[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-22036":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":406,"aliases":407,"duplicate_of":9,"upstream":456,"downstream":457,"duplicates":487,"related":488,"reserved_at":9,"published_at":504,"modified_at":505,"state":506,"summary":507,"references_raw":516,"kevs":554,"epss":555,"epss_history":558,"metrics":828,"affected":848},"CVE-2026-22036","Undici is an HTTP/1.1 client for Node.js. Prior to 7.18.0 and 6.23.0, the number of links in the decompression chain is unbounded and the default maxHeaderSize allows a malicious server to insert thousands compression steps leading to high CPU usage and excessive memory allocation. This vulnerability is fixed in 7.18.0 and 6.23.0.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-770","Allocation of Resources Without Limits or Throttling","The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","weakness","Incomplete","Base","High",[20,106,116,120,124,128,132,136,168,230,234,238,268,298,330,334,338,342,346,350],{"id":21,"name":22,"techniques":23},"CAPEC-125","Flooding",[24,78],{"id":25,"name":26,"tactics":27,"countermeasures":31},"T1498.001","Direct Network Flood",[28],{"id":29,"name":30},"TA0105","Impact",[32,37,42,46,50,54,58,62,66,70,74],{"id":33,"name":34,"tactic":35},"D3-APCA","Application Protocol Command Analysis",{"name":36},"Detect",{"id":38,"name":39,"tactic":40},"D3-NTF","Network Traffic Filtering",{"name":41},"Isolate",{"id":43,"name":44,"tactic":45},"D3-ITF","Inbound Traffic Filtering",{"name":41},{"id":47,"name":48,"tactic":49},"D3-ISVA","Inbound Session Volume Analysis",{"name":36},{"id":51,"name":52,"tactic":53},"D3-RTSD","Remote Terminal Session Detection",{"name":36},{"id":55,"name":56,"tactic":57},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":36},{"id":59,"name":60,"tactic":61},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":36},{"id":63,"name":64,"tactic":65},"D3-NTCD","Network Traffic Community Deviation",{"name":36},{"id":67,"name":68,"tactic":69},"D3-CSPP","Client-server Payload Profiling",{"name":36},{"id":71,"name":72,"tactic":73},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":36},{"id":75,"name":76,"tactic":77},"D3-NTSA","Network Traffic Signature Analysis",{"name":36},{"id":79,"name":80,"tactics":81,"countermeasures":83},"T1499","Endpoint Denial of Service",[82],{"id":29,"name":30},[84,86,88,90,92,94,96,98,100,102,104],{"id":47,"name":48,"tactic":85},{"name":36},{"id":59,"name":60,"tactic":87},{"name":36},{"id":33,"name":34,"tactic":89},{"name":36},{"id":63,"name":64,"tactic":91},{"name":36},{"id":51,"name":52,"tactic":93},{"name":36},{"id":67,"name":68,"tactic":95},{"name":36},{"id":38,"name":39,"tactic":97},{"name":41},{"id":43,"name":44,"tactic":99},{"name":41},{"id":55,"name":56,"tactic":101},{"name":36},{"id":71,"name":72,"tactic":103},{"name":36},{"id":75,"name":76,"tactic":105},{"name":36},{"id":107,"name":108,"techniques":109},"CAPEC-130","Excessive Allocation",[110],{"id":111,"name":112,"tactics":113,"countermeasures":115},"T1499.003","Application Exhaustion Flood",[114],{"id":29,"name":30},[],{"id":117,"name":118,"techniques":119},"CAPEC-147","XML Ping of the Death",[],{"id":121,"name":122,"techniques":123},"CAPEC-197","Exponential Data Expansion",[],{"id":125,"name":126,"techniques":127},"CAPEC-229","Serialized Data Parameter Blowup",[],{"id":129,"name":130,"techniques":131},"CAPEC-230","Serialized Data with Nested Payloads",[],{"id":133,"name":134,"techniques":135},"CAPEC-231","Oversized Serialized Data Payloads",[],{"id":137,"name":138,"techniques":139},"CAPEC-469","HTTP DoS",[140],{"id":141,"name":142,"tactics":143,"countermeasures":145},"T1499.002","Service Exhaustion Flood",[144],{"id":29,"name":30},[146,148,150,152,154,156,158,160,162,164,166],{"id":75,"name":76,"tactic":147},{"name":36},{"id":63,"name":64,"tactic":149},{"name":36},{"id":43,"name":44,"tactic":151},{"name":41},{"id":71,"name":72,"tactic":153},{"name":36},{"id":55,"name":56,"tactic":155},{"name":36},{"id":59,"name":60,"tactic":157},{"name":36},{"id":33,"name":34,"tactic":159},{"name":36},{"id":51,"name":52,"tactic":161},{"name":36},{"id":67,"name":68,"tactic":163},{"name":36},{"id":38,"name":39,"tactic":165},{"name":41},{"id":47,"name":48,"tactic":167},{"name":36},{"id":169,"name":170,"techniques":171},"CAPEC-482","TCP Flood",[172,198,204],{"id":25,"name":26,"tactics":173,"countermeasures":175},[174],{"id":29,"name":30},[176,178,180,182,184,186,188,190,192,194,196],{"id":33,"name":34,"tactic":177},{"name":36},{"id":38,"name":39,"tactic":179},{"name":41},{"id":43,"name":44,"tactic":181},{"name":41},{"id":47,"name":48,"tactic":183},{"name":36},{"id":51,"name":52,"tactic":185},{"name":36},{"id":55,"name":56,"tactic":187},{"name":36},{"id":59,"name":60,"tactic":189},{"name":36},{"id":63,"name":64,"tactic":191},{"name":36},{"id":67,"name":68,"tactic":193},{"name":36},{"id":71,"name":72,"tactic":195},{"name":36},{"id":75,"name":76,"tactic":197},{"name":36},{"id":199,"name":200,"tactics":201,"countermeasures":203},"T1499.001","OS Exhaustion Flood",[202],{"id":29,"name":30},[],{"id":141,"name":142,"tactics":205,"countermeasures":207},[206],{"id":29,"name":30},[208,210,212,214,216,218,220,222,224,226,228],{"id":75,"name":76,"tactic":209},{"name":36},{"id":63,"name":64,"tactic":211},{"name":36},{"id":43,"name":44,"tactic":213},{"name":41},{"id":71,"name":72,"tactic":215},{"name":36},{"id":55,"name":56,"tactic":217},{"name":36},{"id":59,"name":60,"tactic":219},{"name":36},{"id":33,"name":34,"tactic":221},{"name":36},{"id":51,"name":52,"tactic":223},{"name":36},{"id":67,"name":68,"tactic":225},{"name":36},{"id":38,"name":39,"tactic":227},{"name":41},{"id":47,"name":48,"tactic":229},{"name":36},{"id":231,"name":232,"techniques":233},"CAPEC-486","UDP Flood",[],{"id":235,"name":236,"techniques":237},"CAPEC-487","ICMP Flood",[],{"id":239,"name":240,"techniques":241},"CAPEC-488","HTTP Flood",[242],{"id":141,"name":142,"tactics":243,"countermeasures":245},[244],{"id":29,"name":30},[246,248,250,252,254,256,258,260,262,264,266],{"id":75,"name":76,"tactic":247},{"name":36},{"id":63,"name":64,"tactic":249},{"name":36},{"id":43,"name":44,"tactic":251},{"name":41},{"id":71,"name":72,"tactic":253},{"name":36},{"id":55,"name":56,"tactic":255},{"name":36},{"id":59,"name":60,"tactic":257},{"name":36},{"id":33,"name":34,"tactic":259},{"name":36},{"id":51,"name":52,"tactic":261},{"name":36},{"id":67,"name":68,"tactic":263},{"name":36},{"id":38,"name":39,"tactic":265},{"name":41},{"id":47,"name":48,"tactic":267},{"name":36},{"id":269,"name":270,"techniques":271},"CAPEC-489","SSL Flood",[272],{"id":141,"name":142,"tactics":273,"countermeasures":275},[274],{"id":29,"name":30},[276,278,280,282,284,286,288,290,292,294,296],{"id":75,"name":76,"tactic":277},{"name":36},{"id":63,"name":64,"tactic":279},{"name":36},{"id":43,"name":44,"tactic":281},{"name":41},{"id":71,"name":72,"tactic":283},{"name":36},{"id":55,"name":56,"tactic":285},{"name":36},{"id":59,"name":60,"tactic":287},{"name":36},{"id":33,"name":34,"tactic":289},{"name":36},{"id":51,"name":52,"tactic":291},{"name":36},{"id":67,"name":68,"tactic":293},{"name":36},{"id":38,"name":39,"tactic":295},{"name":41},{"id":47,"name":48,"tactic":297},{"name":36},{"id":299,"name":300,"techniques":301},"CAPEC-490","Amplification",[302],{"id":303,"name":304,"tactics":305,"countermeasures":307},"T1498.002","Reflection Amplification",[306],{"id":29,"name":30},[308,310,312,314,316,318,320,322,324,326,328],{"id":67,"name":68,"tactic":309},{"name":36},{"id":43,"name":44,"tactic":311},{"name":41},{"id":47,"name":48,"tactic":313},{"name":36},{"id":71,"name":72,"tactic":315},{"name":36},{"id":59,"name":60,"tactic":317},{"name":36},{"id":33,"name":34,"tactic":319},{"name":36},{"id":75,"name":76,"tactic":321},{"name":36},{"id":55,"name":56,"tactic":323},{"name":36},{"id":51,"name":52,"tactic":325},{"name":36},{"id":38,"name":39,"tactic":327},{"name":41},{"id":63,"name":64,"tactic":329},{"name":36},{"id":331,"name":332,"techniques":333},"CAPEC-491","Quadratic Data Expansion",[],{"id":335,"name":336,"techniques":337},"CAPEC-493","SOAP Array Blowup",[],{"id":339,"name":340,"techniques":341},"CAPEC-494","TCP Fragmentation",[],{"id":343,"name":344,"techniques":345},"CAPEC-495","UDP Fragmentation",[],{"id":347,"name":348,"techniques":349},"CAPEC-496","ICMP Fragmentation",[],{"id":351,"name":352,"techniques":353},"CAPEC-528","XML Flood",[354,380],{"id":141,"name":142,"tactics":355,"countermeasures":357},[356],{"id":29,"name":30},[358,360,362,364,366,368,370,372,374,376,378],{"id":75,"name":76,"tactic":359},{"name":36},{"id":63,"name":64,"tactic":361},{"name":36},{"id":43,"name":44,"tactic":363},{"name":41},{"id":71,"name":72,"tactic":365},{"name":36},{"id":55,"name":56,"tactic":367},{"name":36},{"id":59,"name":60,"tactic":369},{"name":36},{"id":33,"name":34,"tactic":371},{"name":36},{"id":51,"name":52,"tactic":373},{"name":36},{"id":67,"name":68,"tactic":375},{"name":36},{"id":38,"name":39,"tactic":377},{"name":41},{"id":47,"name":48,"tactic":379},{"name":36},{"id":25,"name":26,"tactics":381,"countermeasures":383},[382],{"id":29,"name":30},[384,386,388,390,392,394,396,398,400,402,404],{"id":33,"name":34,"tactic":385},{"name":36},{"id":38,"name":39,"tactic":387},{"name":41},{"id":43,"name":44,"tactic":389},{"name":41},{"id":47,"name":48,"tactic":391},{"name":36},{"id":51,"name":52,"tactic":393},{"name":36},{"id":55,"name":56,"tactic":395},{"name":36},{"id":59,"name":60,"tactic":397},{"name":36},{"id":63,"name":64,"tactic":399},{"name":36},{"id":67,"name":68,"tactic":401},{"name":36},{"id":71,"name":72,"tactic":403},{"name":36},{"id":75,"name":76,"tactic":405},{"name":36},[],[408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455],"GHSA-g9mf-h72j-4rw9","DEBIAN-CVE-2026-22036","CGA-6f7j-jf4c-849p","CGA-92g2-4542-6fv6","CGA-fqw6-h2gg-2433","CGA-gpw7-xhjg-894w","CGA-28j2-43w4-r6qf","CGA-2h47-w2x9-76gm","CGA-2p7p-ph27-pvjf","CGA-2wmc-wm73-26rg","CGA-33pv-3v3j-7pf4","CGA-34hh-23ph-393p","CGA-36x5-cxhr-3wmg","CGA-3r5r-cc7x-r7w5","CGA-3x38-fhvj-hcqx","CGA-44v5-f86c-4f9h","CGA-4vxq-vh7g-jw5x","CGA-4x6q-vfj5-p48j","CGA-57rh-w893-p6f9","CGA-5g76-v49c-342g","CGA-5hg8-5gjp-x5rf","CGA-5j6m-36q7-5xx9","CGA-5q57-rr9f-p89h","CGA-7288-77r7-w9f3","CGA-9vqq-86fp-c8fh","CGA-c38j-hj4j-87f2","CGA-chwf-h4pw-3p6w","CGA-cqvr-mmhv-78r2","CGA-f8p4-mc53-536p","CGA-f8qr-jc9j-f36w","CGA-jxj4-qfpq-vg8x","CGA-mvgv-gc84-45qp","CGA-p4h9-3xmf-qjj4","CGA-qxwf-q2rf-6w46","CGA-r3c6-rqcp-542c","CGA-rpwf-39j3-8pj4","CGA-rqr5-vq4g-8pc9","CGA-rxjx-872g-j9v2","CGA-rxqj-v85g-4rp2","CGA-v29g-98j5-rgpc","CGA-v8m5-gg92-w5x8","CGA-vmhr-g96m-xffg","CGA-vpvm-73wh-7x7r","CGA-vxrq-hw4f-954p","CGA-wfj5-f53g-h9f8","CGA-x3jv-79h2-3426","CGA-x7vc-gvwh-g8j9","CGA-xg7m-m974-xg44",[],[458,460,462,464,466,468,470,472,474,476,477,479,481,483,485],{"_key":459},"SUSE-SU-2026:0301-1",{"_key":461},"SUSE-SU-2026:0457-1",{"_key":463},"SUSE-SU-2026:20436-1",{"_key":465},"SUSE-SU-2026:0295-1",{"_key":467},"SUSE-SU-2026:0435-1",{"_key":469},"OPENSUSE-SU-2026:10074-1",{"_key":471},"OPENSUSE-SU-2026:10075-1",{"_key":473},"OPENSUSE-SU-2026:20236-1",{"_key":475},"UBUNTU-CVE-2026-22036",{"_key":409},{"_key":478},"OPENSUSE-SU-2026:11110-1",{"_key":480},"SUSE-SU-2026:3929-1",{"_key":482},"SUSE-SU-2026:3930-1",{"_key":484},"SUSE-SU-2026:4248-1",{"_key":486},"SUSE-SU-2026:4261-1",[],[489,490,491,492,493,494,495,496,497,498,499,500,501,502],{"_key":459},{"_key":461},{"_key":463},{"_key":465},{"_key":467},{"_key":469},{"_key":471},{"_key":473},{"_key":478},{"_key":480},{"_key":482},{"_key":484},{"_key":486},{"_key":503},"CGA-V3CM-92H7-Q9PF","2026-01-14T19:07:13.745Z","2026-01-22T20:17:20.208Z","Modified",{"cisa_kev":508,"cisa_ransomware":508,"cisa_vendor":9,"epss_severity":509,"epss_score":510,"severity":511,"severity_score":512,"severity_version":513,"severity_source":514,"severity_vector":515,"severity_status":506},false,"low",0.00481,"high",7.5,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[517,529,536,540,545,550],{"url":518,"sources":519,"tags":524},"https://github.com/nodejs/undici/security/advisories/GHSA-g9mf-h72j-4rw9",[520,514,521,522,523],"cve.org","osv_npm","osv_wolfi","osv_chainguard",[525,526,527,528],"X Refsource CONFIRM","Vendor Advisory","WEB","Advisory",{"url":530,"sources":531,"tags":532},"https://github.com/nodejs/undici/commit/b04e3cbb569c1596f86c108e9b52c79d8475dcb3",[520,514,521,522,523],[533,534,527,535],"X Refsource MISC","Patch","FIX",{"url":537,"sources":538,"tags":539},"https://nvd.nist.gov/vuln/detail/CVE-2026-22036",[521,522,523],[528],{"url":541,"sources":542,"tags":543},"https://github.com/nodejs/undici",[521],[544],"PACKAGE",{"url":546,"sources":547,"tags":549},"https://security-tracker.debian.org/tracker/CVE-2026-22036",[548],"osv_debian",[528],{"url":551,"sources":552,"tags":553},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22036.json",[522,523],[528],[],{"date":556,"score":510,"percentile":557},"2026-09-19",0.40644,[559,563,566,569,572,575,579,582,586,590,593,596,599,602,605,608,611,614,617,620,623,626,629,632,635,638,641,644,647,650,653,656,660,662,665,668,671,674,677,680,682,685,688,691,694,697,700,703,706,709,712,714,717,720,723,725,728,731,734,736,739,741,744,747,750,753,756,759,763,766,769,772,775,778,781,784,786,789,792,795,798,801,804,807,810,813,816,819,822,825],{"date":560,"score":561,"percentile":562},"2026-01-15",0.00039,0.116,{"date":564,"score":561,"percentile":565},"2026-01-16",0.11642,{"date":567,"score":561,"percentile":568},"2026-01-17",0.11649,{"date":570,"score":561,"percentile":571},"2026-01-18",0.11596,{"date":573,"score":561,"percentile":574},"2026-01-19",0.11531,{"date":576,"score":577,"percentile":578},"2026-01-20",0.00051,0.16124,{"date":580,"score":577,"percentile":581},"2026-01-21",0.16101,{"date":583,"score":584,"percentile":585},"2026-01-22",0.00055,0.17413,{"date":587,"score":588,"percentile":589},"2026-01-23",0.00018,0.0361,{"date":591,"score":588,"percentile":592},"2026-01-24",0.0364,{"date":594,"score":588,"percentile":595},"2026-01-25",0.03621,{"date":597,"score":588,"percentile":598},"2026-01-26",0.03605,{"date":600,"score":588,"percentile":601},"2026-01-27",0.03591,{"date":603,"score":588,"percentile":604},"2026-01-28",0.03577,{"date":606,"score":588,"percentile":607},"2026-01-29",0.03599,{"date":609,"score":588,"percentile":610},"2026-01-30",0.03601,{"date":612,"score":588,"percentile":613},"2026-01-31",0.03581,{"date":615,"score":588,"percentile":616},"2026-02-01",0.03672,{"date":618,"score":588,"percentile":619},"2026-02-02",0.03656,{"date":621,"score":588,"percentile":622},"2026-02-03",0.0366,{"date":624,"score":588,"percentile":625},"2026-02-04",0.03639,{"date":627,"score":588,"percentile":628},"2026-02-05",0.03686,{"date":630,"score":588,"percentile":631},"2026-02-06",0.03693,{"date":633,"score":588,"percentile":634},"2026-02-07",0.03714,{"date":636,"score":588,"percentile":637},"2026-02-08",0.03703,{"date":639,"score":588,"percentile":640},"2026-02-09",0.03685,{"date":642,"score":588,"percentile":643},"2026-02-10",0.03688,{"date":645,"score":588,"percentile":646},"2026-02-11",0.03788,{"date":648,"score":588,"percentile":649},"2026-02-12",0.03844,{"date":651,"score":588,"percentile":652},"2026-02-13",0.03868,{"date":654,"score":588,"percentile":655},"2026-02-14",0.03901,{"date":657,"score":658,"percentile":659},"2026-02-15",0.00019,0.04556,{"date":661,"score":658,"percentile":659},"2026-02-16",{"date":663,"score":658,"percentile":664},"2026-02-17",0.04539,{"date":666,"score":658,"percentile":667},"2026-02-18",0.04816,{"date":669,"score":658,"percentile":670},"2026-02-19",0.04877,{"date":672,"score":658,"percentile":673},"2026-02-20",0.04837,{"date":675,"score":658,"percentile":676},"2026-02-21",0.04843,{"date":678,"score":658,"percentile":679},"2026-02-22",0.04844,{"date":681,"score":658,"percentile":676},"2026-02-23",{"date":683,"score":658,"percentile":684},"2026-02-24",0.0483,{"date":686,"score":658,"percentile":687},"2026-02-25",0.04802,{"date":689,"score":658,"percentile":690},"2026-02-26",0.04767,{"date":692,"score":658,"percentile":693},"2026-02-27",0.04835,{"date":695,"score":658,"percentile":696},"2026-02-28",0.04822,{"date":698,"score":658,"percentile":699},"2026-03-01",0.0489,{"date":701,"score":658,"percentile":702},"2026-03-02",0.04926,{"date":704,"score":658,"percentile":705},"2026-03-03",0.0494,{"date":707,"score":658,"percentile":708},"2026-03-04",0.0482,{"date":710,"score":658,"percentile":711},"2026-03-05",0.04872,{"date":713,"score":658,"percentile":676},"2026-03-06",{"date":715,"score":658,"percentile":716},"2026-03-07",0.04852,{"date":718,"score":658,"percentile":719},"2026-03-08",0.04854,{"date":721,"score":658,"percentile":722},"2026-03-09",0.04833,{"date":724,"score":658,"percentile":673},"2026-03-10",{"date":726,"score":658,"percentile":727},"2026-03-11",0.04846,{"date":729,"score":658,"percentile":730},"2026-03-12",0.04867,{"date":732,"score":658,"percentile":733},"2026-03-13",0.04871,{"date":735,"score":658,"percentile":693},"2026-03-14",{"date":737,"score":658,"percentile":738},"2026-03-15",0.04819,{"date":740,"score":658,"percentile":667},"2026-03-16",{"date":742,"score":658,"percentile":743},"2026-03-17",0.04811,{"date":745,"score":658,"percentile":746},"2026-03-18",0.04813,{"date":748,"score":658,"percentile":749},"2026-03-19",0.04839,{"date":751,"score":658,"percentile":752},"2026-03-20",0.0484,{"date":754,"score":658,"percentile":755},"2026-03-21",0.05042,{"date":757,"score":658,"percentile":758},"2026-03-22",0.05035,{"date":760,"score":761,"percentile":762},"2026-03-23",0.0002,0.05306,{"date":764,"score":761,"percentile":765},"2026-03-24",0.05289,{"date":767,"score":761,"percentile":768},"2026-03-25",0.0533,{"date":770,"score":761,"percentile":771},"2026-03-26",0.05372,{"date":773,"score":761,"percentile":774},"2026-03-27",0.05377,{"date":776,"score":761,"percentile":777},"2026-03-28",0.0538,{"date":779,"score":761,"percentile":780},"2026-03-29",0.05375,{"date":782,"score":761,"percentile":783},"2026-03-30",0.05362,{"date":785,"score":761,"percentile":768},"2026-03-31",{"date":787,"score":761,"percentile":788},"2026-04-01",0.05345,{"date":790,"score":761,"percentile":791},"2026-04-02",0.05386,{"date":793,"score":761,"percentile":794},"2026-04-03",0.05403,{"date":796,"score":761,"percentile":797},"2026-04-04",0.05418,{"date":799,"score":761,"percentile":800},"2026-04-05",0.0542,{"date":802,"score":761,"percentile":803},"2026-04-06",0.05411,{"date":805,"score":761,"percentile":806},"2026-04-07",0.05425,{"date":808,"score":761,"percentile":809},"2026-04-08",0.0546,{"date":811,"score":761,"percentile":812},"2026-04-09",0.05482,{"date":814,"score":761,"percentile":815},"2026-04-10",0.05467,{"date":817,"score":761,"percentile":818},"2026-04-11",0.05453,{"date":820,"score":761,"percentile":821},"2026-04-12",0.05439,{"date":823,"score":761,"percentile":824},"2026-04-13",0.05433,{"date":826,"score":761,"percentile":827},"2026-04-14",0.05369,[829,836,840,842,844,846],{"source":520,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":830,"cvss_v4_0":9},{"baseScore":831,"baseSeverity":832,"vectorString":833,"impactScore":834,"exploitabilityScore":835},5.9,"MEDIUM","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",6,5.6,{"source":514,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":837,"cvss_v4_0":9},{"baseScore":512,"baseSeverity":838,"vectorString":515,"impactScore":834,"exploitabilityScore":839},"HIGH",10,{"source":521,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":841,"cvss_v4_0":9},{"baseScore":831,"baseSeverity":9,"vectorString":833,"impactScore":834,"exploitabilityScore":835},{"source":548,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":843,"cvss_v4_0":9},{"baseScore":512,"baseSeverity":9,"vectorString":515,"impactScore":834,"exploitabilityScore":839},{"source":522,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":845,"cvss_v4_0":9},{"baseScore":831,"baseSeverity":9,"vectorString":833,"impactScore":834,"exploitabilityScore":835},{"source":523,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":847,"cvss_v4_0":9},{"baseScore":831,"baseSeverity":9,"vectorString":833,"impactScore":834,"exploitabilityScore":835},[849,861,867,873,877,883,887,891,897,901,905,911,915,921,925,931,937,943,952,957,960,963,966,970,982,996],{"ecosystem":850,"name":851,"vendor":852,"product":851,"cpe_part":9,"purl_type":853,"purl_namespace":852,"purl_name":851,"source":9,"versions":854},"Chainguard","code-server","chainguard","apk",[855],{"version":856,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":859,"version_end_type":860,"fixed_in":9},"lt4_106_3_r2",true,"ecosystem","4.106.3-r2","excluding",{"ecosystem":850,"name":862,"vendor":852,"product":862,"cpe_part":9,"purl_type":853,"purl_namespace":852,"purl_name":862,"source":9,"versions":863},"gemini-cli",[864],{"version":865,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":866,"version_end_type":860,"fixed_in":9},"lt0_49_0_r4","0.49.0-r4",{"ecosystem":850,"name":868,"vendor":852,"product":868,"cpe_part":9,"purl_type":853,"purl_namespace":852,"purl_name":868,"source":9,"versions":869},"jitsucom-jitsu-console",[870],{"version":871,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":872,"version_end_type":860,"fixed_in":9},"lt2_11_0_r12","2.11.0-r12",{"ecosystem":850,"name":874,"vendor":852,"product":874,"cpe_part":9,"purl_type":853,"purl_namespace":852,"purl_name":874,"source":9,"versions":875},"jitsucom-jitsu-rotor",[876],{"version":871,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":872,"version_end_type":860,"fixed_in":9},{"ecosystem":850,"name":878,"vendor":852,"product":878,"cpe_part":9,"purl_type":853,"purl_namespace":852,"purl_name":878,"source":9,"versions":879},"kibana-8.19",[880],{"version":881,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":882,"version_end_type":860,"fixed_in":9},"lt8_19_10_r2","8.19.10-r2",{"ecosystem":850,"name":884,"vendor":852,"product":884,"cpe_part":9,"purl_type":853,"purl_namespace":852,"purl_name":884,"source":9,"versions":885},"kibana-8.19-bitnami",[886],{"version":881,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":882,"version_end_type":860,"fixed_in":9},{"ecosystem":850,"name":888,"vendor":852,"product":888,"cpe_part":9,"purl_type":853,"purl_namespace":852,"purl_name":888,"source":9,"versions":889},"kibana-8.19-iamguarded",[890],{"version":881,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":882,"version_end_type":860,"fixed_in":9},{"ecosystem":850,"name":892,"vendor":852,"product":892,"cpe_part":9,"purl_type":853,"purl_namespace":852,"purl_name":892,"source":9,"versions":893},"kibana-9.0",[894],{"version":895,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":896,"version_end_type":860,"fixed_in":9},"lt9_0_8_r7","9.0.8-r7",{"ecosystem":850,"name":898,"vendor":852,"product":898,"cpe_part":9,"purl_type":853,"purl_namespace":852,"purl_name":898,"source":9,"versions":899},"kibana-9.0-bitnami",[900],{"version":895,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":896,"version_end_type":860,"fixed_in":9},{"ecosystem":850,"name":902,"vendor":852,"product":902,"cpe_part":9,"purl_type":853,"purl_namespace":852,"purl_name":902,"source":9,"versions":903},"kibana-9.0-iamguarded",[904],{"version":895,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":896,"version_end_type":860,"fixed_in":9},{"ecosystem":850,"name":906,"vendor":852,"product":906,"cpe_part":9,"purl_type":853,"purl_namespace":852,"purl_name":906,"source":9,"versions":907},"kibana-9.1",[908],{"version":909,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":910,"version_end_type":860,"fixed_in":9},"lt9_1_10_r2","9.1.10-r2",{"ecosystem":850,"name":912,"vendor":852,"product":912,"cpe_part":9,"purl_type":853,"purl_namespace":852,"purl_name":912,"source":9,"versions":913},"kibana-9.1-iamguarded",[914],{"version":909,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":910,"version_end_type":860,"fixed_in":9},{"ecosystem":850,"name":916,"vendor":852,"product":916,"cpe_part":9,"purl_type":853,"purl_namespace":852,"purl_name":916,"source":9,"versions":917},"kibana-9.2",[918],{"version":919,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":920,"version_end_type":860,"fixed_in":9},"lt9_2_3_r4","9.2.3-r4",{"ecosystem":850,"name":922,"vendor":852,"product":922,"cpe_part":9,"purl_type":853,"purl_namespace":852,"purl_name":922,"source":9,"versions":923},"kibana-9.2-iamguarded",[924],{"version":919,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":920,"version_end_type":860,"fixed_in":9},{"ecosystem":850,"name":926,"vendor":852,"product":926,"cpe_part":9,"purl_type":853,"purl_namespace":852,"purl_name":926,"source":9,"versions":927},"langfuse-3-worker",[928],{"version":929,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":930,"version_end_type":860,"fixed_in":9},"lt3_146_0_r2","3.146.0-r2",{"ecosystem":850,"name":932,"vendor":852,"product":932,"cpe_part":9,"purl_type":853,"purl_namespace":852,"purl_name":932,"source":9,"versions":933},"langfuse-fips-3-worker",[934],{"version":935,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":936,"version_end_type":860,"fixed_in":9},"lt3_147_0_r1","3.147.0-r1",{"ecosystem":850,"name":938,"vendor":852,"product":938,"cpe_part":9,"purl_type":853,"purl_namespace":852,"purl_name":938,"source":9,"versions":939},"librechat",[940],{"version":941,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":942,"version_end_type":860,"fixed_in":9},"lt0_8_1_r5","0.8.1-r5",{"ecosystem":850,"name":944,"vendor":852,"product":944,"cpe_part":9,"purl_type":853,"purl_namespace":852,"purl_name":944,"source":9,"versions":945},"renovate",[946,949],{"version":947,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":948,"version_end_type":860,"fixed_in":9},"lt42_92_4_r0","42.92.4-r0",{"version":950,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":951,"version_end_type":860,"fixed_in":9},"lt42_94_1_r2","42.94.1-r2",{"ecosystem":953,"name":851,"vendor":954,"product":851,"cpe_part":9,"purl_type":853,"purl_namespace":954,"purl_name":851,"source":9,"versions":955},"Wolfi","wolfi",[956],{"version":856,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":859,"version_end_type":860,"fixed_in":9},{"ecosystem":953,"name":868,"vendor":954,"product":868,"cpe_part":9,"purl_type":853,"purl_namespace":954,"purl_name":868,"source":9,"versions":958},[959],{"version":871,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":872,"version_end_type":860,"fixed_in":9},{"ecosystem":953,"name":874,"vendor":954,"product":874,"cpe_part":9,"purl_type":853,"purl_namespace":954,"purl_name":874,"source":9,"versions":961},[962],{"version":871,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":872,"version_end_type":860,"fixed_in":9},{"ecosystem":953,"name":926,"vendor":954,"product":926,"cpe_part":9,"purl_type":853,"purl_namespace":954,"purl_name":926,"source":9,"versions":964},[965],{"version":929,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":930,"version_end_type":860,"fixed_in":9},{"ecosystem":953,"name":944,"vendor":954,"product":944,"cpe_part":9,"purl_type":853,"purl_namespace":954,"purl_name":944,"source":9,"versions":967},[968,969],{"version":947,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":948,"version_end_type":860,"fixed_in":9},{"version":950,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":951,"version_end_type":860,"fixed_in":9},{"ecosystem":971,"name":972,"vendor":973,"product":972,"cpe_part":9,"purl_type":974,"purl_namespace":973,"purl_name":972,"source":9,"versions":975},"Debian","node-undici","debian","deb",[976,978,979],{"version":977,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"version":977,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":980,"is_range":857,"range_type":858,"version_start":9,"version_start_type":9,"version_end":981,"version_end_type":860,"fixed_in":9},"lt7_18_2+dfsg+~cs3_2_0_1","7.18.2+dfsg+~cs3.2.0-1",{"ecosystem":9,"name":983,"vendor":984,"product":983,"cpe_part":985,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":986},"undici","nodejs","a",[987,991],{"version":988,"is_range":857,"range_type":989,"version_start":9,"version_start_type":9,"version_end":990,"version_end_type":860,"fixed_in":9},"lt6.23.0","cpe","6.23.0",{"version":992,"is_range":857,"range_type":989,"version_start":993,"version_start_type":994,"version_end":995,"version_end_type":860,"fixed_in":9},"gte7.0.0_lt7.18.2","7.0.0","including","7.18.2",{"ecosystem":997,"name":983,"vendor":997,"product":983,"cpe_part":9,"purl_type":998,"purl_namespace":9,"purl_name":983,"source":9,"versions":999},"Npm","npm",[1000,1003],{"version":1001,"is_range":857,"range_type":1002,"version_start":993,"version_start_type":994,"version_end":995,"version_end_type":860,"fixed_in":9},"gte7_0_0_lt7_18_2","semver",{"version":1004,"is_range":857,"range_type":1002,"version_start":9,"version_start_type":9,"version_end":990,"version_end_type":860,"fixed_in":9},"lt6_23_0"]