{"schemaVersion":3,"id":"CVE-2026-101907","aliases":["UBUNTU-CVE-2026-101907","DEBIAN-CVE-2026-101907","CGA-28vr-wr2h-6fjm","CGA-392g-mv27-wcr8","CGA-5hj6-j9c5-mw9m","CGA-5wc8-pq5r-v7hf","CGA-6774-cx34-8fv7","CGA-67vc-3c9w-6xm7","CGA-76hp-3fc8-3cjw","CGA-78m8-hjfp-rcfh","CGA-85c7-h9mc-x9qx","CGA-8w6w-p42f-mwmm","CGA-gff9-rfh2-7gv3","CGA-gh36-vj7q-j5hq","CGA-j6ff-655g-8cpf","CGA-mm79-3pvj-2cr4","CGA-mqx8-6fr9-pr5q","CGA-pwmm-r723-6prg","CGA-q7m3-jq96-36x7","CGA-q9pw-342p-26r4","CGA-qrgh-h5mc-7c9f","CGA-r4h3-9f7q-x3j4","CGA-rjch-8p3q-gmqm","CGA-rm26-rvm4-fvhr","CGA-rpgq-2vm5-vjq4","CGA-v48m-h8cc-h8p3","CGA-xg83-qx2r-wfv5","CGA-xh9r-xjch-wvmg","GHSA-r4gj-5m52-g5wh","CGA-2jff-w799-32mj","CGA-2q49-8j58-9w5x","CGA-377f-76c9-386c","CGA-3g9f-g596-chfh","CGA-3hpr-p8pg-8g62","CGA-3m8v-p7gq-p3xp","CGA-48v6-6hp3-qx3f","CGA-4cj5-6rvq-cv4r","CGA-4f3q-j9vm-w8vq","CGA-4g83-2g6v-88vj","CGA-4hpp-398v-222w","CGA-4mj5-5c76-9699","CGA-547c-hwq6-7689","CGA-5j8c-v9gm-frqp","CGA-5q5q-4xr3-7657","CGA-62jq-gq8x-6c94","CGA-65qw-p7mw-c35w","CGA-6fh7-6fxh-rrmf","CGA-6j7g-6vfh-vh55","CGA-6j8v-q338-7pm5","CGA-6phm-3636-46qc","CGA-6qrq-xrj2-rgfv","CGA-6r2j-hq7r-w5rg","CGA-7772-88pf-fv2w","CGA-7fvm-3pjg-h997","CGA-7h7g-cp3f-8xcx","CGA-7j3r-vrhj-f374","CGA-7v35-2gg4-8x52","CGA-8244-vf7r-fv3p","CGA-89gg-q77c-4g33","CGA-8c99-h4m3-93rr","CGA-8j8r-rp96-9p76","CGA-8qfq-v4p7-qj3m","CGA-8r2v-q299-w86w","CGA-8x39-f5x5-j682","CGA-8xwg-9h67-gcx5","CGA-9869-p8gp-c595","CGA-9v54-79fw-5387","CGA-9wqx-m8r5-hv4v","CGA-cp59-3xrp-76xm","CGA-cpfp-hxrr-mmg3","CGA-f269-58j6-3874","CGA-f859-q3vw-w736","CGA-f996-gprx-jqfv","CGA-fcvm-frc2-c328","CGA-fjj9-6fmv-x555","CGA-fmq3-p3j4-mr6h","CGA-frp3-vh84-f79r","CGA-fx6g-qqr5-9rh5","CGA-g62w-wm4h-7j9c","CGA-gc5p-fq3r-fgcv","CGA-gcgq-369h-2x6w","CGA-h8fv-wpw7-8qh2","CGA-h92m-79j6-5g2m","CGA-h94p-5vxw-3f9m","CGA-hh23-45jv-x586","CGA-j9wf-qr6r-fpv8","CGA-j9xm-25fv-3cp2","CGA-jf97-rjp4-ph73","CGA-jhw5-xrj2-v62v","CGA-jqhq-jhw5-pjq7","CGA-jr7h-c8rm-f4c8","CGA-jrm3-q8m8-gwg8","CGA-m383-hxvg-vr67","CGA-mm9v-3hx5-457v","CGA-mvcc-xc3j-h5c6","CGA-mwmm-9rr4-hgcx","CGA-p3f2-35w6-745p","CGA-p467-j84m-jm2g","CGA-pq3r-w8m4-hm3g","CGA-pqq5-4fgm-5xmq","CGA-q4m2-hwq9-r3p5","CGA-q85j-mfx2-cvgc","CGA-qc9f-vjfr-7g98","CGA-qpq8-jcmr-m62q","CGA-qwh7-wqrj-m2vf","CGA-r4qp-7294-cqj7","CGA-r58p-3m66-j3jj","CGA-r6w4-7h84-mwxg","CGA-r7rv-5wj5-f63j","CGA-rjcg-g8h9-59mv","CGA-rjjv-j626-qhrp","CGA-v6v7-v7r8-vjw2","CGA-v7rh-3xcp-c74h","CGA-vc8g-7qv8-6j6w","CGA-vcw2-c3mf-7685","CGA-vf47-vpf3-8v69","CGA-vh9r-76h2-c656","CGA-w2vx-xmcq-qq9c","CGA-w3v3-936j-hx2f","CGA-w7m9-5xxj-892c","CGA-w88m-c8r2-4x48","CGA-wfxw-hwmv-639c","CGA-whh4-jq28-j76q","CGA-wjf5-9xrx-w8fw","CGA-x688-46g2-8hhg","CGA-xm8p-jfh9-rqff","CGA-xpmj-cfvm-67v9","CGA-j2j4-w352-457h","CGA-mjrp-6rh6-h73h","CGA-5xcg-772r-r845","CGA-gh3q-wx5j-557q"],"status":"published","duplicateOf":null,"title":null,"description":"Axios is a promise-based HTTP client for the browser and Node.js. From 1.17.0 until 1.20.0, the fetch adapter bypasses the maxRedirects: 0 redirect policy. An Axios request uses the fetch adapter with maxRedirects set to zero and receives a redirect response. The underlying fetch implementation follows the redirect instead of returning the redirect response unchanged. The redirected request can access internal responses or reach state-changing internal endpoints despite redirects being disabled. This issue is fixed in version 1.20.0.","dates":{"published":"2026-09-28T17:36:03.648Z","modified":"2026-09-28T18:46:00.688Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7,"severity":"high","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":7,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":7,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Debian","score":7,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":7,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Npm","score":7,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":7,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":7,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00414,"percentile":0.34283,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-09-29T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00414,"percentile":0.34283}],"last30":[{"date":"2026-09-29T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00414,"percentile":0.34283}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-441","name":"Unintended Proxy or Intermediary ('Confused Deputy')","description":"The product receives a request, message, or directive from an upstream component, but the product does not sufficiently preserve the original source of the request before forwarding the request to an external actor that is outside of the product's control sphere. This causes the product to appear to be the source of the request, leading it to act as a proxy or other intermediary between the upstream component and the external actor.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/441.html"},{"id":"CWE-601","name":"URL Redirection to Untrusted Site ('Open Redirect')","description":"The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Low","url":"https://cwe.mitre.org/data/definitions/601.html"}],"affected":[{"vendor":"chainguard","product":"awx","name":"awx","label":"awx","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/awx","purlType":"apk","versions":[{"text":"< 24.6.1-r66","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 24.6.1-r66","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.1","name":"commercial-gitlab-rails-ee-19.1","label":"commercial-gitlab-rails-ee-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.1","purlType":"apk","versions":[{"text":"< 19.1.7-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.7-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.2","name":"commercial-gitlab-rails-ee-19.2","label":"commercial-gitlab-rails-ee-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.2","purlType":"apk","versions":[{"text":"< 19.2.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.3","name":"commercial-gitlab-rails-ee-19.3","label":"commercial-gitlab-rails-ee-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.3","purlType":"apk","versions":[{"text":"< 19.3.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.4","name":"commercial-gitlab-rails-ee-19.4","label":"commercial-gitlab-rails-ee-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.4","purlType":"apk","versions":[{"text":"< 19.4.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.4.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.1","name":"commercial-gitlab-rails-ee-fips-19.1","label":"commercial-gitlab-rails-ee-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.2","name":"commercial-gitlab-rails-ee-fips-19.2","label":"commercial-gitlab-rails-ee-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.2","purlType":"apk","versions":[{"text":"< 19.2.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.3","name":"commercial-gitlab-rails-ee-fips-19.3","label":"commercial-gitlab-rails-ee-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.3","purlType":"apk","versions":[{"text":"< 19.3.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.4","name":"commercial-gitlab-rails-ee-fips-19.4","label":"commercial-gitlab-rails-ee-fips-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.4","purlType":"apk","versions":[{"text":"< 19.4.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.4.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.1","name":"gitlab-rails-ce-19.1","label":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1","purlType":"apk","versions":[{"text":"< 19.1.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.2","name":"gitlab-rails-ce-19.2","label":"gitlab-rails-ce-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.2","purlType":"apk","versions":[{"text":"< 19.2.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.3","name":"gitlab-rails-ce-19.3","label":"gitlab-rails-ce-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.3","purlType":"apk","versions":[{"text":"< 19.3.3-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.3-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.4","name":"gitlab-rails-ce-19.4","label":"gitlab-rails-ce-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.4","purlType":"apk","versions":[{"text":"< 19.4.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.4.1-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.1","name":"gitlab-rails-ce-fips-19.1","label":"gitlab-rails-ce-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.1","purlType":"apk","versions":[{"text":"< 19.1.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.2","name":"gitlab-rails-ce-fips-19.2","label":"gitlab-rails-ce-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.2","purlType":"apk","versions":[{"text":"< 19.2.7-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.7-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.3","name":"gitlab-rails-ce-fips-19.3","label":"gitlab-rails-ce-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.3","purlType":"apk","versions":[{"text":"< 19.3.3-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.3-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.4","name":"gitlab-rails-ce-fips-19.4","label":"gitlab-rails-ce-fips-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.4","purlType":"apk","versions":[{"text":"< 19.4.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.4.1-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19","name":"kibana-8.19","label":"kibana-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19","purlType":"apk","versions":[{"text":"< 8.19.22-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.22-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19-bitnami","name":"kibana-8.19-bitnami","label":"kibana-8.19-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19-bitnami","purlType":"apk","versions":[{"text":"< 8.19.22-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.22-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2","name":"kibana-9.2","label":"kibana-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2","purlType":"apk","versions":[{"text":"< 9.2.8-r25","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r25","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3","name":"kibana-9.3","label":"kibana-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-centraldashboard","name":"kubeflow-centraldashboard","label":"kubeflow-centraldashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-centraldashboard","purlType":"apk","versions":[{"text":"< 2.0.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"lambda-nodejs22","name":"lambda-nodejs22","label":"lambda-nodejs22","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/lambda-nodejs22","purlType":"apk","versions":[{"text":"< 4.0.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.2-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"lambda-nodejs24","name":"lambda-nodejs24","label":"lambda-nodejs24","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/lambda-nodejs24","purlType":"apk","versions":[{"text":"< 4.0.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.2-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-3","name":"langfuse-3","label":"langfuse-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-3","purlType":"apk","versions":[{"text":"< 3.225.11-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.11-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-3-worker","name":"langfuse-3-worker","label":"langfuse-3-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-3-worker","purlType":"apk","versions":[{"text":"< 3.225.11-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.11-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-4","name":"langfuse-4","label":"langfuse-4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-4","purlType":"apk","versions":[{"text":"< 4.49.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.49.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-4-worker","name":"langfuse-4-worker","label":"langfuse-4-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-4-worker","purlType":"apk","versions":[{"text":"< 4.49.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.49.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-3","name":"langfuse-fips-3","label":"langfuse-fips-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-3","purlType":"apk","versions":[{"text":"< 3.225.11-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.11-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-3-worker","name":"langfuse-fips-3-worker","label":"langfuse-fips-3-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-3-worker","purlType":"apk","versions":[{"text":"< 3.225.11-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.11-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-4","name":"langfuse-fips-4","label":"langfuse-fips-4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-4","purlType":"apk","versions":[{"text":"< 4.49.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.49.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-4-worker","name":"langfuse-fips-4-worker","label":"langfuse-fips-4-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-4-worker","purlType":"apk","versions":[{"text":"< 4.49.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.49.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"lerna","name":"lerna","label":"lerna","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/lerna","purlType":"apk","versions":[{"text":"< 10.0.1-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.1-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"librechat","name":"librechat","label":"librechat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/librechat","purlType":"apk","versions":[{"text":"< 0.8.7-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.8.7-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nextcloud-server-33","name":"nextcloud-server-33","label":"nextcloud-server-33","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nextcloud-server-33","purlType":"apk","versions":[{"text":"< 33.0.9-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 33.0.9-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nextcloud-server-34","name":"nextcloud-server-34","label":"nextcloud-server-34","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nextcloud-server-34","purlType":"apk","versions":[{"text":"< 34.0.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 34.0.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nextcloud-server-35","name":"nextcloud-server-35","label":"nextcloud-server-35","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nextcloud-server-35","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 35.0.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 35.0.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2","name":"opensearch-dashboards-2","label":"opensearch-dashboards-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2","purlType":"apk","versions":[{"text":"< 2.19.6-r21","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.6-r21","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips","name":"opensearch-dashboards-2-fips","label":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips","purlType":"apk","versions":[{"text":"< 2.19.6-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.6-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3","name":"opensearch-dashboards-3","label":"opensearch-dashboards-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3","purlType":"apk","versions":[{"text":"< 3.8.0-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips","name":"opensearch-dashboards-3-fips","label":"opensearch-dashboards-3-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips","purlType":"apk","versions":[{"text":"< 3.8.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"prism","name":"prism","label":"prism","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/prism","purlType":"apk","versions":[{"text":"< 5.16.0-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.16.0-r13","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"nutanix-prism","label":"Nutanix Prism Central","category":"server-app"}},"hubHref":null},{"vendor":"chainguard","product":"redisinsight","name":"redisinsight","label":"redisinsight","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/redisinsight","purlType":"apk","versions":[{"text":"< 3.8.0-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"semaphore","name":"semaphore","label":"semaphore","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/semaphore","purlType":"apk","versions":[{"text":"< 2.19.12-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.12-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard","name":"wazuh-dashboard","label":"wazuh-dashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard","purlType":"apk","versions":[{"text":"< 4.14.8-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.8-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-fips","name":"wazuh-dashboard-fips","label":"wazuh-dashboard-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-fips","purlType":"apk","versions":[{"text":"< 4.14.8-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.8-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-plugins","name":"wazuh-dashboard-plugins","label":"wazuh-dashboard-plugins","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-plugins","purlType":"apk","versions":[{"text":"< 4.14.8-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.8-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-plugins-fips","name":"wazuh-dashboard-plugins-fips","label":"wazuh-dashboard-plugins-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips","purlType":"apk","versions":[{"text":"< 4.14.8-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.8-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-centraldashboard","name":"kubeflow-centraldashboard","label":"kubeflow-centraldashboard","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-centraldashboard","purlType":"apk","versions":[{"text":"< 2.0.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"langfuse-3","name":"langfuse-3","label":"langfuse-3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/langfuse-3","purlType":"apk","versions":[{"text":"< 3.225.11-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.11-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"langfuse-3-worker","name":"langfuse-3-worker","label":"langfuse-3-worker","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/langfuse-3-worker","purlType":"apk","versions":[{"text":"< 3.225.11-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.11-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"lerna","name":"lerna","label":"lerna","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/lerna","purlType":"apk","versions":[{"text":"< 10.0.1-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.1-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nextcloud-server-33","name":"nextcloud-server-33","label":"nextcloud-server-33","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nextcloud-server-33","purlType":"apk","versions":[{"text":"< 33.0.9-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 33.0.9-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3","name":"opensearch-dashboards-3","label":"opensearch-dashboards-3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3","purlType":"apk","versions":[{"text":"< 3.8.0-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"prism","name":"prism","label":"prism","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/prism","purlType":"apk","versions":[{"text":"< 5.16.0-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.16.0-r13","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"nutanix-prism","label":"Nutanix Prism Central","category":"server-app"}},"hubHref":null},{"vendor":"axios","product":"axios","name":"axios","label":"axios","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.17.0, < 1.20.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.17.0, < 1.20.0","eol":null,"hubHref":"/vendor/axios/axios"},{"vendor":"debian","product":"node-axios","name":"node-axios","label":"node-axios","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/node-axios","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 1.20.0-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 1.20.0-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"node-axios","name":"node-axios","label":"node-axios","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/node-axios","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"Npm","product":"axios","name":"axios","label":"axios","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/axios","purlType":"npm","versions":[{"text":"≥ 1.17.0, < 1.20.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.17.0, < 1.20.0","eol":null,"hubHref":null}],"affectedCount":59,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/axios/axios/security/advisories/GHSA-r4gj-5m52-g5wh","label":"github.com/axios/axios/security/advisories/GHSA-r4gj-5m52-g5wh","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB"]},{"url":"https://github.com/axios/axios/pull/11141","label":"github.com/axios/axios/pull/11141","hostname":"github.com","tags":["X Refsource MISC","REPORT","FIX","WEB"]},{"url":"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","label":"github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","hostname":"github.com","tags":["X Refsource MISC","REPORT","FIX","WEB"]},{"url":"https://github.com/axios/axios/releases/tag/v1.20.0","label":"github.com/axios/axios/releases/tag/v1.20.0","hostname":"github.com","tags":["X Refsource MISC","REPORT","WEB"]},{"url":"https://ubuntu.com/security/CVE-2026-101907","label":"ubuntu.com/security/CVE-2026-101907","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-101907","label":"www.cve.org/CVERecord?id=CVE-2026-101907","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-101907","label":"security-tracker.debian.org/tracker/CVE-2026-101907","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101907.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101907.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101907","label":"nvd.nist.gov/vuln/detail/CVE-2026-101907","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/axios/axios","label":"github.com/axios/axios","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":["RHSA-2026:74869","RHSA-2026:74871","RHSA-2026:74872"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-09-28T17:36:03.648Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-28T18:46:00.688Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":28,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T19:28:16.976Z","stale":false,"partial":false}}