{"schemaVersion":3,"id":"CVE-2026-44979","aliases":["CGA-2m3c-wgrc-v34f","CGA-38gv-7c29-3h55","CGA-45f6-fxfw-cp77","CGA-842w-2h68-hp74","CGA-fvwm-69pq-v55p","CGA-hp9v-vrvw-rw8x","CGA-mph9-8h2g-hmp7","CGA-wv73-qcv8-f928","GHSA-vhjm-w67q-g75c","CGA-3857-6hq3-4576","CGA-3c2m-3fq5-mx69","CGA-3c7v-38gc-rwgf","CGA-43qh-ffpc-mpr5","CGA-49h3-8mgw-wx23","CGA-4fcc-fhpm-2h68","CGA-4jh4-c2wp-5m8w","CGA-52hc-pfmx-44gm","CGA-5cgh-f6c2-p8jv","CGA-5cpv-qfh8-9fpg","CGA-5pp4-wmm9-3549","CGA-628q-fvq2-x7vm","CGA-67c4-2xgr-m5xx","CGA-6g7c-65qj-3wf5","CGA-6hv2-g8gg-c9gh","CGA-6xwf-7m8q-qxr5","CGA-7cgf-hr2v-gj2j","CGA-7m72-f5ph-pq8c","CGA-7rhv-r74q-5rqh","CGA-7rm3-g47p-6rr6","CGA-7rx2-rch8-527p","CGA-7xf8-vhhr-m67j","CGA-863c-hj9g-5vpr","CGA-8mgc-9964-v35m","CGA-9g4q-4mf4-gqh9","CGA-c354-q5xx-rwc7","CGA-c42m-4233-3432","CGA-c4mf-452f-w468","CGA-cj82-8cj5-4cpw","CGA-cjjh-hjmg-vh75","CGA-cwm2-m5c6-h2cf","CGA-fmmj-gvjj-6jg2","CGA-g274-78hf-mgjq","CGA-g5v8-w9f2-xrh8","CGA-g9cg-c7qj-2wvx","CGA-gmcr-4ghv-63m9","CGA-gwf2-vmpv-j8fq","CGA-h42x-j8pq-g7f9","CGA-j836-3j26-vv38","CGA-j87q-7pj7-hhxr","CGA-jh92-jx73-w7rf","CGA-jxjw-v3c3-f7wg","CGA-m62h-hwxx-45gg","CGA-mg22-h8hf-qqgj","CGA-p69j-6757-h7q4","CGA-pc64-xpc9-qq9f","CGA-q2pw-rgh5-jwx9","CGA-qrrm-6w92-7p58","CGA-qrx3-mgm6-w6vv","CGA-r9hg-h83m-mc3p","CGA-rcg2-84cg-746f","CGA-rcg3-w4gq-f4hj","CGA-rhv8-fhr8-vqw7","CGA-rqgx-g52f-ff4f","CGA-vjxc-98q5-6m83","CGA-vp7v-8r7r-wx78","CGA-vvf9-hfrg-825w","CGA-vw6m-65fq-x38j","CGA-w2w4-h5jw-2g9v","CGA-w8gr-c3f5-v7m7","CGA-wj76-9vf6-qg45","CGA-wjqw-486h-m8wc","CGA-x5rf-93x9-xxmf","CGA-xgmh-8j7j-qqh4"],"status":"published","duplicateOf":null,"title":null,"description":"@hapi/wreck is an HTTP client utility. Prior to 18.1.1, when @hapi/wreck follows a 3xx redirect to a different hostname, only the Authorization and Cookie headers are stripped, and the standard credential header Proxy-Authorization is forwarded intact to the redirect target, potentially exposing forward-proxy credentials to a host outside the original trust boundary when redirects are enabled through the redirects option or Wreck.defaults({ redirects: ... }). This issue is fixed in version 18.1.1.","dates":{"published":"2026-07-17T21:01:01.165Z","modified":"2026-07-20T14:35:45.343Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.3,"severity":"medium","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":6.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":6.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Npm","score":6.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":6.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":6.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0042,"percentile":0.34904,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.0042},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0042,"percentile":0.34904}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0042,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0042,"percentile":0.34904}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/200.html"},{"id":"CWE-522","name":"Insufficiently Protected Credentials","description":"The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.","type":"weakness","status":"Incomplete","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/522.html"}],"affected":[{"vendor":"chainguard","product":"kibana-7","name":"kibana-7","label":"kibana-7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.17","name":"kibana-8.17","label":"kibana-8.17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17","purlType":"apk","versions":[{"text":"< 8.17.10-r22","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r22","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.17-bitnami","name":"kibana-8.17-bitnami","label":"kibana-8.17-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17-bitnami","purlType":"apk","versions":[{"text":"< 8.17.10-r22","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r22","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.17-iamguarded","name":"kibana-8.17-iamguarded","label":"kibana-8.17-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17-iamguarded","purlType":"apk","versions":[{"text":"< 8.17.10-r22","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r22","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19","name":"kibana-8.19","label":"kibana-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19","purlType":"apk","versions":[{"text":"< 8.19.16-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.16-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19-bitnami","name":"kibana-8.19-bitnami","label":"kibana-8.19-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19-bitnami","purlType":"apk","versions":[{"text":"< 8.19.16-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.16-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19-iamguarded","name":"kibana-8.19-iamguarded","label":"kibana-8.19-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19-iamguarded","purlType":"apk","versions":[{"text":"< 8.19.16-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.16-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0","name":"kibana-9.0","label":"kibana-9.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0","purlType":"apk","versions":[{"text":"< 9.0.8-r26","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r26","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0-bitnami","name":"kibana-9.0-bitnami","label":"kibana-9.0-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0-bitnami","purlType":"apk","versions":[{"text":"< 9.0.8-r26","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r26","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0-iamguarded","name":"kibana-9.0-iamguarded","label":"kibana-9.0-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0-iamguarded","purlType":"apk","versions":[{"text":"< 9.0.8-r26","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r26","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.1","name":"kibana-9.1","label":"kibana-9.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.1","purlType":"apk","versions":[{"text":"< 9.1.10-r19","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r19","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.1-iamguarded","name":"kibana-9.1-iamguarded","label":"kibana-9.1-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.1-iamguarded","purlType":"apk","versions":[{"text":"< 9.1.10-r19","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r19","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2","name":"kibana-9.2","label":"kibana-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2","purlType":"apk","versions":[{"text":"< 9.2.8-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2-iamguarded","name":"kibana-9.2-iamguarded","label":"kibana-9.2-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2-iamguarded","purlType":"apk","versions":[{"text":"< 9.2.8-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3","name":"kibana-9.3","label":"kibana-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3","purlType":"apk","versions":[{"text":"< 9.3.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3-iamguarded","name":"kibana-9.3-iamguarded","label":"kibana-9.3-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3-iamguarded","purlType":"apk","versions":[{"text":"< 9.3.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.4","name":"kibana-9.4","label":"kibana-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.4","purlType":"apk","versions":[{"text":"< 9.4.2-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.2-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.4-iamguarded","name":"kibana-9.4-iamguarded","label":"kibana-9.4-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.4-iamguarded","purlType":"apk","versions":[{"text":"< 9.4.2-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.2-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2","name":"opensearch-dashboards-2","label":"opensearch-dashboards-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips","name":"opensearch-dashboards-2-fips","label":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-security-dashboards-plugin","name":"opensearch-dashboards-2-fips-security-dashboards-plugin","label":"opensearch-dashboards-2-fips-security-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-security-dashboards-plugin","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-security-dashboards-plugin","name":"opensearch-dashboards-2-security-dashboards-plugin","label":"opensearch-dashboards-2-security-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-security-dashboards-plugin","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3","name":"opensearch-dashboards-3","label":"opensearch-dashboards-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3","purlType":"apk","versions":[{"text":"< 3.8.0-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.7.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r0 | < 3.7.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips","name":"opensearch-dashboards-3-fips","label":"opensearch-dashboards-3-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips","purlType":"apk","versions":[{"text":"< 3.7.0-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.7.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.0-r0 | < 3.7.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips-security-dashboards-plugin","name":"opensearch-dashboards-3-fips-security-dashboards-plugin","label":"opensearch-dashboards-3-fips-security-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-security-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.7.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-security-dashboards-plugin","name":"opensearch-dashboards-3-security-dashboards-plugin","label":"opensearch-dashboards-3-security-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-security-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.7.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard","name":"wazuh-dashboard","label":"wazuh-dashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-fips","name":"wazuh-dashboard-fips","label":"wazuh-dashboard-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-security-plugin","name":"wazuh-dashboard-security-plugin","label":"wazuh-dashboard-security-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-security-plugin-fips","name":"wazuh-dashboard-security-plugin-fips","label":"wazuh-dashboard-security-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3","name":"opensearch-dashboards-3","label":"opensearch-dashboards-3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3","purlType":"apk","versions":[{"text":"< 3.8.0-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.7.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r0 | < 3.7.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3-security-dashboards-plugin","name":"opensearch-dashboards-3-security-dashboards-plugin","label":"opensearch-dashboards-3-security-dashboards-plugin","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3-security-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.7.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.0-r0","eol":null,"hubHref":null},{"vendor":"hapijs","product":"wreck","name":"wreck","label":"wreck","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 18.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.1.1","eol":null,"hubHref":"/vendor/hapijs/wreck"},{"vendor":"@hapi","product":"wreck","name":"@hapi/wreck","label":"wreck","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/@hapi/wreck","purlType":"npm","versions":[{"text":"< 18.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.1.1","eol":null,"hubHref":null}],"affectedCount":34,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/hapijs/wreck/security/advisories/GHSA-vhjm-w67q-g75c","label":"github.com/hapijs/wreck/security/advisories/GHSA-vhjm-w67q-g75c","hostname":"github.com","tags":["X Refsource CONFIRM","Advisory","WEB"]},{"url":"https://github.com/hapijs/wreck/pull/312","label":"github.com/hapijs/wreck/pull/312","hostname":"github.com","tags":["X Refsource MISC","FIX"]},{"url":"https://github.com/hapijs/wreck/commit/a5b6fac9c684621c1d5733d10a0257697cfea373","label":"github.com/hapijs/wreck/commit/a5b6fac9c684621c1d5733d10a0257697cfea373","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/hapijs/wreck/releases/tag/v18.1.1","label":"github.com/hapijs/wreck/releases/tag/v18.1.1","hostname":"github.com","tags":["X Refsource MISC","WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44979.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44979.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44979","label":"nvd.nist.gov/vuln/detail/CVE-2026-44979","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/nodejs/undici/security/advisories/GHSA-3787-6prv-h9w3","label":"github.com/nodejs/undici/security/advisories/GHSA-3787-6prv-h9w3","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/hapijs/wreck","label":"github.com/hapijs/wreck","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-HWPM-5PQW-WMHM"]},"timeline":[{"kind":"published","date":"2026-07-17T21:01:01.165Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-07-20T14:35:45.343Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":25,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T08:08:08.132Z","stale":false,"partial":false}}