{"schemaVersion":3,"id":"CVE-2026-48059","aliases":["UBUNTU-CVE-2026-48059","DEBIAN-CVE-2026-48059","CGA-2c53-vm5q-w33j","CGA-2mh5-whhr-fp8r","CGA-36x3-2fhv-xr47","CGA-3wjf-q9fc-m2gm","CGA-4jcv-g96r-rwpr","CGA-4wc6-5678-gcwh","CGA-5444-66hq-cqcw","CGA-72wh-p4vq-vg8q","CGA-76vj-fcp3-q6gg","CGA-93qp-j9gv-jj5j","CGA-94p7-76cp-848r","CGA-9jqc-6wxp-pgwp","CGA-c95x-g75g-f6j9","CGA-cc8w-h938-22x3","CGA-cmf6-v72p-g6mr","CGA-f78g-3x64-w96p","CGA-f7f9-p329-3jhr","CGA-g4j8-6j38-9j77","CGA-hrpw-p62q-j794","CGA-j83g-rc6v-wv63","CGA-m27g-5w6j-cwxm","CGA-mvgc-gwq2-7fjf","CGA-mxcw-6vwc-5v3m","CGA-p236-8vgv-33mv","CGA-qv9p-7ccf-59mq","CGA-r465-wgxq-jf75","CGA-r469-86mr-8rm5","CGA-v49f-mcj3-c4mg","CGA-v6pq-7qjq-frpq","CGA-vqx7-wx3f-8fqh","CGA-wfv3-mfwp-5m2q","CGA-wh3r-r3r5-8q2v","CGA-x2p7-378m-gf5j","CGA-x98g-p42j-8x2f","CGA-2hmq-2g99-34m3","CGA-2hvm-jr8h-gvr4","CGA-342x-w6qp-h5xc","CGA-34g4-7w2c-h3c2","CGA-35m4-f8w8-5f2g","CGA-3f87-v2xq-c7gg","CGA-3jwj-w6w6-8gvg","CGA-3m89-43jr-vwf9","CGA-3qx4-gj66-f2w6","CGA-3xqr-4p9x-28r8","CGA-425g-wh6x-269x","CGA-45gj-cfvv-c984","CGA-4977-2pfp-g78f","CGA-4h2h-9849-wf3c","CGA-4r9r-8w57-93jm","CGA-4rgf-rj8j-pp6j","CGA-528v-h385-gmg3","CGA-545h-qj8g-gcfr","CGA-57qh-c5gv-7mm8","CGA-5f63-4gcc-r22w","CGA-5hr3-9h84-w367","CGA-5p7x-3qxh-2pc8","CGA-5r9q-9jh2-9cx7","CGA-636w-86x3-pp9q","CGA-69mg-wh4v-qpfq","CGA-6h2m-6459-vpgj","CGA-6hj4-8fpf-m44w","CGA-6mcq-rppc-w328","CGA-6rwc-6qmw-5pv3","CGA-72gx-4f4m-7pgg","CGA-73cj-w8p4-8chw","CGA-79v2-g2gr-7xpx","CGA-7gq6-5fv8-g4v7","CGA-7h69-pw4h-6vcg","CGA-7hq4-j762-w4r2","CGA-7mf3-rfvh-55mj","CGA-8239-v95h-xp5r","CGA-823j-4wv8-c4pf","CGA-83wm-5cqx-7fm9","CGA-85fx-xgg6-g3w3","CGA-85q4-qccx-qj5f","CGA-8cq2-mqvp-fxc2","CGA-8cq4-w53q-mq8j","CGA-8m63-rrh2-2phh","CGA-8mfx-cm53-pf3x","CGA-8mvh-g856-3rg3","CGA-8q33-mw53-vjf5","CGA-8qvx-gcmj-98q6","CGA-8rrq-ppr7-p2q3","CGA-9263-wvwj-f7q5","CGA-967f-5hhh-4qw3","CGA-999f-ccpp-8frp","CGA-9m9x-226h-56r2","CGA-9pjf-hvg8-9gg8","CGA-9r6c-fxvq-jhxx","CGA-c675-848p-mffp","CGA-c8g4-cgpx-3v6v","CGA-c95r-mgv5-ph49","CGA-cjrx-x68j-r239","CGA-cm7h-x87h-8xjv","CGA-cpxw-7rq4-35rh","CGA-f72x-xfcc-hx9v","CGA-f9h6-wqf2-f277","CGA-fmjh-h9q4-56gp","CGA-fmq8-48v4-wxfj","CGA-fr6j-w3xx-2jjg","CGA-frm5-9r22-5g6m","CGA-fx4v-4cc6-xx6j","CGA-g3g4-73r4-qqfp","CGA-g48g-wp57-87pv","CGA-g82c-5834-2gv8","CGA-g9vq-9543-wjh8","CGA-gf9p-jwqx-6q8x","CGA-gx2r-57rj-7qv4","CGA-h4g5-gj5v-vpgx","CGA-h94m-jvhc-6hhx","CGA-hhqf-q2r6-5mgj","CGA-hj3q-5ffg-cr2x","CGA-hj5r-5m2m-wfg5","CGA-hmjm-h8wq-73rp","CGA-hqcw-mqwx-9qrr","CGA-hrqx-rp84-wfq5","CGA-hxfj-hhqg-rv2g","CGA-j6hv-49pq-5332","CGA-jcm6-v7wh-whmh","CGA-jf57-j6h6-7m24","CGA-jg5m-qjpq-79m3","CGA-jj56-gjqh-p29m","CGA-jjhp-j8r6-wg33","CGA-m3gj-vx9r-j6fg","CGA-m4q4-767p-6gx8","CGA-m65v-cfmp-c624","CGA-mfmr-gw85-hhmq","CGA-mgm6-2m2p-cqqq","CGA-mh9m-5rgh-whvc","CGA-mhqg-mqx5-qrmp","CGA-mp4v-3g3f-jp8r","CGA-mq56-gmwh-xq3v","CGA-p23v-mmvf-fx27","CGA-p6mg-844q-cr4m","CGA-p84g-gf92-m53j","CGA-p8xr-c5fr-9cv5","CGA-pgrw-m242-q9rp","CGA-pm6q-8pm7-pp56","CGA-pmrf-2g4r-v92c","CGA-pmx3-v89x-vvvg","CGA-pprh-q5mp-7jvf","CGA-pr36-j7j7-mggg","CGA-pv5j-22xq-gf38","CGA-pv6c-x9g4-574x","CGA-pw5x-6mpw-mq24","GHSA-h2qv-fj59-j46j","CGA-q23w-4vhv-x6j8","CGA-q46w-3qx6-8qp9","CGA-q95j-74j3-3q7r","CGA-qp8r-w773-f9qp","CGA-qv3h-6fp3-cvpq","CGA-qvvp-973q-3w6m","CGA-qx8p-vwhv-7c6g","CGA-qxv8-8xc2-hfp9","CGA-r57g-78wh-44m6","CGA-r9fh-gmgv-h8xw","CGA-rfcg-rxw6-qjhc","CGA-rjr8-9jx9-jcwp","CGA-rvmq-j2q7-5r6f","CGA-v4wv-mwc2-pw62","CGA-v5jm-x49p-44wr","CGA-v7jg-4636-cwxx","CGA-vjwr-rx5h-pvhc","CGA-vq49-3v5f-xw38","CGA-vr2g-8m8h-3wxw","CGA-vw88-x9q8-fqx9","CGA-vwc6-45h5-cq86","CGA-w24q-4jx9-63f5","CGA-w36m-qrhf-3cp3","CGA-w9pv-jhf9-rf6g","CGA-wg9h-737r-hqqg","CGA-wjgv-59g8-mc65","CGA-x852-c5r4-hpr8","CGA-xf6f-qm56-2hpg","CGA-xgmr-r292-g2qq","CGA-xr9f-fcp3-jx7h","CGA-xwhx-mf32-qrrq"],"status":"published","duplicateOf":null,"title":null,"description":"Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the HAProxy PROXY protocol v2 codec in netty leaks native or heap memory on every connection when a client sends a syntactically valid header containing nested `PP2_TYPE_SSL` TLVs (type-length-value records) at depth two or greater. The leak occurs on the successful parse path — no exception is thrown, the message fires downstream, the decoder removes itself, and the application releases the `HAProxyMessage` normally. Yet the underlying cumulation buffer (a pooled, potentially direct `ByteBuf` allocated by the channel) remains permanently pinned. Versions 4.1.135.Final and 4.2.15.Final patch the issue.","dates":{"published":"2026-06-12T14:42:44.677Z","modified":"2026-09-18T12:04:39.489Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.7,"severity":"high","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":8.7,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":8.7,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":8.7,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":8.7,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Maven","score":8.7,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":8.7,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00882,"percentile":0.58477,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.25199999999999995,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.0063},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00882,"percentile":0.58477}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00882,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00882,"percentile":0.58477}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-401","name":"Missing Release of Memory after Effective Lifetime","description":"The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.","type":"weakness","status":"Draft","abstraction":"Variant","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/401.html"},{"id":"CWE-1286","name":"Improper Validation of Syntactic Correctness of Input","description":"The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/1286.html"}],"affected":[{"vendor":"chainguard","product":"apache-activemq-artemis","name":"apache-activemq-artemis","label":"apache-activemq-artemis","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-activemq-artemis","purlType":"apk","versions":[{"text":"< 2.54.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.54.0-r5","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"apache-artemis","label":"Apache Artemis","category":"server-app"}},"hubHref":null},{"vendor":"chainguard","product":"apache-hop","name":"apache-hop","label":"apache-hop","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-hop","purlType":"apk","versions":[{"text":"< 2.18.0-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.18.0-r6","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"apache-hop","label":"Apache Hop","category":"app"}},"hubHref":null},{"vendor":"chainguard","product":"apache-hop-fips","name":"apache-hop-fips","label":"apache-hop-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-hop-fips","purlType":"apk","versions":[{"text":"< 2.18.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.18.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-pulsar-4.0","name":"apache-pulsar-4.0","label":"apache-pulsar-4.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-pulsar-4.0","purlType":"apk","versions":[{"text":"< 4.0.11-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.11-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-pulsar-4.1","name":"apache-pulsar-4.1","label":"apache-pulsar-4.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-pulsar-4.1","purlType":"apk","versions":[{"text":"< 4.1.3-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.3-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-pulsar-4.2","name":"apache-pulsar-4.2","label":"apache-pulsar-4.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-pulsar-4.2","purlType":"apk","versions":[{"text":"< 4.2.2-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.2-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-pulsar-fips-4.0","name":"apache-pulsar-fips-4.0","label":"apache-pulsar-fips-4.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-pulsar-fips-4.0","purlType":"apk","versions":[{"text":"< 4.0.11-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.11-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-pulsar-fips-4.1","name":"apache-pulsar-fips-4.1","label":"apache-pulsar-fips-4.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-pulsar-fips-4.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apicurio-registry","name":"apicurio-registry","label":"apicurio-registry","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apicurio-registry","purlType":"apk","versions":[{"text":"< 3.3.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"celeborn-0.5","name":"celeborn-0.5","label":"celeborn-0.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/celeborn-0.5","purlType":"apk","versions":[{"text":"< 0.5.4-r26","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.5.4-r26","eol":null,"hubHref":null},{"vendor":"chainguard","product":"celeborn-0.6","name":"celeborn-0.6","label":"celeborn-0.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/celeborn-0.6","purlType":"apk","versions":[{"text":"< 0.6.3-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.6.3-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gremlin-server","name":"gremlin-server","label":"gremlin-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gremlin-server","purlType":"apk","versions":[{"text":"< 3.8.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-fips-3.3.6","name":"hadoop-fips-3.3.6","label":"hadoop-fips-3.3.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.3.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-fips-3.4.2","name":"hadoop-fips-3.4.2","label":"hadoop-fips-3.4.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.4.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-fips-3.5","name":"hadoop-fips-3.5","label":"hadoop-fips-3.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.5","purlType":"apk","versions":[{"text":"< 3.5.0-r3","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 3.5.0-r3 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hono-adapter-mqtt","name":"hono-adapter-mqtt","label":"hono-adapter-mqtt","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hono-adapter-mqtt","purlType":"apk","versions":[{"text":"< 2.7.0-r23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.7.0-r23","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hono-cli","name":"hono-cli","label":"hono-cli","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hono-cli","purlType":"apk","versions":[{"text":"< 2.7.0-r23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.7.0-r23","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hono-service-auth","name":"hono-service-auth","label":"hono-service-auth","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hono-service-auth","purlType":"apk","versions":[{"text":"< 2.7.0-r23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.7.0-r23","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hono-service-command-router","name":"hono-service-command-router","label":"hono-service-command-router","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hono-service-command-router","purlType":"apk","versions":[{"text":"< 2.7.0-r23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.7.0-r23","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hono-service-device-registry-jdbc","name":"hono-service-device-registry-jdbc","label":"hono-service-device-registry-jdbc","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hono-service-device-registry-jdbc","purlType":"apk","versions":[{"text":"< 2.7.0-r23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.7.0-r23","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-26.4","name":"keycloak-26.4","label":"keycloak-26.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-26.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-26.4-iamguarded-compat","name":"keycloak-26.4-iamguarded-compat","label":"keycloak-26.4-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-26.4-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-26.4-operator","name":"keycloak-26.4-operator","label":"keycloak-26.4-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-26.4-operator","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-26.5","name":"keycloak-26.5","label":"keycloak-26.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-26.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-26.5-iamguarded-compat","name":"keycloak-26.5-iamguarded-compat","label":"keycloak-26.5-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-26.5-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-26.5-operator","name":"keycloak-26.5-operator","label":"keycloak-26.5-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-26.5-operator","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-fips-26.4","name":"keycloak-fips-26.4","label":"keycloak-fips-26.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-fips-26.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-fips-26.4-iamguarded-fips","name":"keycloak-fips-26.4-iamguarded-fips","label":"keycloak-fips-26.4-iamguarded-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-fips-26.4-iamguarded-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-fips-26.4-operator","name":"keycloak-fips-26.4-operator","label":"keycloak-fips-26.4-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-fips-26.4-operator","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-fips-26.5","name":"keycloak-fips-26.5","label":"keycloak-fips-26.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-fips-26.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-fips-26.5-iamguarded-fips","name":"keycloak-fips-26.5-iamguarded-fips","label":"keycloak-fips-26.5-iamguarded-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-fips-26.5-iamguarded-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-fips-26.5-operator","name":"keycloak-fips-26.5-operator","label":"keycloak-fips-26.5-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-fips-26.5-operator","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-fips-26.6","name":"keycloak-fips-26.6","label":"keycloak-fips-26.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-fips-26.6","purlType":"apk","versions":[{"text":"< 26.6.3-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.6.3-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-fips-26.6-iamguarded-fips","name":"keycloak-fips-26.6-iamguarded-fips","label":"keycloak-fips-26.6-iamguarded-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-fips-26.6-iamguarded-fips","purlType":"apk","versions":[{"text":"< 26.6.3-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.6.3-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-fips-26.6-operator","name":"keycloak-fips-26.6-operator","label":"keycloak-fips-26.6-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-fips-26.6-operator","purlType":"apk","versions":[{"text":"< 26.6.3-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.6.3-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-1.20-dispatcher-loom","name":"knative-kafka-broker-1.20-dispatcher-loom","label":"knative-kafka-broker-1.20-dispatcher-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-1.20-dispatcher-loom","purlType":"apk","versions":[{"text":"< 1.20.3-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-1.20-receiver-loom","name":"knative-kafka-broker-1.20-receiver-loom","label":"knative-kafka-broker-1.20-receiver-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-1.20-receiver-loom","purlType":"apk","versions":[{"text":"< 1.20.3-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-1.21-dispatcher-loom","name":"knative-kafka-broker-1.21-dispatcher-loom","label":"knative-kafka-broker-1.21-dispatcher-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-1.21-dispatcher-loom","purlType":"apk","versions":[{"text":"< 1.21.4-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.21.4-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-1.21-receiver-loom","name":"knative-kafka-broker-1.21-receiver-loom","label":"knative-kafka-broker-1.21-receiver-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-1.21-receiver-loom","purlType":"apk","versions":[{"text":"< 1.21.4-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.21.4-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-1.22-dispatcher-loom","name":"knative-kafka-broker-1.22-dispatcher-loom","label":"knative-kafka-broker-1.22-dispatcher-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-1.22-dispatcher-loom","purlType":"apk","versions":[{"text":"< 1.22.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.22.1-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-1.22-receiver-loom","name":"knative-kafka-broker-1.22-receiver-loom","label":"knative-kafka-broker-1.22-receiver-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-1.22-receiver-loom","purlType":"apk","versions":[{"text":"< 1.22.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.22.1-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-fips-1.20-dispatcher-loom","name":"knative-kafka-broker-fips-1.20-dispatcher-loom","label":"knative-kafka-broker-fips-1.20-dispatcher-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-fips-1.20-dispatcher-loom","purlType":"apk","versions":[{"text":"< 1.20.3-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-fips-1.20-receiver-loom","name":"knative-kafka-broker-fips-1.20-receiver-loom","label":"knative-kafka-broker-fips-1.20-receiver-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-fips-1.20-receiver-loom","purlType":"apk","versions":[{"text":"< 1.20.3-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.3-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-fips-1.21-dispatcher-loom","name":"knative-kafka-broker-fips-1.21-dispatcher-loom","label":"knative-kafka-broker-fips-1.21-dispatcher-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-fips-1.21-dispatcher-loom","purlType":"apk","versions":[{"text":"< 1.21.3-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.21.3-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-fips-1.21-receiver-loom","name":"knative-kafka-broker-fips-1.21-receiver-loom","label":"knative-kafka-broker-fips-1.21-receiver-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-fips-1.21-receiver-loom","purlType":"apk","versions":[{"text":"< 1.21.3-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.21.3-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-fips-1.22-dispatcher-loom","name":"knative-kafka-broker-fips-1.22-dispatcher-loom","label":"knative-kafka-broker-fips-1.22-dispatcher-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-fips-1.22-dispatcher-loom","purlType":"apk","versions":[{"text":"< 1.22.1-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.22.1-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-fips-1.22-receiver-loom","name":"knative-kafka-broker-fips-1.22-receiver-loom","label":"knative-kafka-broker-fips-1.22-receiver-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-fips-1.22-receiver-loom","purlType":"apk","versions":[{"text":"< 1.22.1-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.22.1-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"management-api-for-apache-cassandra-5.0","name":"management-api-for-apache-cassandra-5.0","label":"management-api-for-apache-cassandra-5.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/management-api-for-apache-cassandra-5.0","purlType":"apk","versions":[{"text":"< 0.1.120-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.120-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-2026.04","name":"neo4j-2026.04","label":"neo4j-2026.04","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-2026.04","purlType":"apk","versions":[{"text":"< 2026.04.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2026.04.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-2026.05","name":"neo4j-2026.05","label":"neo4j-2026.05","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-2026.05","purlType":"apk","versions":[{"text":"< 2026.05.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2026.05.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pinot","name":"pinot","label":"pinot","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pinot","purlType":"apk","versions":[{"text":"< 1.5.0-r18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.0-r18","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pinot-fips","name":"pinot-fips","label":"pinot-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pinot-fips","purlType":"apk","versions":[{"text":"< 1.5.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.0-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ranger","name":"ranger","label":"ranger","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ranger","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"request-9047-keycloak-fips-26.4","name":"request-9047-keycloak-fips-26.4","label":"request-9047-keycloak-fips-26.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/request-9047-keycloak-fips-26.4","purlType":"apk","versions":[{"text":"< 26.4.7-r17","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.4.7-r17","eol":null,"hubHref":null},{"vendor":"chainguard","product":"request-9047-keycloak-fips-26.4-iamguarded-fips","name":"request-9047-keycloak-fips-26.4-iamguarded-fips","label":"request-9047-keycloak-fips-26.4-iamguarded-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/request-9047-keycloak-fips-26.4-iamguarded-fips","purlType":"apk","versions":[{"text":"< 26.4.7-r17","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.4.7-r17","eol":null,"hubHref":null},{"vendor":"chainguard","product":"request-9047-keycloak-fips-26.4-operator","name":"request-9047-keycloak-fips-26.4-operator","label":"request-9047-keycloak-fips-26.4-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/request-9047-keycloak-fips-26.4-operator","purlType":"apk","versions":[{"text":"< 26.4.7-r17","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.4.7-r17","eol":null,"hubHref":null},{"vendor":"chainguard","product":"request-9047-keycloak-fips-26.5","name":"request-9047-keycloak-fips-26.5","label":"request-9047-keycloak-fips-26.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/request-9047-keycloak-fips-26.5","purlType":"apk","versions":[{"text":"< 26.5.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.5.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"request-9047-keycloak-fips-26.5-iamguarded-fips","name":"request-9047-keycloak-fips-26.5-iamguarded-fips","label":"request-9047-keycloak-fips-26.5-iamguarded-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/request-9047-keycloak-fips-26.5-iamguarded-fips","purlType":"apk","versions":[{"text":"< 26.5.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.5.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"request-9047-keycloak-fips-26.5-operator","name":"request-9047-keycloak-fips-26.5-operator","label":"request-9047-keycloak-fips-26.5-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/request-9047-keycloak-fips-26.5-operator","purlType":"apk","versions":[{"text":"< 26.5.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.5.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seata-server","name":"seata-server","label":"seata-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seata-server","purlType":"apk","versions":[{"text":"< 2.7.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.7.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tez","name":"tez","label":"tez","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tez","purlType":"apk","versions":[{"text":"< 0.10.5-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.10.5-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 4.3.1.2-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.2-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 4.3.1.2-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.2-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zipkin","name":"zipkin","label":"zipkin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zipkin","purlType":"apk","versions":[{"text":"< 3.6.1-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.1-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-activemq-artemis","name":"apache-activemq-artemis","label":"apache-activemq-artemis","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-activemq-artemis","purlType":"apk","versions":[{"text":"< 2.54.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.54.0-r5","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"apache-artemis","label":"Apache Artemis","category":"server-app"}},"hubHref":null},{"vendor":"wolfi","product":"apache-pulsar-4.1","name":"apache-pulsar-4.1","label":"apache-pulsar-4.1","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-pulsar-4.1","purlType":"apk","versions":[{"text":"< 4.1.3-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.3-r15","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-pulsar-4.2","name":"apache-pulsar-4.2","label":"apache-pulsar-4.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-pulsar-4.2","purlType":"apk","versions":[{"text":"< 4.2.2-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.2-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apicurio-registry","name":"apicurio-registry","label":"apicurio-registry","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apicurio-registry","purlType":"apk","versions":[{"text":"< 3.3.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"celeborn-0.6","name":"celeborn-0.6","label":"celeborn-0.6","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/celeborn-0.6","purlType":"apk","versions":[{"text":"< 0.6.3-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.6.3-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keycloak-26.4","name":"keycloak-26.4","label":"keycloak-26.4","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keycloak-26.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keycloak-26.4-iamguarded-compat","name":"keycloak-26.4-iamguarded-compat","label":"keycloak-26.4-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keycloak-26.4-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keycloak-26.4-operator","name":"keycloak-26.4-operator","label":"keycloak-26.4-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keycloak-26.4-operator","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keycloak-26.5","name":"keycloak-26.5","label":"keycloak-26.5","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keycloak-26.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keycloak-26.5-iamguarded-compat","name":"keycloak-26.5-iamguarded-compat","label":"keycloak-26.5-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keycloak-26.5-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keycloak-26.5-operator","name":"keycloak-26.5-operator","label":"keycloak-26.5-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keycloak-26.5-operator","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"management-api-for-apache-cassandra-5.0","name":"management-api-for-apache-cassandra-5.0","label":"management-api-for-apache-cassandra-5.0","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/management-api-for-apache-cassandra-5.0","purlType":"apk","versions":[{"text":"< 0.1.120-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.120-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"neo4j-2026.05","name":"neo4j-2026.05","label":"neo4j-2026.05","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/neo4j-2026.05","purlType":"apk","versions":[{"text":"< 2026.05.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2026.05.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"tez","name":"tez","label":"tez","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/tez","purlType":"apk","versions":[{"text":"< 0.10.5-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.10.5-r16","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 4.3.1.2-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.2-r7","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 4.3.1.2-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.2-r7","eol":null,"hubHref":null},{"vendor":"wolfi","product":"zipkin","name":"zipkin","label":"zipkin","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/zipkin","purlType":"apk","versions":[{"text":"< 3.6.1-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.1-r10","eol":null,"hubHref":null},{"vendor":"debian","product":"netty","name":"netty","label":"netty","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/netty","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"netty","name":"netty","label":"netty","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/netty","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"io.netty","product":"netty-codec-haproxy","name":"io.netty:netty-codec-haproxy","label":"netty-codec-haproxy","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/io.netty/netty-codec-haproxy","purlType":"maven","versions":[{"text":"≥ 4.2.0.Final, < 4.2.15.Final","noFixRecorded":false,"fixedIn":null},{"text":"< 4.1.135.Final","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.2.0.Final, < 4.2.15.Final | < 4.1.135.Final","eol":null,"hubHref":null},{"vendor":"netty","product":"netty","name":"netty","label":"netty","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.2.0.Final, < 4.2.15.Final","noFixRecorded":false,"fixedIn":null},{"text":"< 4.1.135.Final","noFixRecorded":false,"fixedIn":null},{"text":"< 4.1.135","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.2.0, < 4.2.15","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.2.0.Final, < 4.2.15.Final | < 4.1.135.Final | < 4.1.135 | ≥ 4.2.0, < 4.2.15","eol":null,"hubHref":"/vendor/netty/netty"}],"affectedCount":85,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j","label":"github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Vendor Advisory"]},{"url":"https://github.com/netty/netty/releases/tag/netty-4.1.135.Final","label":"github.com/netty/netty/releases/tag/netty-4.1.135.Final","hostname":"github.com","tags":["X Refsource MISC","REPORT","WEB","Release Notes"]},{"url":"https://github.com/netty/netty/releases/tag/netty-4.2.15.Final","label":"github.com/netty/netty/releases/tag/netty-4.2.15.Final","hostname":"github.com","tags":["X Refsource MISC","REPORT","WEB","Release Notes"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-48059","label":"access.redhat.com/security/cve/CVE-2026-48059","hostname":"access.redhat.com","tags":["VDB Entry","X Refsource REDHAT","Advisory","WEB"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488437","label":"bugzilla.redhat.com/show_bug.cgi?id=2488437","hostname":"bugzilla.redhat.com","tags":["Issue Tracking","X Refsource REDHAT","REPORT","WEB"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48059.json","label":"security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48059.json","hostname":"security.access.redhat.com","tags":["X Sadp Csaf Vex","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:53644","label":"access.redhat.com/errata/RHSA-2026:53644","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:53645","label":"access.redhat.com/errata/RHSA-2026:53645","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:48151","label":"access.redhat.com/errata/RHSA-2026:48151","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:53646","label":"access.redhat.com/errata/RHSA-2026:53646","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:66488","label":"access.redhat.com/errata/RHSA-2026:66488","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26586","label":"access.redhat.com/errata/RHSA-2026:26586","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:41951","label":"access.redhat.com/errata/RHSA-2026:41951","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:50085","label":"access.redhat.com/errata/RHSA-2026:50085","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:65126","label":"access.redhat.com/errata/RHSA-2026:65126","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36820","label":"access.redhat.com/errata/RHSA-2026:36820","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:37390","label":"access.redhat.com/errata/RHSA-2026:37390","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26018","label":"access.redhat.com/errata/RHSA-2026:26018","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26017","label":"access.redhat.com/errata/RHSA-2026:26017","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:34608","label":"access.redhat.com/errata/RHSA-2026:34608","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54435","label":"access.redhat.com/errata/RHSA-2026:54435","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory","WEB"]},{"url":"https://ubuntu.com/security/CVE-2026-48059","label":"ubuntu.com/security/CVE-2026-48059","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-48059","label":"www.cve.org/CVERecord?id=CVE-2026-48059","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-48059","label":"security-tracker.debian.org/tracker/CVE-2026-48059","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48059.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48059.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48059","label":"nvd.nist.gov/vuln/detail/CVE-2026-48059","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:53806","label":"access.redhat.com/errata/RHSA-2026:53806","hostname":"access.redhat.com","tags":["Advisory","WEB"]},{"url":"https://github.com/netty/netty","label":"github.com/netty/netty","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:11033-1","RHSA-2026:53644","RHSA-2026:53645","RHSA-2026:53646","RHSA-2026:76128","RHSA-2026:76129","RHSA-2026:76130","SUSE-SU-2026:2802-1"],"duplicates":[],"related":["CGA-FXF8-MMR7-FQJ3","OPENSUSE-SU-2026:11033-1","SUSE-SU-2026:2802-1"]},"timeline":[{"kind":"published","date":"2026-06-12T14:42:44.677Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-18T12:04:39.489Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":35,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T19:33:01.745Z","stale":false,"partial":false}}