{"schemaVersion":3,"id":"CVE-2025-30215","aliases":["MGASA-2026-0232","UBUNTU-CVE-2025-30215","DEBIAN-CVE-2025-30215","CGA-6hv2-qf3g-fr9f","CGA-6qxj-6w5x-5q5r","CGA-7qrq-pv5j-gf6v","CGA-855c-qhg9-32rx","CGA-m4xr-r4g9-rp46","CGA-mf2w-85vp-43c8","GHSA-fhg8-qxh5-7q3w","BIT-nats-2025-30215","GO-2025-3600","openSUSE-SU-2025:15014-1","CGA-3mx2-jh6x-fq82","CGA-52fh-29ff-7mff","CGA-887q-c2qj-fpmf","CGA-9hh3-x6fh-339v","CGA-g2pc-prh9-r3mp","CGA-g87r-vcp2-5mgv","CGA-rq6j-8vg6-wfcr","CGA-x6q3-x7wg-9w7v"],"status":"published","duplicateOf":null,"title":null,"description":"NATS-Server is a High-Performance server for NATS.io, the cloud and edge native messaging system. In versions starting from 2.2.0 but prior to 2.10.27 and 2.11.1, the management of JetStream assets happens with messages in the $JS. subject namespace in the system account; this is partially exposed into regular accounts to allow account holders to manage their assets. Some of the JS API requests were missing access controls, allowing any user with JS management permissions in any account to perform certain administrative actions on any JS asset in any other account. At least one of the unprotected APIs allows for data destruction. None of the affected APIs allow disclosing stream contents. This vulnerability is fixed in v2.11.1 or v2.10.27.","dates":{"published":"2025-04-15T23:25:43.143Z","modified":"2025-04-17T14:22:42.979Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.6,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":9.6,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":9.6,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","exploitability":7.9,"impact":9.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":9.6,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","exploitability":7.9,"impact":9.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":9.6,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","exploitability":7.9,"impact":9.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Go","score":9.6,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","exploitability":7.9,"impact":9.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":9.6,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","exploitability":7.9,"impact":9.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.6,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00601,"percentile":0.47802,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.00999999999999994,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00591},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00601,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00601,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00601,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00601,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00601,"percentile":0.47802}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00591,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00601,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00601,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00601,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00601,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00601,"percentile":0.47802}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-287","name":"Improper Authentication","description":"When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/287.html"},{"id":"CWE-306","name":"Missing Authentication for Critical Function","description":"The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/306.html"}],"affected":[{"vendor":"chainguard","product":"nats-server","name":"nats-server","label":"nats-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nats-server","purlType":"apk","versions":[{"text":"< 2.12.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nats-server-fips","name":"nats-server-fips","label":"nats-server-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nats-server-fips","purlType":"apk","versions":[{"text":"< 2.12.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nats-top","name":"nats-top","label":"nats-top","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nats-top","purlType":"apk","versions":[{"text":"< 0.6.3-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.6.3-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nats-top-compat","name":"nats-top-compat","label":"nats-top-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nats-top-compat","purlType":"apk","versions":[{"text":"< 0.6.3-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.6.3-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nats-top-fips","name":"nats-top-fips","label":"nats-top-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nats-top-fips","purlType":"apk","versions":[{"text":"< 0.6.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.6.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nats-top-fips-compat","name":"nats-top-fips-compat","label":"nats-top-fips-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nats-top-fips-compat","purlType":"apk","versions":[{"text":"< 0.6.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.6.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"prometheus-nats-exporter","name":"prometheus-nats-exporter","label":"prometheus-nats-exporter","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/prometheus-nats-exporter","purlType":"apk","versions":[{"text":"< 0.17.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.17.2-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nats-server","name":"nats-server","label":"nats-server","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nats-server","purlType":"apk","versions":[{"text":"< 2.12.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nats-top","name":"nats-top","label":"nats-top","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nats-top","purlType":"apk","versions":[{"text":"< 0.6.3-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.6.3-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nats-top-compat","name":"nats-top-compat","label":"nats-top-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nats-top-compat","purlType":"apk","versions":[{"text":"< 0.6.3-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.6.3-r3","eol":null,"hubHref":null},{"vendor":"debian","product":"nats-server","name":"nats-server","label":"nats-server","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/nats-server","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.10.27-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.10.27-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"nats-server","name":"nats-server","label":"nats-server","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/nats-server","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"github.com/nats-io/nats-server","product":"v2","name":"github.com/nats-io/nats-server/v2","label":"v2","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/github.com/nats-io/nats-server/v2","purlType":"golang","versions":[{"text":"≥ 2.11.0-RC.1, < 2.11.1","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.2.0, < 2.10.27","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.11.0, < 2.11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.11.0-RC.1, < 2.11.1 | ≥ 2.2.0, < 2.10.27 | ≥ 2.11.0, < 2.11.1","eol":null,"hubHref":null},{"vendor":"mageia","product":"golang-github-nats-io","name":"golang-github-nats-io","label":"golang-github-nats-io","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/golang-github-nats-io","purlType":"rpm","versions":[{"text":"< 1.41.1-1.mga9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.41.1-1.mga9","eol":null,"hubHref":null},{"vendor":"mageia","product":"golang-github-nats-io-jwt","name":"golang-github-nats-io-jwt","label":"golang-github-nats-io-jwt","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/golang-github-nats-io-jwt","purlType":"rpm","versions":[{"text":"< 2.5.2-1.mga9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.5.2-1.mga9","eol":null,"hubHref":null},{"vendor":"mageia","product":"golang-github-nats-io-nkeys","name":"golang-github-nats-io-nkeys","label":"golang-github-nats-io-nkeys","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/golang-github-nats-io-nkeys","purlType":"rpm","versions":[{"text":"< 0.4.10-1.mga9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.4.10-1.mga9","eol":null,"hubHref":null},{"vendor":"mageia","product":"golang-github-prashantv-gostub","name":"golang-github-prashantv-gostub","label":"golang-github-prashantv-gostub","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/golang-github-prashantv-gostub","purlType":"rpm","versions":[{"text":"< 1.1.0-1.mga9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.0-1.mga9","eol":null,"hubHref":null},{"vendor":"mageia","product":"golang-uber-automaxprocs","name":"golang-uber-automaxprocs","label":"golang-uber-automaxprocs","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/golang-uber-automaxprocs","purlType":"rpm","versions":[{"text":"< 1.6.0-1.mga9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.0-1.mga9","eol":null,"hubHref":null},{"vendor":"mageia","product":"nats-server","name":"nats-server","label":"nats-server","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/nats-server","purlType":"rpm","versions":[{"text":"< 2.10.27-1.1.mga9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.10.27-1.1.mga9","eol":null,"hubHref":null},{"vendor":"nats-io","product":"nats-server","name":"nats-server","label":"nats-server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 2.2.0, < 2.10.27","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.11.0-RC.1, < 2.11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.2.0, < 2.10.27 | ≥ 2.11.0-RC.1, < 2.11.1","eol":null,"hubHref":"/vendor/nats-io/nats-server"},{"vendor":"opensuse","product":"govulncheck-vulndb&distro=openSUSE Tumbleweed","name":"govulncheck-vulndb","label":"govulncheck-vulndb&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 0.0.20250422T152923-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.20250422T152923-1.1","eol":null,"hubHref":null}],"affectedCount":21,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/nats-io/nats-server/security/advisories/GHSA-fhg8-qxh5-7q3w","label":"github.com/nats-io/nats-server/security/advisories/GHSA-fhg8-qxh5-7q3w","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB"]},{"url":"https://advisories.nats.io/CVE/secnote-2025-01.txt","label":"advisories.nats.io/CVE/secnote-2025-01.txt","hostname":"advisories.nats.io","tags":["X Refsource MISC","REPORT","Advisory","WEB"]},{"url":"http://www.openwall.com/lists/oss-security/2025/04/08/5","label":"www.openwall.com/lists/oss-security/2025/04/08/5","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://advisories.mageia.org/MGASA-2026-0232.html","label":"advisories.mageia.org/MGASA-2026-0232.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34184","label":"bugs.mageia.org/show_bug.cgi?id=34184","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://www.openwall.com/lists/oss-security/2025/04/08/5","label":"www.openwall.com/lists/oss-security/2025/04/08/5","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://ubuntu.com/security/CVE-2025-30215","label":"ubuntu.com/security/CVE-2025-30215","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-30215","label":"www.cve.org/CVERecord?id=CVE-2025-30215","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-30215","label":"security-tracker.debian.org/tracker/CVE-2025-30215","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/30xxx/CVE-2025-30215.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2025/30xxx/CVE-2025-30215.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-30215","label":"nvd.nist.gov/vuln/detail/CVE-2025-30215","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://github.com/nats-io/nats-server/commit/3e7e4645a24e829a36b4210f2d7c34dea7f7a424","label":"github.com/nats-io/nats-server/commit/3e7e4645a24e829a36b4210f2d7c34dea7f7a424","hostname":"github.com","tags":["WEB","FIX"]},{"url":"https://github.com/nats-io/nats-server","label":"github.com/nats-io/nats-server","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://osv.dev/vulnerability/GO-2025-3600","label":"osv.dev/vulnerability/GO-2025-3600","hostname":"osv.dev","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30215","label":"www.suse.com/security/cve/CVE-2025-30215","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-PR58-VGG3-MFCC","CGA-QFR6-6XGX-436G","CGA-V26X-GH9W-5JMF"]},"timeline":[{"kind":"published","date":"2025-04-15T23:25:43.143Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-04-17T14:22:42.979Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T17:47:41.710Z","stale":false,"partial":false}}