{"schemaVersion":3,"id":"CVE-2026-17495","aliases":["UBUNTU-CVE-2026-17495","DEBIAN-CVE-2026-17495","CGA-25hc-q8m7-74wf","CGA-2q25-5xxx-j5fm","CGA-3qp4-jghx-7fgp","CGA-45h6-653c-93cw","CGA-77fr-w5p4-7f29","CGA-7m4f-w4wj-rjgf","CGA-8m87-vr32-jf44","CGA-93c2-qhh6-825w","CGA-9vc9-c7g7-p22q","CGA-cgf3-5r4h-9qgg","CGA-crjc-7rx3-r698","CGA-g5wm-7mv3-272p","CGA-g9fp-p6fc-p7ph","CGA-gqvp-v2wx-xxcc","CGA-h7f3-3mw8-jpf3","CGA-jhpm-42xp-r24r","CGA-p4r6-pxpx-73h8","CGA-qxf9-x54g-4pg6","CGA-rv38-q5mj-v7rx","CGA-rw8v-qmmh-74cg","CGA-rxm9-8gw3-66mh","CGA-v66m-m6x7-qwp4","CGA-whgq-946m-3cgv","CGA-wmc6-cwh6-rhh4","CGA-wxqq-4p5x-5r58","CGA-xjr3-vg9x-x2pg","GHSA-4p3w-j4w9-5jqw","CGA-2m7g-jqfq-55rv","CGA-2prw-p77p-8h8v","CGA-2v34-f9hm-hgx4","CGA-3789-gwj7-5wxx","CGA-3g2g-c258-vrqh","CGA-3g6c-4c89-wc5h","CGA-3gvg-2rmf-g8mj","CGA-3v3j-375x-r847","CGA-4h9g-85c9-ph28","CGA-4hr9-jv55-5jhx","CGA-4jww-fgqh-w56m","CGA-52h6-gc98-mfh7","CGA-5578-4673-5r9x","CGA-56qw-35c2-mqhx","CGA-67x4-fq3j-fjg2","CGA-6gm7-42jh-xpf5","CGA-79v4-vj85-hf7p","CGA-7jfc-8jc9-9546","CGA-7jvr-3g6j-jh44","CGA-85mj-mfgc-3399","CGA-86qx-r4m2-5v24","CGA-8966-mpg3-58gx","CGA-8gr4-37q5-jq66","CGA-8whw-gw79-cx5f","CGA-9qx3-5wq5-6wvw","CGA-9rx6-7c4q-65fp","CGA-c2vv-6cfj-jm9j","CGA-cq8p-rpq4-j2c7","CGA-fqq2-rxc5-gpr3","CGA-hc7x-6jp6-7mp3","CGA-hj27-7cxx-c36f","CGA-hx49-xwp2-253c","CGA-j7vf-gvq7-6rpf","CGA-jhp4-fvw6-3hvc","CGA-m623-fg27-ppjh","CGA-mhf8-v8x2-r6jh","CGA-mhpc-h633-mq95","CGA-mwq8-7j5c-5f54","CGA-p2cv-gwc5-w2gc","CGA-p89x-9fpq-mf9v","CGA-pmmr-69ff-7fc3","CGA-ppf8-9gv5-mwcj","CGA-q9xp-vwm4-4f5f","CGA-qc6c-f4xj-xjq7","CGA-r274-qq9h-hgqv","CGA-r9wg-p922-38wc","CGA-rwwr-mf8x-9g58","CGA-rxm4-fgjv-v3v9","CGA-vf84-q24p-53w8","CGA-vpp2-jr9j-w8cc","CGA-vv45-p2xp-9jc6","CGA-vw25-pjv5-9w4q","CGA-vw7m-qxmv-2228","CGA-w4fv-c82j-w27j","CGA-w7xh-7g53-fhf9","CGA-x555-h66p-p9v3","CGA-x8cf-wfwj-fg32","CGA-xm7m-h8qw-r2q9","CGA-xrpp-76v4-mgxj","CGA-xw28-7gxx-w6wg","CGA-q4m4-2fgq-qghj","CGA-w9fq-p6g6-44v9"],"status":"published","duplicateOf":null,"title":null,"description":"moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale() can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object whose match() method satisfies the check while its toString() returns a traversal path reaches an internal require() call with attacker-controlled path segments. This is an incomplete fix for CVE-2022-24785 and primarily affects npm (server-side) users that pass user-provided input directly to moment.locale(). The issue is fixed in moment 2.31.0, and users should upgrade to 2.31.0 or later. As a workaround, validate that any user-supplied input is a string before passing it to moment.locale().","dates":{"published":"2026-09-15T05:40:55.263Z","modified":"2026-09-15T17:49:57.391Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.9,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":5.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":5.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":5.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":5.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":5.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00357,"percentile":0.28116,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0.0010000000000000026,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.00356},"history":[{"date":"2026-09-15T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00357,"percentile":0.28116}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00357,"percentile":0.28116}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-27","name":"Path Traversal: 'dir/../../filename'","description":"The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize multiple internal \"../\" sequences that can resolve to a location that is outside of that directory.","type":"weakness","status":"Draft","abstraction":"Variant","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/27.html"}],"affected":[{"vendor":"chainguard","product":"airflow-2","name":"airflow-2","label":"airflow-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/airflow-2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"airflow-core-2","name":"airflow-core-2","label":"airflow-core-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/airflow-core-2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"arangodb-3.12","name":"arangodb-3.12","label":"arangodb-3.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/arangodb-3.12","purlType":"apk","versions":[{"text":"< 3.12.12.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.12.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"azurite","name":"azurite","label":"azurite","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/azurite","purlType":"apk","versions":[{"text":"< 3.37.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.37.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"jupyter-base-notebook","name":"jupyter-base-notebook","label":"jupyter-base-notebook","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/jupyter-base-notebook","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"jupyterhub-k8s-singleuser-sample","name":"jupyterhub-k8s-singleuser-sample","label":"jupyterhub-k8s-singleuser-sample","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/jupyterhub-k8s-singleuser-sample","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 4.4.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 4.4.3-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19","name":"kibana-8.19","label":"kibana-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19","purlType":"apk","versions":[{"text":"< 8.19.22-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.22-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19-bitnami","name":"kibana-8.19-bitnami","label":"kibana-8.19-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19-bitnami","purlType":"apk","versions":[{"text":"< 8.19.22-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.22-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2","name":"kibana-9.2","label":"kibana-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3","name":"kibana-9.3","label":"kibana-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.4","name":"kibana-9.4","label":"kibana-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.4","purlType":"apk","versions":[{"text":"< 9.4.7-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.7-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.5","name":"kibana-9.5","label":"kibana-9.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.5","purlType":"apk","versions":[{"text":"< 9.5.4-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.5.4-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-centraldashboard","name":"kubeflow-centraldashboard","label":"kubeflow-centraldashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-centraldashboard","purlType":"apk","versions":[{"text":"< 2.0.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"librechat","name":"librechat","label":"librechat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/librechat","purlType":"apk","versions":[{"text":"< 0.8.7-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.8.7-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nextcloud-server-33","name":"nextcloud-server-33","label":"nextcloud-server-33","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nextcloud-server-33","purlType":"apk","versions":[{"text":"< 33.0.9-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 33.0.9-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nextcloud-server-34","name":"nextcloud-server-34","label":"nextcloud-server-34","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nextcloud-server-34","purlType":"apk","versions":[{"text":"< 34.0.4-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 34.0.4-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nextcloud-server-35","name":"nextcloud-server-35","label":"nextcloud-server-35","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nextcloud-server-35","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2","name":"opensearch-dashboards-2","label":"opensearch-dashboards-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2","purlType":"apk","versions":[{"text":"< 2.19.6-r22","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.6-r22","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips","name":"opensearch-dashboards-2-fips","label":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips","purlType":"apk","versions":[{"text":"< 2.19.6-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.6-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3","name":"opensearch-dashboards-3","label":"opensearch-dashboards-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3","purlType":"apk","versions":[{"text":"< 3.8.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips","name":"opensearch-dashboards-3-fips","label":"opensearch-dashboards-3-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips","purlType":"apk","versions":[{"text":"< 3.8.0-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips-security-analytics-dashboards-plugin","name":"opensearch-dashboards-3-fips-security-analytics-dashboards-plugin","label":"opensearch-dashboards-3-fips-security-analytics-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-security-analytics-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.8.0-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-security-analytics-dashboards-plugin","name":"opensearch-dashboards-3-security-analytics-dashboards-plugin","label":"opensearch-dashboards-3-security-analytics-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-security-analytics-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.8.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.10-jupyterhub","name":"py3.10-jupyterhub","label":"py3.10-jupyterhub","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.10-jupyterhub","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 6.0.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 6.0.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.11-jupyterhub","name":"py3.11-jupyterhub","label":"py3.11-jupyterhub","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.11-jupyterhub","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 6.0.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 6.0.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.12-jupyterhub","name":"py3.12-jupyterhub","label":"py3.12-jupyterhub","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.12-jupyterhub","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 6.0.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 6.0.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.13-jupyterhub","name":"py3.13-jupyterhub","label":"py3.13-jupyterhub","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.13-jupyterhub","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 6.0.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 6.0.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"sqlpad","name":"sqlpad","label":"sqlpad","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/sqlpad","purlType":"apk","versions":[{"text":"< 7.5.7-r46","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.7-r46","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard","name":"wazuh-dashboard","label":"wazuh-dashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard","purlType":"apk","versions":[{"text":"< 4.14.8-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.8-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-alerting-dashboards-plugin","name":"wazuh-dashboard-alerting-dashboards-plugin","label":"wazuh-dashboard-alerting-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 4.14.8-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.8-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-alerting-dashboards-plugin-fips","name":"wazuh-dashboard-alerting-dashboards-plugin-fips","label":"wazuh-dashboard-alerting-dashboards-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-alerting-dashboards-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.8-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.8-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-anomaly-detection-dashboards-plugin","name":"wazuh-dashboard-anomaly-detection-dashboards-plugin","label":"wazuh-dashboard-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-anomaly-detection-dashboards-plugin","purlType":"apk","versions":[{"text":"< 4.14.8-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.8-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-anomaly-detection-dashboards-plugin-fips","name":"wazuh-dashboard-anomaly-detection-dashboards-plugin-fips","label":"wazuh-dashboard-anomaly-detection-dashboards-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-anomaly-detection-dashboards-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.8-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.8-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-reporting","name":"wazuh-dashboard-dashboards-reporting","label":"wazuh-dashboard-dashboards-reporting","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-reporting","purlType":"apk","versions":[{"text":"< 4.14.8-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.8-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-reporting-fips","name":"wazuh-dashboard-dashboards-reporting-fips","label":"wazuh-dashboard-dashboards-reporting-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-reporting-fips","purlType":"apk","versions":[{"text":"< 4.14.8-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.8-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-fips","name":"wazuh-dashboard-fips","label":"wazuh-dashboard-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-fips","purlType":"apk","versions":[{"text":"< 4.14.8-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.8-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-index-management-dashboards-plugin","name":"wazuh-dashboard-index-management-dashboards-plugin","label":"wazuh-dashboard-index-management-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-index-management-dashboards-plugin","purlType":"apk","versions":[{"text":"< 4.14.8-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.8-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-index-management-dashboards-plugin-fips","name":"wazuh-dashboard-index-management-dashboards-plugin-fips","label":"wazuh-dashboard-index-management-dashboards-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-index-management-dashboards-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.8-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.8-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-security-plugin-fips","name":"wazuh-dashboard-security-plugin-fips","label":"wazuh-dashboard-security-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.8-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.8-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"jupyter-base-notebook","name":"jupyter-base-notebook","label":"jupyter-base-notebook","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/jupyter-base-notebook","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-centraldashboard","name":"kubeflow-centraldashboard","label":"kubeflow-centraldashboard","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-centraldashboard","purlType":"apk","versions":[{"text":"< 2.0.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nextcloud-server-33","name":"nextcloud-server-33","label":"nextcloud-server-33","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nextcloud-server-33","purlType":"apk","versions":[{"text":"< 33.0.9-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 33.0.9-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3","name":"opensearch-dashboards-3","label":"opensearch-dashboards-3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3","purlType":"apk","versions":[{"text":"< 3.8.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r11","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3-security-analytics-dashboards-plugin","name":"opensearch-dashboards-3-security-analytics-dashboards-plugin","label":"opensearch-dashboards-3-security-analytics-dashboards-plugin","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3-security-analytics-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.8.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r11","eol":null,"hubHref":null},{"vendor":"wolfi","product":"py3.10-jupyterhub","name":"py3.10-jupyterhub","label":"py3.10-jupyterhub","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3.10-jupyterhub","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 6.0.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 6.0.1-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"py3.11-jupyterhub","name":"py3.11-jupyterhub","label":"py3.11-jupyterhub","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3.11-jupyterhub","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 6.0.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 6.0.1-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"py3.12-jupyterhub","name":"py3.12-jupyterhub","label":"py3.12-jupyterhub","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3.12-jupyterhub","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 6.0.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 6.0.1-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"py3.13-jupyterhub","name":"py3.13-jupyterhub","label":"py3.13-jupyterhub","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3.13-jupyterhub","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 6.0.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 6.0.1-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"sqlpad","name":"sqlpad","label":"sqlpad","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/sqlpad","purlType":"apk","versions":[{"text":"< 7.5.7-r46","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.7-r46","eol":null,"hubHref":null},{"vendor":"debian","product":"node-moment","name":"node-moment","label":"node-moment","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/node-moment","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.31.0+ds1-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.31.0+ds1-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"node-moment","name":"node-moment","label":"node-moment","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/node-moment","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python-xstatic-moment","name":"python-xstatic-moment","label":"python-xstatic-moment","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python-xstatic-moment","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"moment","product":"moment","name":"moment","label":"moment","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 2.29.2, < 2.31.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.29.2, < 2.31.0","eol":null,"hubHref":"/vendor/moment/moment"},{"vendor":"Npm","product":"moment","name":"moment","label":"moment","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/moment","purlType":"npm","versions":[{"text":"≥ 2.29.2, < 2.31.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.29.2, < 2.31.0","eol":null,"hubHref":null}],"affectedCount":54,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw","label":"github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw","hostname":"github.com","tags":["REPORT","Advisory","WEB"]},{"url":"https://cna.openjsf.org/security-advisories.html","label":"cna.openjsf.org/security-advisories.html","hostname":"cna.openjsf.org","tags":["REPORT","Advisory","WEB"]},{"url":"https://ubuntu.com/security/CVE-2026-17495","label":"ubuntu.com/security/CVE-2026-17495","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-17495","label":"www.cve.org/CVERecord?id=CVE-2026-17495","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-17495","label":"security-tracker.debian.org/tracker/CVE-2026-17495","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/17xxx/CVE-2026-17495.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/17xxx/CVE-2026-17495.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-17495","label":"nvd.nist.gov/vuln/detail/CVE-2026-17495","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/moment/moment/pull/6386","label":"github.com/moment/moment/pull/6386","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/moment/moment/commit/5f7d983c9881e65e07574de9dda3190d99520c07","label":"github.com/moment/moment/commit/5f7d983c9881e65e07574de9dda3190d99520c07","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/moment/moment","label":"github.com/moment/moment","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/moment/moment/releases/tag/2.31.0","label":"github.com/moment/moment/releases/tag/2.31.0","hostname":"github.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-09-15T05:40:55.263Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-15T17:49:57.391Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":24,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T05:19:13.401Z","stale":false,"partial":false}}