{"@context":"https://openvex.dev/ns/v0.2.0","@id":"pkg:github/datadog/datadog-serverless-functions@aws-dd-forwarder-5.4.14","author":"security@datadoghq.com","author_role":"Vulnerability Management","last_updated":"2026-10-13T13:10:44.623914425Z","statements":[{"action_statement":"","action_statement_timestamp":"2026-10-13T12:24:47.688087Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:24:47.688087Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:24:47.688087Z","vulnerability":{"name":"CVE-2026-1526"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:24:47.688146Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:24:47.688146Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:24:47.688146Z","vulnerability":{"name":"CVE-2026-2229"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:24:47.688188Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:24:47.688188Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:24:47.688188Z","vulnerability":{"name":"CVE-2026-12151"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:24:47.688228Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:24:47.688228Z","products":[{"@id":"pkg:npm/%40fastify/busboy@2.1.1"}],"status":"under_investigation","timestamp":"2026-10-13T12:24:47.688228Z","vulnerability":{"name":"CVE-2026-19481"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:24:47.688293Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:24:47.688293Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:24:47.688293Z","vulnerability":{"name":"CVE-2026-1525"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:24:47.688331Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:24:47.688331Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:24:47.688331Z","vulnerability":{"name":"CVE-2026-22036"}},{"action_statement":"This vulnerability was fixed in: 5.4.16","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:33:16.486231Z","products":[{"@id":"pkg:pypi/urllib3@2.7.0"}],"status":"affected","timestamp":"2026-10-13T12:24:47.688383Z","vulnerability":{"name":"CVE-2026-97689"}},{"action_statement":"This vulnerability was fixed in: 5.4.16","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:33:16.486231Z","products":[{"@id":"pkg:pypi/urllib3@2.7.0"}],"status":"affected","timestamp":"2026-10-13T12:24:47.688406Z","vulnerability":{"name":"CVE-2026-97687"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:24:47.688427Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:24:47.688427Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:24:47.688427Z","vulnerability":{"name":"CVE-2026-9679"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:24:47.688465Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:24:47.688465Z","products":[{"@id":"pkg:npm/%40fastify/busboy@2.1.1"}],"status":"under_investigation","timestamp":"2026-10-13T12:24:47.688465Z","vulnerability":{"name":"CVE-2026-74866"}},{"action_statement":"This vulnerability was fixed in: 5.4.16","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:33:16.486231Z","products":[{"@id":"pkg:pypi/urllib3@2.7.0"}],"status":"affected","timestamp":"2026-10-13T12:24:47.6885Z","vulnerability":{"name":"CVE-2026-97688"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:24:47.688524Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:24:47.688524Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:24:47.688524Z","vulnerability":{"name":"CVE-2026-1527"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:24:47.688556Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:24:47.688556Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:24:47.688556Z","vulnerability":{"name":"CVE-2026-16729"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:24:47.688591Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:24:47.688591Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:24:47.688591Z","vulnerability":{"name":"CVE-2026-6733"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:24:47.688624Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:24:47.688624Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:24:47.688624Z","vulnerability":{"name":"CVE-2026-15157"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:24:47.688658Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:24:47.688658Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:24:47.688658Z","vulnerability":{"name":"CVE-2026-16728"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:24:47.688699Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:24:47.688699Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:24:47.688699Z","vulnerability":{"name":"CVE-2026-18540"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:24:47.688733Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:24:47.688733Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:24:47.688733Z","vulnerability":{"name":"CVE-2026-11525"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:24:47.688769Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:24:47.688769Z","products":[{"@id":"pkg:npm/activity_logs_monitoring@1.0.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:24:47.688769Z","vulnerability":{"name":"GHSA-p57g-c9gq-6vxp"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:24:47.68879Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:24:47.68879Z","products":[{"@id":"pkg:npm/*******-eventhub-forwarder@2.1.1"}],"status":"under_investigation","timestamp":"2026-10-13T12:24:47.68879Z","vulnerability":{"name":"GHSA-6xp5-f552-cw88"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:24:47.688807Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:24:47.688807Z","products":[{"@id":"pkg:npm/datadog-eventhub-forwarder@2.1.1"}],"status":"under_investigation","timestamp":"2026-10-13T12:24:47.688807Z","vulnerability":{"name":"MAL-2025-48623"}}],"timestamp":"2026-09-18T13:03:51.605117369Z","tooling":"","version":18}