{"@context":"https://openvex.dev/ns/v0.2.0","@id":"pkg:docker/ci@5.21.2","author":"security@datadoghq.com","author_role":"Vulnerability Management","last_updated":"2026-08-25T12:32:54.427188887Z","statements":[{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.004989Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.004989Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.004989Z","vulnerability":{"name":"CVE-2026-59873"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.005034Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.005034Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.005034Z","vulnerability":{"name":"CVE-2026-69152"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.005069Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.005069Z","products":[{"@id":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=openssl"},{"@id":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=openssl"},{"@id":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=openssl"},{"@id":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=openssl"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.005069Z","vulnerability":{"name":"CVE-2026-14456"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.005203Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.005203Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.005203Z","vulnerability":{"name":"CVE-2026-14257"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.005238Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.005238Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.005238Z","vulnerability":{"name":"CVE-2026-59874"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.005269Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.005268Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.005268Z","vulnerability":{"name":"CVE-2026-59871"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.005302Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.005302Z","products":[{"@id":"pkg:npm/picomatch@4.0.3"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.005301Z","vulnerability":{"name":"CVE-2026-33671"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.005334Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.005334Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.005334Z","vulnerability":{"name":"CVE-2026-73566"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.005365Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.005365Z","products":[{"@id":"pkg:npm/ip-address@10.1.0"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.005365Z","vulnerability":{"name":"CVE-2026-69192"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.005389Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.005389Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.005389Z","vulnerability":{"name":"CVE-2026-59875"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.005426Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.005426Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.005426Z","vulnerability":{"name":"CVE-2026-13149"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.005455Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.005455Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.005454Z","vulnerability":{"name":"CVE-2026-33750"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.005485Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.005485Z","products":[{"@id":"pkg:npm/ip-address@10.1.0"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.005484Z","vulnerability":{"name":"CVE-2026-42338"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.00552Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.00552Z","products":[{"@id":"pkg:npm/picomatch@4.0.3"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.00552Z","vulnerability":{"name":"CVE-2026-33672"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.005586Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.005586Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.005586Z","vulnerability":{"name":"CVE-2026-45149"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.00562Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.00562Z","products":[{"@id":"pkg:apk/alpine/ada-libs@3.3.0-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=ada"},{"@id":"pkg:apk/alpine/ada-libs@3.3.0-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=ada"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.005619Z","vulnerability":{"name":"CVE-2024-9410"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.005651Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.00565Z","products":[{"@id":"pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=busybox"},{"@id":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=busybox"},{"@id":"pkg:apk/alpine/busybox@1.37.0-r31?arch=aarch64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=busybox"},{"@id":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=busybox"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.00565Z","vulnerability":{"name":"CVE-2025-60876"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.005746Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.005746Z","products":[{"@id":"pkg:npm/sigstore@4.1.0"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.005746Z","vulnerability":{"name":"CVE-2026-48815"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.005805Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.005805Z","products":[{"@id":"pkg:npm/%40sigstore/core@3.2.0"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.005804Z","vulnerability":{"name":"CVE-2026-48758"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.005831Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.005831Z","products":[{"@id":"pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=nghttp2"},{"@id":"pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=nghttp2"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.005831Z","vulnerability":{"name":"CVE-2026-58055"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.005962Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.005962Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.005962Z","vulnerability":{"name":"CVE-2026-53655"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:04:57.005997Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:04:57.005997Z","products":[{"@id":"pkg:npm/%40sigstore/verify@3.1.0"}],"status":"under_investigation","timestamp":"2026-08-25T12:04:57.005997Z","vulnerability":{"name":"CVE-2026-48816"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:09:38.248543Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T12:04:57.005124Z","vulnerability":{"name":"CVE-2026-56846"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:09:38.248572Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T12:04:57.005165Z","vulnerability":{"name":"CVE-2026-56848"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:09:38.248583Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T12:04:57.005558Z","vulnerability":{"name":"CVE-2026-58042"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:09:38.248587Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T12:04:57.005712Z","vulnerability":{"name":"CVE-2026-58040"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:09:38.248591Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T12:04:57.005863Z","vulnerability":{"name":"CVE-2026-58041"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:09:38.248599Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T12:04:57.005895Z","vulnerability":{"name":"CVE-2026-58043"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:09:38.248614Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T12:04:57.00606Z","vulnerability":{"name":"CVE-2026-56847"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:09:38.248611Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T12:04:57.006025Z","vulnerability":{"name":"CVE-2026-58044"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:09:38.248618Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T12:04:57.006095Z","vulnerability":{"name":"CVE-2026-58039"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:09:38.248621Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T12:04:57.006127Z","vulnerability":{"name":"CVE-2026-56850"}},{"action_statement":"This vulnerability was fixed in: 5.22.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:09:38.248603Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"affected","timestamp":"2026-08-25T12:04:57.00593Z","vulnerability":{"name":"CVE-2026-58045"}}],"timestamp":"2026-07-28T13:47:42.777001243Z","tooling":"","version":22}