{"@context":"https://openvex.dev/ns/v0.2.0","@id":"pkg:github/datadog/datadog-serverless-functions@aws-dd-forwarder-5.4.13","author":"security@datadoghq.com","author_role":"Vulnerability Management","last_updated":"2026-10-13T13:10:45.683366323Z","statements":[{"action_statement":"","action_statement_timestamp":"2026-10-13T12:19:52.630411Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:19:52.630411Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:19:52.630411Z","vulnerability":{"name":"CVE-2026-1526"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:19:52.630467Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:19:52.630467Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:19:52.630467Z","vulnerability":{"name":"CVE-2026-2229"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:19:52.630502Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:19:52.630502Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:19:52.630502Z","vulnerability":{"name":"CVE-2026-12151"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:19:52.630549Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:19:52.630549Z","products":[{"@id":"pkg:npm/%40fastify/busboy@2.1.1"}],"status":"under_investigation","timestamp":"2026-10-13T12:19:52.630549Z","vulnerability":{"name":"CVE-2026-19481"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:19:52.630624Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:19:52.630624Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:19:52.630624Z","vulnerability":{"name":"CVE-2026-1525"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:19:52.63067Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:19:52.63067Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:19:52.63067Z","vulnerability":{"name":"CVE-2026-22036"}},{"action_statement":"This vulnerability was fixed in: 5.4.16","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:33:16.486231Z","products":[{"@id":"pkg:pypi/urllib3@2.7.0"}],"status":"affected","timestamp":"2026-10-13T12:19:52.630722Z","vulnerability":{"name":"CVE-2026-97689"}},{"action_statement":"This vulnerability was fixed in: 5.4.16","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:33:16.486231Z","products":[{"@id":"pkg:pypi/urllib3@2.7.0"}],"status":"affected","timestamp":"2026-10-13T12:19:52.630748Z","vulnerability":{"name":"CVE-2026-97687"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:19:52.630774Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:19:52.630774Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:19:52.630774Z","vulnerability":{"name":"CVE-2026-9679"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:19:52.630809Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:19:52.630809Z","products":[{"@id":"pkg:npm/%40fastify/busboy@2.1.1"}],"status":"under_investigation","timestamp":"2026-10-13T12:19:52.630809Z","vulnerability":{"name":"CVE-2026-74866"}},{"action_statement":"This vulnerability was fixed in: 5.4.16","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:33:16.486231Z","products":[{"@id":"pkg:pypi/urllib3@2.7.0"}],"status":"affected","timestamp":"2026-10-13T12:19:52.630852Z","vulnerability":{"name":"CVE-2026-97688"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:19:52.630912Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:19:52.630912Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:19:52.630912Z","vulnerability":{"name":"CVE-2026-1527"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:19:52.630955Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:19:52.630955Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:19:52.630955Z","vulnerability":{"name":"CVE-2026-16729"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:19:52.630991Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:19:52.630991Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:19:52.630991Z","vulnerability":{"name":"CVE-2026-6733"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:19:52.631037Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:19:52.631037Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:19:52.631037Z","vulnerability":{"name":"CVE-2026-15157"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:19:52.631079Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:19:52.631079Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:19:52.631079Z","vulnerability":{"name":"CVE-2026-16728"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:19:52.631111Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:19:52.631111Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:19:52.631111Z","vulnerability":{"name":"CVE-2026-18540"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:19:52.631197Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:19:52.631197Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:19:52.631197Z","vulnerability":{"name":"CVE-2026-11525"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:19:52.631238Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:19:52.631238Z","products":[{"@id":"pkg:npm/activity_logs_monitoring@1.0.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:19:52.631238Z","vulnerability":{"name":"GHSA-p57g-c9gq-6vxp"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:19:52.631265Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:19:52.631265Z","products":[{"@id":"pkg:npm/*******-eventhub-forwarder@2.1.1"}],"status":"under_investigation","timestamp":"2026-10-13T12:19:52.631265Z","vulnerability":{"name":"GHSA-6xp5-f552-cw88"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:19:52.631282Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:19:52.631282Z","products":[{"@id":"pkg:npm/datadog-eventhub-forwarder@2.1.1"}],"status":"under_investigation","timestamp":"2026-10-13T12:19:52.631282Z","vulnerability":{"name":"MAL-2025-48623"}}],"timestamp":"2026-09-01T13:54:14.336707324Z","tooling":"","version":31}