{"@context":"https://openvex.dev/ns/v0.2.0","@id":"pkg:docker/ci@5.21.1","author":"security@datadoghq.com","author_role":"Vulnerability Management","last_updated":"2026-08-25T12:32:55.398552851Z","statements":[{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:54:05.515777Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T11:47:20.967972Z","vulnerability":{"name":"CVE-2026-56846"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.96778Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.96778Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.96778Z","vulnerability":{"name":"CVE-2026-59873"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.967857Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.967857Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.967855Z","vulnerability":{"name":"CVE-2026-69152"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.967918Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.967918Z","products":[{"@id":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=openssl"},{"@id":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=openssl"},{"@id":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=openssl"},{"@id":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=openssl"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.967918Z","vulnerability":{"name":"CVE-2026-14456"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.968037Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.968037Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.968037Z","vulnerability":{"name":"CVE-2026-14257"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.968065Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.968065Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.968065Z","vulnerability":{"name":"CVE-2026-59874"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.968119Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.968119Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.968119Z","vulnerability":{"name":"CVE-2026-59871"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.968163Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.968163Z","products":[{"@id":"pkg:npm/picomatch@4.0.3"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.968163Z","vulnerability":{"name":"CVE-2026-33671"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.9682Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.9682Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.9682Z","vulnerability":{"name":"CVE-2026-73566"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.968257Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.968257Z","products":[{"@id":"pkg:npm/ip-address@10.1.0"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.968256Z","vulnerability":{"name":"CVE-2026-69192"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.968291Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.968291Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.968291Z","vulnerability":{"name":"CVE-2026-59875"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.96833Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.96833Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.96833Z","vulnerability":{"name":"CVE-2026-13149"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.968361Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.968361Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.96836Z","vulnerability":{"name":"CVE-2026-33750"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.968396Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.968396Z","products":[{"@id":"pkg:npm/ip-address@10.1.0"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.968396Z","vulnerability":{"name":"CVE-2026-42338"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.968433Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.968433Z","products":[{"@id":"pkg:npm/picomatch@4.0.3"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.968433Z","vulnerability":{"name":"CVE-2026-33672"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.968483Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.968483Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.968483Z","vulnerability":{"name":"CVE-2026-45149"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.968534Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.968534Z","products":[{"@id":"pkg:apk/alpine/ada-libs@3.3.0-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=ada"},{"@id":"pkg:apk/alpine/ada-libs@3.3.0-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=ada"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.968534Z","vulnerability":{"name":"CVE-2024-9410"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.968567Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.968567Z","products":[{"@id":"pkg:apk/alpine/busybox@1.37.0-r31?arch=aarch64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=busybox"},{"@id":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=busybox"},{"@id":"pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=busybox"},{"@id":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=busybox"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.968567Z","vulnerability":{"name":"CVE-2025-60876"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.96868Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.96868Z","products":[{"@id":"pkg:npm/sigstore@4.1.0"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.96868Z","vulnerability":{"name":"CVE-2026-48815"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.968717Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.968717Z","products":[{"@id":"pkg:npm/%40sigstore/core@3.2.0"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.968717Z","vulnerability":{"name":"CVE-2026-48758"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.96878Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.96878Z","products":[{"@id":"pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=nghttp2"},{"@id":"pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=nghttp2"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.96878Z","vulnerability":{"name":"CVE-2026-58055"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.968934Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.968934Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.968934Z","vulnerability":{"name":"CVE-2026-53655"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T11:47:20.968969Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:20.968969Z","products":[{"@id":"pkg:npm/%40sigstore/verify@3.1.0"}],"status":"under_investigation","timestamp":"2026-08-25T11:47:20.968969Z","vulnerability":{"name":"CVE-2026-48816"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:47:21.021876Z","products":[{"@id":"pkg:apk/alpine/c-ares@1.34.6-r0?arch=aarch64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/c-ares@1.34.6-r0?arch=x86_64\u0026distro=alpine-3.24.1"}],"status":"fixed","timestamp":"2026-08-25T11:47:21.021876Z","vulnerability":{"name":"CVE-2026-33630"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:54:05.515808Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T11:47:20.968006Z","vulnerability":{"name":"CVE-2026-56848"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:54:05.515816Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T11:47:20.968461Z","vulnerability":{"name":"CVE-2026-58042"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:54:05.51582Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T11:47:20.968639Z","vulnerability":{"name":"CVE-2026-58040"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:54:05.515824Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T11:47:20.96882Z","vulnerability":{"name":"CVE-2026-58041"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:54:05.515827Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T11:47:20.968849Z","vulnerability":{"name":"CVE-2026-58043"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:54:05.515834Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T11:47:20.96888Z","vulnerability":{"name":"CVE-2026-58045"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:54:05.515843Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T11:47:20.969005Z","vulnerability":{"name":"CVE-2026-58044"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:54:05.515847Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T11:47:20.969038Z","vulnerability":{"name":"CVE-2026-56847"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:54:05.51585Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T11:47:20.969082Z","vulnerability":{"name":"CVE-2026-58039"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T11:54:05.515854Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T11:47:20.969115Z","vulnerability":{"name":"CVE-2026-56850"}}],"timestamp":"2026-07-14T13:01:14.258172248Z","tooling":"","version":23}