[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-16728":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":27,"aliases":28,"duplicate_of":9,"upstream":106,"downstream":107,"duplicates":120,"related":121,"reserved_at":9,"published_at":128,"modified_at":129,"state":130,"summary":131,"references_raw":140,"kevs":225,"epss":226,"epss_history":229,"metrics":381,"affected":402},"CVE-2026-16728","undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to the application after a retry or resume of a partial response. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, a malicious or faulty upstream can return a partial response with a mismatched framing header, close the socket early, and have the retry interceptor assemble a body of a different length while the original Content-Length stays attached. Applications that use the retry interceptor and forward upstream headers and bodies downstream, such as proxies or gateways, may then emit an invalid HTTP response with a stale Content-Length, leading to downstream response desynchronization, connection hangs, or response corruption. Exploitation requires the retry interceptor enabled, an upstream returning a mismatched partial response, and a downstream forwarder that does not remove or recalculate Content-Length. The issue is fixed in undici 6.28.0, 7.29.0, and 8.9.0.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-444","Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')","The product acts as an intermediary HTTP agent\n         (such as a proxy or firewall) in the data flow between two\n         entities such as a client and server, but it does not\n         interpret malformed HTTP requests or responses in ways that\n         are consistent with how the messages will be processed by\n         those entities that are at the ultimate destination.","weakness","Incomplete","Base",[19,23],{"id":20,"name":21,"techniques":22},"CAPEC-273","HTTP Response Smuggling",[],{"id":24,"name":25,"techniques":26},"CAPEC-33","HTTP Request Smuggling",[],[],[29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105],"UBUNTU-CVE-2026-16728","DEBIAN-CVE-2026-16728","GHSA-8xcm-r25x-g524","CGA-2869-jmhq-75g2","CGA-3q9v-j9f3-q762","CGA-436m-g455-7xj4","CGA-48xw-5qg9-vfp2","CGA-4948-h783-7fcf","CGA-4w28-92jj-9xj6","CGA-58p9-942w-87gm","CGA-6658-g8xg-p7fx","CGA-6r6q-84gj-w6cj","CGA-766g-w3g7-567f","CGA-8cqj-9r34-v994","CGA-8m44-4q6c-pq4r","CGA-8whv-xjw9-ffv8","CGA-9cvm-9xf3-pmmg","CGA-c7x2-rh7g-3h97","CGA-cpqv-4p4r-hxwp","CGA-fcgq-j92f-vcfg","CGA-g959-prhf-qwrg","CGA-j5gg-fpcp-cvwr","CGA-j8xq-25wr-cpgx","CGA-jch6-8rgg-6pr3","CGA-m43r-r63r-jgr2","CGA-mjwj-p98j-hjmh","CGA-2582-vq2h-p98m","CGA-2m8c-vm89-wf63","CGA-4hjx-g8q6-xqr8","CGA-4q49-qvj2-3f2q","CGA-6448-97h4-vg9p","CGA-6fqq-xcmm-xhj8","CGA-6j33-x7rf-mjxp","CGA-6rqh-qq56-6x3r","CGA-6w6c-r7f7-fr5c","CGA-7v57-27x6-g6qm","CGA-7x4j-2gv4-48rw","CGA-82cr-rcjw-cj5g","CGA-99hp-f8c4-pqmh","CGA-c46f-c9g8-wccx","CGA-cc7r-wqh9-8c79","CGA-cv5v-5ghw-4mmx","CGA-f6c5-g786-q5f3","CGA-f945-pxwg-9fr9","CGA-fp2h-pr8v-phrc","CGA-gq72-38gr-2v8g","CGA-gx4w-jwpc-j5r8","CGA-hgwg-9m37-rv6h","CGA-j7f7-837r-c89r","CGA-mf5x-r5gc-5vc2","CGA-mxhh-jvpp-p7q7","CGA-p5ph-3g86-mw98","CGA-pwx4-9g4c-rpqx","CGA-q5cq-27mp-868m","CGA-q894-hcgm-5x79","CGA-qcv5-2ff6-w3v5","CGA-qgh3-qrpv-8hj6","CGA-qmh4-g99r-8rrm","CGA-qmwg-vrpw-2p7g","CGA-rg7j-grw2-4f4w","CGA-v36x-h8w6-r3h6","CGA-vch7-v4cq-mx82","CGA-w367-23pr-rwrq","CGA-w834-766r-347c","CGA-wp2f-768r-4q4r","CGA-wqp6-c8fj-7fpg","CGA-x23w-979m-mc4f","CGA-xc57-x6h5-553v","CGA-xh2j-gxr9-7pfp","CGA-jf6g-v3jp-3q98","CGA-fx47-mpf4-6cx5","CGA-4jhj-wgh4-ch7r","CGA-5jwr-cjg6-f88q","CGA-9v58-2xpq-wh5c","CGA-w9j8-vgj2-9jpv","CGA-6mx5-c66h-9hp8","CGA-fj5h-h388-cqvx",[],[108,110,112,114,116,118],{"_key":109},"RHSA-2026:48273",{"_key":111},"RHSA-2026:48537",{"_key":113},"SUSE-SU-2026:3929-1",{"_key":115},"SUSE-SU-2026:3930-1",{"_key":117},"SUSE-SU-2026:4248-1",{"_key":119},"SUSE-SU-2026:4261-1",[],[122,123,124,125,126],{"_key":113},{"_key":115},{"_key":117},{"_key":119},{"_key":127},"CGA-FGMH-44P5-9M5Q","2026-07-29T20:59:02.314Z","2026-07-30T15:18:18.440Z","Analyzed",{"cisa_kev":132,"cisa_ransomware":132,"cisa_vendor":9,"epss_severity":133,"epss_score":134,"severity":135,"severity_score":136,"severity_version":137,"severity_source":138,"severity_vector":139,"severity_status":130},false,"low",0.00176,"medium",6.5,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",[141,155,159,163,167,172,176,180,184,188,192,196,200,204,209,213,217,221],{"url":142,"sources":143,"tags":149},"https://github.com/nodejs/undici/security/advisories/GHSA-8xcm-r25x-g524",[144,138,145,146,147,148],"cve.org","osv_ubuntu","osv_npm","osv_wolfi","osv_chainguard",[150,151,152,153,154],"Mitigation","Vendor Advisory","REPORT","WEB","Advisory",{"url":156,"sources":157,"tags":158},"https://cna.openjsf.org/security-advisories.html",[144,138,145,146,147,148],[151,152,153,154],{"url":160,"sources":161,"tags":162},"https://ubuntu.com/security/CVE-2026-16728",[145],[152],{"url":164,"sources":165,"tags":166},"https://www.cve.org/CVERecord?id=CVE-2026-16728",[145],[152],{"url":168,"sources":169,"tags":171},"https://security-tracker.debian.org/tracker/CVE-2026-16728",[170],"osv_debian",[154],{"url":173,"sources":174,"tags":175},"https://nvd.nist.gov/vuln/detail/CVE-2026-16728",[146,147,148],[154],{"url":177,"sources":178,"tags":179},"https://github.com/nodejs/undici/commit/1b5a5312c3a7d7a30c31bf0d000b39a8a2531e1c",[146],[153],{"url":181,"sources":182,"tags":183},"https://github.com/nodejs/undici/commit/2b3f749336d356bbbc50192f87f6cf7bc714721a",[146],[153],{"url":185,"sources":186,"tags":187},"https://github.com/nodejs/undici/commit/4a9dafb16ff43880cf590e6d9c2aeee25fbff6d7",[146],[153],{"url":189,"sources":190,"tags":191},"https://github.com/nodejs/undici/commit/4fd5a0c61e627f928b7003adc4ffe1e55ec63420",[146],[153],{"url":193,"sources":194,"tags":195},"https://github.com/nodejs/undici/commit/cba3a52ac2e7abcc4e656d82af8579ea82c2bb9e",[146],[153],{"url":197,"sources":198,"tags":199},"https://github.com/nodejs/undici/commit/e11a68ed4ff345c79402476f7a00d473443e318d",[146],[153],{"url":201,"sources":202,"tags":203},"https://hackerone.com/reports/3828685",[146],[153],{"url":205,"sources":206,"tags":207},"https://github.com/nodejs/undici",[146],[208],"PACKAGE",{"url":210,"sources":211,"tags":212},"https://github.com/nodejs/undici/releases/tag/v6.28.0",[146],[153],{"url":214,"sources":215,"tags":216},"https://github.com/nodejs/undici/releases/tag/v7.29.0",[146],[153],{"url":218,"sources":219,"tags":220},"https://github.com/nodejs/undici/releases/tag/v8.9.0",[146],[153],{"url":222,"sources":223,"tags":224},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/16xxx/CVE-2026-16728.json",[147,148],[154],[],{"date":227,"score":134,"percentile":228},"2026-09-19",0.07421,[230,234,237,240,243,246,249,252,255,258,260,263,266,269,272,275,277,280,283,286,289,292,295,298,300,303,306,309,312,315,318,321,324,327,330,333,336,339,342,345,348,351,354,357,360,363,366,369,372,374,377,380],{"date":231,"score":232,"percentile":233},"2026-07-30",0.00164,0.06021,{"date":235,"score":232,"percentile":236},"2026-07-31",0.06031,{"date":238,"score":232,"percentile":239},"2026-08-01",0.06022,{"date":241,"score":232,"percentile":242},"2026-08-02",0.0602,{"date":244,"score":232,"percentile":245},"2026-08-03",0.06029,{"date":247,"score":134,"percentile":248},"2026-08-04",0.07343,{"date":250,"score":134,"percentile":251},"2026-08-05",0.07297,{"date":253,"score":134,"percentile":254},"2026-08-06",0.0728,{"date":256,"score":134,"percentile":257},"2026-08-07",0.07276,{"date":259,"score":134,"percentile":257},"2026-08-08",{"date":261,"score":134,"percentile":262},"2026-08-09",0.0727,{"date":264,"score":134,"percentile":265},"2026-08-10",0.07277,{"date":267,"score":134,"percentile":268},"2026-08-11",0.07329,{"date":270,"score":134,"percentile":271},"2026-08-12",0.07337,{"date":273,"score":134,"percentile":274},"2026-08-13",0.07334,{"date":276,"score":134,"percentile":248},"2026-08-14",{"date":278,"score":134,"percentile":279},"2026-08-15",0.07364,{"date":281,"score":134,"percentile":282},"2026-08-16",0.07394,{"date":284,"score":134,"percentile":285},"2026-08-17",0.07412,{"date":287,"score":134,"percentile":288},"2026-08-18",0.07402,{"date":290,"score":134,"percentile":291},"2026-08-19",0.07434,{"date":293,"score":134,"percentile":294},"2026-08-20",0.07428,{"date":296,"score":134,"percentile":297},"2026-08-21",0.07414,{"date":299,"score":134,"percentile":285},"2026-08-22",{"date":301,"score":134,"percentile":302},"2026-08-23",0.07387,{"date":304,"score":134,"percentile":305},"2026-08-24",0.0714,{"date":307,"score":134,"percentile":308},"2026-08-25",0.07148,{"date":310,"score":134,"percentile":311},"2026-08-26",0.07169,{"date":313,"score":134,"percentile":314},"2026-08-27",0.07188,{"date":316,"score":134,"percentile":317},"2026-08-28",0.072,{"date":319,"score":134,"percentile":320},"2026-08-29",0.0721,{"date":322,"score":134,"percentile":323},"2026-08-30",0.07225,{"date":325,"score":134,"percentile":326},"2026-08-31",0.07223,{"date":328,"score":134,"percentile":329},"2026-09-01",0.07232,{"date":331,"score":134,"percentile":332},"2026-09-02",0.07216,{"date":334,"score":134,"percentile":335},"2026-09-03",0.07196,{"date":337,"score":134,"percentile":338},"2026-09-04",0.07208,{"date":340,"score":134,"percentile":341},"2026-09-05",0.07228,{"date":343,"score":134,"percentile":344},"2026-09-06",0.07246,{"date":346,"score":134,"percentile":347},"2026-09-07",0.07235,{"date":349,"score":134,"percentile":350},"2026-09-08",0.07226,{"date":352,"score":134,"percentile":353},"2026-09-09",0.07264,{"date":355,"score":134,"percentile":356},"2026-09-10",0.07252,{"date":358,"score":134,"percentile":359},"2026-09-11",0.07255,{"date":361,"score":134,"percentile":362},"2026-09-12",0.07309,{"date":364,"score":134,"percentile":365},"2026-09-13",0.07301,{"date":367,"score":134,"percentile":368},"2026-09-14",0.07311,{"date":370,"score":134,"percentile":371},"2026-09-15",0.07346,{"date":373,"score":134,"percentile":302},"2026-09-16",{"date":375,"score":134,"percentile":376},"2026-09-17",0.07407,{"date":378,"score":134,"percentile":379},"2026-09-18",0.07418,{"date":227,"score":134,"percentile":228},[382,389,392,394,396,398,400],{"source":144,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":383,"cvss_v4_0":9},{"baseScore":384,"baseSeverity":385,"vectorString":386,"impactScore":387,"exploitabilityScore":388},4.8,"MEDIUM","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",4.2,5.6,{"source":138,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":390,"cvss_v4_0":9},{"baseScore":136,"baseSeverity":385,"vectorString":139,"impactScore":387,"exploitabilityScore":391},10,{"source":145,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":393,"cvss_v4_0":9},{"baseScore":136,"baseSeverity":9,"vectorString":139,"impactScore":387,"exploitabilityScore":391},{"source":170,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":395,"cvss_v4_0":9},{"baseScore":136,"baseSeverity":9,"vectorString":139,"impactScore":387,"exploitabilityScore":391},{"source":146,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":397,"cvss_v4_0":9},{"baseScore":384,"baseSeverity":9,"vectorString":386,"impactScore":387,"exploitabilityScore":388},{"source":147,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":399,"cvss_v4_0":9},{"baseScore":384,"baseSeverity":9,"vectorString":386,"impactScore":387,"exploitabilityScore":388},{"source":148,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":401,"cvss_v4_0":9},{"baseScore":384,"baseSeverity":9,"vectorString":386,"impactScore":387,"exploitabilityScore":388},[403,415,421,426,430,434,438,444,448,452,456,460,466,470,474,478,484,490,494,500,504,510,514,520,524,530,536,542,548,560,566,572,578,583,586,589,592,595,598,601,606,609,612,615,626,632,650,661],{"ecosystem":404,"name":405,"vendor":406,"product":405,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":405,"source":9,"versions":408},"Chainguard","actions-runner","chainguard","apk",[409],{"version":410,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":413,"version_end_type":414,"fixed_in":9},"lt2_336_0_r5",true,"ecosystem","2.336.0-r5","excluding",{"ecosystem":404,"name":416,"vendor":406,"product":416,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":416,"source":9,"versions":417},"code-server",[418],{"version":419,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":420,"version_end_type":414,"fixed_in":9},"lt4_130_0_r5","4.130.0-r5",{"ecosystem":404,"name":422,"vendor":406,"product":422,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":422,"source":9,"versions":423},"commercial-gitlab-rails-ee-19.1",[424],{"version":425,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"ecosystem":404,"name":427,"vendor":406,"product":427,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":427,"source":9,"versions":428},"commercial-gitlab-rails-ee-19.2",[429],{"version":425,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":404,"name":431,"vendor":406,"product":431,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":431,"source":9,"versions":432},"commercial-gitlab-rails-ee-19.3",[433],{"version":425,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":404,"name":435,"vendor":406,"product":435,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":435,"source":9,"versions":436},"commercial-gitlab-rails-ee-fips-19.1",[437],{"version":425,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":404,"name":439,"vendor":406,"product":439,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":439,"source":9,"versions":440},"kibana-8.19",[441],{"version":442,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":443,"version_end_type":414,"fixed_in":9},"lt8_19_20_r2","8.19.20-r2",{"ecosystem":404,"name":445,"vendor":406,"product":445,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":445,"source":9,"versions":446},"kibana-8.19-bitnami",[447],{"version":442,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":443,"version_end_type":414,"fixed_in":9},{"ecosystem":404,"name":449,"vendor":406,"product":449,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":449,"source":9,"versions":450},"kibana-8.19-iamguarded",[451],{"version":442,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":443,"version_end_type":414,"fixed_in":9},{"ecosystem":404,"name":453,"vendor":406,"product":453,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":453,"source":9,"versions":454},"kibana-9.1",[455],{"version":425,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":404,"name":457,"vendor":406,"product":457,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":457,"source":9,"versions":458},"kibana-9.1-iamguarded",[459],{"version":425,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":404,"name":461,"vendor":406,"product":461,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":461,"source":9,"versions":462},"kibana-9.2",[463],{"version":464,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":465,"version_end_type":414,"fixed_in":9},"lt9_2_8_r19","9.2.8-r19",{"ecosystem":404,"name":467,"vendor":406,"product":467,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":467,"source":9,"versions":468},"kibana-9.2-iamguarded",[469],{"version":464,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":465,"version_end_type":414,"fixed_in":9},{"ecosystem":404,"name":471,"vendor":406,"product":471,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":471,"source":9,"versions":472},"kibana-9.3",[473],{"version":425,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":404,"name":475,"vendor":406,"product":475,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":475,"source":9,"versions":476},"kibana-9.3-iamguarded",[477],{"version":425,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":404,"name":479,"vendor":406,"product":479,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":479,"source":9,"versions":480},"langfuse-3",[481],{"version":482,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":483,"version_end_type":414,"fixed_in":9},"lt3_225_0_r3","3.225.0-r3",{"ecosystem":404,"name":485,"vendor":406,"product":485,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":485,"source":9,"versions":486},"langfuse-3-compat",[487],{"version":488,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":489,"version_end_type":414,"fixed_in":9},"lt3_225_7_r6","3.225.7-r6",{"ecosystem":404,"name":491,"vendor":406,"product":491,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":491,"source":9,"versions":492},"langfuse-3-worker",[493],{"version":482,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":483,"version_end_type":414,"fixed_in":9},{"ecosystem":404,"name":495,"vendor":406,"product":495,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":495,"source":9,"versions":496},"langfuse-4",[497],{"version":498,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":499,"version_end_type":414,"fixed_in":9},"lt4_3_1_r3","4.3.1-r3",{"ecosystem":404,"name":501,"vendor":406,"product":501,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":501,"source":9,"versions":502},"langfuse-4-worker",[503],{"version":498,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":499,"version_end_type":414,"fixed_in":9},{"ecosystem":404,"name":505,"vendor":406,"product":505,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":505,"source":9,"versions":506},"langfuse-fips-3",[507],{"version":508,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":509,"version_end_type":414,"fixed_in":9},"lt3_224_3_r9","3.224.3-r9",{"ecosystem":404,"name":511,"vendor":406,"product":511,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":511,"source":9,"versions":512},"langfuse-fips-3-worker",[513],{"version":508,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":509,"version_end_type":414,"fixed_in":9},{"ecosystem":404,"name":515,"vendor":406,"product":515,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":515,"source":9,"versions":516},"langfuse-fips-4",[517],{"version":518,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":519,"version_end_type":414,"fixed_in":9},"lt4_4_0_r0","4.4.0-r0",{"ecosystem":404,"name":521,"vendor":406,"product":521,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":521,"source":9,"versions":522},"langfuse-fips-4-worker",[523],{"version":518,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":519,"version_end_type":414,"fixed_in":9},{"ecosystem":404,"name":525,"vendor":406,"product":525,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":525,"source":9,"versions":526},"npm-12",[527],{"version":528,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":529,"version_end_type":414,"fixed_in":9},"lt12_0_2_r2","12.0.2-r2",{"ecosystem":404,"name":531,"vendor":406,"product":531,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":531,"source":9,"versions":532},"pelias-api",[533],{"version":534,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":535,"version_end_type":414,"fixed_in":9},"lt7_8_0_r7","7.8.0-r7",{"ecosystem":404,"name":537,"vendor":406,"product":537,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":537,"source":9,"versions":538},"prism",[539],{"version":540,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":541,"version_end_type":414,"fixed_in":9},"lt5_16_0_r2","5.16.0-r2",{"ecosystem":404,"name":543,"vendor":406,"product":543,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":543,"source":9,"versions":544},"pulumi-language-nodejs",[545],{"version":546,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":547,"version_end_type":414,"fixed_in":9},"lt3_256_0_r1","3.256.0-r1",{"ecosystem":404,"name":549,"vendor":406,"product":549,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":549,"source":9,"versions":550},"renovate",[551,554,557],{"version":552,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":553,"version_end_type":414,"fixed_in":9},"lt44_23_3_r1","44.23.3-r1",{"version":555,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":556,"version_end_type":414,"fixed_in":9},"lt44_11_4_r0","44.11.4-r0",{"version":558,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":559,"version_end_type":414,"fixed_in":9},"lt44_11_3_r0","44.11.3-r0",{"ecosystem":404,"name":561,"vendor":406,"product":561,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":561,"source":9,"versions":562},"saf",[563],{"version":564,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":565,"version_end_type":414,"fixed_in":9},"lt1_7_0_r0","1.7.0-r0",{"ecosystem":404,"name":567,"vendor":406,"product":567,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":567,"source":9,"versions":568},"vitess-24",[569],{"version":570,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":571,"version_end_type":414,"fixed_in":9},"lt24_0_2_r10","24.0.2-r10",{"ecosystem":404,"name":573,"vendor":406,"product":573,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":573,"source":9,"versions":574},"vitess-24-compat",[575],{"version":576,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":577,"version_end_type":414,"fixed_in":9},"lt24_0_3_r7","24.0.3-r7",{"ecosystem":579,"name":416,"vendor":580,"product":416,"cpe_part":9,"purl_type":407,"purl_namespace":580,"purl_name":416,"source":9,"versions":581},"Wolfi","wolfi",[582],{"version":419,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":420,"version_end_type":414,"fixed_in":9},{"ecosystem":579,"name":479,"vendor":580,"product":479,"cpe_part":9,"purl_type":407,"purl_namespace":580,"purl_name":479,"source":9,"versions":584},[585],{"version":482,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":483,"version_end_type":414,"fixed_in":9},{"ecosystem":579,"name":485,"vendor":580,"product":485,"cpe_part":9,"purl_type":407,"purl_namespace":580,"purl_name":485,"source":9,"versions":587},[588],{"version":488,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":489,"version_end_type":414,"fixed_in":9},{"ecosystem":579,"name":491,"vendor":580,"product":491,"cpe_part":9,"purl_type":407,"purl_namespace":580,"purl_name":491,"source":9,"versions":590},[591],{"version":482,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":483,"version_end_type":414,"fixed_in":9},{"ecosystem":579,"name":525,"vendor":580,"product":525,"cpe_part":9,"purl_type":407,"purl_namespace":580,"purl_name":525,"source":9,"versions":593},[594],{"version":528,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":529,"version_end_type":414,"fixed_in":9},{"ecosystem":579,"name":537,"vendor":580,"product":537,"cpe_part":9,"purl_type":407,"purl_namespace":580,"purl_name":537,"source":9,"versions":596},[597],{"version":540,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":541,"version_end_type":414,"fixed_in":9},{"ecosystem":579,"name":543,"vendor":580,"product":543,"cpe_part":9,"purl_type":407,"purl_namespace":580,"purl_name":543,"source":9,"versions":599},[600],{"version":546,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":547,"version_end_type":414,"fixed_in":9},{"ecosystem":579,"name":549,"vendor":580,"product":549,"cpe_part":9,"purl_type":407,"purl_namespace":580,"purl_name":549,"source":9,"versions":602},[603,604,605],{"version":552,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":553,"version_end_type":414,"fixed_in":9},{"version":555,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":556,"version_end_type":414,"fixed_in":9},{"version":558,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":559,"version_end_type":414,"fixed_in":9},{"ecosystem":579,"name":561,"vendor":580,"product":561,"cpe_part":9,"purl_type":407,"purl_namespace":580,"purl_name":561,"source":9,"versions":607},[608],{"version":564,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":565,"version_end_type":414,"fixed_in":9},{"ecosystem":579,"name":567,"vendor":580,"product":567,"cpe_part":9,"purl_type":407,"purl_namespace":580,"purl_name":567,"source":9,"versions":610},[611],{"version":570,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":571,"version_end_type":414,"fixed_in":9},{"ecosystem":579,"name":573,"vendor":580,"product":573,"cpe_part":9,"purl_type":407,"purl_namespace":580,"purl_name":573,"source":9,"versions":613},[614],{"version":576,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":577,"version_end_type":414,"fixed_in":9},{"ecosystem":616,"name":617,"vendor":618,"product":617,"cpe_part":9,"purl_type":619,"purl_namespace":618,"purl_name":617,"source":9,"versions":620},"Debian","node-undici","debian","deb",[621,622,623],{"version":425,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":425,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":624,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":625,"version_end_type":414,"fixed_in":9},"lt8_9_0+dfsg+~cs3_2_0_1","8.9.0+dfsg+~cs3.2.0-1",{"ecosystem":627,"name":617,"vendor":628,"product":617,"cpe_part":9,"purl_type":619,"purl_namespace":628,"purl_name":617,"source":9,"versions":629},"Ubuntu","ubuntu",[630,631],{"version":425,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":425,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":633,"vendor":634,"product":633,"cpe_part":635,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":636},"undici","nodejs","a",[637,641,646],{"version":638,"is_range":411,"range_type":639,"version_start":9,"version_start_type":9,"version_end":640,"version_end_type":414,"fixed_in":9},"lt6.28.0","cpe","6.28.0",{"version":642,"is_range":411,"range_type":639,"version_start":643,"version_start_type":644,"version_end":645,"version_end_type":414,"fixed_in":9},"gte7.0.0_lt7.29.0","7.0.0","including","7.29.0",{"version":647,"is_range":411,"range_type":639,"version_start":648,"version_start_type":644,"version_end":649,"version_end_type":414,"fixed_in":9},"gte8.0.0_lt8.9.0","8.0.0","8.9.0",{"ecosystem":651,"name":633,"vendor":651,"product":633,"cpe_part":9,"purl_type":652,"purl_namespace":9,"purl_name":633,"source":9,"versions":653},"Npm","npm",[654,657,659],{"version":655,"is_range":411,"range_type":656,"version_start":9,"version_start_type":9,"version_end":640,"version_end_type":414,"fixed_in":9},"lt6_28_0","semver",{"version":658,"is_range":411,"range_type":656,"version_start":643,"version_start_type":644,"version_end":645,"version_end_type":414,"fixed_in":9},"gte7_0_0_lt7_29_0",{"version":660,"is_range":411,"range_type":656,"version_start":648,"version_start_type":644,"version_end":649,"version_end_type":414,"fixed_in":9},"gte8_0_0_lt8_9_0",{"ecosystem":9,"name":633,"vendor":633,"product":633,"cpe_part":635,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":662},[663,665,667],{"version":664,"is_range":411,"range_type":144,"version_start":9,"version_start_type":9,"version_end":640,"version_end_type":414,"fixed_in":9},"\u003C 6.28.0",{"version":666,"is_range":411,"range_type":144,"version_start":643,"version_start_type":644,"version_end":645,"version_end_type":414,"fixed_in":9},">= 7.0.0, \u003C 7.29.0",{"version":668,"is_range":411,"range_type":144,"version_start":648,"version_start_type":644,"version_end":649,"version_end_type":414,"fixed_in":9},">= 8.0.0, \u003C 8.9.0"]