{"@context":"https://openvex.dev/ns/v0.2.0","@id":"pkg:docker/ci@5.23.0","author":"security@datadoghq.com","author_role":"Vulnerability Management","last_updated":"2026-08-25T12:32:51.533963625Z","statements":[{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.076787Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.076787Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.076787Z","vulnerability":{"name":"CVE-2026-59873"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.076866Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.076865Z","products":[{"@id":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=openssl"},{"@id":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=openssl"},{"@id":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=openssl"},{"@id":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=openssl"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.076865Z","vulnerability":{"name":"CVE-2026-14456"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.076953Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.076953Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.076952Z","vulnerability":{"name":"CVE-2026-59874"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.077017Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.077017Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.077017Z","vulnerability":{"name":"CVE-2026-69152"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.077094Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.077094Z","products":[{"@id":"pkg:npm/picomatch@4.0.3"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.077094Z","vulnerability":{"name":"CVE-2026-33671"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.077151Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.077151Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.077151Z","vulnerability":{"name":"CVE-2026-73566"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.077228Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.077228Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.077226Z","vulnerability":{"name":"CVE-2026-14257"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.077293Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.077293Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.077292Z","vulnerability":{"name":"CVE-2026-33750"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.077358Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.077358Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.077357Z","vulnerability":{"name":"CVE-2026-13149"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.077413Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.077412Z","products":[{"@id":"pkg:npm/ip-address@10.1.0"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.077412Z","vulnerability":{"name":"CVE-2026-42338"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.077479Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.077479Z","products":[{"@id":"pkg:npm/ip-address@10.1.0"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.077479Z","vulnerability":{"name":"CVE-2026-69192"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.077551Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.077551Z","products":[{"@id":"pkg:npm/picomatch@4.0.3"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.077551Z","vulnerability":{"name":"CVE-2026-33672"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.077611Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.07761Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.07761Z","vulnerability":{"name":"CVE-2026-59871"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.077674Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.077674Z","products":[{"@id":"pkg:npm/brace-expansion@5.0.4"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.077674Z","vulnerability":{"name":"CVE-2026-45149"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.077731Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.077731Z","products":[{"@id":"pkg:apk/alpine/ada-libs@3.3.0-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=ada"},{"@id":"pkg:apk/alpine/ada-libs@3.3.0-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=ada"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.077731Z","vulnerability":{"name":"CVE-2024-9410"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.077796Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.077796Z","products":[{"@id":"pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=busybox"},{"@id":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=busybox"},{"@id":"pkg:apk/alpine/busybox@1.37.0-r31?arch=aarch64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=busybox"},{"@id":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=busybox"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.077796Z","vulnerability":{"name":"CVE-2025-60876"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.077942Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.077942Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.077942Z","vulnerability":{"name":"CVE-2026-59875"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.078006Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.078006Z","products":[{"@id":"pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=nghttp2"},{"@id":"pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=nghttp2"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.078006Z","vulnerability":{"name":"CVE-2026-58055"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.078063Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.078062Z","products":[{"@id":"pkg:npm/sigstore@4.1.0"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.078062Z","vulnerability":{"name":"CVE-2026-48815"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.078131Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.078131Z","products":[{"@id":"pkg:npm/%40sigstore/core@3.2.0"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.07813Z","vulnerability":{"name":"CVE-2026-48758"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.078186Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.078186Z","products":[{"@id":"pkg:npm/tar@7.5.11"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.078186Z","vulnerability":{"name":"CVE-2026-53655"}},{"action_statement":"","action_statement_timestamp":"2026-08-24T12:21:10.078258Z","impact_statement":"","justification":"","last_updated":"2026-08-24T12:21:10.078258Z","products":[{"@id":"pkg:npm/%40sigstore/verify@3.1.0"}],"status":"under_investigation","timestamp":"2026-08-24T12:21:10.078258Z","vulnerability":{"name":"CVE-2026-48816"}}],"timestamp":"2026-08-17T12:39:57.656648256Z","tooling":"","version":7}