{"schemaVersion":3,"id":"CVE-2026-40542","aliases":["UBUNTU-CVE-2026-40542","CGA-29rf-75wv-88r6","CGA-2gg3-jv85-r97r","CGA-2gpp-v6p7-gc6w","CGA-2pv8-cx6j-f997","CGA-366q-29rm-3xwx","CGA-3739-894h-r956","CGA-3jwm-37cg-c8g2","CGA-3qf2-m6xx-xx5q","CGA-48h5-6hj6-6j9x","CGA-4x49-m3fq-rh5g","CGA-4xqm-x4hg-4jf8","CGA-5834-6fvx-vch7","CGA-5ghw-h6hv-p3gh","CGA-63gv-3xp7-54fc","CGA-6hg9-hq33-q6hp","CGA-7r5f-fgrg-c2cq","CGA-7rxm-pcfc-5mm3","CGA-834m-vjfc-5mp9","CGA-836j-cpvw-6v52","CGA-84f9-vjg7-hchp","CGA-8w6v-g8g3-v3mx","CGA-9247-grjh-7cwg","CGA-9hcm-hcr8-mcfx","CGA-9vcm-wrgc-vw8j","CGA-9xj6-c6px-x35w","CGA-c2m3-j9wf-jj75","CGA-f396-7x43-9w77","CGA-fg8q-v9rf-m66m","CGA-fjwj-mpp5-j545","CGA-fmff-mq99-q7m2","CGA-h24g-phjx-qm9x","CGA-h7g2-rfwm-qvcg","CGA-hggr-g4q9-f63f","CGA-hqjc-ggm2-37qx","CGA-j483-mwwp-mhwf","CGA-j865-9rmc-hf8p","CGA-jh66-7v43-j4vv","CGA-m48g-vw82-wv7q","CGA-m9g9-46cg-m9h9","CGA-mfr2-3cc3-5968","CGA-mmhw-fc72-qmxp","CGA-qqv3-cv94-7jcj","CGA-rq7w-ghrx-qm3r","CGA-rrmv-wvr3-c67j","CGA-v2fx-qmg5-m85x","CGA-v363-vfph-hc37","CGA-x9qw-8r6v-mvv6","CGA-xp79-cx47-cf72","CGA-2444-g8jg-gg4c","CGA-39m8-7mmr-26wh","CGA-4472-rfj6-c6f6","CGA-46w3-wqjh-2wxj","CGA-47vh-37vm-4j5h","CGA-4jrc-qwgg-2gpj","CGA-4mjx-f7cq-qjc5","CGA-4xcp-w2qq-6c46","CGA-6pp8-jvpp-2v9m","CGA-7q69-m7j8-x979","CGA-92f2-fqwc-g7rv","CGA-998c-prxr-c2hw","CGA-chhf-9w4m-3hph","CGA-f9gp-588j-x6r7","CGA-fmm8-729j-m4rp","CGA-fqwv-3946-x334","CGA-g2x6-9c57-jjm2","CGA-g8gc-f9rf-w5ph","CGA-gf49-m435-5mh9","CGA-hr5q-gj7m-gx5x","CGA-hx38-mr85-fwrv","CGA-j2p3-vxg6-hh3v","CGA-j3gp-38rh-3j32","CGA-mmrm-mpj4-gpg8","CGA-mvjh-pj7p-3h29","CGA-prhq-mf47-cg5j","CGA-pv3j-73q2-f67f","GHSA-v468-qcjx-r72w","CGA-qh93-g4cv-f5m8","CGA-qp44-6gvp-f5j2","CGA-qvvp-xx94-58qq","CGA-vm4g-jfw2-cmmq"],"status":"published","duplicateOf":null,"title":null,"description":"Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper mutual authentication verification. Users are recommended to upgrade to version 5.6.1, which fixes this issue.","dates":{"published":"2026-04-22T07:07:21.344Z","modified":"2026-09-09T12:05:01.516Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.3,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.3,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.3,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","exploitability":10,"impact":5.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":7.3,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","exploitability":10,"impact":5.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":7.3,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","exploitability":10,"impact":5.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":7.3,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","exploitability":10,"impact":5.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.3,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00702,"percentile":0.52427,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.145,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00557},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00702,"percentile":0.52427}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00702,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00702,"percentile":0.52427}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-304","name":"Missing Critical Step in Authentication","description":"The product implements an authentication technique, but it skips a step that weakens the technique.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/304.html"},{"id":"CWE-325","name":"Missing Cryptographic Step","description":"The product does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than advertised by the algorithm.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/325.html"}],"affected":[{"vendor":"apache software foundation","product":"apache httpclient","name":"Apache HttpClient","label":"apache httpclient","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 5.6, < 5.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.6, < 5.6.1","eol":null,"hubHref":"/vendor/apache_software_foundation/apache_httpclient"},{"vendor":"apache","product":"httpclient","name":"httpclient","label":"httpclient","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.6","eol":null,"hubHref":"/vendor/apache/httpclient"},{"vendor":"chainguard","product":"apache-nifi","name":"apache-nifi","label":"apache-nifi","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi","purlType":"apk","versions":[{"text":"< 2.9.0-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.9.0-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dependency-track","name":"dependency-track","label":"dependency-track","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dependency-track","purlType":"apk","versions":[{"text":"< 4.14.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dependency-track-apiserver","name":"dependency-track-apiserver","label":"dependency-track-apiserver","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dependency-track-apiserver","purlType":"apk","versions":[{"text":"< 4.14.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dependency-track-bundled","name":"dependency-track-bundled","label":"dependency-track-bundled","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dependency-track-bundled","purlType":"apk","versions":[{"text":"< 4.14.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"jbang","name":"jbang","label":"jbang","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/jbang","purlType":"apk","versions":[{"text":"< 0.139.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.139.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-3","name":"opensearch-3","label":"opensearch-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-3","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-3-alerting","name":"opensearch-3-alerting","label":"opensearch-3-alerting","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-3-alerting","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-3-anomaly-detection","name":"opensearch-3-anomaly-detection","label":"opensearch-3-anomaly-detection","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-3-anomaly-detection","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-3-cross-cluster-replication","name":"opensearch-3-cross-cluster-replication","label":"opensearch-3-cross-cluster-replication","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-3-cross-cluster-replication","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-3-k-nn","name":"opensearch-3-k-nn","label":"opensearch-3-k-nn","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-3-k-nn","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-3-ml-commons","name":"opensearch-3-ml-commons","label":"opensearch-3-ml-commons","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-3-ml-commons","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-3-notifications","name":"opensearch-3-notifications","label":"opensearch-3-notifications","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-3-notifications","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-3-security","name":"opensearch-3-security","label":"opensearch-3-security","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-3-security","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-3-sql","name":"opensearch-3-sql","label":"opensearch-3-sql","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-3-sql","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-fips-3","name":"opensearch-fips-3","label":"opensearch-fips-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-fips-3","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-fips-3-alerting","name":"opensearch-fips-3-alerting","label":"opensearch-fips-3-alerting","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-fips-3-alerting","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-fips-3-anomaly-detection","name":"opensearch-fips-3-anomaly-detection","label":"opensearch-fips-3-anomaly-detection","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-fips-3-anomaly-detection","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-fips-3-cross-cluster-replication","name":"opensearch-fips-3-cross-cluster-replication","label":"opensearch-fips-3-cross-cluster-replication","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-fips-3-cross-cluster-replication","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-fips-3-k-nn","name":"opensearch-fips-3-k-nn","label":"opensearch-fips-3-k-nn","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-fips-3-k-nn","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-fips-3-ml-commons","name":"opensearch-fips-3-ml-commons","label":"opensearch-fips-3-ml-commons","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-fips-3-ml-commons","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-fips-3-notifications","name":"opensearch-fips-3-notifications","label":"opensearch-fips-3-notifications","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-fips-3-notifications","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-fips-3-security","name":"opensearch-fips-3-security","label":"opensearch-fips-3-security","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-fips-3-security","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-fips-3-sql","name":"opensearch-fips-3-sql","label":"opensearch-fips-3-sql","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-fips-3-sql","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pinot","name":"pinot","label":"pinot","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pinot","purlType":"apk","versions":[{"text":"< 1.5.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pinot-fips","name":"pinot-fips","label":"pinot-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pinot-fips","purlType":"apk","versions":[{"text":"< 1.5.0-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.0-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-clickhouse","name":"trino-plugin-clickhouse","label":"trino-plugin-clickhouse","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-clickhouse","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-delta-lake","name":"trino-plugin-delta-lake","label":"trino-plugin-delta-lake","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-delta-lake","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-druid","name":"trino-plugin-druid","label":"trino-plugin-druid","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-druid","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-hive","name":"trino-plugin-hive","label":"trino-plugin-hive","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-hive","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-hudi","name":"trino-plugin-hudi","label":"trino-plugin-hudi","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-hudi","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-iceberg","name":"trino-plugin-iceberg","label":"trino-plugin-iceberg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-iceberg","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-kafka","name":"trino-plugin-kafka","label":"trino-plugin-kafka","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-kafka","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-lakehouse","name":"trino-plugin-lakehouse","label":"trino-plugin-lakehouse","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-lakehouse","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-openlineage","name":"trino-plugin-openlineage","label":"trino-plugin-openlineage","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-openlineage","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-pinot","name":"trino-plugin-pinot","label":"trino-plugin-pinot","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-pinot","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-nifi","name":"apache-nifi","label":"apache-nifi","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-nifi","purlType":"apk","versions":[{"text":"< 2.9.0-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.9.0-r7","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dependency-track","name":"dependency-track","label":"dependency-track","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dependency-track","purlType":"apk","versions":[{"text":"< 4.14.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.1-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dependency-track-bundled","name":"dependency-track-bundled","label":"dependency-track-bundled","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dependency-track-bundled","purlType":"apk","versions":[{"text":"< 4.14.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.1-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-3","name":"opensearch-3","label":"opensearch-3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-3","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-3-alerting","name":"opensearch-3-alerting","label":"opensearch-3-alerting","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-3-alerting","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-3-anomaly-detection","name":"opensearch-3-anomaly-detection","label":"opensearch-3-anomaly-detection","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-3-anomaly-detection","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-3-cross-cluster-replication","name":"opensearch-3-cross-cluster-replication","label":"opensearch-3-cross-cluster-replication","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-3-cross-cluster-replication","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-3-k-nn","name":"opensearch-3-k-nn","label":"opensearch-3-k-nn","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-3-k-nn","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-3-ml-commons","name":"opensearch-3-ml-commons","label":"opensearch-3-ml-commons","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-3-ml-commons","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-3-notifications","name":"opensearch-3-notifications","label":"opensearch-3-notifications","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-3-notifications","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-3-security","name":"opensearch-3-security","label":"opensearch-3-security","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-3-security","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-3-sql","name":"opensearch-3-sql","label":"opensearch-3-sql","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-3-sql","purlType":"apk","versions":[{"text":"< 3.6.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-clickhouse","name":"trino-plugin-clickhouse","label":"trino-plugin-clickhouse","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-clickhouse","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-delta-lake","name":"trino-plugin-delta-lake","label":"trino-plugin-delta-lake","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-delta-lake","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-druid","name":"trino-plugin-druid","label":"trino-plugin-druid","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-druid","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-hive","name":"trino-plugin-hive","label":"trino-plugin-hive","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-hive","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-hudi","name":"trino-plugin-hudi","label":"trino-plugin-hudi","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-hudi","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-iceberg","name":"trino-plugin-iceberg","label":"trino-plugin-iceberg","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-iceberg","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-kafka","name":"trino-plugin-kafka","label":"trino-plugin-kafka","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-kafka","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-lakehouse","name":"trino-plugin-lakehouse","label":"trino-plugin-lakehouse","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-lakehouse","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-openlineage","name":"trino-plugin-openlineage","label":"trino-plugin-openlineage","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-openlineage","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-pinot","name":"trino-plugin-pinot","label":"trino-plugin-pinot","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-pinot","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"httpcomponents-client","name":"httpcomponents-client","label":"httpcomponents-client","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/httpcomponents-client","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"org.apache.httpcomponents.client5","product":"httpclient5","name":"org.apache.httpcomponents.client5:httpclient5","label":"httpclient5","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.apache.httpcomponents.client5/httpclient5","purlType":"maven","versions":[{"text":"≥ 5.6-alpha1, < 5.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.6-alpha1, < 5.6.1","eol":null,"hubHref":null}],"affectedCount":61,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://lists.apache.org/thread/tfmgv86xr0z1y096vs3z0y315t1v3o97","label":"lists.apache.org/thread/tfmgv86xr0z1y096vs3z0y315t1v3o97","hostname":"lists.apache.org","tags":["Vendor Advisory","REPORT","Advisory","WEB","Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2026/04/22/5","label":"www.openwall.com/lists/oss-security/2026/04/22/5","hostname":"www.openwall.com","tags":["WEB","Mailing List","Third Party Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-40542","label":"access.redhat.com/security/cve/CVE-2026-40542","hostname":"access.redhat.com","tags":["VDB Entry","X Refsource REDHAT","Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460518","label":"bugzilla.redhat.com/show_bug.cgi?id=2460518","hostname":"bugzilla.redhat.com","tags":["Issue Tracking","X Refsource REDHAT","REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40542.json","label":"security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40542.json","hostname":"security.access.redhat.com","tags":["X Sadp Csaf Vex","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:60247","label":"access.redhat.com/errata/RHSA-2026:60247","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:60249","label":"access.redhat.com/errata/RHSA-2026:60249","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:60248","label":"access.redhat.com/errata/RHSA-2026:60248","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:60239","label":"access.redhat.com/errata/RHSA-2026:60239","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:60251","label":"access.redhat.com/errata/RHSA-2026:60251","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:60246","label":"access.redhat.com/errata/RHSA-2026:60246","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:60250","label":"access.redhat.com/errata/RHSA-2026:60250","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:60252","label":"access.redhat.com/errata/RHSA-2026:60252","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:60259","label":"access.redhat.com/errata/RHSA-2026:60259","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:60254","label":"access.redhat.com/errata/RHSA-2026:60254","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:60256","label":"access.redhat.com/errata/RHSA-2026:60256","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-40542","label":"ubuntu.com/security/CVE-2026-40542","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-40542","label":"www.cve.org/CVERecord?id=CVE-2026-40542","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://repo.maven.apache.org/maven2","label":"repo.maven.apache.org/maven2","hostname":"repo.maven.apache.org","tags":["WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40542.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40542.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40542","label":"nvd.nist.gov/vuln/detail/CVE-2026-40542","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/apache/httpcomponents-client/commit/726eac2323d370435d8afca1e0540aa099927f18","label":"github.com/apache/httpcomponents-client/commit/726eac2323d370435d8afca1e0540aa099927f18","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/apache/httpcomponents-client","label":"github.com/apache/httpcomponents-client","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-976W-G8C9-JWF5"]},"timeline":[{"kind":"published","date":"2026-04-22T07:07:21.344Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-09T12:05:01.516Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":29,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T18:31:52.405Z","stale":false,"partial":false}}