[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-15157":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":27,"aliases":28,"duplicate_of":9,"upstream":110,"downstream":111,"duplicates":120,"related":121,"reserved_at":9,"published_at":126,"modified_at":127,"state":128,"summary":129,"references_raw":138,"kevs":207,"epss":208,"epss_history":211,"metrics":364,"affected":384},"CVE-2026-15157","undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type header on the HTTP/1.1 dispatcher. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, an application that passes a hand-rolled blob-like body (via request, stream, pipeline, or dispatch) whose type is derived from untrusted input allows an attacker to inject CRLF sequences and append arbitrary HTTP headers, potentially smuggling a second request past the upstream. Native Blob objects are safe because their constructor strips CRLF from the type, and fetch is unaffected because it validates headers, but ecosystem libraries that build duck-typed blob shapes from user input can reach the vulnerable path. This is the same defect class as CVE-2022-35948 and CVE-2026-1527, on a header sink that the earlier fixes did not cover. The issue is fixed in undici 6.28.0, 7.29.0, and 8.9.0.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-93","Improper Neutralization of CRLF Sequences ('CRLF Injection')","The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.","weakness","Draft","Base",[19,23],{"id":20,"name":21,"techniques":22},"CAPEC-15","Command Delimiters",[],{"id":24,"name":25,"techniques":26},"CAPEC-81","Web Server Logs Tampering",[],[],[29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109],"UBUNTU-CVE-2026-15157","DEBIAN-CVE-2026-15157","GHSA-m8rv-5g2x-5cg5","CGA-35j8-38pp-5vj7","CGA-4rqg-228w-jc68","CGA-52x3-r54r-c9pw","CGA-5ggw-jhrm-g9jg","CGA-64wf-hw6h-6x9f","CGA-6h3g-xrqr-hxx2","CGA-7xc8-4wr6-wj7j","CGA-8h3v-8mj4-j4p4","CGA-9j4q-4p64-v96f","CGA-9wp7-5v4h-m3hq","CGA-cvq9-hq52-c66w","CGA-fcw4-ggmj-537g","CGA-g66r-366x-9qp6","CGA-g96w-h9pj-j289","CGA-h438-6mpc-2738","CGA-hjw4-5v86-8g6v","CGA-j2p3-mxxh-6qhc","CGA-m597-853x-8m4f","CGA-mvff-q6vr-f635","CGA-2pmg-hxx9-vx4w","CGA-2q4f-jgvx-w75r","CGA-2xrv-w4p3-j7c8","CGA-3248-gq3v-qcfw","CGA-35g6-c982-hv6w","CGA-3gmp-24jh-xwwr","CGA-3q54-h97c-vxf2","CGA-47c2-pjrh-mqc6","CGA-47m7-88x3-2x6m","CGA-5hcg-7m8p-29w2","CGA-74hj-q2qc-8h5w","CGA-75rh-g7gf-8hpq","CGA-9q6f-x97x-pwq8","CGA-9x8q-9gfq-32c4","CGA-c444-pg5j-mcr8","CGA-c83g-hvcc-f33f","CGA-fgq8-5x38-4g72","CGA-gpx4-3qp6-x8qg","CGA-hrq7-v9m4-g2qj","CGA-j26p-h973-x23p","CGA-j6vp-fvwx-386j","CGA-jcwx-7w84-78gg","CGA-m2c3-wrc8-5r2x","CGA-m82x-cpj8-55x7","CGA-mg5q-8qjx-gqfp","CGA-mphq-fvv5-r77v","CGA-mqc7-8pc9-qqg8","CGA-p22h-f5xw-w2jp","CGA-phj5-wwrg-r2mr","CGA-q3q5-9hwm-c9c2","CGA-qrx5-xp4g-gv4p","CGA-qxxv-7v5v-3748","CGA-rr4m-349c-5hch","CGA-rr7p-fwhw-p3c8","CGA-vmph-vgwq-p3rg","CGA-vrhc-rvcc-rcfq","CGA-wcv2-3jfp-xqqq","CGA-whrr-p5pr-9rpg","CGA-wpg7-6494-9rqr","CGA-wqfr-p79g-xh3j","CGA-x26w-7j9q-c2mm","CGA-x4r3-rpgm-59gh","CGA-x4r9-5vjh-7hr6","CGA-x5q6-69mr-vf67","CGA-x5rx-fhgm-c7xg","CGA-xq86-j3mw-4j2p","CGA-xvjw-fh2w-m7g3","CGA-587r-r4h8-fhqx","CGA-7984-84x2-c2mp","CGA-frr6-3p2p-7558","CGA-pgp8-r2r8-fxhv","CGA-5gvg-jrqj-h58r","CGA-7cmq-4ch4-m9jc","CGA-6r6p-49m3-hmjx","CGA-73p2-7pc9-j8cm","CGA-j2cf-mhf6-9wqc","CGA-jh48-9jp5-2r25","CGA-hx93-9446-mq6p","CGA-r7pj-x3w6-9m53",[],[112,114,116,118],{"_key":113},"RHSA-2026:48273",{"_key":115},"RHSA-2026:48537",{"_key":117},"SUSE-SU-2026:4248-1",{"_key":119},"SUSE-SU-2026:4261-1",[],[122,123,124],{"_key":117},{"_key":119},{"_key":125},"CGA-VPQ3-H495-G2VC","2026-07-29T21:17:44.740Z","2026-07-30T15:18:02.970Z","Analyzed",{"cisa_kev":130,"cisa_ransomware":130,"cisa_vendor":9,"epss_severity":131,"epss_score":132,"severity":133,"severity_score":134,"severity_version":135,"severity_source":136,"severity_vector":137,"severity_status":128},false,"low",0.00193,"medium",5.4,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",[139,153,157,161,165,170,174,178,182,186,191,195,199,203],{"url":140,"sources":141,"tags":147},"https://github.com/nodejs/undici/security/advisories/GHSA-m8rv-5g2x-5cg5",[142,136,143,144,145,146],"cve.org","osv_ubuntu","osv_npm","osv_wolfi","osv_chainguard",[148,149,150,151,152],"Mitigation","Vendor Advisory","REPORT","WEB","Advisory",{"url":154,"sources":155,"tags":156},"https://cna.openjsf.org/security-advisories.html",[142,136,143,144,145,146],[149,150,151,152],{"url":158,"sources":159,"tags":160},"https://ubuntu.com/security/CVE-2026-15157",[143],[150],{"url":162,"sources":163,"tags":164},"https://www.cve.org/CVERecord?id=CVE-2026-15157",[143],[150],{"url":166,"sources":167,"tags":169},"https://security-tracker.debian.org/tracker/CVE-2026-15157",[168],"osv_debian",[152],{"url":171,"sources":172,"tags":173},"https://nvd.nist.gov/vuln/detail/CVE-2026-15157",[144,145,146],[152],{"url":175,"sources":176,"tags":177},"https://github.com/nodejs/undici/commit/33928bc24f742ea8422ed90d17f2e0cc83e4d09d",[144],[151],{"url":179,"sources":180,"tags":181},"https://github.com/nodejs/undici/commit/740a0b7c173cb4a83a5b693e96e8f3a116cfc400",[144],[151],{"url":183,"sources":184,"tags":185},"https://github.com/nodejs/undici/commit/7d3cf924c262c486bc77f951348f4e5c847b7b42",[144],[151],{"url":187,"sources":188,"tags":189},"https://github.com/nodejs/undici",[144],[190],"PACKAGE",{"url":192,"sources":193,"tags":194},"https://github.com/nodejs/undici/releases/tag/v6.28.0",[144],[151],{"url":196,"sources":197,"tags":198},"https://github.com/nodejs/undici/releases/tag/v7.29.0",[144],[151],{"url":200,"sources":201,"tags":202},"https://github.com/nodejs/undici/releases/tag/v8.9.0",[144],[151],{"url":204,"sources":205,"tags":206},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/15xxx/CVE-2026-15157.json",[145,146],[152],[],{"date":209,"score":132,"percentile":210},"2026-09-19",0.09252,[212,216,219,222,225,228,232,236,239,242,245,248,251,253,256,259,262,265,267,270,273,276,279,282,284,287,290,293,296,299,302,305,308,311,314,317,320,322,325,328,331,333,336,339,342,345,348,351,354,357,360,363],{"date":213,"score":214,"percentile":215},"2026-07-30",0.00142,0.03979,{"date":217,"score":214,"percentile":218},"2026-07-31",0.0399,{"date":220,"score":214,"percentile":221},"2026-08-01",0.03983,{"date":223,"score":214,"percentile":224},"2026-08-02",0.03976,{"date":226,"score":214,"percentile":227},"2026-08-03",0.03974,{"date":229,"score":230,"percentile":231},"2026-08-04",0.00153,0.04961,{"date":233,"score":234,"percentile":235},"2026-08-05",0.00154,0.05049,{"date":237,"score":234,"percentile":238},"2026-08-06",0.05043,{"date":240,"score":234,"percentile":241},"2026-08-07",0.05041,{"date":243,"score":234,"percentile":244},"2026-08-08",0.05033,{"date":246,"score":234,"percentile":247},"2026-08-09",0.05039,{"date":249,"score":234,"percentile":250},"2026-08-10",0.05046,{"date":252,"score":234,"percentile":238},"2026-08-11",{"date":254,"score":234,"percentile":255},"2026-08-12",0.05052,{"date":257,"score":234,"percentile":258},"2026-08-13",0.05061,{"date":260,"score":234,"percentile":261},"2026-08-14",0.05084,{"date":263,"score":234,"percentile":264},"2026-08-15",0.05068,{"date":266,"score":234,"percentile":244},"2026-08-16",{"date":268,"score":234,"percentile":269},"2026-08-17",0.05048,{"date":271,"score":234,"percentile":272},"2026-08-18",0.05057,{"date":274,"score":234,"percentile":275},"2026-08-19",0.05071,{"date":277,"score":234,"percentile":278},"2026-08-20",0.05078,{"date":280,"score":234,"percentile":281},"2026-08-21",0.05072,{"date":283,"score":234,"percentile":281},"2026-08-22",{"date":285,"score":234,"percentile":286},"2026-08-23",0.05047,{"date":288,"score":132,"percentile":289},"2026-08-24",0.08946,{"date":291,"score":132,"percentile":292},"2026-08-25",0.08945,{"date":294,"score":132,"percentile":295},"2026-08-26",0.08972,{"date":297,"score":132,"percentile":298},"2026-08-27",0.08973,{"date":300,"score":132,"percentile":301},"2026-08-28",0.08979,{"date":303,"score":132,"percentile":304},"2026-08-29",0.08983,{"date":306,"score":132,"percentile":307},"2026-08-30",0.09003,{"date":309,"score":132,"percentile":310},"2026-08-31",0.09002,{"date":312,"score":132,"percentile":313},"2026-09-01",0.09014,{"date":315,"score":132,"percentile":316},"2026-09-02",0.09001,{"date":318,"score":132,"percentile":319},"2026-09-03",0.08984,{"date":321,"score":132,"percentile":301},"2026-09-04",{"date":323,"score":132,"percentile":324},"2026-09-05",0.08986,{"date":326,"score":132,"percentile":327},"2026-09-06",0.09011,{"date":329,"score":132,"percentile":330},"2026-09-07",0.08995,{"date":332,"score":132,"percentile":316},"2026-09-08",{"date":334,"score":132,"percentile":335},"2026-09-09",0.09055,{"date":337,"score":132,"percentile":338},"2026-09-10",0.09039,{"date":340,"score":132,"percentile":341},"2026-09-11",0.09031,{"date":343,"score":132,"percentile":344},"2026-09-12",0.09092,{"date":346,"score":132,"percentile":347},"2026-09-13",0.09081,{"date":349,"score":132,"percentile":350},"2026-09-14",0.09094,{"date":352,"score":132,"percentile":353},"2026-09-15",0.09138,{"date":355,"score":132,"percentile":356},"2026-09-16",0.09182,{"date":358,"score":132,"percentile":359},"2026-09-17",0.09212,{"date":361,"score":132,"percentile":362},"2026-09-18",0.09262,{"date":209,"score":132,"percentile":210},[365,371,374,376,378,380,382],{"source":142,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":366,"cvss_v4_0":9},{"baseScore":367,"baseSeverity":368,"vectorString":369,"impactScore":367,"exploitabilityScore":370},4.2,"MEDIUM","CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",4.1,{"source":136,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":372,"cvss_v4_0":9},{"baseScore":134,"baseSeverity":368,"vectorString":137,"impactScore":367,"exploitabilityScore":373},7.2,{"source":143,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":375,"cvss_v4_0":9},{"baseScore":134,"baseSeverity":9,"vectorString":137,"impactScore":367,"exploitabilityScore":373},{"source":168,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":377,"cvss_v4_0":9},{"baseScore":134,"baseSeverity":9,"vectorString":137,"impactScore":367,"exploitabilityScore":373},{"source":144,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":379,"cvss_v4_0":9},{"baseScore":367,"baseSeverity":9,"vectorString":369,"impactScore":367,"exploitabilityScore":370},{"source":145,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":381,"cvss_v4_0":9},{"baseScore":367,"baseSeverity":9,"vectorString":369,"impactScore":367,"exploitabilityScore":370},{"source":146,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":383,"cvss_v4_0":9},{"baseScore":367,"baseSeverity":9,"vectorString":369,"impactScore":367,"exploitabilityScore":370},[385,397,403,408,412,416,420,424,428,434,438,442,446,450,456,460,464,468,474,480,484,490,494,500,504,510,514,520,526,532,538,550,556,562,568,573,576,579,582,585,588,591,596,599,602,605,616,622,640,651],{"ecosystem":386,"name":387,"vendor":388,"product":387,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":387,"source":9,"versions":390},"Chainguard","actions-runner","chainguard","apk",[391],{"version":392,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":395,"version_end_type":396,"fixed_in":9},"lt2_336_0_r5",true,"ecosystem","2.336.0-r5","excluding",{"ecosystem":386,"name":398,"vendor":388,"product":398,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":398,"source":9,"versions":399},"code-server",[400],{"version":401,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":402,"version_end_type":396,"fixed_in":9},"lt4_130_0_r5","4.130.0-r5",{"ecosystem":386,"name":404,"vendor":388,"product":404,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":404,"source":9,"versions":405},"commercial-gitlab-rails-ee-19.1",[406],{"version":407,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"ecosystem":386,"name":409,"vendor":388,"product":409,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":409,"source":9,"versions":410},"commercial-gitlab-rails-ee-19.2",[411],{"version":407,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":386,"name":413,"vendor":388,"product":413,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":413,"source":9,"versions":414},"commercial-gitlab-rails-ee-19.3",[415],{"version":407,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":386,"name":417,"vendor":388,"product":417,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":417,"source":9,"versions":418},"commercial-gitlab-rails-ee-fips-19.1",[419],{"version":407,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":386,"name":421,"vendor":388,"product":421,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":421,"source":9,"versions":422},"commercial-gitlab-rails-ee-fips-19.2",[423],{"version":407,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":386,"name":425,"vendor":388,"product":425,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":425,"source":9,"versions":426},"commercial-gitlab-rails-ee-fips-19.3",[427],{"version":407,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":386,"name":429,"vendor":388,"product":429,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":429,"source":9,"versions":430},"kibana-8.19",[431],{"version":432,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":433,"version_end_type":396,"fixed_in":9},"lt8_19_20_r2","8.19.20-r2",{"ecosystem":386,"name":435,"vendor":388,"product":435,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":435,"source":9,"versions":436},"kibana-8.19-bitnami",[437],{"version":432,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":433,"version_end_type":396,"fixed_in":9},{"ecosystem":386,"name":439,"vendor":388,"product":439,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":439,"source":9,"versions":440},"kibana-8.19-iamguarded",[441],{"version":432,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":433,"version_end_type":396,"fixed_in":9},{"ecosystem":386,"name":443,"vendor":388,"product":443,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":443,"source":9,"versions":444},"kibana-9.1",[445],{"version":407,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":386,"name":447,"vendor":388,"product":447,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":447,"source":9,"versions":448},"kibana-9.1-iamguarded",[449],{"version":407,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":386,"name":451,"vendor":388,"product":451,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":451,"source":9,"versions":452},"kibana-9.2",[453],{"version":454,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":455,"version_end_type":396,"fixed_in":9},"lt9_2_8_r19","9.2.8-r19",{"ecosystem":386,"name":457,"vendor":388,"product":457,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":457,"source":9,"versions":458},"kibana-9.2-iamguarded",[459],{"version":454,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":455,"version_end_type":396,"fixed_in":9},{"ecosystem":386,"name":461,"vendor":388,"product":461,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":461,"source":9,"versions":462},"kibana-9.3",[463],{"version":407,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":386,"name":465,"vendor":388,"product":465,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":465,"source":9,"versions":466},"kibana-9.3-iamguarded",[467],{"version":407,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":386,"name":469,"vendor":388,"product":469,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":469,"source":9,"versions":470},"langfuse-3",[471],{"version":472,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":473,"version_end_type":396,"fixed_in":9},"lt3_225_0_r3","3.225.0-r3",{"ecosystem":386,"name":475,"vendor":388,"product":475,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":475,"source":9,"versions":476},"langfuse-3-compat",[477],{"version":478,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":479,"version_end_type":396,"fixed_in":9},"lt3_225_7_r6","3.225.7-r6",{"ecosystem":386,"name":481,"vendor":388,"product":481,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":481,"source":9,"versions":482},"langfuse-3-worker",[483],{"version":472,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":473,"version_end_type":396,"fixed_in":9},{"ecosystem":386,"name":485,"vendor":388,"product":485,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":485,"source":9,"versions":486},"langfuse-4",[487],{"version":488,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":489,"version_end_type":396,"fixed_in":9},"lt4_3_1_r3","4.3.1-r3",{"ecosystem":386,"name":491,"vendor":388,"product":491,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":491,"source":9,"versions":492},"langfuse-4-worker",[493],{"version":488,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":489,"version_end_type":396,"fixed_in":9},{"ecosystem":386,"name":495,"vendor":388,"product":495,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":495,"source":9,"versions":496},"langfuse-fips-3",[497],{"version":498,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":499,"version_end_type":396,"fixed_in":9},"lt3_224_3_r9","3.224.3-r9",{"ecosystem":386,"name":501,"vendor":388,"product":501,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":501,"source":9,"versions":502},"langfuse-fips-3-worker",[503],{"version":498,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":499,"version_end_type":396,"fixed_in":9},{"ecosystem":386,"name":505,"vendor":388,"product":505,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":505,"source":9,"versions":506},"langfuse-fips-4",[507],{"version":508,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":509,"version_end_type":396,"fixed_in":9},"lt4_4_0_r0","4.4.0-r0",{"ecosystem":386,"name":511,"vendor":388,"product":511,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":511,"source":9,"versions":512},"langfuse-fips-4-worker",[513],{"version":508,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":509,"version_end_type":396,"fixed_in":9},{"ecosystem":386,"name":515,"vendor":388,"product":515,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":515,"source":9,"versions":516},"npm-12",[517],{"version":518,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":519,"version_end_type":396,"fixed_in":9},"lt12_0_2_r2","12.0.2-r2",{"ecosystem":386,"name":521,"vendor":388,"product":521,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":521,"source":9,"versions":522},"pelias-api",[523],{"version":524,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":525,"version_end_type":396,"fixed_in":9},"lt7_8_0_r7","7.8.0-r7",{"ecosystem":386,"name":527,"vendor":388,"product":527,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":527,"source":9,"versions":528},"prism",[529],{"version":530,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":531,"version_end_type":396,"fixed_in":9},"lt5_16_0_r2","5.16.0-r2",{"ecosystem":386,"name":533,"vendor":388,"product":533,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":533,"source":9,"versions":534},"pulumi-language-nodejs",[535],{"version":536,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":537,"version_end_type":396,"fixed_in":9},"lt3_256_0_r1","3.256.0-r1",{"ecosystem":386,"name":539,"vendor":388,"product":539,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":539,"source":9,"versions":540},"renovate",[541,544,547],{"version":542,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":543,"version_end_type":396,"fixed_in":9},"lt44_23_3_r1","44.23.3-r1",{"version":545,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":546,"version_end_type":396,"fixed_in":9},"lt44_11_3_r0","44.11.3-r0",{"version":548,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":549,"version_end_type":396,"fixed_in":9},"lt44_11_4_r0","44.11.4-r0",{"ecosystem":386,"name":551,"vendor":388,"product":551,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":551,"source":9,"versions":552},"saf",[553],{"version":554,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":555,"version_end_type":396,"fixed_in":9},"lt1_7_0_r0","1.7.0-r0",{"ecosystem":386,"name":557,"vendor":388,"product":557,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":557,"source":9,"versions":558},"vitess-24",[559],{"version":560,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":561,"version_end_type":396,"fixed_in":9},"lt24_0_2_r10","24.0.2-r10",{"ecosystem":386,"name":563,"vendor":388,"product":563,"cpe_part":9,"purl_type":389,"purl_namespace":388,"purl_name":563,"source":9,"versions":564},"vitess-24-compat",[565],{"version":566,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":567,"version_end_type":396,"fixed_in":9},"lt24_0_3_r7","24.0.3-r7",{"ecosystem":569,"name":398,"vendor":570,"product":398,"cpe_part":9,"purl_type":389,"purl_namespace":570,"purl_name":398,"source":9,"versions":571},"Wolfi","wolfi",[572],{"version":401,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":402,"version_end_type":396,"fixed_in":9},{"ecosystem":569,"name":469,"vendor":570,"product":469,"cpe_part":9,"purl_type":389,"purl_namespace":570,"purl_name":469,"source":9,"versions":574},[575],{"version":472,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":473,"version_end_type":396,"fixed_in":9},{"ecosystem":569,"name":475,"vendor":570,"product":475,"cpe_part":9,"purl_type":389,"purl_namespace":570,"purl_name":475,"source":9,"versions":577},[578],{"version":478,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":479,"version_end_type":396,"fixed_in":9},{"ecosystem":569,"name":481,"vendor":570,"product":481,"cpe_part":9,"purl_type":389,"purl_namespace":570,"purl_name":481,"source":9,"versions":580},[581],{"version":472,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":473,"version_end_type":396,"fixed_in":9},{"ecosystem":569,"name":515,"vendor":570,"product":515,"cpe_part":9,"purl_type":389,"purl_namespace":570,"purl_name":515,"source":9,"versions":583},[584],{"version":518,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":519,"version_end_type":396,"fixed_in":9},{"ecosystem":569,"name":527,"vendor":570,"product":527,"cpe_part":9,"purl_type":389,"purl_namespace":570,"purl_name":527,"source":9,"versions":586},[587],{"version":530,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":531,"version_end_type":396,"fixed_in":9},{"ecosystem":569,"name":533,"vendor":570,"product":533,"cpe_part":9,"purl_type":389,"purl_namespace":570,"purl_name":533,"source":9,"versions":589},[590],{"version":536,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":537,"version_end_type":396,"fixed_in":9},{"ecosystem":569,"name":539,"vendor":570,"product":539,"cpe_part":9,"purl_type":389,"purl_namespace":570,"purl_name":539,"source":9,"versions":592},[593,594,595],{"version":542,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":543,"version_end_type":396,"fixed_in":9},{"version":545,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":546,"version_end_type":396,"fixed_in":9},{"version":548,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":549,"version_end_type":396,"fixed_in":9},{"ecosystem":569,"name":551,"vendor":570,"product":551,"cpe_part":9,"purl_type":389,"purl_namespace":570,"purl_name":551,"source":9,"versions":597},[598],{"version":554,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":555,"version_end_type":396,"fixed_in":9},{"ecosystem":569,"name":557,"vendor":570,"product":557,"cpe_part":9,"purl_type":389,"purl_namespace":570,"purl_name":557,"source":9,"versions":600},[601],{"version":560,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":561,"version_end_type":396,"fixed_in":9},{"ecosystem":569,"name":563,"vendor":570,"product":563,"cpe_part":9,"purl_type":389,"purl_namespace":570,"purl_name":563,"source":9,"versions":603},[604],{"version":566,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":567,"version_end_type":396,"fixed_in":9},{"ecosystem":606,"name":607,"vendor":608,"product":607,"cpe_part":9,"purl_type":609,"purl_namespace":608,"purl_name":607,"source":9,"versions":610},"Debian","node-undici","debian","deb",[611,612,613],{"version":407,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":407,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":614,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":615,"version_end_type":396,"fixed_in":9},"lt8_9_0+dfsg+~cs3_2_0_1","8.9.0+dfsg+~cs3.2.0-1",{"ecosystem":617,"name":607,"vendor":618,"product":607,"cpe_part":9,"purl_type":609,"purl_namespace":618,"purl_name":607,"source":9,"versions":619},"Ubuntu","ubuntu",[620,621],{"version":407,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":407,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":623,"vendor":624,"product":623,"cpe_part":625,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":626},"undici","nodejs","a",[627,631,636],{"version":628,"is_range":393,"range_type":629,"version_start":9,"version_start_type":9,"version_end":630,"version_end_type":396,"fixed_in":9},"lt6.28.0","cpe","6.28.0",{"version":632,"is_range":393,"range_type":629,"version_start":633,"version_start_type":634,"version_end":635,"version_end_type":396,"fixed_in":9},"gte7.0.0_lt7.29.0","7.0.0","including","7.29.0",{"version":637,"is_range":393,"range_type":629,"version_start":638,"version_start_type":634,"version_end":639,"version_end_type":396,"fixed_in":9},"gte8.0.0_lt8.9.0","8.0.0","8.9.0",{"ecosystem":641,"name":623,"vendor":641,"product":623,"cpe_part":9,"purl_type":642,"purl_namespace":9,"purl_name":623,"source":9,"versions":643},"Npm","npm",[644,647,649],{"version":645,"is_range":393,"range_type":646,"version_start":9,"version_start_type":9,"version_end":630,"version_end_type":396,"fixed_in":9},"lt6_28_0","semver",{"version":648,"is_range":393,"range_type":646,"version_start":633,"version_start_type":634,"version_end":635,"version_end_type":396,"fixed_in":9},"gte7_0_0_lt7_29_0",{"version":650,"is_range":393,"range_type":646,"version_start":638,"version_start_type":634,"version_end":639,"version_end_type":396,"fixed_in":9},"gte8_0_0_lt8_9_0",{"ecosystem":9,"name":623,"vendor":623,"product":623,"cpe_part":625,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":652},[653,655,657],{"version":654,"is_range":393,"range_type":142,"version_start":9,"version_start_type":9,"version_end":630,"version_end_type":396,"fixed_in":9},"\u003C 6.28.0",{"version":656,"is_range":393,"range_type":142,"version_start":633,"version_start_type":634,"version_end":635,"version_end_type":396,"fixed_in":9},">= 7.0.0, \u003C 7.29.0",{"version":658,"is_range":393,"range_type":142,"version_start":638,"version_start_type":634,"version_end":639,"version_end_type":396,"fixed_in":9},">= 8.0.0, \u003C 8.9.0"]