{"@context":"https://openvex.dev/ns/v0.2.0","@id":"pkg:docker/apm-inject@0.71.3","author":"security@datadoghq.com","author_role":"Vulnerability Management","last_updated":"2026-10-13T13:09:29.72223317Z","statements":[{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"this is a false positive in terms of exploitability. The flaw is in Go's handling of international domain names, and only matters when a program handles hostnames supplied by an attacker. APM Inject only connects to the local Datadog Agent at an address set by the operator, so the issue cannot be exploited.","justification":"vulnerable_code_cannot_be_controlled_by_adversary","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.340443Z","vulnerability":{"name":"CVE-2026-39821"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.340492Z","vulnerability":{"name":"CVE-2026-78663"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.340518Z","vulnerability":{"name":"CVE-2026-56857"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.340548Z","vulnerability":{"name":"CVE-2026-78659"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.340576Z","vulnerability":{"name":"CVE-2026-33818"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.340602Z","vulnerability":{"name":"CVE-2026-56853"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.340631Z","vulnerability":{"name":"CVE-2026-56859"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.340684Z","vulnerability":{"name":"CVE-2026-56862"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.340709Z","vulnerability":{"name":"CVE-2026-78669"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.340741Z","vulnerability":{"name":"CVE-2026-46600"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.340773Z","vulnerability":{"name":"CVE-2026-94440"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.340809Z","vulnerability":{"name":"CVE-2026-56860"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.340835Z","vulnerability":{"name":"CVE-2026-97031"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.340862Z","vulnerability":{"name":"CVE-2026-78667"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.340883Z","vulnerability":{"name":"CVE-2026-94439"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.340908Z","vulnerability":{"name":"CVE-2026-56866"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.340935Z","vulnerability":{"name":"CVE-2026-78660"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.340963Z","vulnerability":{"name":"CVE-2026-56858"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.340987Z","vulnerability":{"name":"CVE-2026-97032"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.341009Z","vulnerability":{"name":"CVE-2026-94448"}},{"action_statement":"This vulnerability was fixed in: 0.71.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:43:03.638867Z","products":[{"@id":"pkg:golang/stdlib@1.26.5"}],"status":"affected","timestamp":"2026-10-12T12:49:59.341032Z","vulnerability":{"name":"CVE-2026-97030"}}],"timestamp":"2026-09-30T12:43:43.679252183Z","tooling":"","version":10}