{"@context":"https://openvex.dev/ns/v0.2.0","@id":"pkg:github/datadog/datadog-serverless-functions@aws-dd-forwarder-5.4.15","author":"security@datadoghq.com","author_role":"Vulnerability Management","last_updated":"2026-10-13T13:10:43.605111212Z","statements":[{"action_statement":"","action_statement_timestamp":"2026-10-13T12:27:23.873869Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:27:23.873869Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:27:23.873869Z","vulnerability":{"name":"CVE-2026-1526"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:27:23.87393Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:27:23.87393Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:27:23.87393Z","vulnerability":{"name":"CVE-2026-2229"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:27:23.873977Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:27:23.873977Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:27:23.873977Z","vulnerability":{"name":"CVE-2026-12151"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:27:23.87403Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:27:23.87403Z","products":[{"@id":"pkg:npm/%40fastify/busboy@2.1.1"}],"status":"under_investigation","timestamp":"2026-10-13T12:27:23.87403Z","vulnerability":{"name":"CVE-2026-19481"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:27:23.874086Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:27:23.874086Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:27:23.874086Z","vulnerability":{"name":"CVE-2026-1525"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:27:23.874124Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:27:23.874124Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:27:23.874124Z","vulnerability":{"name":"CVE-2026-22036"}},{"action_statement":"This vulnerability was fixed in: 5.4.16","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:33:16.486231Z","products":[{"@id":"pkg:pypi/urllib3@2.7.0"}],"status":"affected","timestamp":"2026-10-13T12:27:23.874226Z","vulnerability":{"name":"CVE-2026-97689"}},{"action_statement":"This vulnerability was fixed in: 5.4.16","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:33:16.486231Z","products":[{"@id":"pkg:pypi/urllib3@2.7.0"}],"status":"affected","timestamp":"2026-10-13T12:27:23.874257Z","vulnerability":{"name":"CVE-2026-97687"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:27:23.874287Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:27:23.874287Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:27:23.874287Z","vulnerability":{"name":"CVE-2026-9679"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:27:23.874327Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:27:23.874327Z","products":[{"@id":"pkg:npm/%40fastify/busboy@2.1.1"}],"status":"under_investigation","timestamp":"2026-10-13T12:27:23.874327Z","vulnerability":{"name":"CVE-2026-74866"}},{"action_statement":"This vulnerability was fixed in: 5.4.16","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:33:16.486231Z","products":[{"@id":"pkg:pypi/urllib3@2.7.0"}],"status":"affected","timestamp":"2026-10-13T12:27:23.87438Z","vulnerability":{"name":"CVE-2026-97688"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:27:23.874425Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:27:23.874425Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:27:23.874425Z","vulnerability":{"name":"CVE-2026-1527"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:27:23.874472Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:27:23.874472Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:27:23.874472Z","vulnerability":{"name":"CVE-2026-16729"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:27:23.87454Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:27:23.87454Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:27:23.87454Z","vulnerability":{"name":"CVE-2026-6733"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:27:23.874585Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:27:23.874585Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:27:23.874585Z","vulnerability":{"name":"CVE-2026-15157"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:27:23.87463Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:27:23.87463Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:27:23.87463Z","vulnerability":{"name":"CVE-2026-16728"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:27:23.874673Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:27:23.874673Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:27:23.874673Z","vulnerability":{"name":"CVE-2026-18540"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:27:23.874715Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:27:23.874715Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:27:23.874715Z","vulnerability":{"name":"CVE-2026-11525"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:27:23.874764Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:27:23.874764Z","products":[{"@id":"pkg:npm/activity_logs_monitoring@1.0.0"}],"status":"under_investigation","timestamp":"2026-10-13T12:27:23.874764Z","vulnerability":{"name":"GHSA-p57g-c9gq-6vxp"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:27:23.874803Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:27:23.874803Z","products":[{"@id":"pkg:npm/*******-eventhub-forwarder@2.1.1"}],"status":"under_investigation","timestamp":"2026-10-13T12:27:23.874803Z","vulnerability":{"name":"GHSA-6xp5-f552-cw88"}},{"action_statement":"","action_statement_timestamp":"2026-10-13T12:27:23.874824Z","impact_statement":"","justification":"","last_updated":"2026-10-13T12:27:23.874824Z","products":[{"@id":"pkg:npm/datadog-eventhub-forwarder@2.1.1"}],"status":"under_investigation","timestamp":"2026-10-13T12:27:23.874824Z","vulnerability":{"name":"MAL-2025-48623"}}],"timestamp":"2026-09-24T12:45:58.519943288Z","tooling":"","version":14}