{"@context":"https://openvex.dev/ns/v0.2.0","@id":"pkg:github/datadog/datadog-serverless-functions@aws-dd-forwarder-5.4.16","author":"security@datadoghq.com","author_role":"Vulnerability Management","last_updated":"2026-10-13T13:10:42.580356999Z","statements":[{"action_statement":"","action_statement_timestamp":"2026-10-09T12:46:31.251884Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.251884Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-09T12:46:31.251884Z","vulnerability":{"name":"CVE-2026-1526"}},{"action_statement":"","action_statement_timestamp":"2026-10-09T12:46:31.25194Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.25194Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-09T12:46:31.25194Z","vulnerability":{"name":"CVE-2026-2229"}},{"action_statement":"","action_statement_timestamp":"2026-10-09T12:46:31.251983Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.251983Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-09T12:46:31.251983Z","vulnerability":{"name":"CVE-2026-12151"}},{"action_statement":"","action_statement_timestamp":"2026-10-09T12:46:31.252027Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.252027Z","products":[{"@id":"pkg:npm/%40fastify/busboy@2.1.1"}],"status":"under_investigation","timestamp":"2026-10-09T12:46:31.252027Z","vulnerability":{"name":"CVE-2026-19481"}},{"action_statement":"","action_statement_timestamp":"2026-10-09T12:46:31.25208Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.25208Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-09T12:46:31.25208Z","vulnerability":{"name":"CVE-2026-1525"}},{"action_statement":"","action_statement_timestamp":"2026-10-09T12:46:31.252123Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.252123Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-09T12:46:31.252123Z","vulnerability":{"name":"CVE-2026-22036"}},{"action_statement":"","action_statement_timestamp":"2026-10-09T12:46:31.252161Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.252161Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-09T12:46:31.252161Z","vulnerability":{"name":"CVE-2026-9679"}},{"action_statement":"","action_statement_timestamp":"2026-10-09T12:46:31.252199Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.252199Z","products":[{"@id":"pkg:npm/%40fastify/busboy@2.1.1"}],"status":"under_investigation","timestamp":"2026-10-09T12:46:31.252199Z","vulnerability":{"name":"CVE-2026-74866"}},{"action_statement":"","action_statement_timestamp":"2026-10-09T12:46:31.252256Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.252256Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-09T12:46:31.252256Z","vulnerability":{"name":"CVE-2026-1527"}},{"action_statement":"","action_statement_timestamp":"2026-10-09T12:46:31.252291Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.252291Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-09T12:46:31.252291Z","vulnerability":{"name":"CVE-2026-16729"}},{"action_statement":"","action_statement_timestamp":"2026-10-09T12:46:31.252326Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.252326Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-09T12:46:31.252326Z","vulnerability":{"name":"CVE-2026-6733"}},{"action_statement":"","action_statement_timestamp":"2026-10-09T12:46:31.252358Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.252358Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-09T12:46:31.252358Z","vulnerability":{"name":"CVE-2026-15157"}},{"action_statement":"","action_statement_timestamp":"2026-10-09T12:46:31.25242Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.25242Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-09T12:46:31.25242Z","vulnerability":{"name":"CVE-2026-16728"}},{"action_statement":"","action_statement_timestamp":"2026-10-09T12:46:31.252453Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.252453Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-09T12:46:31.252453Z","vulnerability":{"name":"CVE-2026-18540"}},{"action_statement":"","action_statement_timestamp":"2026-10-09T12:46:31.252495Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.252495Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-10-09T12:46:31.252495Z","vulnerability":{"name":"CVE-2026-11525"}},{"action_statement":"","action_statement_timestamp":"2026-10-09T12:46:31.252533Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.252533Z","products":[{"@id":"pkg:npm/activity_logs_monitoring@1.0.0"}],"status":"under_investigation","timestamp":"2026-10-09T12:46:31.252533Z","vulnerability":{"name":"GHSA-p57g-c9gq-6vxp"}},{"action_statement":"","action_statement_timestamp":"2026-10-09T12:46:31.252556Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.252556Z","products":[{"@id":"pkg:npm/*******-eventhub-forwarder@2.1.1"}],"status":"under_investigation","timestamp":"2026-10-09T12:46:31.252556Z","vulnerability":{"name":"GHSA-6xp5-f552-cw88"}},{"action_statement":"","action_statement_timestamp":"2026-10-09T12:46:31.252576Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.252576Z","products":[{"@id":"pkg:npm/datadog-eventhub-forwarder@2.1.1"}],"status":"under_investigation","timestamp":"2026-10-09T12:46:31.252576Z","vulnerability":{"name":"MAL-2025-48623"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.269036Z","products":[{"@id":"pkg:pypi/urllib3@2.7.0"}],"status":"fixed","timestamp":"2026-10-09T12:46:31.269036Z","vulnerability":{"name":"CVE-2026-97689"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.269036Z","products":[{"@id":"pkg:pypi/urllib3@2.7.0"}],"status":"fixed","timestamp":"2026-10-09T12:46:31.269036Z","vulnerability":{"name":"CVE-2026-97687"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-10-09T12:46:31.269036Z","products":[{"@id":"pkg:pypi/urllib3@2.7.0"}],"status":"fixed","timestamp":"2026-10-09T12:46:31.269036Z","vulnerability":{"name":"CVE-2026-97688"}}],"timestamp":"2026-10-09T13:28:21.941808305Z","tooling":"","version":3}