184807Z","vulnerability":{"name":"CVE-2026-56858"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184825Z","vulnerability":{"name":"CVE-2026-97032"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184843Z","vulnerability":{"name":"CVE-2026-94448"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:36.184865Z","vulnerability":{"name":"CVE-2026-97030"}}],"timestamp":"2026-09-25T12:48:34.649749416Z","tooling":"","version":13}