{"schemaVersion":3,"id":"CVE-2026-12590","aliases":["UBUNTU-CVE-2026-12590","DEBIAN-CVE-2026-12590","CGA-3g4m-wwr3-gjwc","CGA-3xcm-9wpp-hxh8","CGA-48vm-724h-27rw","CGA-546j-fr42-86q4","CGA-5cc9-m2p8-r3jp","CGA-5q9q-wcxx-v575","CGA-7f77-j3wf-g495","CGA-7m9f-6558-f9cx","CGA-84f5-w9wr-x85j","CGA-8wwx-29gc-frg8","CGA-cg8j-6h3j-q7jc","CGA-f3qm-rjwg-vr88","CGA-fc39-j33h-vf6m","CGA-h2q8-h2r6-rc5r","CGA-h7g6-8xv2-7944","CGA-h7wx-qjw8-c3q2","CGA-hg39-9wf5-6547","CGA-j9wp-hpjc-6m57","CGA-jg87-mccw-r7m7","CGA-m3j8-q6fg-p4gv","CGA-mf5v-vcrj-mv83","CGA-p7rp-3wjh-8wmc","CGA-pf69-897q-vvhj","CGA-pjqg-j6j8-6r88","CGA-q436-qv7h-f6h4","CGA-q59v-pwrf-9484","CGA-q5xq-cr46-88rr","CGA-qfhj-8983-grr5","CGA-qvpp-ff4c-pf7m","CGA-r7rf-34f7-cp96","CGA-rff2-9g8h-wfp8","CGA-rmq9-7vxf-4j65","CGA-v83r-fgmq-rf7j","CGA-v9vc-p7wh-cr7h","CGA-x2x6-5pcm-qrjc","CGA-xx5f-jmrc-4jr9","GHSA-v422-hmwv-36x6","CGA-2288-v7hp-jv6x","CGA-23cg-vmxf-mjhc","CGA-2987-mhmw-qqrh","CGA-2g4f-rr28-9j7w","CGA-2g96-q92v-f955","CGA-2j7q-vpj9-5q3g","CGA-2jgx-9vc9-h7w4","CGA-2jp6-rmvh-9mc2","CGA-2w64-4j7f-qrqw","CGA-2xc4-c9pq-59gq","CGA-339r-x6ff-32xw","CGA-358r-f3wx-wjpx","CGA-39mc-v85v-64cc","CGA-39pr-8rw5-6r94","CGA-3qf4-x24h-j3h8","CGA-3r95-wq95-4mc5","CGA-42pm-2c2j-75fv","CGA-446p-hrff-r2vw","CGA-498r-xc4j-g69m","CGA-4cgm-h3pf-3288","CGA-4hh4-vm65-4567","CGA-4qff-jxx6-2968","CGA-4vr2-c6f3-mc94","CGA-4w4f-v6xx-hh9c","CGA-523x-qrrg-jhp9","CGA-5524-3wmq-mgr3","CGA-57wv-gr34-75c2","CGA-583v-3vmm-3w48","CGA-5fqq-v6w7-m6j7","CGA-62m4-8f35-2jpx","CGA-68fv-2h9c-h3g2","CGA-6gv5-q867-253w","CGA-6pvg-34vv-rh9g","CGA-6rf5-xjw2-577h","CGA-7449-2fc3-49fx","CGA-763m-m9xg-qjxp","CGA-775p-hh6p-mpmx","CGA-779g-qj3w-cwf6","CGA-79qg-j85w-4r2m","CGA-7cjq-c4cm-cf5v","CGA-7gpf-5qp9-p7j2","CGA-7j8w-qf4v-q3hc","CGA-7pj9-rfm9-h9j6","CGA-7v67-82fp-m3j7","CGA-7w9v-rr2w-gx7m","CGA-863m-67mm-cxw4","CGA-89rq-rj4x-ggq2","CGA-8jmg-8j5x-2v95","CGA-8p59-q527-h98h","CGA-8qr2-pm2w-6hrj","CGA-8rv3-xcj7-7c39","CGA-947c-8mp7-6vw2","CGA-94f5-6ph6-c267","CGA-94wm-xv93-gp8v","CGA-9658-xcr2-qqhv","CGA-9785-j3rf-249q","CGA-9c7h-27v3-6w3v","CGA-9fj3-vq32-4fj6","CGA-9mc4-h37j-4cfm","CGA-9pq4-rq7p-wq54","CGA-9prx-m5x3-gm9f","CGA-c249-j8p7-xw93","CGA-c582-x7x9-r2v9","CGA-cg68-rmm6-5xmh","CGA-cqw5-gp2p-ch43","CGA-cr3x-vgx7-69f3","CGA-crr4-j36q-jxhr","CGA-cw95-f74g-8cp6","CGA-f559-v8mm-rghm","CGA-f5mg-rj5c-2w7q","CGA-f7mj-pmg7-qm55","CGA-fcxh-v84h-7g36","CGA-fgh2-rw6r-g7fh","CGA-fwvq-4wvx-wp6w","CGA-g28g-g944-w36r","CGA-g352-vxj6-qp8m","CGA-g5wg-6h55-8fxc","CGA-g677-pm6q-6fp5","CGA-g6w4-fr8c-22xh","CGA-g6wm-w8cv-76wm","CGA-g7q4-6w57-pj6c","CGA-gcxv-vcmw-4hc5","CGA-gp79-chv8-84p9","CGA-gpwg-66jq-cc54","CGA-gqh3-4gw2-28cg","CGA-h458-vc46-f686","CGA-h5c8-2rg3-3vp5","CGA-h5jh-v6cq-wpjf","CGA-h8wj-wvrp-22q4","CGA-hccc-3wpg-gjj9","CGA-hcxg-7wqm-3f6w","CGA-hg4j-cjcf-9m5g","CGA-hj64-pj5p-8936","CGA-hp5v-vwx3-57v2","CGA-hpjr-54mf-pq8m","CGA-hxc3-83vh-w3xq","CGA-j2f7-5gpg-53f4","CGA-j5c5-ffvc-v6wx","CGA-j744-x9cj-f7gg","CGA-jhhq-4jvx-h2cf","CGA-jr29-7wfw-7vxq","CGA-jwhp-9w7g-r55m","CGA-m2vm-9j3x-3x9f","CGA-m3rf-53wq-fxm3","CGA-m86g-4gpx-m4m5","CGA-m8mh-87g2-f8ff","CGA-mc4j-hw4p-cvw9","CGA-mh5j-7qf9-vfmw","CGA-mq22-c49m-v28x","CGA-mwjr-jxp5-5h56","CGA-mwp5-2qjf-mmg5","CGA-p2c2-3xwm-897c","CGA-p5fq-5h6h-g34m","CGA-p7fq-677x-w3pg","CGA-p7w9-86h9-xc7p","CGA-pfw3-7h33-fx3m","CGA-prmv-h9hh-6h7q","CGA-pw5m-22q4-jc23","CGA-q8jx-vcm9-hhxr","CGA-q8vq-r45p-mc5m","CGA-q9pv-655x-559m","CGA-qcvv-9wmp-hhj2","CGA-qwfg-563m-2625","CGA-r677-mw3j-8739","CGA-rg38-5v2p-5463","CGA-rm8m-q665-32jv","CGA-rm92-vxfw-ccvh","CGA-rqq6-4rrw-9rfj","CGA-rv9r-rw9v-gj72","CGA-rwj3-535c-wr7f","CGA-rwm2-838q-7vf4","CGA-rx62-mqxp-37h8","CGA-v482-9fq4-8m98","CGA-v558-m9qv-wcf9","CGA-v72x-f3v8-mf42","CGA-v8g7-5r3c-w979","CGA-v978-q4wm-h87j","CGA-vgm7-r973-gg6x","CGA-vwm4-mw72-xw5m","CGA-w46w-rvhr-pxf9","CGA-w48c-3pg4-jqvq","CGA-w4gv-x4j9-7mqh","CGA-w4h5-2v79-m78w","CGA-w4jh-h23m-7v27","CGA-w9wf-87g2-w2m9","CGA-wfch-pr34-487q","CGA-wfv7-69p3-w79q","CGA-wg95-mxx7-jjpx","CGA-wgjh-9x54-q999","CGA-wh94-3gjw-ph7j","CGA-wq4q-38fc-2624","CGA-wxf7-227j-48hv","CGA-wxr7-5679-678w","CGA-x22f-gcgx-3qg7","CGA-x248-mh9c-w67x","CGA-x5w9-ghxj-5c73","CGA-x637-6rhj-gj46","CGA-x76c-5c6p-2427","CGA-x8fx-2gcp-22xj","CGA-x93c-53jh-q3v9","CGA-xg2m-8rhx-4ch3","CGA-xm33-xv34-hfr9","CGA-xpr4-9phh-qwjp","CGA-xqrh-mfpw-g7qm","CGA-xwqq-gjwq-459f"],"status":"published","duplicateOf":null,"title":null,"description":"Impact: In body-parser versions prior to 1.20.6 (1.x line) and 2.3.0 (2.x line), when the parser is configured with an invalid limit option value such as an unparseable string or NaN, bytes.parse returns null and the request body size check is silently skipped. Applications that rely on limit as their primary safeguard against oversized request bodies will accept arbitrarily large payloads, leading to excessive memory and CPU usage and denial of service. Patches: This issue is fixed in body-parser 1.20.6 and 2.3.0. After the fix, invalid limit values throw a clear error at parser construction time instead of silently disabling enforcement, while null and undefined continue to fall back to the default limit of 100kb. Workarounds: Validate the limit value before passing it to body-parser. For example, parse the value at startup and reject any configuration where the result is null or a non-finite number.","dates":{"published":"2026-07-09T10:21:10.447Z","modified":"2026-07-09T12:06:01.554Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.9,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":5.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":5.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00412,"percentile":0.34098,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00412},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00412,"percentile":0.34098}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00412,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00412,"percentile":0.34098}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-770","name":"Allocation of Resources Without Limits or Throttling","description":"The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/770.html"}],"affected":[{"vendor":"chainguard","product":"arangodb-3.11","name":"arangodb-3.11","label":"arangodb-3.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/arangodb-3.11","purlType":"apk","versions":[{"text":"< 3.11.14.5-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.11.14.5-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"arangodb-3.12","name":"arangodb-3.12","label":"arangodb-3.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/arangodb-3.12","purlType":"apk","versions":[{"text":"< 3.12.11-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.11-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"argo-workflows-ui-3.6","name":"argo-workflows-ui-3.6","label":"argo-workflows-ui-3.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/argo-workflows-ui-3.6","purlType":"apk","versions":[{"text":"< 3.6.19-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.19-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"argo-workflows-ui-3.7","name":"argo-workflows-ui-3.7","label":"argo-workflows-ui-3.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/argo-workflows-ui-3.7","purlType":"apk","versions":[{"text":"< 3.7.17-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.17-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"argo-workflows-ui-4.0","name":"argo-workflows-ui-4.0","label":"argo-workflows-ui-4.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/argo-workflows-ui-4.0","purlType":"apk","versions":[{"text":"< 4.0.8-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 4.0.11-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.8-r0 | < 4.0.11-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"azurite","name":"azurite","label":"azurite","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/azurite","purlType":"apk","versions":[{"text":"< 3.35.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.35.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"code-server","name":"code-server","label":"code-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/code-server","purlType":"apk","versions":[{"text":"< 4.130.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.130.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.1","name":"commercial-gitlab-rails-ee-19.1","label":"commercial-gitlab-rails-ee-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.1","purlType":"apk","versions":[{"text":"< 19.1.7-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.7-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.2","name":"commercial-gitlab-rails-ee-19.2","label":"commercial-gitlab-rails-ee-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.2","purlType":"apk","versions":[{"text":"< 19.2.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.3","name":"commercial-gitlab-rails-ee-19.3","label":"commercial-gitlab-rails-ee-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.3","purlType":"apk","versions":[{"text":"< 19.3.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.1","name":"commercial-gitlab-rails-ee-fips-19.1","label":"commercial-gitlab-rails-ee-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.2","name":"commercial-gitlab-rails-ee-fips-19.2","label":"commercial-gitlab-rails-ee-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.2","purlType":"apk","versions":[{"text":"< 19.2.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.3","name":"commercial-gitlab-rails-ee-fips-19.3","label":"commercial-gitlab-rails-ee-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.3","purlType":"apk","versions":[{"text":"< 19.3.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.1","name":"gitlab-rails-ce-18.1","label":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.10","name":"gitlab-rails-ce-18.10","label":"gitlab-rails-ce-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.11","name":"gitlab-rails-ce-18.11","label":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.6","name":"gitlab-rails-ce-18.6","label":"gitlab-rails-ce-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.7","name":"gitlab-rails-ce-18.7","label":"gitlab-rails-ce-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.8","name":"gitlab-rails-ce-18.8","label":"gitlab-rails-ce-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.9","name":"gitlab-rails-ce-18.9","label":"gitlab-rails-ce-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.0","name":"gitlab-rails-ce-19.0","label":"gitlab-rails-ce-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.1","name":"gitlab-rails-ce-19.1","label":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1","purlType":"apk","versions":[{"text":"< 19.1.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.2","name":"gitlab-rails-ce-19.2","label":"gitlab-rails-ce-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.2","purlType":"apk","versions":[{"text":"< 19.2.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.3","name":"gitlab-rails-ce-19.3","label":"gitlab-rails-ce-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.3","purlType":"apk","versions":[{"text":"< 19.3.1-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.1-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.1","name":"gitlab-rails-ce-fips-18.1","label":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.10","name":"gitlab-rails-ce-fips-18.10","label":"gitlab-rails-ce-fips-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.10","purlType":"apk","versions":[{"text":"< 18.10.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.10.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.11","name":"gitlab-rails-ce-fips-18.11","label":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11","purlType":"apk","versions":[{"text":"< 18.11.12-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.12-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.6","name":"gitlab-rails-ce-fips-18.6","label":"gitlab-rails-ce-fips-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.7","name":"gitlab-rails-ce-fips-18.7","label":"gitlab-rails-ce-fips-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.8","name":"gitlab-rails-ce-fips-18.8","label":"gitlab-rails-ce-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.9","name":"gitlab-rails-ce-fips-18.9","label":"gitlab-rails-ce-fips-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.9","purlType":"apk","versions":[{"text":"< 18.9.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.0","name":"gitlab-rails-ce-fips-19.0","label":"gitlab-rails-ce-fips-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.0","purlType":"apk","versions":[{"text":"< 19.0.9-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.9-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.1","name":"gitlab-rails-ce-fips-19.1","label":"gitlab-rails-ce-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.1","purlType":"apk","versions":[{"text":"< 19.1.7-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.7-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.2","name":"gitlab-rails-ce-fips-19.2","label":"gitlab-rails-ce-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.2","purlType":"apk","versions":[{"text":"< 19.2.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.3","name":"gitlab-rails-ce-fips-19.3","label":"gitlab-rails-ce-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.3","purlType":"apk","versions":[{"text":"< 19.3.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.1-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"json-server","name":"json-server","label":"json-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/json-server","purlType":"apk","versions":[{"text":"< 0.17.4-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.17.4-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"jupyter-base-notebook","name":"jupyter-base-notebook","label":"jupyter-base-notebook","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/jupyter-base-notebook","purlType":"apk","versions":[{"text":"< 7.6.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2","name":"kibana-9.2","label":"kibana-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2","purlType":"apk","versions":[{"text":"< 9.2.8-r18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r18","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2-iamguarded","name":"kibana-9.2-iamguarded","label":"kibana-9.2-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2-iamguarded","purlType":"apk","versions":[{"text":"< 9.2.8-r18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r18","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3","name":"kibana-9.3","label":"kibana-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3","purlType":"apk","versions":[{"text":"< 9.3.8-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.8-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3-iamguarded","name":"kibana-9.3-iamguarded","label":"kibana-9.3-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3-iamguarded","purlType":"apk","versions":[{"text":"< 9.3.8-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.8-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.4","name":"kibana-9.4","label":"kibana-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.4","purlType":"apk","versions":[{"text":"< 9.4.4-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.4-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.4-iamguarded","name":"kibana-9.4-iamguarded","label":"kibana-9.4-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.4-iamguarded","purlType":"apk","versions":[{"text":"< 9.4.4-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.4-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-centraldashboard","name":"kubeflow-centraldashboard","label":"kubeflow-centraldashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-centraldashboard","purlType":"apk","versions":[{"text":"< 1.10.0-r25","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.10.0-r25","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-apiserver","name":"kubeflow-pipelines-apiserver","label":"kubeflow-pipelines-apiserver","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-apiserver","purlType":"apk","versions":[{"text":"< 2.17.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.2-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-frontend","name":"kubeflow-pipelines-frontend","label":"kubeflow-pipelines-frontend","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-frontend","purlType":"apk","versions":[{"text":"< 2.17.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-metadata-writer-compat","name":"kubeflow-pipelines-metadata-writer-compat","label":"kubeflow-pipelines-metadata-writer-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-metadata-writer-compat","purlType":"apk","versions":[{"text":"< 2.17.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.2-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubescape-grype-offline-db","name":"kubescape-grype-offline-db","label":"kubescape-grype-offline-db","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubescape-grype-offline-db","purlType":"apk","versions":[{"text":"< 0_git20250804-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0_git20250804-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-2-worker","name":"langfuse-2-worker","label":"langfuse-2-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-2-worker","purlType":"apk","versions":[{"text":"< 2.95.12-r37","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.95.12-r37","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-3-compat","name":"langfuse-3-compat","label":"langfuse-3-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-3-compat","purlType":"apk","versions":[{"text":"< 3.225.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-3-worker","name":"langfuse-3-worker","label":"langfuse-3-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-3-worker","purlType":"apk","versions":[{"text":"< 3.224.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.224.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-2-worker","name":"langfuse-fips-2-worker","label":"langfuse-fips-2-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-2-worker","purlType":"apk","versions":[{"text":"< 2.95.12-r41","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.95.12-r41","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-3-worker","name":"langfuse-fips-3-worker","label":"langfuse-fips-3-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-3-worker","purlType":"apk","versions":[{"text":"< 3.222.0-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.224.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.222.0-r0 | < 3.224.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2","name":"opensearch-dashboards-2","label":"opensearch-dashboards-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2","purlType":"apk","versions":[{"text":"< 2.19.6-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.6-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips","name":"opensearch-dashboards-2-fips","label":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips","purlType":"apk","versions":[{"text":"< 2.19.5-r22","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.5-r22","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pelias-api","name":"pelias-api","label":"pelias-api","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pelias-api","purlType":"apk","versions":[{"text":"< 7.8.0-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.8.0-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"redisinsight","name":"redisinsight","label":"redisinsight","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/redisinsight","purlType":"apk","versions":[{"text":"< 3.8.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"sqlpad","name":"sqlpad","label":"sqlpad","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/sqlpad","purlType":"apk","versions":[{"text":"< 7.5.7-r29","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.7-r29","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tensorflow-gpu-jupyter","name":"tensorflow-gpu-jupyter","label":"tensorflow-gpu-jupyter","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tensorflow-gpu-jupyter","purlType":"apk","versions":[{"text":"< 2.21.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.21.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-js-executor-fips","name":"thingsboard-tb-js-executor-fips","label":"thingsboard-tb-js-executor-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-js-executor-fips","purlType":"apk","versions":[{"text":"< 4.3.1.3-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.3-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-web-ui-fips","name":"thingsboard-tb-web-ui-fips","label":"thingsboard-tb-web-ui-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-web-ui-fips","purlType":"apk","versions":[{"text":"< 4.3.1.3-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.3-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tileserver-gl","name":"tileserver-gl","label":"tileserver-gl","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tileserver-gl","purlType":"apk","versions":[{"text":"< 5.6.0-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.6.0-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tileserver-gl-fips","name":"tileserver-gl-fips","label":"tileserver-gl-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tileserver-gl-fips","purlType":"apk","versions":[{"text":"< 5.6.0-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.6.0-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"unleash","name":"unleash","label":"unleash","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/unleash","purlType":"apk","versions":[{"text":"< 8.0.3-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.3-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"unleash-fips","name":"unleash-fips","label":"unleash-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/unleash-fips","purlType":"apk","versions":[{"text":"< 8.0.3-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.3-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"unleash-proxy","name":"unleash-proxy","label":"unleash-proxy","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/unleash-proxy","purlType":"apk","versions":[{"text":"< 1.4.19-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.19-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard","name":"wazuh-dashboard","label":"wazuh-dashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard","purlType":"apk","versions":[{"text":"< 4.14.6-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.6-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-fips","name":"wazuh-dashboard-fips","label":"wazuh-dashboard-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-fips","purlType":"apk","versions":[{"text":"< 4.14.6-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.6-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-security-plugin","name":"wazuh-dashboard-security-plugin","label":"wazuh-dashboard-security-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin","purlType":"apk","versions":[{"text":"< 4.14.7-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-security-plugin-fips","name":"wazuh-dashboard-security-plugin-fips","label":"wazuh-dashboard-security-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r14","eol":null,"hubHref":null},{"vendor":"wolfi","product":"argo-workflows-ui-3.7","name":"argo-workflows-ui-3.7","label":"argo-workflows-ui-3.7","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/argo-workflows-ui-3.7","purlType":"apk","versions":[{"text":"< 3.7.17-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.17-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"argo-workflows-ui-4.0","name":"argo-workflows-ui-4.0","label":"argo-workflows-ui-4.0","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/argo-workflows-ui-4.0","purlType":"apk","versions":[{"text":"< 4.0.8-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 4.0.11-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.8-r0 | < 4.0.11-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"code-server","name":"code-server","label":"code-server","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/code-server","purlType":"apk","versions":[{"text":"< 4.130.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.130.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"json-server","name":"json-server","label":"json-server","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/json-server","purlType":"apk","versions":[{"text":"< 0.17.4-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.17.4-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"jupyter-base-notebook","name":"jupyter-base-notebook","label":"jupyter-base-notebook","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/jupyter-base-notebook","purlType":"apk","versions":[{"text":"< 7.6.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6.3-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-centraldashboard","name":"kubeflow-centraldashboard","label":"kubeflow-centraldashboard","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-centraldashboard","purlType":"apk","versions":[{"text":"< 1.10.0-r25","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.10.0-r25","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-apiserver","name":"kubeflow-pipelines-apiserver","label":"kubeflow-pipelines-apiserver","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-apiserver","purlType":"apk","versions":[{"text":"< 2.17.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.2-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-frontend","name":"kubeflow-pipelines-frontend","label":"kubeflow-pipelines-frontend","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-frontend","purlType":"apk","versions":[{"text":"< 2.17.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-metadata-writer-compat","name":"kubeflow-pipelines-metadata-writer-compat","label":"kubeflow-pipelines-metadata-writer-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-metadata-writer-compat","purlType":"apk","versions":[{"text":"< 2.17.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.2-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"langfuse-3-compat","name":"langfuse-3-compat","label":"langfuse-3-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/langfuse-3-compat","purlType":"apk","versions":[{"text":"< 3.225.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.7-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"langfuse-3-worker","name":"langfuse-3-worker","label":"langfuse-3-worker","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/langfuse-3-worker","purlType":"apk","versions":[{"text":"< 3.224.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.224.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"sqlpad","name":"sqlpad","label":"sqlpad","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/sqlpad","purlType":"apk","versions":[{"text":"< 7.5.7-r29","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.7-r29","eol":null,"hubHref":null},{"vendor":"wolfi","product":"tileserver-gl","name":"tileserver-gl","label":"tileserver-gl","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/tileserver-gl","purlType":"apk","versions":[{"text":"< 5.6.0-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.6.0-r10","eol":null,"hubHref":null},{"vendor":"body-parser","product":"body-parser","name":"body-parser","label":"body-parser","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.20.6","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.0.0, < 2.3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.6 | ≥ 2.0.0, < 2.3.0","eol":null,"hubHref":"/vendor/body-parser/body-parser"},{"vendor":"debian","product":"node-body-parser","name":"node-body-parser","label":"node-body-parser","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/node-body-parser","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.3.0+~1.19.6-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.3.0+~1.19.6-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"node-body-parser","name":"node-body-parser","label":"node-body-parser","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/node-body-parser","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"Npm","product":"body-parser","name":"body-parser","label":"body-parser","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/body-parser","purlType":"npm","versions":[{"text":"< 1.20.6","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.0.0, < 2.3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.6 | ≥ 2.0.0, < 2.3.0","eol":null,"hubHref":null},{"vendor":"openjsf","product":"body-parser","name":"body-parser","label":"body-parser","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.20.6","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.0.0, < 2.3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.6 | ≥ 2.0.0, < 2.3.0","eol":null,"hubHref":"/vendor/openjsf/body-parser"}],"affectedCount":88,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6","label":"github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6","hostname":"github.com","tags":["REPORT","Advisory","WEB","Mitigation","Patch","Vendor Advisory"]},{"url":"https://cna.openjsf.org/security-advisories.html","label":"cna.openjsf.org/security-advisories.html","hostname":"cna.openjsf.org","tags":["REPORT","Advisory","WEB","Vendor Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-12590","label":"ubuntu.com/security/CVE-2026-12590","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-12590","label":"www.cve.org/CVERecord?id=CVE-2026-12590","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-12590","label":"security-tracker.debian.org/tracker/CVE-2026-12590","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/12xxx/CVE-2026-12590.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/12xxx/CVE-2026-12590.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12590","label":"nvd.nist.gov/vuln/detail/CVE-2026-12590","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/expressjs/body-parser/pull/698","label":"github.com/expressjs/body-parser/pull/698","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/expressjs/body-parser/pull/741","label":"github.com/expressjs/body-parser/pull/741","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/expressjs/body-parser/commit/2322e111cc321413ec2b7b76d01be533d3de9d7d","label":"github.com/expressjs/body-parser/commit/2322e111cc321413ec2b7b76d01be533d3de9d7d","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/expressjs/body-parser/commit/3492672eee593d5c158f239b6e9115498a5dbeac","label":"github.com/expressjs/body-parser/commit/3492672eee593d5c158f239b6e9115498a5dbeac","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/expressjs/body-parser","label":"github.com/expressjs/body-parser","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/expressjs/body-parser/releases/tag/1.20.6","label":"github.com/expressjs/body-parser/releases/tag/1.20.6","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/expressjs/body-parser/releases/tag/v2.3.0","label":"github.com/expressjs/body-parser/releases/tag/v2.3.0","hostname":"github.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-MF45-RCHG-PQ3P"]},"timeline":[{"kind":"published","date":"2026-07-09T10:21:10.447Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-07-09T12:06:01.554Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":24,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T15:34:42.714Z","stale":false,"partial":false}}