{"schemaVersion":3,"id":"CVE-2026-54285","aliases":["CGA-473c-2p42-mx22","CGA-5wrh-pvr5-j5h4","CGA-62m3-q547-7vcm","CGA-7x9p-c47q-mq97","CGA-8m7h-7vfm-255x","CGA-997g-5894-cggc","CGA-cmxr-973f-7532","CGA-fpjw-xgqj-qrq7","CGA-gg68-jq4j-58mf","CGA-hv2p-8ch6-4635","CGA-jp2j-4cw5-557m","CGA-jvjr-phjm-3x5f","CGA-mwx2-w5p7-jf76","CGA-pg45-qfqv-mw75","CGA-rh2q-2gw2-ppq5","CGA-vf7p-54ww-3pcv","CGA-vxcm-j356-jp8c","CGA-x79r-j75r-fhmv","CGA-xwvw-42wp-8fx6","GHSA-8988-4f7v-96qf","CGA-2239-8hm8-jpm4","CGA-225x-fj7j-79vq","CGA-238r-hjqp-h38x","CGA-23xg-xf3w-p9wf","CGA-2438-gj94-5qr6","CGA-24vg-3f5j-rw65","CGA-25c6-742x-w2p2","CGA-25cg-qjwv-v369","CGA-26p4-w5hw-mqpp","CGA-2762-hh5r-8frc","CGA-279h-x3jg-ch43","CGA-27rh-fqgm-45vj","CGA-296h-gv9x-6pr7","CGA-2979-r3q7-vggv","CGA-2cfv-43mx-fxx6","CGA-2fm2-2wxf-73qq","CGA-2g89-5xh9-gq94","CGA-2h58-5j9c-2gxq","CGA-2h8p-6489-4gqm","CGA-2hp6-33cw-9j7m","CGA-2mvq-pqp6-j296","CGA-2rqx-9rc2-8gq3","CGA-2wfj-946p-ffx9","CGA-32h2-vjcv-3pgm","CGA-32wv-pg5p-p2qc","CGA-3435-q6gr-34c8","CGA-3494-4qfq-5v4f","CGA-35h8-mwgp-fmj6","CGA-3652-xhc8-p7pr","CGA-36r3-jgxq-899g","CGA-36r7-fgwx-whqq","CGA-36vq-q2jq-qwfw","CGA-3764-3c4m-r2v5","CGA-37mg-v2rv-c22v","CGA-388x-85rq-jgc7","CGA-38qq-9f63-gm4p","CGA-393h-8gmh-564j","CGA-3959-m9pv-7rf4","CGA-395v-34wq-pf3c","CGA-3999-rqhg-4wx8","CGA-39c3-6x5r-mw3r","CGA-39w4-mjr9-cqvq","CGA-3c2q-84c6-p8g8","CGA-3c7x-c2mq-jphh","CGA-3cxx-9256-g34w","CGA-3fc3-54fm-g926","CGA-3fjc-gc4w-cgxh","CGA-3fqm-vxvv-hj39","CGA-3frm-pwhj-7m63","CGA-3gp7-8m68-5m5x","CGA-3h3r-hc94-8vmv","CGA-3h7h-7c3p-qr2x","CGA-3m9g-7rxf-cqr2","CGA-3mm2-cvh4-q9cj","CGA-3mm8-qvr4-4p5p","CGA-3px3-63c4-769p","CGA-3qp5-7938-2v4v","CGA-3rrg-6frc-cgh5","CGA-3rxx-xjpw-x7mh","CGA-3vj5-xrrp-h8j7","CGA-3wfq-7x63-r9jj","CGA-428g-hr44-hpjq","CGA-42h4-p56v-6rvg","CGA-42mf-cf9x-8c74","CGA-4364-49g3-cccr","CGA-44w3-x478-ppjq","CGA-44wv-xr9v-w289","CGA-472v-gp37-3m6h","CGA-477p-wrfx-7776","CGA-479x-xcrc-8c32","CGA-48fm-5297-qccg","CGA-48g3-p8r7-6rpp","CGA-49j2-99rh-xvvj","CGA-49v4-w68v-8h4q","CGA-4c4j-xpcm-p6r4","CGA-4cwr-56j4-x9hp","CGA-4g24-hw9h-fq9m","CGA-4g7w-5chq-87vm","CGA-4gcr-3m32-gq6g","CGA-4gmw-wv56-qph4","CGA-4gr2-j8vj-2cqc","CGA-4h8m-7j59-3hhm","CGA-4hx4-h9v6-p79f","CGA-4j36-4jvr-r4f9","CGA-4jvp-4pmw-7gcf","CGA-4mj6-xhwc-j48x","CGA-4mjr-pqpw-8hg2","CGA-4pv8-hc83-5236","CGA-4qh7-q7pw-pgr6","CGA-4rw9-jcvq-524j","CGA-4v5g-69r8-rxcx","CGA-4xcr-2v25-4gm4","CGA-4xf5-hg4h-9crh","CGA-4xg4-g5vq-jc47","CGA-5282-45qm-4mp2","CGA-5298-rrr9-266c","CGA-52j5-2285-qvc4","CGA-5325-cfrv-x322","CGA-532m-j2gp-cr5r","CGA-535c-g3p8-9f76","CGA-53w9-8wr3-23vm","CGA-55p2-xx82-7ff3","CGA-55w4-pfqf-w28f","CGA-55xg-h7qg-9c86","CGA-56m2-6cj3-6ch8","CGA-56xq-525f-h88j","CGA-574x-3pp3-xf24","CGA-57ch-6pmx-cfq8","CGA-5863-cv7f-2mj5","CGA-59vq-5j4j-fcqx","CGA-59xg-x438-cm7f","CGA-5g58-948x-68w2","CGA-5g67-pc2v-gccx","CGA-5hqx-2rph-jcqf","CGA-5m3g-9x27-x78q","CGA-5qwp-p7p7-f56m","CGA-5rwg-w753-4228","CGA-5v3q-jh6h-vr92","CGA-5vjj-x256-pm6h","CGA-5wgj-wxx3-px36","CGA-5xg9-qpjp-r8g2","CGA-62m7-f7h8-749m","CGA-62rj-5wjj-hggq","CGA-64w8-qwfc-5rcm","CGA-64xj-4m9w-7gpf","CGA-6553-9g9m-vmmp","CGA-65c9-fcvv-p4pf","CGA-65x8-9vxc-v238","CGA-65x9-2v39-qv4c","CGA-66gq-x5c6-8pjw","CGA-68gj-jjxm-6ghm","CGA-68hh-c589-96h8","CGA-68p4-6rfm-3qjg","CGA-69w8-m3h8-7mh2","CGA-6chh-m657-6frm","CGA-6g2x-vvhj-286h","CGA-6h5p-x5f8-cfjq","CGA-6j3q-p5x2-jrh8","CGA-6j6p-x346-j27m","CGA-6jc3-c95v-gprf","CGA-6jpp-rr6q-7wpf","CGA-6m76-7h77-55xc","CGA-6mpw-8h4m-fcrq","CGA-6pf9-rfxq-wffx","CGA-6px8-xjww-hv98","CGA-6r78-wp6h-84vr","CGA-6rh9-w3jv-6w82","CGA-6rj3-2wm6-vhw2","CGA-6whr-hf4m-vgjx","CGA-6x2p-p86r-4hvh","CGA-6xg2-8m33-35qq","CGA-6xpj-298c-hg9x","CGA-73j7-mff4-v3vv","CGA-73p2-8pwg-2p58","CGA-7454-cr5r-pvg4","CGA-74wj-g494-vwpg","CGA-75w5-h3h4-7hw5","CGA-75x6-pqcr-3xfq","CGA-764m-w4m2-6wv8","CGA-78w9-rfx7-pq8h","CGA-7ffr-f33c-f264","CGA-7g5g-2gxv-4pxc","CGA-7gjm-xjg5-8464","CGA-7gxv-rp7p-p66w","CGA-7h65-4pgm-49p7","CGA-7jg2-9v3g-97hc","CGA-7jpj-f446-rf4f","CGA-7jqp-h726-xh7v","CGA-7m6x-ww8p-c3wf","CGA-7mq5-79qc-46m5","CGA-7p3f-283q-frhw","CGA-7qf6-66mx-x536","CGA-7rvx-988w-v8c6","CGA-7vc5-h2jw-4fh4","CGA-7xv9-4p94-vxvw","CGA-82gh-j2qj-qv7h","CGA-82hp-5mh8-v2c3","CGA-82m8-64jx-hv5x","CGA-8339-78c2-738r","CGA-8357-q477-q6mg","CGA-839q-qwp2-xh9x","CGA-8484-chgm-96g4","CGA-84mg-h237-p727","CGA-84xj-rgg4-6575","CGA-8567-8749-28m7","CGA-85fr-36hg-8hwj","CGA-85rp-gjm4-2934","CGA-86g7-c6vf-r7xp","CGA-8c8w-m5f5-qrhr","CGA-8f5x-q5c8-9wgp","CGA-8f7g-p354-xj2h","CGA-8fmp-492m-gw43","CGA-8fpf-94qq-v648","CGA-8gj3-f257-883g","CGA-8h7g-vgxf-gcjx","CGA-8j7f-884f-rc7f","CGA-8jc2-h438-wgm4","CGA-8mg2-qccx-vh94","CGA-8pc4-47p6-rp7m","CGA-8pm4-mxgp-qgvv","CGA-8pwg-xw33-464w","CGA-8q95-xc8m-f73x","CGA-8qqg-h2qv-4cch","CGA-8qvm-q399-3mjf","CGA-8vcg-qjvm-q38f","CGA-8xxh-56g4-jhww","CGA-923m-qf48-crqp","CGA-9353-4h86-47w8","CGA-93h9-rpfm-7pf9","CGA-93r9-9x7g-2q49","CGA-94fr-c75w-rjj2","CGA-94vj-jj8r-pqfg","CGA-94x4-cj58-5h57","CGA-94xq-97pv-325m","CGA-95x6-h8hh-hxvg","CGA-9675-72v8-92wm","CGA-974h-845p-g7xf","CGA-97mh-4w8c-pwm4","CGA-989g-vrm4-wfx3","CGA-98g8-cwxw-929w","CGA-98j6-5c45-gw5w","CGA-98m5-frjp-4q59","CGA-99g6-vwj8-53jx","CGA-9cgh-wqc6-hpx2","CGA-9cj7-4jjp-fwgg","CGA-9cr3-xhvr-8hx6","CGA-9f49-vg5g-jcw2","CGA-9fw3-3f7h-cpxq","CGA-9m6r-f5q6-qvjp","CGA-9mq6-9r85-66r6","CGA-9p3j-pw39-89vx","CGA-9q3x-rhxf-m9m6","CGA-9r3h-wjhq-cq4m","CGA-9rmx-2c26-2w7x","CGA-9rq4-x2gr-m982","CGA-9rwf-c255-65g4","CGA-9wph-ff9w-rw7m","CGA-9wvh-5mcx-5269","CGA-c26h-vp92-hp4q","CGA-c3j8-gf7w-62f7","CGA-c5mm-mgq5-wmq5","CGA-c69r-cw9f-jghf","CGA-c753-wjw5-4jjh","CGA-c7f9-7p4j-5wq5","CGA-c7j6-3wr8-j2c7","CGA-c7vx-rj3q-596v","CGA-c829-g4rp-q7xh","CGA-c847-5c95-m64q","CGA-c8gr-cg9w-p8cx","CGA-c9rm-4mf9-gq59","CGA-c9rx-wwwx-hfgw","CGA-cf65-qpgp-8257","CGA-cfqm-fqx7-9vrq","CGA-cgqv-239r-rw8f","CGA-cm3c-hhgw-3p69","CGA-cmj6-rxrr-rggw","CGA-cqwv-pqp4-8h9c","CGA-cx6m-gchq-22vf","CGA-cxv4-f25g-rm6f","CGA-f29p-c623-fh42","CGA-f29q-m83w-9fc6","CGA-f5xc-f9vp-gcmm","CGA-f74p-659j-qqrx","CGA-f7h4-rvg6-cw8m","CGA-f7qw-vpw2-2f45","CGA-f849-46wc-xj33","CGA-f872-8jc3-5c5j","CGA-f8jm-3cjv-9gh6","CGA-fcp2-p4wr-c4vp","CGA-ffg7-9xxf-4w85","CGA-ffhf-72r6-79jf","CGA-fg2x-2mr5-w6pp","CGA-fgxp-h468-c244","CGA-fhgp-47vr-3x3f","CGA-fhmv-7jqp-9x3f","CGA-fj8q-r2cf-m4jr","CGA-fj8x-g3r5-j4m5","CGA-fjcx-9g85-hjmv","CGA-fjff-m38x-6wxq","CGA-fjgg-rxvw-x6rp","CGA-fjvc-4xwv-26vv","CGA-fm3x-pgjj-j948","CGA-fmm6-6wr7-mwfr","CGA-fpqj-rq8w-26xp","CGA-fqcx-hmgm-qphw","CGA-fr45-fg4x-vv4q","CGA-fr6j-3638-h5c3","CGA-frjx-h5wg-frvm","CGA-fv85-2q78-gmf6","CGA-fvv4-ffwm-3fcc","CGA-fwc6-q252-cxwq","CGA-fxwm-g8fq-gg2f","CGA-g239-pm89-qrg7","CGA-g243-jh28-rg4g","CGA-g28c-q735-jm6c","CGA-g64j-f976-p4x5","CGA-g76w-pxmq-44cj","CGA-g7gc-pqvc-hp6q","CGA-g8fq-cfgm-6m7g","CGA-gfwm-p6p7-rqj4","CGA-gg2q-9fv7-44xj","CGA-gj2x-xrqf-jj43","CGA-gjcx-c2f5-3x8h","CGA-gjmq-mxhv-x4vw","CGA-gjqx-vp8m-3jfr","CGA-gm89-2fqx-796p","CGA-gp56-fm4h-2jp4","CGA-gp5m-9xhc-8q3q","CGA-gpm6-v8g4-5hmr","CGA-gvcx-pg55-r2c9","CGA-gw9f-5pf2-jwr8","CGA-gwfx-q7w3-jh3f","CGA-gx29-g392-v2rv","CGA-h25r-gqx8-jvv4","CGA-h2fh-2825-rm6g","CGA-h5xw-rf76-3q65","CGA-h6v9-wj45-g92w","CGA-h6x6-239p-2mr4","CGA-h7p7-4vhr-qcgx","CGA-h9ch-f3qh-87mp","CGA-hcx5-w3m5-wjph","CGA-hfvj-9r5j-8r9j","CGA-hgvq-3r7v-9j3j","CGA-hh66-q378-ffp2","CGA-hj4r-hx66-j82j","CGA-hjh8-gvq2-596h","CGA-hjqj-m623-qp26","CGA-hm2p-3wmf-m74p","CGA-hmc4-22x7-4grh","CGA-hpq2-vmch-mf29","CGA-hpq7-xq3q-gpfq","CGA-hq8c-8qgv-8pg2","CGA-hqr9-fr89-5wj9","CGA-hrr4-6xh3-hmc6","CGA-hxv8-gfqq-mfhx","CGA-j348-56cm-f473","CGA-j37h-cwjq-v9vf","CGA-j3qp-6vxx-mrm9","CGA-j3r9-m589-973v","CGA-j466-39hw-p8hw","CGA-j4f7-x6jv-7j8p","CGA-j5f8-3fv2-6gx7","CGA-j5p5-6x28-c7xx","CGA-j5qq-4j7j-3pj8","CGA-j5v8-969c-p327","CGA-j635-6qr9-6f5x","CGA-j6h3-qpvh-x6hp","CGA-j7qv-g3q7-8357","CGA-j86c-4w98-p7rr","CGA-j873-h7rg-x7qr","CGA-j8j5-chx3-48rp","CGA-j8mp-p756-v6rp","CGA-j927-jc5x-2phh","CGA-jc65-9g27-p2jv","CGA-jcgr-m742-rf9f","CGA-jf36-c8pp-vphw","CGA-jf3w-r3fm-5256","CGA-jfq6-8x8x-554w","CGA-jfvg-6x54-j3g6","CGA-jg7p-r62j-4g3g","CGA-jjcr-6834-w7r6","CGA-jm4v-cm94-6x83","CGA-jmc3-98vw-9gq2","CGA-jp4p-qhhg-mxx4","CGA-jqp2-939g-gv3f","CGA-jr5p-6fmp-hh2c","CGA-jr83-mh35-9w7p","CGA-jrj6-xfq3-xh52","CGA-jrvv-6mmr-m47h","CGA-jv97-vgc4-6f63","CGA-jvf5-m4xx-cr7g","CGA-jvm5-7h85-xpgw","CGA-jw64-j4jh-99qr","CGA-jwjq-xrm6-fgch","CGA-jwwf-5hmf-3393","CGA-jx55-r3c2-x66c","CGA-jxjq-vmv5-4qhw","CGA-m374-6gmg-5843","CGA-m42m-jj3x-6vhq","CGA-m45q-xjg5-x994","CGA-m468-j8j2-v5h9","CGA-m48j-x8h4-763q","CGA-m495-x4xm-47h9","CGA-m586-phv5-vwrc","CGA-m59x-8mqh-9hf8","CGA-m5p2-586r-mxfj","CGA-m7g9-p5gq-4wqg","CGA-m7r9-3qjx-7q6h","CGA-m7rf-fcw2-fh44","CGA-m84q-6p8g-5j59","CGA-m9gh-rp9m-34f4","CGA-mcf9-3fvp-46c2","CGA-mcgq-749c-25jr","CGA-mcrw-rwvj-vq64","CGA-mg87-fh6h-6h6v","CGA-mh39-24x5-2r2r","CGA-mh9v-498j-4f64","CGA-mhhm-7qwp-7f8m","CGA-mhvr-p9q9-c86w","CGA-mjqf-x83h-5qfj","CGA-mjqj-8r97-229q","CGA-mm6q-q4qj-q2gv","CGA-mm92-jvgp-7x8q","CGA-mpgg-rq3m-h7jw","CGA-mq5h-x9h4-53jx","CGA-mq9g-6j7x-88g2","CGA-mrvx-7vvm-5m4g","CGA-mw8x-6mp4-8hmg","CGA-mwhq-735v-qvc6","CGA-mwwc-vc5v-8jqj","CGA-p2ff-p8jw-87wj","CGA-p2gx-cxp5-fp7c","CGA-p2m3-mg99-vh9f","CGA-p34w-36ww-j425","CGA-p3x5-frv4-grwj","CGA-p4gm-89mp-m4w2","CGA-p53v-9rcg-45f8","CGA-p545-6gxr-r3r3","CGA-p5mr-7xpc-q3gh","CGA-p658-m3f3-4fg5","CGA-p6gm-27qc-r7cr","CGA-p7mf-mm3g-c3w9","CGA-p874-r9f8-mcgc","CGA-p8mm-7hrm-87wg","CGA-p97v-ppc4-v85p","CGA-pc5j-vf7q-4jh6","CGA-pc95-7m7h-2g9q","CGA-pcrr-739q-5734","CGA-pfwr-cmx3-wjrh","CGA-pgcv-p5h8-8wrp","CGA-pjc4-wmr5-hrjh","CGA-pjwv-5852-j7wc","CGA-pmc5-v76j-gf4g","CGA-pmc6-vg9x-w3mg","CGA-pmp6-5q59-cmx8","CGA-pp8v-x3c5-8w4p","CGA-pq9x-jcx6-xh26","CGA-pr52-x753-rqj7","CGA-pv68-235x-8rgj","CGA-pvpx-rqmq-hw26","CGA-pwj4-94mq-5pfp","CGA-px8f-pgrf-mc4v","CGA-px8v-46q8-pmjr","CGA-pxcv-v38f-c8wg","CGA-q2ph-j95g-xwgg","CGA-q579-5p6j-4g4h","CGA-q58c-33fj-jqmw","CGA-q5c2-gcxq-h636","CGA-q5g5-hj4w-rq8w","CGA-q6gh-mmqf-6f4j","CGA-q6v4-99h5-wj72","CGA-q8vv-m9w7-gf99","CGA-q98r-7338-47h6","CGA-q9h8-qwx4-gmf2","CGA-qhmf-wvvw-vwfr","CGA-qj2j-745g-37jh","CGA-qm6c-qf8q-p328","CGA-qmmp-q43x-hh78","CGA-qpfg-fj86-fmmw","CGA-qpvm-49gc-q34w","CGA-qq76-4qxw-4q7r","CGA-qr4q-xjv2-2w53","CGA-qr4w-8c23-cfj7","CGA-qr8h-q38q-ggr5","CGA-qvjg-r7cp-2cc3","CGA-qx5f-vm2w-3wq7","CGA-r27v-5fc4-5wj6","CGA-r2rj-xqc8-8whp","CGA-r343-r792-2c7q","CGA-r374-w68f-5vcj","CGA-r3jr-55xv-crjr","CGA-r3xm-348p-68rg","CGA-r45q-822c-6754","CGA-r69j-25p5-qj68","CGA-r75q-c6h8-4x5j","CGA-r7fg-rfm8-fjw2","CGA-r7fj-hj9f-wgm9","CGA-r8c3-whc2-4745","CGA-r8pf-7j89-j9vq","CGA-r9gp-w57w-4g69","CGA-r9vv-876q-f8cq","CGA-r9w6-w43p-6g8j","CGA-rf4j-phwh-xpv5","CGA-rf66-wxgm-hv25","CGA-rhvc-rjc5-hv8g","CGA-rjrg-w69q-6vch","CGA-rm5g-hx9r-6fjh","CGA-rmgv-cp23-vxmh","CGA-rpg5-g564-5jwq","CGA-rqq3-hp5v-hpv4","CGA-rr56-vj7m-v897","CGA-rrvg-pfxm-pc7q","CGA-rvm8-7h6x-rhwm","CGA-rxr3-xv23-w3g9","CGA-v24v-24j4-xwx3","CGA-v26q-ppmq-3j8x","CGA-v2pm-8vj4-wmm4","CGA-v3cp-67q3-vhjh","CGA-v4c9-h7v9-rgvm","CGA-v4cm-rg86-56fq","CGA-v4j3-q7mc-rjh7","CGA-v4pp-wfw2-2m2c","CGA-v6fh-5h9p-297w","CGA-v6fr-7xg2-7xpx","CGA-v6j3-7qhq-x24v","CGA-v6x4-cjmp-24rr","CGA-v7p9-8xcx-v24j","CGA-v85j-qrh7-w7w8","CGA-v862-x7mf-q3x5","CGA-v9jj-5r94-x4wp","CGA-v9mw-jpq6-8929","CGA-vcqq-qpxq-p3x6","CGA-vf5x-hjj7-h39h","CGA-vh34-59hm-j3fw","CGA-vmmv-mv6c-v6qf","CGA-vmpc-j4cm-fqfx","CGA-vp9x-v95c-c7m4","CGA-vpgg-34j5-m644","CGA-vq4m-4grg-3m2x","CGA-vqrc-hqmc-9pvf","CGA-vvq5-6r3h-w9gw","CGA-vvr3-r63f-vrqc","CGA-vw2c-vhh3-2f4j","CGA-w244-qp9v-fp2j","CGA-w35j-jgj6-cv2f","CGA-w3rf-8x88-8f6c","CGA-w4xw-4jvr-hqc4","CGA-w5cc-vq4w-2pv2","CGA-w67v-55j9-38wf","CGA-w76w-f87v-hvrw","CGA-w846-v76x-v88h","CGA-w8j6-6f94-jh56","CGA-wf74-g25j-j229","CGA-wgv7-9qm6-q6rh","CGA-wgv9-3cp2-mgh3","CGA-wh4p-x7gv-6923","CGA-whj8-47fx-3jpc","CGA-wjvv-3r23-93mg","CGA-wp2w-7rj4-5xxg","CGA-wpq5-rp53-2h2w","CGA-wpvh-8fgg-8c54","CGA-wqf7-83mg-6m3q","CGA-wr3w-pc7r-cj5f","CGA-wrx2-v3fx-67rf","CGA-ww9p-hcjm-79v5","CGA-wwwg-956r-h8vc","CGA-wxfw-r47h-3fqg","CGA-x232-hr4q-w9qh","CGA-x2m4-mhp7-mgmr","CGA-x33x-27hr-mrr3","CGA-x4f5-7whr-2hvq","CGA-x4jv-jpmc-qmjr","CGA-x6g3-qhg9-v6xq","CGA-x7cr-x9q5-2g8f","CGA-x87j-4x6p-9xp2","CGA-x8cm-j2x9-gcmm","CGA-x9vq-h8q3-f3qp","CGA-xc78-gv8r-f886","CGA-xcfr-5xw6-q8gh","CGA-xcvp-f2cw-wrqx","CGA-xf89-5qfw-j7g5","CGA-xfjp-9gwf-vpqw","CGA-xfr9-6xvx-2gm5","CGA-xfxj-82h5-4fjc","CGA-xh3f-4345-chvm","CGA-xh7j-g7wq-55pf","CGA-xj5q-f5r4-g3m8","CGA-xjjp-q28h-8r3g","CGA-xjv9-5wjp-qf5j","CGA-xmcj-m443-xpqm","CGA-xmh5-p7j3-6r7g","CGA-xph4-jh68-2q2p","CGA-xr8f-j88q-4hpw","CGA-xr92-398v-g465","CGA-xrxv-x6pj-77rp","CGA-xv9j-jg33-x9rj","CGA-xw5x-jq8v-7gp9","CGA-xw6r-xvfg-wv9f","CGA-xwvq-fcv9-7x39","CGA-xx3q-7h8q-567j"],"status":"published","duplicateOf":null,"title":null,"description":"opentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 2.8.0, W3CBaggagePropagator.extract() in @opentelemetry/core does not enforce size limits when parsing inbound baggage HTTP headers. The W3C Baggage specification recommends a maximum of 8,192 bytes and 180 entries; these limits were only enforced on the outbound (inject()) path, not on the inbound (extract()) path. Parsing oversized baggage causes memory allocation proportional to the header size without any cap. This vulnerability is fixed in 2.8.0.","dates":{"published":"2026-06-22T16:52:54.233Z","modified":"2026-06-23T16:11:07.708Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00402,"percentile":0.33065,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.058000000000000024,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00344},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00402,"percentile":0.33065}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00344,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00402,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00402,"percentile":0.33065}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-770","name":"Allocation of Resources Without Limits or Throttling","description":"The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/770.html"}],"affected":[{"vendor":"chainguard","product":"cadence-web","name":"cadence-web","label":"cadence-web","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cadence-web","purlType":"apk","versions":[{"text":"< 4.0.15-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.15-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gemini-cli","name":"gemini-cli","label":"gemini-cli","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gemini-cli","purlType":"apk","versions":[{"text":"< 0.49.0-r1","noFixRecorded":false,"fixedIn":null},{"text":"< 0.49.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.49.0-r1 | < 0.49.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-7","name":"kibana-7","label":"kibana-7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.17","name":"kibana-8.17","label":"kibana-8.17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17","purlType":"apk","versions":[{"text":"< 8.17.10-r28","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r28","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.17-bitnami","name":"kibana-8.17-bitnami","label":"kibana-8.17-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17-bitnami","purlType":"apk","versions":[{"text":"< 8.17.10-r28","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r28","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.17-iamguarded","name":"kibana-8.17-iamguarded","label":"kibana-8.17-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17-iamguarded","purlType":"apk","versions":[{"text":"< 8.17.10-r28","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r28","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19","name":"kibana-8.19","label":"kibana-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19","purlType":"apk","versions":[{"text":"< 8.19.17-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 8.19.17-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.17-r0 | < 8.19.17-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19-bitnami","name":"kibana-8.19-bitnami","label":"kibana-8.19-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19-bitnami","purlType":"apk","versions":[{"text":"< 8.19.17-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 8.19.17-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.17-r0 | < 8.19.17-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19-iamguarded","name":"kibana-8.19-iamguarded","label":"kibana-8.19-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19-iamguarded","purlType":"apk","versions":[{"text":"< 8.19.17-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 8.19.17-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.17-r0 | < 8.19.17-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0","name":"kibana-9.0","label":"kibana-9.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0","purlType":"apk","versions":[{"text":"< 9.0.8-r32","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r32","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0-bitnami","name":"kibana-9.0-bitnami","label":"kibana-9.0-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0-bitnami","purlType":"apk","versions":[{"text":"< 9.0.8-r32","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r32","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0-iamguarded","name":"kibana-9.0-iamguarded","label":"kibana-9.0-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0-iamguarded","purlType":"apk","versions":[{"text":"< 9.0.8-r32","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r32","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.1","name":"kibana-9.1","label":"kibana-9.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.1","purlType":"apk","versions":[{"text":"< 9.1.10-r24","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r24","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.1-iamguarded","name":"kibana-9.1-iamguarded","label":"kibana-9.1-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.1-iamguarded","purlType":"apk","versions":[{"text":"< 9.1.10-r24","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r24","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2","name":"kibana-9.2","label":"kibana-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2","purlType":"apk","versions":[{"text":"< 9.2.8-r18","noFixRecorded":false,"fixedIn":null},{"text":"< 9.2.8-r14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r18 | < 9.2.8-r14","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2-iamguarded","name":"kibana-9.2-iamguarded","label":"kibana-9.2-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2-iamguarded","purlType":"apk","versions":[{"text":"< 9.2.8-r14","noFixRecorded":false,"fixedIn":null},{"text":"< 9.2.8-r18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r14 | < 9.2.8-r18","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3","name":"kibana-9.3","label":"kibana-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3","purlType":"apk","versions":[{"text":"< 9.3.6-r1","noFixRecorded":false,"fixedIn":null},{"text":"< 9.3.6-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.6-r1 | < 9.3.6-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3-iamguarded","name":"kibana-9.3-iamguarded","label":"kibana-9.3-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3-iamguarded","purlType":"apk","versions":[{"text":"< 9.3.6-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 9.3.6-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.6-r0 | < 9.3.6-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.4","name":"kibana-9.4","label":"kibana-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.4","purlType":"apk","versions":[{"text":"< 9.4.2-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.2-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.4-iamguarded","name":"kibana-9.4-iamguarded","label":"kibana-9.4-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.4-iamguarded","purlType":"apk","versions":[{"text":"< 9.4.2-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.2-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-2","name":"langfuse-2","label":"langfuse-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-2","purlType":"apk","versions":[{"text":"< 2.95.12-r36","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 2.95.12-r36 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-2-worker","name":"langfuse-2-worker","label":"langfuse-2-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-2-worker","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.95.12-r36","noFixRecorded":false,"fixedIn":null},{"text":"< 2.95.12-r32","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.95.12-r36 | < 2.95.12-r32","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-3","name":"langfuse-3","label":"langfuse-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-3","purlType":"apk","versions":[{"text":"< 3.191.0-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.195.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.191.0-r0 | < 3.195.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-3-compat","name":"langfuse-3-compat","label":"langfuse-3-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-3-compat","purlType":"apk","versions":[{"text":"< 3.225.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-3-worker","name":"langfuse-3-worker","label":"langfuse-3-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-3-worker","purlType":"apk","versions":[{"text":"< 3.195.0-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.191.0-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.197.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.195.0-r0 | < 3.191.0-r0 | < 3.197.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-2","name":"langfuse-fips-2","label":"langfuse-fips-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-2","purlType":"apk","versions":[{"text":"< 2.95.12-r39","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 2.95.12-r39 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-2-worker","name":"langfuse-fips-2-worker","label":"langfuse-fips-2-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-2-worker","purlType":"apk","versions":[{"text":"< 2.95.12-r35","noFixRecorded":false,"fixedIn":null},{"text":"< 2.95.12-r39","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 2.95.12-r35 | < 2.95.12-r39 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-3","name":"langfuse-fips-3","label":"langfuse-fips-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-3","purlType":"apk","versions":[{"text":"< 3.192.0-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.195.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.192.0-r0 | < 3.195.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-3-worker","name":"langfuse-fips-3-worker","label":"langfuse-fips-3-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-3-worker","purlType":"apk","versions":[{"text":"< 3.197.0-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.195.0-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.192.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.197.0-r0 | < 3.195.0-r0 | < 3.192.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"librechat","name":"librechat","label":"librechat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/librechat","purlType":"apk","versions":[{"text":"< 0.8.6-r4","noFixRecorded":false,"fixedIn":null},{"text":"< 0.8.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.8.6-r4 | < 0.8.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2","name":"opensearch-dashboards-2","label":"opensearch-dashboards-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2","purlType":"apk","versions":[{"text":"< 2.19.6-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.6-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips","name":"opensearch-dashboards-2-fips","label":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips","purlType":"apk","versions":[{"text":"< 2.19.6-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.6-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3","name":"opensearch-dashboards-3","label":"opensearch-dashboards-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3","purlType":"apk","versions":[{"text":"< 3.8.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips","name":"opensearch-dashboards-3-fips","label":"opensearch-dashboards-3-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips","purlType":"apk","versions":[{"text":"< 3.8.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pulumi-language-nodejs","name":"pulumi-language-nodejs","label":"pulumi-language-nodejs","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pulumi-language-nodejs","purlType":"apk","versions":[{"text":"< 3.252.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.252.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"renovate","name":"renovate","label":"renovate","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/renovate","purlType":"apk","versions":[{"text":"< 43.231.2-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 43.231.2-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard","name":"wazuh-dashboard","label":"wazuh-dashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-fips","name":"wazuh-dashboard-fips","label":"wazuh-dashboard-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"langfuse-3","name":"langfuse-3","label":"langfuse-3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/langfuse-3","purlType":"apk","versions":[{"text":"< 3.191.0-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.195.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.191.0-r0 | < 3.195.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"langfuse-3-compat","name":"langfuse-3-compat","label":"langfuse-3-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/langfuse-3-compat","purlType":"apk","versions":[{"text":"< 3.225.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.7-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"langfuse-3-worker","name":"langfuse-3-worker","label":"langfuse-3-worker","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/langfuse-3-worker","purlType":"apk","versions":[{"text":"< 3.195.0-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.191.0-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.197.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.195.0-r0 | < 3.191.0-r0 | < 3.197.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3","name":"opensearch-dashboards-3","label":"opensearch-dashboards-3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3","purlType":"apk","versions":[{"text":"< 3.8.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"pulumi-language-nodejs","name":"pulumi-language-nodejs","label":"pulumi-language-nodejs","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/pulumi-language-nodejs","purlType":"apk","versions":[{"text":"< 3.252.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.252.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"renovate","name":"renovate","label":"renovate","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/renovate","purlType":"apk","versions":[{"text":"< 43.231.2-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 43.231.2-r0","eol":null,"hubHref":null},{"vendor":"@opentelemetry","product":"core","name":"@opentelemetry/core","label":"core","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/@opentelemetry/core","purlType":"npm","versions":[{"text":"< 2.8.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.0","eol":null,"hubHref":null},{"vendor":"open-telemetry","product":"opentelemetry-js","name":"opentelemetry-js","label":"opentelemetry-js","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 2.8.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.0","eol":null,"hubHref":"/vendor/open-telemetry/opentelemetry-js"},{"vendor":"opentelemetry","product":"opentelemetry","name":"opentelemetry","label":"opentelemetry","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 2.8.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.0","eol":null,"hubHref":"/vendor/opentelemetry/opentelemetry"}],"affectedCount":47,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/open-telemetry/opentelemetry-js/security/advisories/GHSA-8988-4f7v-96qf","label":"github.com/open-telemetry/opentelemetry-js/security/advisories/GHSA-8988-4f7v-96qf","hostname":"github.com","tags":["X Refsource CONFIRM","Advisory","WEB","Vendor Advisory","Mitigation"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54285.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54285.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54285","label":"nvd.nist.gov/vuln/detail/CVE-2026-54285","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/open-telemetry/opentelemetry-js","label":"github.com/open-telemetry/opentelemetry-js","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-XHPH-HJ6Q-JQVX"]},"timeline":[{"kind":"published","date":"2026-06-22T16:52:54.233Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-23T16:11:07.708Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T01:16:36.633Z","stale":false,"partial":false}}