{"schemaVersion":3,"id":"CVE-2026-42328","aliases":["CGA-3369-9w3x-7jgj","CGA-4778-6pjc-xg57","CGA-5q85-86xv-c6v5","CGA-5qmw-6xvp-v348","CGA-8295-jj8q-4wf7","CGA-9gcf-x8v7-2638","CGA-h2rv-6944-w23v","CGA-hg92-r3cq-93q8","CGA-j43p-hp6h-h7jg","CGA-jcvj-3587-xhp2","CGA-p22q-44cx-gf95","CGA-pfhm-jmxf-3rq6","CGA-pg28-rrqm-hgw5","CGA-pjmh-hm8c-92rm","CGA-pvhf-3m8g-wr35","CGA-r7hf-f5xp-g3v2","CGA-r8jg-cvcv-rfrm","CGA-xfvr-75m7-j99m","GHSA-w239-58x2-q8p5","GO-2026-5684","CGA-2327-9833-gpjh","CGA-28qv-893f-7vf9","CGA-2chr-ph2h-rgfq","CGA-2hv9-xhj2-2c65","CGA-37rx-ww2p-4qg9","CGA-3qwx-r522-wgj3","CGA-42gf-vg6f-pjvj","CGA-4463-v8w7-78rw","CGA-4hhr-hr73-w2pw","CGA-69g9-gx4p-3m75","CGA-6h4x-84hv-8p52","CGA-8658-pfc5-j3h3","CGA-8w97-f754-238c","CGA-937h-2vxh-94rq","CGA-9f56-gww6-jr6w","CGA-9p58-5mfv-8wjw","CGA-c97r-247g-p7px","CGA-f78c-8692-9pxm","CGA-g64w-fw32-fmfx","CGA-gf62-rf35-763g","CGA-ggmm-r8cc-gj85","CGA-hx64-qh5j-ggm9","CGA-r85g-x3qp-7x2r","CGA-wh23-72p9-qqc2","CGA-wj9x-6p9j-3f9w","CGA-x726-r9gq-jgq2","CGA-xc42-2qw6-37f2","CGA-xj5f-fwvf-222r","CGA-xx6g-x853-m352"],"status":"published","duplicateOf":null,"title":null,"description":"go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interfaces, a batteries-included codec implementations of IPLD for CBOR and JSON, and tooling for basic operations on IPLD objects. Prior to 0.23.0, the DAG-CBOR and DAG-JSON decoders recurse on each nested map or list without a depth limit. A payload containing deeply nested collections causes the decoder to recurse once per level, growing the goroutine stack until the Go runtime terminates the process with a fatal stack overflow (distinct from a recoverable panic). This vulnerability is fixed in 0.23.0.","dates":{"published":"2026-05-27T16:31:38.090Z","modified":"2026-05-28T14:14:09.825Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.2,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.2,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":6.2,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":6.4,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Go","score":6.2,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":6.4,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":6.2,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":6.4,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.2,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00156,"percentile":0.04386,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.036000000000000004,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.0012},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0012,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0012,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0012,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0012,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0012,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0012,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0012,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0012,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0012,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0012,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00156,"percentile":0.04386}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.0012,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0012,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0012,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0012,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00156,"percentile":0.04386}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-674","name":"Uncontrolled Recursion","description":"The product does not properly control the amount of recursion that takes place,  consuming excessive resources, such as allocated memory or the program stack.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/674.html"}],"affected":[{"vendor":"chainguard","product":"ipfs-cluster","name":"ipfs-cluster","label":"ipfs-cluster","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ipfs-cluster","purlType":"apk","versions":[{"text":"< 1.1.5-r14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.5-r14","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ipfs-cluster-fips","name":"ipfs-cluster-fips","label":"ipfs-cluster-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ipfs-cluster-fips","purlType":"apk","versions":[{"text":"< 1.1.5-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.5-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-1.31","name":"k3s-1.31","label":"k3s-1.31","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-1.31","purlType":"apk","versions":[{"text":"< 1.31.6.1-r23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.31.6.1-r23","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-1.32","name":"k3s-1.32","label":"k3s-1.32","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-1.32","purlType":"apk","versions":[{"text":"< 1.32.13.1-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.32.13.1-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-1.33","name":"k3s-1.33","label":"k3s-1.33","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-1.33","purlType":"apk","versions":[{"text":"< 1.33.10.1-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.33.10.1-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-1.34","name":"k3s-1.34","label":"k3s-1.34","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-1.34","purlType":"apk","versions":[{"text":"< 1.34.6.1-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.34.6.1-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-1.35","name":"k3s-1.35","label":"k3s-1.35","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-1.35","purlType":"apk","versions":[{"text":"< 1.35.3.1-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.35.3.1-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-static","name":"k3s-static","label":"k3s-static","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-static","purlType":"apk","versions":[{"text":"< 1.35.3.1-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.35.3.1-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-static-1.31","name":"k3s-static-1.31","label":"k3s-static-1.31","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-static-1.31","purlType":"apk","versions":[{"text":"< 1.31.6.1-r23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.31.6.1-r23","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-static-1.32","name":"k3s-static-1.32","label":"k3s-static-1.32","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-static-1.32","purlType":"apk","versions":[{"text":"< 1.32.13.1-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.32.13.1-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-static-1.33","name":"k3s-static-1.33","label":"k3s-static-1.33","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-static-1.33","purlType":"apk","versions":[{"text":"< 1.33.10.1-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.33.10.1-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-static-1.34","name":"k3s-static-1.34","label":"k3s-static-1.34","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-static-1.34","purlType":"apk","versions":[{"text":"< 1.34.6.1-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.34.6.1-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-static-1.35","name":"k3s-static-1.35","label":"k3s-static-1.35","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-static-1.35","purlType":"apk","versions":[{"text":"< 1.35.3.1-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.35.3.1-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-1.31","name":"rke2-runtime-1.31","label":"rke2-runtime-1.31","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-1.31","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-1.32","name":"rke2-runtime-1.32","label":"rke2-runtime-1.32","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-1.32","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-1.33","name":"rke2-runtime-1.33","label":"rke2-runtime-1.33","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-1.33","purlType":"apk","versions":[{"text":"< 1.33.11.2.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.33.11.2.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-1.34","name":"rke2-runtime-1.34","label":"rke2-runtime-1.34","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-1.34","purlType":"apk","versions":[{"text":"< 1.34.7.2.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.34.7.2.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-1.35","name":"rke2-runtime-1.35","label":"rke2-runtime-1.35","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-1.35","purlType":"apk","versions":[{"text":"< 1.35.4.2.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.35.4.2.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-fips-1.31","name":"rke2-runtime-fips-1.31","label":"rke2-runtime-fips-1.31","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-fips-1.31","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-fips-1.32","name":"rke2-runtime-fips-1.32","label":"rke2-runtime-fips-1.32","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-fips-1.32","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-fips-1.34","name":"rke2-runtime-fips-1.34","label":"rke2-runtime-fips-1.34","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-fips-1.34","purlType":"apk","versions":[{"text":"< 1.34.8.2.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.34.8.2.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-fips-1.35","name":"rke2-runtime-fips-1.35","label":"rke2-runtime-fips-1.35","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-fips-1.35","purlType":"apk","versions":[{"text":"< 1.35.5.2.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.35.5.2.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-fips-1.36","name":"rke2-runtime-fips-1.36","label":"rke2-runtime-fips-1.36","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-fips-1.36","purlType":"apk","versions":[{"text":"< 1.36.1.2.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.36.1.2.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spegel","name":"spegel","label":"spegel","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spegel","purlType":"apk","versions":[{"text":"< 0.7.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.7.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spegel-fips","name":"spegel-fips","label":"spegel-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spegel-fips","purlType":"apk","versions":[{"text":"< 0.7.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.7.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ipfs-cluster","name":"ipfs-cluster","label":"ipfs-cluster","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ipfs-cluster","purlType":"apk","versions":[{"text":"< 1.1.5-r14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.5-r14","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-1.32","name":"k3s-1.32","label":"k3s-1.32","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-1.32","purlType":"apk","versions":[{"text":"< 1.32.13.1-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.32.13.1-r15","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-1.33","name":"k3s-1.33","label":"k3s-1.33","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-1.33","purlType":"apk","versions":[{"text":"< 1.33.10.1-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.33.10.1-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-1.34","name":"k3s-1.34","label":"k3s-1.34","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-1.34","purlType":"apk","versions":[{"text":"< 1.34.6.1-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.34.6.1-r16","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-1.35","name":"k3s-1.35","label":"k3s-1.35","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-1.35","purlType":"apk","versions":[{"text":"< 1.35.3.1-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.35.3.1-r7","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-static","name":"k3s-static","label":"k3s-static","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-static","purlType":"apk","versions":[{"text":"< 1.35.3.1-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.35.3.1-r7","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-static-1.32","name":"k3s-static-1.32","label":"k3s-static-1.32","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-static-1.32","purlType":"apk","versions":[{"text":"< 1.32.13.1-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.32.13.1-r15","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-static-1.33","name":"k3s-static-1.33","label":"k3s-static-1.33","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-static-1.33","purlType":"apk","versions":[{"text":"< 1.33.10.1-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.33.10.1-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-static-1.34","name":"k3s-static-1.34","label":"k3s-static-1.34","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-static-1.34","purlType":"apk","versions":[{"text":"< 1.34.6.1-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.34.6.1-r16","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-static-1.35","name":"k3s-static-1.35","label":"k3s-static-1.35","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-static-1.35","purlType":"apk","versions":[{"text":"< 1.35.3.1-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.35.3.1-r7","eol":null,"hubHref":null},{"vendor":"wolfi","product":"spegel","name":"spegel","label":"spegel","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/spegel","purlType":"apk","versions":[{"text":"< 0.7.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.7.0-r2","eol":null,"hubHref":null},{"vendor":"github.com/ipld","product":"go-ipld-prime","name":"github.com/ipld/go-ipld-prime","label":"go-ipld-prime","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/github.com/ipld/go-ipld-prime","purlType":"golang","versions":[{"text":"< 0.23.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.23.0","eol":null,"hubHref":null},{"vendor":"ipld","product":"go-ipld-prime","name":"go-ipld-prime","label":"go-ipld-prime","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 0.23.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.23.0","eol":null,"hubHref":"/vendor/ipld/go-ipld-prime"}],"affectedCount":38,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/ipld/go-ipld-prime/security/advisories/GHSA-w239-58x2-q8p5","label":"github.com/ipld/go-ipld-prime/security/advisories/GHSA-w239-58x2-q8p5","hostname":"github.com","tags":["X Refsource CONFIRM","Advisory","WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42328.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42328.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42328","label":"nvd.nist.gov/vuln/detail/CVE-2026-42328","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/ipld/go-ipld-prime","label":"github.com/ipld/go-ipld-prime","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/ipld/go-ipld-prime/pull/625","label":"github.com/ipld/go-ipld-prime/pull/625","hostname":"github.com","tags":["FIX"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:21551-1","SUSE-SU-2026:23216-1","SUSE-SU-2026:23227-1"],"duplicates":[],"related":["CGA-MFQR-H7VV-52GQ","OPENSUSE-SU-2026:21551-1","SUSE-SU-2026:23216-1","SUSE-SU-2026:23227-1"]},"timeline":[{"kind":"published","date":"2026-05-27T16:31:38.090Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-05-28T14:14:09.825Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":25,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T22:46:56.633Z","stale":false,"partial":false}}