{"@context":"https://openvex.dev/ns/v0.2.0","@id":"pkg:github/datadog/datadog-serverless-functions@aws-dd-forwarder-5.4.3","author":"security@datadoghq.com","author_role":"Vulnerability Management","last_updated":"2026-08-25T12:33:20.265241507Z","statements":[{"action_statement":"This vulnerability was fixed in: 5.4.11","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:12:04.027449Z","products":[{"@id":"pkg:pypi/requests@2.22.0"}],"status":"affected","timestamp":"2026-08-25T11:27:26.921288Z","vulnerability":{"name":"CVE-2023-32681"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:27:26.921323Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:27:26.921323Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-25T11:27:26.921323Z","vulnerability":{"name":"CVE-2026-1526"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:27:26.921376Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:27:26.921376Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-25T11:27:26.921376Z","vulnerability":{"name":"CVE-2026-2229"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:27:26.92147Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:27:26.92147Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-25T11:27:26.92147Z","vulnerability":{"name":"CVE-2026-12151"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:27:26.921546Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:27:26.921546Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-25T11:27:26.921546Z","vulnerability":{"name":"CVE-2026-1525"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:27:26.921593Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:27:26.921593Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-25T11:27:26.921593Z","vulnerability":{"name":"CVE-2026-22036"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:27:26.921737Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:27:26.921737Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-25T11:27:26.921736Z","vulnerability":{"name":"CVE-2026-9679"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:27:26.921826Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:27:26.921826Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-25T11:27:26.921826Z","vulnerability":{"name":"CVE-2026-1527"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:27:26.921874Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:27:26.921874Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-25T11:27:26.921874Z","vulnerability":{"name":"CVE-2026-16729"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:27:26.921924Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:27:26.921924Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-25T11:27:26.921924Z","vulnerability":{"name":"CVE-2026-15157"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:27:26.921973Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:27:26.921973Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-25T11:27:26.921973Z","vulnerability":{"name":"CVE-2026-16728"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:27:26.922047Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:27:26.922047Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-25T11:27:26.922047Z","vulnerability":{"name":"CVE-2026-11525"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:27:26.922093Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:27:26.922093Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-25T11:27:26.922093Z","vulnerability":{"name":"CVE-2026-6733"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:27:26.922139Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:27:26.922139Z","products":[{"@id":"pkg:npm/activity_logs_monitoring@1.0.0"}],"status":"under_investigation","timestamp":"2026-08-25T11:27:26.922139Z","vulnerability":{"name":"GHSA-p57g-c9gq-6vxp"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:27:26.92216Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:27:26.92216Z","products":[{"@id":"pkg:npm/datadog-eventhub-forwarder@2.1.1"}],"status":"under_investigation","timestamp":"2026-08-25T11:27:26.922159Z","vulnerability":{"name":"MAL-2025-48623"}},{"action_statement":"This vulnerability was fixed in: 5.4.11","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:12:04.027468Z","products":[{"@id":"pkg:pypi/ddtrace@3.19.5"}],"status":"affected","timestamp":"2026-08-25T11:27:26.921433Z","vulnerability":{"name":"CVE-2026-50271"}},{"action_statement":"This vulnerability was fixed in: 5.4.11","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:12:04.027475Z","products":[{"@id":"pkg:pypi/requests@2.22.0"}],"status":"affected","timestamp":"2026-08-25T11:27:26.921517Z","vulnerability":{"name":"CVE-2024-47081"}},{"action_statement":"This vulnerability was fixed in: 5.4.11","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:12:04.027478Z","products":[{"@id":"pkg:pypi/setuptools@80.10.2"}],"status":"affected","timestamp":"2026-08-25T11:27:26.921664Z","vulnerability":{"name":"CVE-2026-59890"}},{"action_statement":"This vulnerability was fixed in: 5.4.11","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:12:04.027483Z","products":[{"@id":"pkg:pypi/requests@2.22.0"}],"status":"affected","timestamp":"2026-08-25T11:27:26.921703Z","vulnerability":{"name":"CVE-2024-35195"}},{"action_statement":"This vulnerability was fixed in: 5.4.11","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:12:04.027488Z","products":[{"@id":"pkg:pypi/requests@2.22.0"}],"status":"affected","timestamp":"2026-08-25T11:27:26.922018Z","vulnerability":{"name":"CVE-2026-25645"}},{"action_statement":"This vulnerability was fixed in: 5.4.6","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:45:23.129249Z","products":[{"@id":"pkg:pypi/ujson@5.12.1"}],"status":"affected","timestamp":"2026-08-25T11:27:26.921684Z","vulnerability":{"name":"CVE-2026-54911"}},{"action_statement":"This vulnerability was fixed in: 5.4.4","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:32:47.398749Z","products":[{"@id":"pkg:pypi/idna@3.7"}],"status":"affected","timestamp":"2026-08-25T11:27:26.921633Z","vulnerability":{"name":"CVE-2026-45409"}}],"timestamp":"2026-08-18T12:22:21.801611506Z","tooling":"","version":6}