{"schemaVersion":3,"id":"CVE-2024-43799","aliases":["UBUNTU-CVE-2024-43799","DEBIAN-CVE-2024-43799","DLA-4224-1","CGA-2cgc-4rww-97p8","CGA-3425-mqf7-4rff","CGA-36gp-mhqg-jpgj","CGA-3qf3-hx9m-j7q5","CGA-3vgm-x6h5-jh24","CGA-4v9c-3h6h-q4c4","CGA-523g-h2fj-cxr7","CGA-5395-pvmv-jqh8","CGA-55qp-p67p-cgqm","CGA-566x-whpv-gwx5","CGA-5qj3-mjc7-h98r","CGA-68gp-wgwf-fwqq","CGA-6j96-q3qc-95f2","CGA-6q4p-3g75-cfph","CGA-7jrv-m87r-c6g3","CGA-8686-v3r7-55x9","CGA-8m6v-xfh8-7c5m","CGA-8vfv-p98c-rxx5","CGA-9x64-pp5v-v233","CGA-c93f-fr3h-7jg6","CGA-cfh4-j263-fgxc","CGA-f4hh-4779-2jgh","CGA-f9ch-jr27-73vq","CGA-f9f6-wx3r-8vg2","CGA-g87x-hcp5-r262","CGA-hprr-cvvp-wwrv","CGA-j363-m3vj-237m","CGA-jf92-f3j3-m6p7","CGA-m278-r3gw-j8w5","CGA-m943-4v2f-x5q6","CGA-mx78-45jf-p27x","CGA-pm4m-q98h-27fh","CGA-pmcm-q8vh-wmxx","CGA-qcfq-9hgr-x2v6","CGA-rjj2-w238-2wqf","CGA-rqm6-wh2g-x3c2","CGA-v83q-cq3v-374h","CGA-vc35-g8wp-jh3v","CGA-vj6c-jgr3-p4jx","CGA-vmf2-qrcx-r638","CGA-x3pm-2xf3-c42v","CGA-xm7q-27vr-34h8","GHSA-m6fv-jmcg-4jfg","CGA-qc9r-872q-3p44","CGA-qrvq-8p5h-qc8c"],"status":"published","duplicateOf":null,"title":null,"description":"Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrusted code. This issue is patched in send 0.19.0.","dates":{"published":"2024-09-10T14:45:06.761Z","modified":"2025-11-03T19:30:41.760Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":4.7,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":4.1,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":4.7,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":4.1,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","exploitability":4.1,"impact":5.7,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Npm","score":2.3,"severity":"low","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","exploitability":4.1,"impact":5.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","exploitability":4.1,"impact":5.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":4.7,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00541,"percentile":0.44682,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.00541},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00541,"percentile":0.44682}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00541,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00541,"percentile":0.44682}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/79.html"}],"affected":[{"vendor":"chainguard","product":"arangodb-3.11","name":"arangodb-3.11","label":"arangodb-3.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/arangodb-3.11","purlType":"apk","versions":[{"text":"< 3.11.14.5-r25","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.11.14.5-r25","eol":null,"hubHref":null},{"vendor":"chainguard","product":"argo-workflows","name":"argo-workflows","label":"argo-workflows","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/argo-workflows","purlType":"apk","versions":[{"text":"< 3.6.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.5-r2","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"argo-workflows","label":"Argo Workflows","category":"server-app"}},"hubHref":null},{"vendor":"chainguard","product":"kubeflow-centraldashboard","name":"kubeflow-centraldashboard","label":"kubeflow-centraldashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-centraldashboard","purlType":"apk","versions":[{"text":"< 1.9.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.9.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines","name":"kubeflow-pipelines","label":"kubeflow-pipelines","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-apiserver","name":"kubeflow-pipelines-apiserver","label":"kubeflow-pipelines-apiserver","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-apiserver","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-cache_server","name":"kubeflow-pipelines-cache_server","label":"kubeflow-pipelines-cache_server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-cache_server","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-cache-deployer","name":"kubeflow-pipelines-cache-deployer","label":"kubeflow-pipelines-cache-deployer","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-cache-deployer","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-cache-deployer-compat","name":"kubeflow-pipelines-cache-deployer-compat","label":"kubeflow-pipelines-cache-deployer-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-cache-deployer-compat","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-frontend","name":"kubeflow-pipelines-frontend","label":"kubeflow-pipelines-frontend","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-frontend","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-metadata-envoy-config","name":"kubeflow-pipelines-metadata-envoy-config","label":"kubeflow-pipelines-metadata-envoy-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-metadata-envoy-config","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-metadata-writer","name":"kubeflow-pipelines-metadata-writer","label":"kubeflow-pipelines-metadata-writer","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-metadata-writer","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-metadata-writer-compat","name":"kubeflow-pipelines-metadata-writer-compat","label":"kubeflow-pipelines-metadata-writer-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-metadata-writer-compat","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-persistence_agent","name":"kubeflow-pipelines-persistence_agent","label":"kubeflow-pipelines-persistence_agent","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-persistence_agent","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-scheduledworkflow","name":"kubeflow-pipelines-scheduledworkflow","label":"kubeflow-pipelines-scheduledworkflow","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-scheduledworkflow","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-viewer-crd-controller","name":"kubeflow-pipelines-viewer-crd-controller","label":"kubeflow-pipelines-viewer-crd-controller","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-viewer-crd-controller","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"sqlpad","name":"sqlpad","label":"sqlpad","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/sqlpad","purlType":"apk","versions":[{"text":"< 7.5.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"sqlpad-compat","name":"sqlpad-compat","label":"sqlpad-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/sqlpad-compat","purlType":"apk","versions":[{"text":"< 7.5.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard","name":"thingsboard","label":"thingsboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard","purlType":"apk","versions":[{"text":"< 3.7-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-js-executor","name":"thingsboard-tb-js-executor","label":"thingsboard-tb-js-executor","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-js-executor","purlType":"apk","versions":[{"text":"< 3.7-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 3.7-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 3.7-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-web-ui","name":"thingsboard-tb-web-ui","label":"thingsboard-tb-web-ui","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-web-ui","purlType":"apk","versions":[{"text":"< 3.7-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"argo-workflows","name":"argo-workflows","label":"argo-workflows","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/argo-workflows","purlType":"apk","versions":[{"text":"< 3.6.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.5-r2","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"argo-workflows","label":"Argo Workflows","category":"server-app"}},"hubHref":null},{"vendor":"wolfi","product":"kubeflow-centraldashboard","name":"kubeflow-centraldashboard","label":"kubeflow-centraldashboard","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-centraldashboard","purlType":"apk","versions":[{"text":"< 1.9.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.9.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines","name":"kubeflow-pipelines","label":"kubeflow-pipelines","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-apiserver","name":"kubeflow-pipelines-apiserver","label":"kubeflow-pipelines-apiserver","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-apiserver","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-cache_server","name":"kubeflow-pipelines-cache_server","label":"kubeflow-pipelines-cache_server","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-cache_server","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-cache-deployer","name":"kubeflow-pipelines-cache-deployer","label":"kubeflow-pipelines-cache-deployer","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-cache-deployer","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-cache-deployer-compat","name":"kubeflow-pipelines-cache-deployer-compat","label":"kubeflow-pipelines-cache-deployer-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-cache-deployer-compat","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-frontend","name":"kubeflow-pipelines-frontend","label":"kubeflow-pipelines-frontend","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-frontend","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-metadata-envoy-config","name":"kubeflow-pipelines-metadata-envoy-config","label":"kubeflow-pipelines-metadata-envoy-config","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-metadata-envoy-config","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-metadata-writer","name":"kubeflow-pipelines-metadata-writer","label":"kubeflow-pipelines-metadata-writer","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-metadata-writer","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-metadata-writer-compat","name":"kubeflow-pipelines-metadata-writer-compat","label":"kubeflow-pipelines-metadata-writer-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-metadata-writer-compat","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-persistence_agent","name":"kubeflow-pipelines-persistence_agent","label":"kubeflow-pipelines-persistence_agent","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-persistence_agent","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-scheduledworkflow","name":"kubeflow-pipelines-scheduledworkflow","label":"kubeflow-pipelines-scheduledworkflow","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-scheduledworkflow","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-viewer-crd-controller","name":"kubeflow-pipelines-viewer-crd-controller","label":"kubeflow-pipelines-viewer-crd-controller","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-viewer-crd-controller","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"sqlpad","name":"sqlpad","label":"sqlpad","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/sqlpad","purlType":"apk","versions":[{"text":"< 7.5.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"sqlpad-compat","name":"sqlpad-compat","label":"sqlpad-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/sqlpad-compat","purlType":"apk","versions":[{"text":"< 7.5.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard","name":"thingsboard","label":"thingsboard","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard","purlType":"apk","versions":[{"text":"< 3.7-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-js-executor","name":"thingsboard-tb-js-executor","label":"thingsboard-tb-js-executor","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-js-executor","purlType":"apk","versions":[{"text":"< 3.7-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 3.7-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 3.7-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-web-ui","name":"thingsboard-tb-web-ui","label":"thingsboard-tb-web-ui","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-web-ui","purlType":"apk","versions":[{"text":"< 3.7-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7-r4","eol":null,"hubHref":null},{"vendor":"debian","product":"node-send","name":"node-send","label":"node-send","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/node-send","purlType":"deb","versions":[{"text":"< 0.18.0+~cs1.19.1-3+deb12u1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.1.0+~cs1.19.4-1","noFixRecorded":false,"fixedIn":null},{"text":"< 0.17.1-2+deb11u1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.18.0+~cs1.19.1-3+deb12u1 | < 1.1.0+~cs1.19.4-1 | < 0.17.1-2+deb11u1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"node-send","name":"node-send","label":"node-send","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/node-send","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"Npm","product":"send","name":"send","label":"send","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/send","purlType":"npm","versions":[{"text":"< 0.19.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0","eol":null,"hubHref":null},{"vendor":"pillarjs","product":"send","name":"send","label":"send","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 0.19.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0","eol":null,"hubHref":"/vendor/pillarjs/send"},{"vendor":"send_project","product":"send","name":"send","label":"send","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 0.19.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0","eol":null,"hubHref":"/vendor/send_project/send"}],"affectedCount":48,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/pillarjs/send/security/advisories/GHSA-m6fv-jmcg-4jfg","label":"github.com/pillarjs/send/security/advisories/GHSA-m6fv-jmcg-4jfg","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Vendor Advisory"]},{"url":"https://github.com/pillarjs/send/commit/ae4f2989491b392ae2ef3b0015a019770ae65d35","label":"github.com/pillarjs/send/commit/ae4f2989491b392ae2ef3b0015a019770ae65d35","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB","Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/06/msg00022.html","label":"lists.debian.org/debian-lts-announce/2025/06/msg00022.html","hostname":"lists.debian.org","tags":["WEB"]},{"url":"https://ubuntu.com/security/CVE-2024-43799","label":"ubuntu.com/security/CVE-2024-43799","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-43799","label":"www.cve.org/CVERecord?id=CVE-2024-43799","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-43799","label":"security-tracker.debian.org/tracker/CVE-2024-43799","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43799.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43799.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-43799","label":"nvd.nist.gov/vuln/detail/CVE-2024-43799","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://github.com/pillarjs/send","label":"github.com/pillarjs/send","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-4G7R-GQ6M-3FJW","CGA-4HV8-43HQ-X9J7","CGA-5GRW-9WV6-R624","CGA-9CW3-8W4J-827W","CGA-JGR3-P9CQ-FQJH"]},"timeline":[{"kind":"published","date":"2024-09-10T14:45:06.761Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-11-03T19:30:41.760Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":20,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T23:51:26.877Z","stale":false,"partial":false}}