{"@context":"https://openvex.dev/ns/v0.2.0","@id":"pkg:docker/ci@5.22.0","author":"security@datadoghq.com","author_role":"Vulnerability Management","last_updated":"2026-08-25T12:32:53.451406723Z","statements":[{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.813204Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.813204Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813204Z","vulnerability":{"name":"CVE-2026-59873"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.813243Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.813243Z","products":[{"@id":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=openssl"},{"@id":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=openssl"},{"@id":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=openssl"},{"@id":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=openssl"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813243Z","vulnerability":{"name":"CVE-2026-14456"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.813286Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.813286Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813286Z","vulnerability":{"name":"CVE-2026-59874"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.813317Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.813317Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813317Z","vulnerability":{"name":"CVE-2026-69152"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.813349Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.813349Z","products":[{"@id":"pkg:npm/picomatch@4.0.3"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813348Z","vulnerability":{"name":"CVE-2026-33671"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.813387Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.813387Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813387Z","vulnerability":{"name":"CVE-2026-73566"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.81342Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.81342Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813419Z","vulnerability":{"name":"CVE-2026-14257"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.813453Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.813453Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813452Z","vulnerability":{"name":"CVE-2026-33750"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.813484Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.813484Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813484Z","vulnerability":{"name":"CVE-2026-13149"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.813522Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.813522Z","products":[{"@id":"pkg:npm/ip-address@10.1.0"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813522Z","vulnerability":{"name":"CVE-2026-42338"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.813573Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.813573Z","products":[{"@id":"pkg:npm/ip-address@10.1.0"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813573Z","vulnerability":{"name":"CVE-2026-69192"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.8136Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.813599Z","products":[{"@id":"pkg:npm/picomatch@4.0.3"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813599Z","vulnerability":{"name":"CVE-2026-33672"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.813626Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.813625Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813625Z","vulnerability":{"name":"CVE-2026-59871"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.813651Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.813651Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813651Z","vulnerability":{"name":"CVE-2026-45149"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.813688Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.813688Z","products":[{"@id":"pkg:apk/alpine/ada-libs@3.3.0-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=ada"},{"@id":"pkg:apk/alpine/ada-libs@3.3.0-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=ada"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813688Z","vulnerability":{"name":"CVE-2024-9410"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.81372Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.813719Z","products":[{"@id":"pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=busybox"},{"@id":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=busybox"},{"@id":"pkg:apk/alpine/busybox@1.37.0-r31?arch=aarch64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=busybox"},{"@id":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=busybox"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813719Z","vulnerability":{"name":"CVE-2025-60876"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.813776Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.813776Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813775Z","vulnerability":{"name":"CVE-2026-59875"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.813828Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.813828Z","products":[{"@id":"pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=nghttp2"},{"@id":"pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=nghttp2"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813827Z","vulnerability":{"name":"CVE-2026-58055"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.813861Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.813861Z","products":[{"@id":"pkg:npm/sigstore@4.1.0"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813861Z","vulnerability":{"name":"CVE-2026-48815"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.813891Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.81389Z","products":[{"@id":"pkg:npm/%40sigstore/core@3.2.0"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.81389Z","vulnerability":{"name":"CVE-2026-48758"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.813924Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.813924Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813924Z","vulnerability":{"name":"CVE-2026-53655"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:08:29.813965Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.813964Z","products":[{"@id":"pkg:npm/%40sigstore/verify@3.1.0"}],"status":"under_investigation","timestamp":"2026-08-24T12:08:29.813964Z","vulnerability":{"name":"CVE-2026-48816"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.851437Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"fixed","timestamp":"2026-08-24T12:08:29.851436Z","vulnerability":{"name":"CVE-2026-56846"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.851466Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"fixed","timestamp":"2026-08-24T12:08:29.851466Z","vulnerability":{"name":"CVE-2026-56848"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.851474Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"fixed","timestamp":"2026-08-24T12:08:29.851474Z","vulnerability":{"name":"CVE-2026-58042"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.851478Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"fixed","timestamp":"2026-08-24T12:08:29.851478Z","vulnerability":{"name":"CVE-2026-58041"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.851481Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"fixed","timestamp":"2026-08-24T12:08:29.851481Z","vulnerability":{"name":"CVE-2026-58040"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.851486Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"fixed","timestamp":"2026-08-24T12:08:29.851486Z","vulnerability":{"name":"CVE-2026-58045"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.851495Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"fixed","timestamp":"2026-08-24T12:08:29.851495Z","vulnerability":{"name":"CVE-2026-58043"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.851506Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"fixed","timestamp":"2026-08-24T12:08:29.851506Z","vulnerability":{"name":"CVE-2026-58044"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.85151Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"fixed","timestamp":"2026-08-24T12:08:29.85151Z","vulnerability":{"name":"CVE-2026-58039"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.851513Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"fixed","timestamp":"2026-08-24T12:08:29.851513Z","vulnerability":{"name":"CVE-2026-56847"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:08:29.851516Z","products":[{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/nodejs@24.17.0-r0?arch=aarch64\u0026distro=alpine-3.24.1"}],"status":"fixed","timestamp":"2026-08-24T12:08:29.851515Z","vulnerability":{"name":"CVE-2026-56850"}}],"timestamp":"2026-08-04T12:38:22.751247956Z","tooling":"","version":16}