{"@context":"https://openvex.dev/ns/v0.2.0","@id":"pkg:github/datadog/datadog-serverless-functions@aws-dd-forwarder-5.4.11","author":"security@datadoghq.com","author_role":"Vulnerability Management","last_updated":"2026-08-25T12:33:15.879107894Z","statements":[{"action_statement":"","action_statement_timestamp":"2026-08-18T12:02:21.432732Z","impact_statement":"","justification":"","last_updated":"2026-08-18T12:02:21.432732Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-18T12:02:21.432732Z","vulnerability":{"name":"CVE-2026-1525"}},{"action_statement":"","action_statement_timestamp":"2026-08-18T12:02:21.432769Z","impact_statement":"","justification":"","last_updated":"2026-08-18T12:02:21.432769Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-18T12:02:21.432769Z","vulnerability":{"name":"CVE-2026-22036"}},{"action_statement":"","action_statement_timestamp":"2026-08-18T12:02:21.432545Z","impact_statement":"","justification":"","last_updated":"2026-08-18T12:02:21.432545Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-18T12:02:21.432545Z","vulnerability":{"name":"CVE-2026-1526"}},{"action_statement":"","action_statement_timestamp":"2026-08-18T12:02:21.432612Z","impact_statement":"","justification":"","last_updated":"2026-08-18T12:02:21.432612Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-18T12:02:21.43261Z","vulnerability":{"name":"CVE-2026-2229"}},{"action_statement":"","action_statement_timestamp":"2026-08-18T12:02:21.432665Z","impact_statement":"","justification":"","last_updated":"2026-08-18T12:02:21.432665Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-18T12:02:21.432665Z","vulnerability":{"name":"CVE-2026-12151"}},{"action_statement":"","action_statement_timestamp":"2026-08-18T12:02:21.432815Z","impact_statement":"","justification":"","last_updated":"2026-08-18T12:02:21.432815Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-18T12:02:21.432815Z","vulnerability":{"name":"CVE-2026-9679"}},{"action_statement":"","action_statement_timestamp":"2026-08-18T12:02:21.432865Z","impact_statement":"","justification":"","last_updated":"2026-08-18T12:02:21.432865Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-18T12:02:21.432865Z","vulnerability":{"name":"CVE-2026-1527"}},{"action_statement":"","action_statement_timestamp":"2026-08-18T12:02:21.432914Z","impact_statement":"","justification":"","last_updated":"2026-08-18T12:02:21.432914Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-18T12:02:21.432914Z","vulnerability":{"name":"CVE-2026-16728"}},{"action_statement":"","action_statement_timestamp":"2026-08-18T12:02:21.43297Z","impact_statement":"","justification":"","last_updated":"2026-08-18T12:02:21.43297Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-18T12:02:21.43297Z","vulnerability":{"name":"CVE-2026-16729"}},{"action_statement":"","action_statement_timestamp":"2026-08-18T12:02:21.433022Z","impact_statement":"","justification":"","last_updated":"2026-08-18T12:02:21.433022Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-18T12:02:21.433021Z","vulnerability":{"name":"CVE-2026-11525"}},{"action_statement":"","action_statement_timestamp":"2026-08-18T12:02:21.433075Z","impact_statement":"","justification":"","last_updated":"2026-08-18T12:02:21.433075Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-18T12:02:21.433074Z","vulnerability":{"name":"CVE-2026-6733"}},{"action_statement":"","action_statement_timestamp":"2026-08-18T12:02:21.433125Z","impact_statement":"","justification":"","last_updated":"2026-08-18T12:02:21.433124Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-18T12:02:21.433124Z","vulnerability":{"name":"CVE-2026-15157"}},{"action_statement":"","action_statement_timestamp":"2026-08-18T12:02:21.433174Z","impact_statement":"","justification":"","last_updated":"2026-08-18T12:02:21.433173Z","products":[{"@id":"pkg:npm/activity_logs_monitoring@1.0.0"}],"status":"under_investigation","timestamp":"2026-08-18T12:02:21.433173Z","vulnerability":{"name":"GHSA-p57g-c9gq-6vxp"}},{"action_statement":"","action_statement_timestamp":"2026-08-18T12:02:21.4332Z","impact_statement":"","justification":"","last_updated":"2026-08-18T12:02:21.4332Z","products":[{"@id":"pkg:npm/datadog-eventhub-forwarder@2.1.1"}],"status":"under_investigation","timestamp":"2026-08-18T12:02:21.433199Z","vulnerability":{"name":"MAL-2025-48623"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-18T12:02:21.524554Z","products":[{"@id":"pkg:pypi/requests@2.22.0"}],"status":"fixed","timestamp":"2026-08-18T12:02:21.524554Z","vulnerability":{"name":"CVE-2023-32681"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-18T12:02:21.524585Z","products":[{"@id":"pkg:pypi/requests@2.22.0"}],"status":"fixed","timestamp":"2026-08-18T12:02:21.524585Z","vulnerability":{"name":"CVE-2024-47081"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-18T12:02:21.52459Z","products":[{"@id":"pkg:pypi/ddtrace@3.19.5"}],"status":"fixed","timestamp":"2026-08-18T12:02:21.52459Z","vulnerability":{"name":"CVE-2026-50271"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-18T12:02:21.524595Z","products":[{"@id":"pkg:pypi/setuptools@80.10.2"}],"status":"fixed","timestamp":"2026-08-18T12:02:21.524595Z","vulnerability":{"name":"CVE-2026-59890"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-18T12:02:21.524598Z","products":[{"@id":"pkg:pypi/requests@2.22.0"}],"status":"fixed","timestamp":"2026-08-18T12:02:21.524598Z","vulnerability":{"name":"CVE-2024-35195"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-18T12:02:21.524601Z","products":[{"@id":"pkg:pypi/requests@2.22.0"}],"status":"fixed","timestamp":"2026-08-18T12:02:21.524601Z","vulnerability":{"name":"CVE-2026-25645"}}],"timestamp":"2026-08-18T12:22:17.743632669Z","tooling":"","version":6}