{"@context":"https://openvex.dev/ns/v0.2.0","@id":"pkg:docker/csi-driver@1.4.0","author":"security@datadoghq.com","author_role":"Vulnerability Management","last_updated":"2026-08-25T12:28:54.357848143Z","statements":[{"action_statement":"","action_statement_timestamp":"2026-08-25T12:03:55.469832Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:03:55.469832Z","products":[{"@id":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=openssl"},{"@id":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=openssl"},{"@id":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=openssl"},{"@id":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=openssl"}],"status":"under_investigation","timestamp":"2026-08-25T12:03:55.469832Z","vulnerability":{"name":"CVE-2026-14456"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:03:55.469979Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:03:55.469979Z","products":[{"@id":"pkg:golang/stdlib@1.25.12"}],"status":"affected","timestamp":"2026-08-25T12:03:55.469979Z","vulnerability":{"name":"CVE-2026-46600"}},{"action_statement":"","action_statement_timestamp":"2026-08-25T12:03:55.470103Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:03:55.470103Z","products":[{"@id":"pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=busybox"},{"@id":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64\u0026distro=alpine-3.24.1\u0026upstream=busybox"},{"@id":"pkg:apk/alpine/busybox@1.37.0-r31?arch=aarch64\u0026distro=alpine-3.24.1"},{"@id":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=busybox"},{"@id":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=aarch64\u0026distro=alpine-3.24.1\u0026upstream=busybox"}],"status":"under_investigation","timestamp":"2026-08-25T12:03:55.470103Z","vulnerability":{"name":"CVE-2025-60876"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:03:55.503523Z","products":[{"@id":"pkg:golang/google.golang.org/grpc@v1.70.0"}],"status":"fixed","timestamp":"2026-08-25T12:03:55.503522Z","vulnerability":{"name":"CVE-2026-33186"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:03:55.50355Z","products":[{"@id":"pkg:golang/golang.org/x/net@v0.38.0"}],"status":"fixed","timestamp":"2026-08-25T12:03:55.50355Z","vulnerability":{"name":"CVE-2026-33814"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:03:55.503557Z","products":[{"@id":"pkg:golang/golang.org/x/text@v0.29.0"}],"status":"fixed","timestamp":"2026-08-25T12:03:55.503556Z","vulnerability":{"name":"CVE-2026-56852"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:03:55.503563Z","products":[{"@id":"pkg:golang/github.com/docker/cli@v28.2.2%2Bincompatible"}],"status":"fixed","timestamp":"2026-08-25T12:03:55.503563Z","vulnerability":{"name":"CVE-2025-15558"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:03:55.503578Z","products":[{"@id":"pkg:golang/golang.org/x/net@v0.38.0"}],"status":"fixed","timestamp":"2026-08-25T12:03:55.503578Z","vulnerability":{"name":"CVE-2026-25680"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:03:55.503581Z","products":[{"@id":"pkg:golang/stdlib@1.25.11"}],"status":"fixed","timestamp":"2026-08-25T12:03:55.503581Z","vulnerability":{"name":"CVE-2026-39822"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:03:55.503584Z","products":[{"@id":"pkg:golang/golang.org/x/net@v0.38.0"}],"status":"fixed","timestamp":"2026-08-25T12:03:55.503584Z","vulnerability":{"name":"CVE-2026-42506"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:03:55.503588Z","products":[{"@id":"pkg:golang/golang.org/x/net@v0.38.0"}],"status":"fixed","timestamp":"2026-08-25T12:03:55.503588Z","vulnerability":{"name":"CVE-2026-42502"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:03:55.503591Z","products":[{"@id":"pkg:golang/golang.org/x/net@v0.38.0"}],"status":"fixed","timestamp":"2026-08-25T12:03:55.50359Z","vulnerability":{"name":"CVE-2026-25681"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:03:55.503566Z","products":[{"@id":"pkg:golang/golang.org/x/net@v0.38.0"}],"status":"fixed","timestamp":"2026-08-25T12:03:55.503566Z","vulnerability":{"name":"CVE-2025-47911"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:03:55.503572Z","products":[{"@id":"pkg:golang/golang.org/x/net@v0.38.0"}],"status":"fixed","timestamp":"2026-08-25T12:03:55.503572Z","vulnerability":{"name":"CVE-2025-58190"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:03:55.503575Z","products":[{"@id":"pkg:golang/stdlib@1.25.11"}],"status":"fixed","timestamp":"2026-08-25T12:03:55.503575Z","vulnerability":{"name":"CVE-2026-42505"}},{"action_statement":"This vulnerability was fixed in: 1.5.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:09:36.251421Z","products":[{"@id":"pkg:golang/stdlib@1.25.12"}],"status":"affected","timestamp":"2026-08-25T12:03:55.469807Z","vulnerability":{"name":"CVE-2026-39821"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:03:55.503594Z","products":[{"@id":"pkg:golang/golang.org/x/net@v0.38.0"}],"status":"fixed","timestamp":"2026-08-25T12:03:55.503594Z","vulnerability":{"name":"CVE-2026-27136"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:03:55.503597Z","products":[{"@id":"pkg:golang/golang.org/x/sys@v0.33.0"}],"status":"fixed","timestamp":"2026-08-25T12:03:55.503597Z","vulnerability":{"name":"CVE-2026-39824"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:03:55.5036Z","products":[{"@id":"pkg:golang/google.golang.org/grpc@v1.70.0"}],"status":"fixed","timestamp":"2026-08-25T12:03:55.5036Z","vulnerability":{"name":"GHSA-hrxh-6v49-42gf"}},{"action_statement":"","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:03:55.503604Z","products":[{"@id":"pkg:golang/github.com/klauspost/compress@v1.18.0"}],"status":"fixed","timestamp":"2026-08-25T12:03:55.503604Z","vulnerability":{"name":"GO-2026-5841"}},{"action_statement":"This vulnerability was fixed in: 1.5.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:09:36.251452Z","products":[{"@id":"pkg:golang/stdlib@1.25.12"}],"status":"affected","timestamp":"2026-08-25T12:03:55.469892Z","vulnerability":{"name":"CVE-2026-33818"}},{"action_statement":"This vulnerability was fixed in: 1.5.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:09:36.251457Z","products":[{"@id":"pkg:golang/stdlib@1.25.12"}],"status":"affected","timestamp":"2026-08-25T12:03:55.469921Z","vulnerability":{"name":"CVE-2026-56853"}},{"action_statement":"This vulnerability was fixed in: 1.5.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:09:36.251461Z","products":[{"@id":"pkg:golang/stdlib@1.25.12"}],"status":"affected","timestamp":"2026-08-25T12:03:55.469948Z","vulnerability":{"name":"CVE-2026-56859"}},{"action_statement":"This vulnerability was fixed in: 1.5.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:09:36.251464Z","products":[{"@id":"pkg:golang/stdlib@1.25.12"}],"status":"affected","timestamp":"2026-08-25T12:03:55.470003Z","vulnerability":{"name":"CVE-2026-56862"}},{"action_statement":"This vulnerability was fixed in: 1.5.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:09:36.25147Z","products":[{"@id":"pkg:golang/stdlib@1.25.12"}],"status":"affected","timestamp":"2026-08-25T12:03:55.470029Z","vulnerability":{"name":"CVE-2026-56860"}},{"action_statement":"This vulnerability was fixed in: 1.5.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:09:36.251477Z","products":[{"@id":"pkg:golang/stdlib@1.25.12"}],"status":"affected","timestamp":"2026-08-25T12:03:55.470069Z","vulnerability":{"name":"CVE-2026-56864"}},{"action_statement":"This vulnerability was fixed in: 1.5.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:09:36.251484Z","products":[{"@id":"pkg:golang/stdlib@1.25.12"}],"status":"affected","timestamp":"2026-08-25T12:03:55.470164Z","vulnerability":{"name":"CVE-2026-56858"}},{"action_statement":"This vulnerability was fixed in: 1.5.0","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-25T12:09:36.251488Z","products":[{"@id":"pkg:golang/stdlib@1.25.12"}],"status":"affected","timestamp":"2026-08-25T12:03:55.470194Z","vulnerability":{"name":"CVE-2026-56865"}}],"timestamp":"2026-08-11T12:23:16.532023511Z","tooling":"","version":11}