{"@context":"https://openvex.dev/ns/v0.2.0","@id":"pkg:docker/ci@5.22.1","author":"security@datadoghq.com","author_role":"Vulnerability Management","last_updated":"2026-08-25T12:32:52.490436546Z","statements":[{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.918323Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.918322Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.918322Z","vulnerability":{"name":"CVE-2026-59873"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.918369Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.918368Z","products":[{"@id":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=openssl"},{"@id":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=openssl"},{"@id":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=openssl"},{"@id":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=openssl"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.918368Z","vulnerability":{"name":"CVE-2026-14456"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.918431Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.918431Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.918431Z","vulnerability":{"name":"CVE-2026-59874"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.918456Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.918456Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.918456Z","vulnerability":{"name":"CVE-2026-69152"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.918496Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.918496Z","products":[{"@id":"pkg:npm/picomatch@4.0.3"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.918496Z","vulnerability":{"name":"CVE-2026-33671"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.918567Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.918567Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.918566Z","vulnerability":{"name":"CVE-2026-73566"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.918605Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.918605Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.918605Z","vulnerability":{"name":"CVE-2026-14257"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.918637Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.918637Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.918637Z","vulnerability":{"name":"CVE-2026-33750"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.918662Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.918662Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.918662Z","vulnerability":{"name":"CVE-2026-13149"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.918704Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.918703Z","products":[{"@id":"pkg:npm/ip-address@10.1.0"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.918703Z","vulnerability":{"name":"CVE-2026-42338"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.918744Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.918744Z","products":[{"@id":"pkg:npm/ip-address@10.1.0"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.918744Z","vulnerability":{"name":"CVE-2026-69192"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.918774Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.918774Z","products":[{"@id":"pkg:npm/picomatch@4.0.3"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.918774Z","vulnerability":{"name":"CVE-2026-33672"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.918864Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.918863Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.918862Z","vulnerability":{"name":"CVE-2026-59871"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.918897Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.918897Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.918897Z","vulnerability":{"name":"CVE-2026-45149"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.918938Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.918938Z","products":[{"@id":"pkg:apk/alpine/ada-libs@3.3.0-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=ada"},{"@id":"pkg:apk/alpine/ada-libs@3.3.0-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=ada"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.918938Z","vulnerability":{"name":"CVE-2024-9410"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.918967Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.918967Z","products":[{"@id":"pkg:apk/alpine/busybox@1.37.0-r31?arch=aarch64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=busybox"},{"@id":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=busybox"},{"@id":"pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=busybox"},{"@id":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=busybox"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.918967Z","vulnerability":{"name":"CVE-2025-60876"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.919034Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.919033Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.919033Z","vulnerability":{"name":"CVE-2026-59875"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.919069Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.919069Z","products":[{"@id":"pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=nghttp2"},{"@id":"pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=nghttp2"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.919069Z","vulnerability":{"name":"CVE-2026-58055"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.919113Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.919113Z","products":[{"@id":"pkg:npm/sigstore@4.1.0"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.919113Z","vulnerability":{"name":"CVE-2026-48815"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.919145Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.919145Z","products":[{"@id":"pkg:npm/%40sigstore/core@3.2.0"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.919144Z","vulnerability":{"name":"CVE-2026-48758"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.919173Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.919173Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.919173Z","vulnerability":{"name":"CVE-2026-53655"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:07:49.919208Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:07:49.919207Z","products":[{"@id":"pkg:npm/%40sigstore/verify@3.1.0"}],"status":"under_investigation","timestamp":"2026-08-24T12:07:49.919207Z","vulnerability":{"name":"CVE-2026-48816"}}],"timestamp":"2026-08-12T12:39:39.736136422Z","tooling":"","version":10}