[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-56850":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":660,"aliases":661,"duplicate_of":9,"upstream":673,"downstream":674,"duplicates":713,"related":714,"reserved_at":9,"published_at":732,"modified_at":733,"state":734,"summary":735,"references_raw":744,"kevs":787,"epss":788,"epss_history":791,"metrics":916,"affected":939},"CVE-2026-56850","A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates.\r\n\r\nThis vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","weakness","Draft","Class","High",[20,182,261,265,269,273,292,481,543,627],{"id":21,"name":22,"techniques":23},"CAPEC-114","Authentication Abuse",[24],{"id":25,"name":26,"tactics":27,"countermeasures":34},"T1548","Abuse Elevation Control Mechanism",[28,31],{"id":29,"name":30},"TA0030","Defense Evasion",{"id":32,"name":33},"TA0111","Privilege Escalation",[35,40,44,48,52,57,61,65,69,73,77,81,85,89,94,98,103,108,112,116,121,125,130,134,138,142,146,150,154,158,162,166,170,174,178],{"id":36,"name":37,"tactic":38},"D3-AM","Access Modeling",{"name":39},"Model",{"id":41,"name":42,"tactic":43},"D3-CI","Configuration Inventory",{"name":39},{"id":45,"name":46,"tactic":47},"D3-DI","Data Inventory",{"name":39},{"id":49,"name":50,"tactic":51},"D3-NTPM","Network Traffic Policy Mapping",{"name":39},{"id":53,"name":54,"tactic":55},"D3-AEM","Application Exception Monitoring",{"name":56},"Detect",{"id":58,"name":59,"tactic":60},"D3-SCA","System Call Analysis",{"name":56},{"id":62,"name":63,"tactic":64},"D3-SFA","System File Analysis",{"name":56},{"id":66,"name":67,"tactic":68},"D3-FA","File Analysis",{"name":56},{"id":70,"name":71,"tactic":72},"D3-FIM","File Integrity Monitoring",{"name":56},{"id":74,"name":75,"tactic":76},"D3-OPM","Operational Process Monitoring",{"name":56},{"id":78,"name":79,"tactic":80},"D3-DA","Dynamic Analysis",{"name":56},{"id":82,"name":83,"tactic":84},"D3-EFA","Emulated File Analysis",{"name":56},{"id":86,"name":87,"tactic":88},"D3-PSA","Process Spawn Analysis",{"name":56},{"id":90,"name":91,"tactic":92},"D3-FEV","File Eviction",{"name":93},"Evict",{"id":95,"name":96,"tactic":97},"D3-AL","Account Locking",{"name":93},{"id":99,"name":100,"tactic":101},"D3-DF","Decoy File",{"name":102},"Deceive",{"id":104,"name":105,"tactic":106},"D3-FE","File Encryption",{"name":107},"Harden",{"id":109,"name":110,"tactic":111},"D3-AA","Agent Authentication",{"name":107},{"id":113,"name":114,"tactic":115},"D3-CDP","Change Default Password",{"name":107},{"id":117,"name":118,"tactic":119},"D3-HBPI","Hardware-based Process Isolation",{"name":120},"Isolate",{"id":122,"name":123,"tactic":124},"D3-SCP","System Configuration Permissions",{"name":107},{"id":126,"name":127,"tactic":128},"D3-RC","Restore Configuration",{"name":129},"Restore",{"id":131,"name":132,"tactic":133},"D3-RF","Restore File",{"name":129},{"id":135,"name":136,"tactic":137},"D3-ULA","Unlock Account",{"name":129},{"id":139,"name":140,"tactic":141},"D3-RUAA","Restore User Account Access",{"name":129},{"id":143,"name":144,"tactic":145},"D3-RD","Restore Database",{"name":129},{"id":147,"name":148,"tactic":149},"D3-SCF","System Call Filtering",{"name":120},{"id":151,"name":152,"tactic":153},"D3-CF","Content Filtering",{"name":120},{"id":155,"name":156,"tactic":157},"D3-LFP","Local File Permissions",{"name":120},{"id":159,"name":160,"tactic":161},"D3-RFAM","Remote File Access Mediation",{"name":120},{"id":163,"name":164,"tactic":165},"D3-CQ","Content Quarantine",{"name":120},{"id":167,"name":168,"tactic":169},"D3-CM","Content Modification",{"name":120},{"id":171,"name":172,"tactic":173},"D3-UAP","User Account Permissions",{"name":120},{"id":175,"name":176,"tactic":177},"D3-EAL","Executable Allowlisting",{"name":120},{"id":179,"name":180,"tactic":181},"D3-EDL","Executable Denylisting",{"name":120},{"id":183,"name":184,"techniques":185},"CAPEC-115","Authentication Bypass",[186],{"id":25,"name":26,"tactics":187,"countermeasures":190},[188,189],{"id":29,"name":30},{"id":32,"name":33},[191,193,195,197,199,201,203,205,207,209,211,213,215,217,219,221,223,225,227,229,231,233,235,237,239,241,243,245,247,249,251,253,255,257,259],{"id":36,"name":37,"tactic":192},{"name":39},{"id":41,"name":42,"tactic":194},{"name":39},{"id":45,"name":46,"tactic":196},{"name":39},{"id":49,"name":50,"tactic":198},{"name":39},{"id":53,"name":54,"tactic":200},{"name":56},{"id":58,"name":59,"tactic":202},{"name":56},{"id":62,"name":63,"tactic":204},{"name":56},{"id":66,"name":67,"tactic":206},{"name":56},{"id":70,"name":71,"tactic":208},{"name":56},{"id":74,"name":75,"tactic":210},{"name":56},{"id":78,"name":79,"tactic":212},{"name":56},{"id":82,"name":83,"tactic":214},{"name":56},{"id":86,"name":87,"tactic":216},{"name":56},{"id":90,"name":91,"tactic":218},{"name":93},{"id":95,"name":96,"tactic":220},{"name":93},{"id":99,"name":100,"tactic":222},{"name":102},{"id":104,"name":105,"tactic":224},{"name":107},{"id":109,"name":110,"tactic":226},{"name":107},{"id":113,"name":114,"tactic":228},{"name":107},{"id":117,"name":118,"tactic":230},{"name":120},{"id":122,"name":123,"tactic":232},{"name":107},{"id":126,"name":127,"tactic":234},{"name":129},{"id":131,"name":132,"tactic":236},{"name":129},{"id":135,"name":136,"tactic":238},{"name":129},{"id":139,"name":140,"tactic":240},{"name":129},{"id":143,"name":144,"tactic":242},{"name":129},{"id":147,"name":148,"tactic":244},{"name":120},{"id":151,"name":152,"tactic":246},{"name":120},{"id":155,"name":156,"tactic":248},{"name":120},{"id":159,"name":160,"tactic":250},{"name":120},{"id":163,"name":164,"tactic":252},{"name":120},{"id":167,"name":168,"tactic":254},{"name":120},{"id":171,"name":172,"tactic":256},{"name":120},{"id":175,"name":176,"tactic":258},{"name":120},{"id":179,"name":180,"tactic":260},{"name":120},{"id":262,"name":263,"techniques":264},"CAPEC-151","Identity Spoofing",[],{"id":266,"name":267,"techniques":268},"CAPEC-194","Fake the Source of Data",[],{"id":270,"name":271,"techniques":272},"CAPEC-22","Exploiting Trust in Client",[],{"id":274,"name":275,"techniques":276},"CAPEC-57","Utilizing REST's Trust in the System Resource to Obtain Sensitive Data",[277],{"id":278,"name":279,"tactics":280,"countermeasures":287},"T1040","Network Sniffing",[281,284],{"id":282,"name":283},"TA0031","Credential Access",{"id":285,"name":286},"TA0102","Discovery",[288],{"id":289,"name":290,"tactic":291},"D3-DNSTA","DNS Traffic Analysis",{"name":56},{"id":293,"name":294,"techniques":295},"CAPEC-593","Session Hijacking",[296,340,453],{"id":297,"name":298,"tactics":299,"countermeasures":303},"T1185","Browser Session Hijacking",[300],{"id":301,"name":302},"TA0100","Collection",[304,308,312,316,320,324,328,332,336],{"id":305,"name":306,"tactic":307},"D3-NTSA","Network Traffic Signature Analysis",{"name":56},{"id":309,"name":310,"tactic":311},"D3-RTSD","Remote Terminal Session Detection",{"name":56},{"id":313,"name":314,"tactic":315},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":56},{"id":317,"name":318,"tactic":319},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":56},{"id":321,"name":322,"tactic":323},"D3-CSPP","Client-server Payload Profiling",{"name":56},{"id":325,"name":326,"tactic":327},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":56},{"id":329,"name":330,"tactic":331},"D3-NTF","Network Traffic Filtering",{"name":120},{"id":333,"name":334,"tactic":335},"D3-APCA","Application Protocol Command Analysis",{"name":56},{"id":337,"name":338,"tactic":339},"D3-NTCD","Network Traffic Community Deviation",{"name":56},{"id":341,"name":342,"tactics":343,"countermeasures":348},"T1550.001","Application Access Token",[344,345],{"id":29,"name":30},{"id":346,"name":347},"TA0109","Lateral Movement",[349,351,353,357,359,361,365,369,371,375,377,381,385,389,391,395,399,403,405,409,413,415,419,421,423,427,431,435,439,443,447,451],{"id":147,"name":148,"tactic":350},{"name":120},{"id":333,"name":334,"tactic":352},{"name":56},{"id":354,"name":355,"tactic":356},"D3-CCSA","Credential Compromise Scope Analysis",{"name":56},{"id":317,"name":318,"tactic":358},{"name":56},{"id":305,"name":306,"tactic":360},{"name":56},{"id":362,"name":363,"tactic":364},"D3-PSMD","Process Self-Modification Detection",{"name":56},{"id":366,"name":367,"tactic":368},"D3-KBPI","Kernel-based Process Isolation",{"name":120},{"id":86,"name":87,"tactic":370},{"name":56},{"id":372,"name":373,"tactic":374},"D3-PT","Process Termination",{"name":93},{"id":117,"name":118,"tactic":376},{"name":120},{"id":378,"name":379,"tactic":380},"D3-TB","Token Binding",{"name":107},{"id":382,"name":383,"tactic":384},"D3-PS","Process Suspension",{"name":93},{"id":386,"name":387,"tactic":388},"D3-HR","Host Reboot",{"name":93},{"id":325,"name":326,"tactic":390},{"name":56},{"id":392,"name":393,"tactic":394},"D3-DUC","Decoy User Credential",{"name":102},{"id":396,"name":397,"tactic":398},"D3-ABPI","Application-based Process Isolation",{"name":120},{"id":400,"name":401,"tactic":402},"D3-WSAM","Web Session Access Mediation",{"name":120},{"id":309,"name":310,"tactic":404},{"name":56},{"id":406,"name":407,"tactic":408},"D3-PLA","Process Lineage Analysis",{"name":56},{"id":410,"name":411,"tactic":412},"D3-RIC","Reissue Credential",{"name":129},{"id":329,"name":330,"tactic":414},{"name":120},{"id":416,"name":417,"tactic":418},"D3-CH","Credential Hardening",{"name":107},{"id":321,"name":322,"tactic":420},{"name":56},{"id":337,"name":338,"tactic":422},{"name":56},{"id":424,"name":425,"tactic":426},"D3-TBA","Token-based Authentication",{"name":107},{"id":428,"name":429,"tactic":430},"D3-MFA","Multi-factor Authentication",{"name":107},{"id":432,"name":433,"tactic":434},"D3-CRO","Credential Rotation",{"name":107},{"id":436,"name":437,"tactic":438},"D3-CTS","Credential Transmission Scoping",{"name":120},{"id":440,"name":441,"tactic":442},"D3-CR","Credential Revocation",{"name":93},{"id":444,"name":445,"tactic":446},"D3-HS","Host Shutdown",{"name":93},{"id":448,"name":449,"tactic":450},"D3-ANCI","Authentication Cache Invalidation",{"name":93},{"id":313,"name":314,"tactic":452},{"name":56},{"id":454,"name":455,"tactics":456,"countermeasures":458},"T1563","Remote Service Session Hijacking",[457],{"id":346,"name":347},[459,461,463,465,467,471,473,475,477,479],{"id":305,"name":306,"tactic":460},{"name":56},{"id":309,"name":310,"tactic":462},{"name":56},{"id":337,"name":338,"tactic":464},{"name":56},{"id":317,"name":318,"tactic":466},{"name":56},{"id":468,"name":469,"tactic":470},"D3-ST","Session Termination",{"name":93},{"id":321,"name":322,"tactic":472},{"name":56},{"id":313,"name":314,"tactic":474},{"name":56},{"id":333,"name":334,"tactic":476},{"name":56},{"id":329,"name":330,"tactic":478},{"name":120},{"id":325,"name":326,"tactic":480},{"name":56},{"id":482,"name":483,"techniques":484},"CAPEC-633","Token Impersonation",[485],{"id":486,"name":487,"tactics":488,"countermeasures":494},"T1134","Access Token Manipulation",[489,490,493],{"id":29,"name":30},{"id":491,"name":492},"TA0005","Stealth",{"id":32,"name":33},[495,497,499,501,503,505,507,509,511,513,515,517,519,521,523,525,527,529,531,533,535,537,539,541],{"id":436,"name":437,"tactic":496},{"name":120},{"id":354,"name":355,"tactic":498},{"name":56},{"id":74,"name":75,"tactic":500},{"name":56},{"id":86,"name":87,"tactic":502},{"name":56},{"id":468,"name":469,"tactic":504},{"name":93},{"id":49,"name":50,"tactic":506},{"name":39},{"id":440,"name":441,"tactic":508},{"name":93},{"id":448,"name":449,"tactic":510},{"name":93},{"id":392,"name":393,"tactic":512},{"name":102},{"id":36,"name":37,"tactic":514},{"name":39},{"id":416,"name":417,"tactic":516},{"name":107},{"id":428,"name":429,"tactic":518},{"name":107},{"id":432,"name":433,"tactic":520},{"name":107},{"id":117,"name":118,"tactic":522},{"name":120},{"id":378,"name":379,"tactic":524},{"name":107},{"id":424,"name":425,"tactic":526},{"name":107},{"id":126,"name":127,"tactic":528},{"name":129},{"id":53,"name":54,"tactic":530},{"name":56},{"id":410,"name":411,"tactic":532},{"name":129},{"id":41,"name":42,"tactic":534},{"name":39},{"id":58,"name":59,"tactic":536},{"name":56},{"id":147,"name":148,"tactic":538},{"name":120},{"id":175,"name":176,"tactic":540},{"name":120},{"id":179,"name":180,"tactic":542},{"name":120},{"id":544,"name":545,"techniques":546},"CAPEC-650","Upload a Web Shell to a Web Server",[547],{"id":548,"name":549,"tactics":550,"countermeasures":554},"T1505.003","Web Shell",[551],{"id":552,"name":553},"TA0110","Persistence",[555,557,559,561,563,565,569,571,575,577,579,581,583,585,587,589,593,595,597,599,601,603,607,609,611,613,617,619,621,623,625],{"id":147,"name":148,"tactic":556},{"name":120},{"id":179,"name":180,"tactic":558},{"name":120},{"id":99,"name":100,"tactic":560},{"name":102},{"id":82,"name":83,"tactic":562},{"name":56},{"id":406,"name":407,"tactic":564},{"name":56},{"id":566,"name":567,"tactic":568},"D3-RNA","Restore Network Access",{"name":129},{"id":444,"name":445,"tactic":570},{"name":93},{"id":572,"name":573,"tactic":574},"D3-LLM","Logical Link Mapping",{"name":39},{"id":386,"name":387,"tactic":576},{"name":93},{"id":396,"name":397,"tactic":578},{"name":120},{"id":382,"name":383,"tactic":580},{"name":93},{"id":90,"name":91,"tactic":582},{"name":93},{"id":151,"name":152,"tactic":584},{"name":120},{"id":175,"name":176,"tactic":586},{"name":120},{"id":366,"name":367,"tactic":588},{"name":120},{"id":590,"name":591,"tactic":592},"D3-EHB","Endpoint Health Beacon",{"name":56},{"id":86,"name":87,"tactic":594},{"name":56},{"id":155,"name":156,"tactic":596},{"name":120},{"id":362,"name":363,"tactic":598},{"name":56},{"id":159,"name":160,"tactic":600},{"name":120},{"id":163,"name":164,"tactic":602},{"name":120},{"id":604,"name":605,"tactic":606},"D3-NNI","Network Node Inventory",{"name":39},{"id":78,"name":79,"tactic":608},{"name":56},{"id":372,"name":373,"tactic":610},{"name":93},{"id":66,"name":67,"tactic":612},{"name":56},{"id":614,"name":615,"tactic":616},"D3-PLM","Physical Link Mapping",{"name":39},{"id":131,"name":132,"tactic":618},{"name":129},{"id":117,"name":118,"tactic":620},{"name":120},{"id":104,"name":105,"tactic":622},{"name":107},{"id":167,"name":168,"tactic":624},{"name":120},{"id":70,"name":71,"tactic":626},{"name":56},{"id":628,"name":629,"techniques":630},"CAPEC-94","Adversary in the Middle (AiTM)",[631],{"id":632,"name":633,"tactics":634,"countermeasures":637},"T1557","Adversary-in-the-Middle",[635,636],{"id":282,"name":283},{"id":301,"name":302},[638,640,642,644,646,648,650,654,656,658],{"id":333,"name":334,"tactic":639},{"name":56},{"id":321,"name":322,"tactic":641},{"name":56},{"id":317,"name":318,"tactic":643},{"name":56},{"id":305,"name":306,"tactic":645},{"name":56},{"id":337,"name":338,"tactic":647},{"name":56},{"id":309,"name":310,"tactic":649},{"name":56},{"id":651,"name":652,"tactic":653},"D3-CAA","Connection Attempt Analysis",{"name":56},{"id":313,"name":314,"tactic":655},{"name":56},{"id":325,"name":326,"tactic":657},{"name":56},{"id":329,"name":330,"tactic":659},{"name":120},[],[662,663,664,665,666,667,668,669,670,671,672],"ALPINE-CVE-2026-56850","UBUNTU-CVE-2026-56850","DEBIAN-CVE-2026-56850","CGA-2g4f-xcr5-37pq","CGA-8ppq-5q9m-37vc","CGA-9jh2-j73w-g296","CGA-h26j-6v9m-hpgr","CGA-qpvq-5fx6-qjf7","CGA-rpf3-j36v-rw9j","CGA-rrm6-mjxg-9f75","CGA-vfmr-jcpp-5jr9",[],[675,677,679,681,683,685,687,689,691,693,695,697,699,701,703,705,707,709,711],{"_key":676},"SUSE-SU-2026:3520-1",{"_key":678},"SUSE-SU-2026:3521-1",{"_key":680},"SUSE-SU-2026:3557-1",{"_key":682},"OPENSUSE-SU-2026:11439-1",{"_key":684},"OPENSUSE-SU-2026:11440-1",{"_key":686},"OPENSUSE-SU-2026:21545-1",{"_key":688},"OPENSUSE-SU-2026:21546-1",{"_key":690},"SUSE-SU-2026:23130-1",{"_key":692},"SUSE-SU-2026:23131-1",{"_key":694},"SUSE-SU-2026:23154-1",{"_key":696},"SUSE-SU-2026:23155-1",{"_key":698},"MGASA-2026-0359",{"_key":700},"RHSA-2026:48273",{"_key":702},"RHSA-2026:48305",{"_key":704},"RHSA-2026:48537",{"_key":706},"SUSE-SU-2026:3929-1",{"_key":708},"SUSE-SU-2026:3930-1",{"_key":710},"SUSE-SU-2026:4248-1",{"_key":712},"SUSE-SU-2026:4261-1",[],[715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730],{"_key":676},{"_key":678},{"_key":680},{"_key":682},{"_key":684},{"_key":686},{"_key":688},{"_key":690},{"_key":692},{"_key":694},{"_key":696},{"_key":706},{"_key":708},{"_key":710},{"_key":712},{"_key":731},"CGA-937G-457G-GP42","2026-07-30T06:02:50.074Z","2026-07-30T12:37:10.100Z","Analyzed",{"cisa_kev":736,"cisa_ransomware":736,"cisa_vendor":9,"epss_severity":737,"epss_score":738,"severity":739,"severity_score":740,"severity_version":741,"severity_source":742,"severity_vector":743,"severity_status":734},false,"low",0.00084,"medium",4.4,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",[745,756,762,766,770,774,779,783],{"url":746,"sources":747,"tags":752},"https://nodejs.org/en/blog/vulnerability/july-2026-security-releases",[748,742,749,750,751],"cve.org","osv_ubuntu","osv_wolfi","osv_chainguard",[753,754,755],"REPORT","Vendor Advisory","ARTICLE",{"url":757,"sources":758,"tags":760},"https://security.alpinelinux.org/vuln/CVE-2026-56850",[759],"osv_alpine",[761],"Advisory",{"url":763,"sources":764,"tags":765},"https://ubuntu.com/security/CVE-2026-56850",[749],[753],{"url":767,"sources":768,"tags":769},"https://www.cve.org/CVERecord?id=CVE-2026-56850",[749],[753],{"url":771,"sources":772,"tags":773},"https://nodejs.org/en/blog/vulnerability/july-2026-security-releases#https-agent-can-reuse-mtls-identities-across-pfx-certificates-cve-2026-56850---medium",[749],[753],{"url":775,"sources":776,"tags":778},"https://security-tracker.debian.org/tracker/CVE-2026-56850",[777],"osv_debian",[761],{"url":780,"sources":781,"tags":782},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/56xxx/CVE-2026-56850.json",[750,751],[761],{"url":784,"sources":785,"tags":786},"https://nvd.nist.gov/vuln/detail/CVE-2026-56850",[750,751],[761],[],{"date":789,"score":738,"percentile":790},"2026-09-19",0.00326,[792,796,798,800,802,805,809,812,814,816,819,821,823,825,827,829,831,833,835,837,839,841,843,846,848,850,854,857,860,862,864,866,868,870,873,875,878,880,883,886,888,890,892,895,898,900,902,904,907,910,912,915],{"date":793,"score":794,"percentile":795},"2026-07-30",0.00079,0.00179,{"date":797,"score":794,"percentile":795},"2026-07-31",{"date":799,"score":794,"percentile":795},"2026-08-01",{"date":801,"score":794,"percentile":795},"2026-08-02",{"date":803,"score":794,"percentile":804},"2026-08-03",0.00178,{"date":806,"score":807,"percentile":808},"2026-08-04",0.00082,0.00283,{"date":810,"score":807,"percentile":811},"2026-08-05",0.00269,{"date":813,"score":807,"percentile":811},"2026-08-06",{"date":815,"score":807,"percentile":811},"2026-08-07",{"date":817,"score":807,"percentile":818},"2026-08-08",0.00268,{"date":820,"score":807,"percentile":818},"2026-08-09",{"date":822,"score":807,"percentile":818},"2026-08-10",{"date":824,"score":807,"percentile":818},"2026-08-11",{"date":826,"score":807,"percentile":818},"2026-08-12",{"date":828,"score":807,"percentile":811},"2026-08-13",{"date":830,"score":807,"percentile":811},"2026-08-14",{"date":832,"score":807,"percentile":818},"2026-08-15",{"date":834,"score":807,"percentile":818},"2026-08-16",{"date":836,"score":807,"percentile":811},"2026-08-17",{"date":838,"score":807,"percentile":818},"2026-08-18",{"date":840,"score":807,"percentile":811},"2026-08-19",{"date":842,"score":807,"percentile":818},"2026-08-20",{"date":844,"score":807,"percentile":845},"2026-08-21",0.00267,{"date":847,"score":807,"percentile":818},"2026-08-22",{"date":849,"score":807,"percentile":818},"2026-08-23",{"date":851,"score":852,"percentile":853},"2026-08-24",0.00085,0.00348,{"date":855,"score":852,"percentile":856},"2026-08-25",0.00345,{"date":858,"score":738,"percentile":859},"2026-08-26",0.00305,{"date":861,"score":738,"percentile":859},"2026-08-27",{"date":863,"score":738,"percentile":859},"2026-08-28",{"date":865,"score":738,"percentile":859},"2026-08-29",{"date":867,"score":738,"percentile":859},"2026-08-30",{"date":869,"score":738,"percentile":859},"2026-08-31",{"date":871,"score":738,"percentile":872},"2026-09-01",0.00304,{"date":874,"score":738,"percentile":872},"2026-09-02",{"date":876,"score":738,"percentile":877},"2026-09-03",0.00302,{"date":879,"score":738,"percentile":877},"2026-09-04",{"date":881,"score":738,"percentile":882},"2026-09-05",0.00294,{"date":884,"score":738,"percentile":885},"2026-09-06",0.00293,{"date":887,"score":738,"percentile":882},"2026-09-07",{"date":889,"score":738,"percentile":882},"2026-09-08",{"date":891,"score":738,"percentile":885},"2026-09-09",{"date":893,"score":738,"percentile":894},"2026-09-10",0.00295,{"date":896,"score":738,"percentile":897},"2026-09-11",0.00308,{"date":899,"score":738,"percentile":897},"2026-09-12",{"date":901,"score":738,"percentile":897},"2026-09-13",{"date":903,"score":738,"percentile":897},"2026-09-14",{"date":905,"score":738,"percentile":906},"2026-09-15",0.00307,{"date":908,"score":738,"percentile":909},"2026-09-16",0.00319,{"date":911,"score":738,"percentile":790},"2026-09-17",{"date":913,"score":738,"percentile":914},"2026-09-18",0.00325,{"date":789,"score":738,"percentile":790},[917,924,928,930,933,935,937],{"source":748,"cvss_v2_0":9,"cvss_v3_0":918,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":919,"baseSeverity":920,"vectorString":921,"impactScore":922,"exploitabilityScore":923},4.1,"MEDIUM","CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N",6,1.3,{"source":742,"cvss_v2_0":9,"cvss_v3_0":925,"cvss_v3_1":926,"cvss_v4_0":9},{"baseScore":919,"baseSeverity":920,"vectorString":921,"impactScore":922,"exploitabilityScore":923},{"baseScore":740,"baseSeverity":920,"vectorString":743,"impactScore":922,"exploitabilityScore":927},2.1,{"source":759,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":929,"cvss_v4_0":9},{"baseScore":740,"baseSeverity":9,"vectorString":743,"impactScore":922,"exploitabilityScore":927},{"source":749,"cvss_v2_0":9,"cvss_v3_0":931,"cvss_v3_1":932,"cvss_v4_0":9},{"baseScore":919,"baseSeverity":9,"vectorString":921,"impactScore":922,"exploitabilityScore":923},{"baseScore":740,"baseSeverity":9,"vectorString":743,"impactScore":922,"exploitabilityScore":927},{"source":777,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":934,"cvss_v4_0":9},{"baseScore":740,"baseSeverity":9,"vectorString":743,"impactScore":922,"exploitabilityScore":927},{"source":750,"cvss_v2_0":9,"cvss_v3_0":936,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":919,"baseSeverity":9,"vectorString":921,"impactScore":922,"exploitabilityScore":923},{"source":751,"cvss_v2_0":9,"cvss_v3_0":938,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":919,"baseSeverity":9,"vectorString":921,"impactScore":922,"exploitabilityScore":923},[940,957,964,968,974,978,983,986,989,992,1004,1011,1025],{"ecosystem":941,"name":942,"vendor":943,"product":942,"cpe_part":9,"purl_type":944,"purl_namespace":943,"purl_name":942,"source":9,"versions":945},"Alpine Linux","nodejs","alpine","apk",[946,952,953,956],{"version":947,"is_range":948,"range_type":949,"version_start":9,"version_start_type":9,"version_end":950,"version_end_type":951,"fixed_in":9},"lt22_23_2_r0",true,"ecosystem","22.23.2-r0","excluding",{"version":947,"is_range":948,"range_type":949,"version_start":9,"version_start_type":9,"version_end":950,"version_end_type":951,"fixed_in":9},{"version":954,"is_range":948,"range_type":949,"version_start":9,"version_start_type":9,"version_end":955,"version_end_type":951,"fixed_in":9},"lt24_18_1_r0","24.18.1-r0",{"version":954,"is_range":948,"range_type":949,"version_start":9,"version_start_type":9,"version_end":955,"version_end_type":951,"fixed_in":9},{"ecosystem":958,"name":959,"vendor":960,"product":959,"cpe_part":9,"purl_type":944,"purl_namespace":960,"purl_name":959,"source":9,"versions":961},"Chainguard","nodejs-20","chainguard",[962],{"version":963,"is_range":948,"range_type":949,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"ecosystem":958,"name":965,"vendor":960,"product":965,"cpe_part":9,"purl_type":944,"purl_namespace":960,"purl_name":965,"source":9,"versions":966},"nodejs-22",[967],{"version":947,"is_range":948,"range_type":949,"version_start":9,"version_start_type":9,"version_end":950,"version_end_type":951,"fixed_in":9},{"ecosystem":958,"name":969,"vendor":960,"product":969,"cpe_part":9,"purl_type":944,"purl_namespace":960,"purl_name":969,"source":9,"versions":970},"nodejs-24",[971],{"version":972,"is_range":948,"range_type":949,"version_start":9,"version_start_type":9,"version_end":973,"version_end_type":951,"fixed_in":9},"lt24_19_0_r0","24.19.0-r0",{"ecosystem":958,"name":975,"vendor":960,"product":975,"cpe_part":9,"purl_type":944,"purl_namespace":960,"purl_name":975,"source":9,"versions":976},"nodejs-25",[977],{"version":963,"is_range":948,"range_type":949,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":979,"name":959,"vendor":980,"product":959,"cpe_part":9,"purl_type":944,"purl_namespace":980,"purl_name":959,"source":9,"versions":981},"Wolfi","wolfi",[982],{"version":963,"is_range":948,"range_type":949,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":979,"name":965,"vendor":980,"product":965,"cpe_part":9,"purl_type":944,"purl_namespace":980,"purl_name":965,"source":9,"versions":984},[985],{"version":947,"is_range":948,"range_type":949,"version_start":9,"version_start_type":9,"version_end":950,"version_end_type":951,"fixed_in":9},{"ecosystem":979,"name":969,"vendor":980,"product":969,"cpe_part":9,"purl_type":944,"purl_namespace":980,"purl_name":969,"source":9,"versions":987},[988],{"version":972,"is_range":948,"range_type":949,"version_start":9,"version_start_type":9,"version_end":973,"version_end_type":951,"fixed_in":9},{"ecosystem":979,"name":975,"vendor":980,"product":975,"cpe_part":9,"purl_type":944,"purl_namespace":980,"purl_name":975,"source":9,"versions":990},[991],{"version":963,"is_range":948,"range_type":949,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":993,"name":942,"vendor":994,"product":942,"cpe_part":9,"purl_type":995,"purl_namespace":994,"purl_name":942,"source":9,"versions":996},"Debian","debian","deb",[997,998,999,1000,1001],{"version":963,"is_range":948,"range_type":949,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":963,"is_range":948,"range_type":949,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":963,"is_range":948,"range_type":949,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":963,"is_range":948,"range_type":949,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":1002,"is_range":948,"range_type":949,"version_start":9,"version_start_type":9,"version_end":1003,"version_end_type":951,"fixed_in":9},"lt24_19_0+dfsg+~cs24_13_3_1","24.19.0+dfsg+~cs24.13.3-1",{"ecosystem":1005,"name":942,"vendor":1006,"product":942,"cpe_part":9,"purl_type":995,"purl_namespace":1006,"purl_name":942,"source":9,"versions":1007},"Ubuntu","ubuntu",[1008,1009,1010],{"version":963,"is_range":948,"range_type":949,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":963,"is_range":948,"range_type":949,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":963,"is_range":948,"range_type":949,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":1012,"vendor":942,"product":1012,"cpe_part":1013,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1014},"node","a",[1015,1019,1022],{"version":1016,"is_range":948,"range_type":748,"version_start":1017,"version_start_type":1018,"version_end":1017,"version_end_type":1018,"fixed_in":9},">= 26.5.0, \u003C= 26.5.0","26.5.0","including",{"version":1020,"is_range":948,"range_type":748,"version_start":1021,"version_start_type":1018,"version_end":1021,"version_end_type":1018,"fixed_in":9},">= 24.18.0, \u003C= 24.18.0","24.18.0",{"version":1023,"is_range":948,"range_type":748,"version_start":1024,"version_start_type":1018,"version_end":1024,"version_end_type":1018,"fixed_in":9},">= 22.23.1, \u003C= 22.23.1","22.23.1",{"ecosystem":9,"name":1026,"vendor":942,"product":1026,"cpe_part":1013,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1027},"node.js",[1028,1032,1035],{"version":1029,"is_range":948,"range_type":1030,"version_start":1031,"version_start_type":1018,"version_end":1024,"version_end_type":1018,"fixed_in":9},"gte22.0_lte22.23.1","cpe","22.0",{"version":1033,"is_range":948,"range_type":1030,"version_start":1034,"version_start_type":1018,"version_end":1021,"version_end_type":1018,"fixed_in":9},"gte24.0.0_lte24.18.0","24.0.0",{"version":1036,"is_range":948,"range_type":1030,"version_start":1037,"version_start_type":1018,"version_end":1017,"version_end_type":1018,"fixed_in":9},"gte26.0.0_lte26.5.0","26.0.0"]