{"@context":"https://openvex.dev/ns/v0.2.0","@id":"pkg:github/datadog/datadog-serverless-functions@aws-dd-forwarder-5.4.12","author":"security@datadoghq.com","author_role":"Vulnerability Management","last_updated":"2026-10-13T13:10:46.736634591Z","statements":[{"action_statement":"","action_statement_timestamp":"2026-10-13T12:11:51.138417Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:11:51.138417Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:11:51.138417Z","vulnerability":{"name":"CVE-2026-1526"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:11:51.138472Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:11:51.138472Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:11:51.138472Z","vulnerability":{"name":"CVE-2026-2229"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:11:51.138524Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:11:51.138524Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:11:51.138524Z","vulnerability":{"name":"CVE-2026-12151"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:11:51.138573Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:11:51.138573Z","products":[{"@id":"pkg:npm/%40fastify/busboy@2.1.1"}],"status":"under_investigation","timestamp":"2026-10-13T12:11:51.138573Z","vulnerability":{"name":"CVE-2026-19481"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:11:51.138615Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:11:51.138615Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:11:51.138615Z","vulnerability":{"name":"CVE-2026-1525"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:11:51.138649Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:11:51.138649Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:11:51.138649Z","vulnerability":{"name":"CVE-2026-22036"}},{"action_statement":"This vulnerability was fixed in: 5.4.16","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:33:16.486231Z","products":[{"@id":"pkg:pypi/urllib3@2.7.0"}],"status":"affected","timestamp":"2026-10-13T12:11:51.138683Z","vulnerability":{"name":"CVE-2026-97689"}},{"action_statement":"This vulnerability was fixed in: 5.4.16","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:33:16.486231Z","products":[{"@id":"pkg:pypi/urllib3@2.7.0"}],"status":"affected","timestamp":"2026-10-13T12:11:51.138702Z","vulnerability":{"name":"CVE-2026-97687"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:11:51.138729Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:11:51.138729Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:11:51.138729Z","vulnerability":{"name":"CVE-2026-9679"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:11:51.138776Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:11:51.138776Z","products":[{"@id":"pkg:npm/%40fastify/busboy@2.1.1"}],"status":"under_investigation","timestamp":"2026-10-13T12:11:51.138776Z","vulnerability":{"name":"CVE-2026-74866"}},{"action_statement":"This vulnerability was fixed in: 5.4.16","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:33:16.486231Z","products":[{"@id":"pkg:pypi/urllib3@2.7.0"}],"status":"affected","timestamp":"2026-10-13T12:11:51.138812Z","vulnerability":{"name":"CVE-2026-97688"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:11:51.138838Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:11:51.138838Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:11:51.138838Z","vulnerability":{"name":"CVE-2026-1527"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:11:51.138882Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:11:51.138882Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:11:51.138882Z","vulnerability":{"name":"CVE-2026-16729"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:11:51.13892Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:11:51.13892Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:11:51.13892Z","vulnerability":{"name":"CVE-2026-6733"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:11:51.138956Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:11:51.138956Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:11:51.138956Z","vulnerability":{"name":"CVE-2026-15157"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:11:51.138997Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:11:51.138997Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:11:51.138997Z","vulnerability":{"name":"CVE-2026-16728"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:11:51.139054Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:11:51.139054Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:11:51.139054Z","vulnerability":{"name":"CVE-2026-18540"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:11:51.139105Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:11:51.139105Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:11:51.139105Z","vulnerability":{"name":"CVE-2026-11525"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:11:51.139173Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:11:51.139173Z","products":[{"@id":"pkg:npm/activity_logs_monitoring@1.0.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:11:51.139173Z","vulnerability":{"name":"GHSA-p57g-c9gq-6vxp"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:11:51.139195Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:11:51.139195Z","products":[{"@id":"pkg:npm/*******-eventhub-forwarder@2.1.1"}],"status":"under_investigation","timestamp":"2026-10-13T12:11:51.139195Z","vulnerability":{"name":"GHSA-6xp5-f552-cw88"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:11:51.139216Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:11:51.139216Z","products":[{"@id":"pkg:npm/datadog-eventhub-forwarder@2.1.1"}],"status":"under_investigation","timestamp":"2026-10-13T12:11:51.139216Z","vulnerability":{"name":"MAL-2025-48623"}}],"timestamp":"2026-08-27T13:18:24.544827541Z","tooling":"","version":34}