[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-65900":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":44,"aliases":54,"duplicate_of":9,"upstream":169,"downstream":172,"duplicates":175,"related":176,"reserved_at":9,"published_at":180,"modified_at":181,"state":182,"summary":183,"references_raw":191,"kevs":237,"epss":238,"epss_history":241,"metrics":412,"affected":437},"CVE-2026-65900","DOMPurify versions >=3.0.0 and before 3.4.8, when configured with SAFE_FOR_TEMPLATES together with a DOM output mode (RETURN_DOM, RETURN_DOM_FRAGMENT, or IN_PLACE), fail to strip template expressions (e.g. ${evil}, {{evil}}, \u003C%evil%>) inside \u003Ctemplate> element content. The final normalization/scrub pass (_scrubTemplateExpressions) uses a NodeIterator and node.normalize() that do not descend into template.content, so expressions that only form after adjacent text nodes merge survive sanitization. This bypasses SAFE_FOR_TEMPLATES and can allow a downstream template engine to evaluate attacker-supplied expressions. The string output path is not affected.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-79","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","weakness","Stable","Base","High",[20,24,28,32,36,40],{"id":21,"name":22,"techniques":23},"CAPEC-209","XSS Using MIME Type Mismatch",[],{"id":25,"name":26,"techniques":27},"CAPEC-588","DOM-Based XSS",[],{"id":29,"name":30,"techniques":31},"CAPEC-591","Reflected XSS",[],{"id":33,"name":34,"techniques":35},"CAPEC-592","Stored XSS",[],{"id":37,"name":38,"techniques":39},"CAPEC-63","Cross-Site Scripting (XSS)",[],{"id":41,"name":42,"techniques":43},"CAPEC-85","AJAX Footprinting",[],[45],{"_key":46,"name":47,"source":48,"url":49,"maturity":50,"reliability_score":51,"verified":52,"type":9,"platforms":53,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_CURE53_DOMPURIFY","Dompurify","github","https://github.com/cure53/DOMPurify/security/advisories/GHSA-gx9m-whjm-85jf","poc",0.3,false,[],[55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168],"UBUNTU-CVE-2026-65900","DEBIAN-CVE-2026-65900","GHSA-gvmj-g25r-r7wr","CGA-237g-69x8-42xg","CGA-342g-6h2q-8484","CGA-7hph-7r5f-wx3h","CGA-8239-775h-2jv7","CGA-8v5c-65qq-xppr","CGA-ch93-qg7j-5f3m","CGA-fh2w-9crx-j2rm","CGA-gfqr-6g6g-28fx","CGA-26mq-g834-5vpw","CGA-2j2q-695h-3mwc","CGA-2mfg-9cqm-x2w4","CGA-2pff-6pff-7mm9","CGA-2q7r-3fr2-hqjx","CGA-2r6h-hmpr-986h","CGA-37c5-x839-crv6","CGA-37h2-qmx8-5p67","CGA-3hf4-p557-px96","CGA-3pjp-32j5-4q36","CGA-3whv-w84g-gp33","CGA-45h7-jj55-253r","CGA-4px9-5mp6-mm5h","CGA-54qr-64v6-ggf4","CGA-55vr-h3x7-r5cf","CGA-56jc-wwmh-hgjp","CGA-59x8-vfhr-fwcq","CGA-5cm2-m39g-5mv8","CGA-5vxq-4jv5-fwgh","CGA-67f6-5gj2-x798","CGA-685p-vpc6-v4xr","CGA-6934-4v9c-pp2g","CGA-6hmm-q443-3mjh","CGA-6mmh-9v38-2h7j","CGA-7292-vj3c-hg25","CGA-76wg-gwj2-jwvr","CGA-7frm-8hp9-jf4p","CGA-7q36-5fpr-5jmf","CGA-7xjp-v5vw-pgjg","CGA-835x-jc7q-wp6w","CGA-894x-jv6p-885w","CGA-8fcj-qc3x-hgff","CGA-8j28-3v69-5c7h","CGA-8wx2-r6f3-5v5h","CGA-8xw2-fq45-gh8j","CGA-924c-39mq-pj4j","CGA-9g2g-pq7v-hrg7","CGA-c358-2hjp-m3fm","CGA-c482-5fjq-wgh9","CGA-c764-c929-8345","CGA-c9hf-6v8h-frgv","CGA-ccgg-rjmc-32vx","CGA-ccwc-wpm2-627f","CGA-cfr3-mg59-c6jv","CGA-cjch-3qfx-xpx8","CGA-cr42-g699-779r","CGA-crg4-hmvc-fp4v","CGA-fc69-h7pj-p9m2","CGA-fffm-3jp4-r9hc","CGA-fhhh-fwcc-wv3f","CGA-fjxq-vxqg-x9qj","CGA-fq3r-3wrg-p469","CGA-fwvw-fxhm-m5ff","CGA-g7v7-mr2q-h8jw","CGA-gh2c-wj6r-9gh4","CGA-h3gv-h2wm-vrh6","CGA-h48m-hxhx-5mpj","CGA-h82c-5gf3-w4x5","CGA-hfmv-vccf-pj24","CGA-hrfj-qjg9-f2jx","CGA-hrvh-p598-qpr9","CGA-hvh3-xpgr-gf38","CGA-hx73-qfrg-r8qc","CGA-j7rj-qmfx-vxrh","CGA-jxxw-m2gw-gw5c","CGA-m6pg-vcwx-7g8r","CGA-m7qv-7rmp-73vp","CGA-m8qf-g4jc-gj5f","CGA-m925-h9v6-jvf3","CGA-mc67-4r7c-cgr3","CGA-mfwq-rxx6-cqmr","CGA-mjp5-j578-pxhf","CGA-mmqx-68f2-cw6x","CGA-mqrm-rmrr-p2f8","CGA-mrp8-g6fh-5hwq","CGA-p6c5-xh43-g484","CGA-p6p2-6fj5-68mw","CGA-ppg3-5wmx-qm9f","CGA-qm4f-mghr-jcfr","CGA-qpg7-m2wj-449p","CGA-qrx8-v298-jwp8","CGA-r39g-h9vj-5v5r","CGA-r87q-2cxx-h3fc","CGA-rh2v-hq55-fqph","CGA-v8qv-243x-h5m8","CGA-v8rm-46vx-8hv9","CGA-vjm5-6fg7-4c3v","CGA-vjq5-r446-6cmg","CGA-vvmm-p5px-m37g","CGA-vwxm-959q-cch8","CGA-w343-4q3v-g697","CGA-w4x3-3m66-cffw","CGA-w929-4h47-4hhw","CGA-w92c-vqw9-7c5f","CGA-wfvr-7f4f-v7wr","CGA-wj5r-96xm-cc97","CGA-wp59-r3mm-f72h","CGA-wqmp-j6c6-cr4h","CGA-x399-3836-8rj4","CGA-x53j-vq62-pcqp","CGA-x68q-ccpv-h389","CGA-x9qm-wj3p-4rmj","CGA-93r2-56v5-6xmp",[170],{"_key":171},"GHSA-GVMJ-G25R-R7WR",[173],{"_key":174},"OPENSUSE-SU-2026:11723-1",[],[177,178],{"_key":174},{"_key":179},"CGA-Q65M-X2FC-C4PF","2026-07-23T13:16:19.045Z","2026-07-23T18:02:48.345Z","Analyzed",{"cisa_kev":52,"cisa_ransomware":52,"cisa_vendor":9,"epss_severity":184,"epss_score":185,"severity":186,"severity_score":187,"severity_version":188,"severity_source":189,"severity_vector":190,"severity_status":182},"low",0.00209,"medium",6.1,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",[192,207,211,215,219,224,229,233],{"url":193,"sources":194,"tags":200},"https://github.com/cure53/DOMPurify/security/advisories/GHSA-gvmj-g25r-r7wr",[189,195,196,197,198,199],"nvd","osv_ubuntu","osv_npm","osv_wolfi","osv_chainguard",[201,202,203,204,205,206],"Vendor Advisory","Exploit","Third Party Advisory","REPORT","WEB","Advisory",{"url":208,"sources":209,"tags":210},"https://www.vulncheck.com/advisories/dompurify-before-template-expression-injection-via-return-dom",[189,195,198,199],[203,206],{"url":212,"sources":213,"tags":214},"https://ubuntu.com/security/CVE-2026-65900",[196],[204],{"url":216,"sources":217,"tags":218},"https://www.cve.org/CVERecord?id=CVE-2026-65900",[196],[204],{"url":220,"sources":221,"tags":223},"https://security-tracker.debian.org/tracker/CVE-2026-65900",[222],"osv_debian",[206],{"url":225,"sources":226,"tags":227},"https://github.com/cure53/DOMPurify",[197],[228],"PACKAGE",{"url":230,"sources":231,"tags":232},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65900.json",[198,199],[206],{"url":234,"sources":235,"tags":236},"https://nvd.nist.gov/vuln/detail/CVE-2026-65900",[198,199],[206],[],{"date":239,"score":185,"percentile":240},"2026-09-19",0.11363,[242,246,249,252,255,258,262,265,267,270,273,276,279,282,285,288,291,294,297,300,303,305,308,311,314,317,320,323,325,328,331,334,337,340,343,346,349,352,355,358,361,364,367,370,373,376,379,381,384,387,390,393,396,399,402,405,408,411],{"date":243,"score":244,"percentile":245},"2026-07-24",0.00168,0.06396,{"date":247,"score":244,"percentile":248},"2026-07-25",0.06394,{"date":250,"score":244,"percentile":251},"2026-07-26",0.064,{"date":253,"score":244,"percentile":254},"2026-07-27",0.06409,{"date":256,"score":244,"percentile":257},"2026-07-28",0.06438,{"date":259,"score":260,"percentile":261},"2026-07-29",0.0018,0.07893,{"date":263,"score":260,"percentile":264},"2026-07-30",0.07881,{"date":266,"score":260,"percentile":264},"2026-07-31",{"date":268,"score":260,"percentile":269},"2026-08-01",0.07865,{"date":271,"score":260,"percentile":272},"2026-08-02",0.07843,{"date":274,"score":260,"percentile":275},"2026-08-03",0.07837,{"date":277,"score":260,"percentile":278},"2026-08-04",0.07819,{"date":280,"score":260,"percentile":281},"2026-08-05",0.07793,{"date":283,"score":260,"percentile":284},"2026-08-06",0.07772,{"date":286,"score":260,"percentile":287},"2026-08-07",0.07759,{"date":289,"score":260,"percentile":290},"2026-08-08",0.0776,{"date":292,"score":260,"percentile":293},"2026-08-09",0.07755,{"date":295,"score":260,"percentile":296},"2026-08-10",0.07762,{"date":298,"score":260,"percentile":299},"2026-08-11",0.07812,{"date":301,"score":260,"percentile":302},"2026-08-12",0.07822,{"date":304,"score":260,"percentile":299},"2026-08-13",{"date":306,"score":260,"percentile":307},"2026-08-14",0.07823,{"date":309,"score":260,"percentile":310},"2026-08-15",0.07852,{"date":312,"score":260,"percentile":313},"2026-08-16",0.07882,{"date":315,"score":260,"percentile":316},"2026-08-17",0.07895,{"date":318,"score":260,"percentile":319},"2026-08-18",0.07894,{"date":321,"score":260,"percentile":322},"2026-08-19",0.07926,{"date":324,"score":260,"percentile":322},"2026-08-20",{"date":326,"score":260,"percentile":327},"2026-08-21",0.07904,{"date":329,"score":260,"percentile":330},"2026-08-22",0.07906,{"date":332,"score":260,"percentile":333},"2026-08-23",0.07874,{"date":335,"score":185,"percentile":336},"2026-08-24",0.10896,{"date":338,"score":185,"percentile":339},"2026-08-25",0.10893,{"date":341,"score":185,"percentile":342},"2026-08-26",0.10923,{"date":344,"score":185,"percentile":345},"2026-08-27",0.10929,{"date":347,"score":185,"percentile":348},"2026-08-28",0.10944,{"date":350,"score":185,"percentile":351},"2026-08-29",0.1095,{"date":353,"score":185,"percentile":354},"2026-08-30",0.10968,{"date":356,"score":185,"percentile":357},"2026-08-31",0.1097,{"date":359,"score":185,"percentile":360},"2026-09-01",0.10981,{"date":362,"score":185,"percentile":363},"2026-09-02",0.10986,{"date":365,"score":185,"percentile":366},"2026-09-03",0.10977,{"date":368,"score":185,"percentile":369},"2026-09-04",0.10983,{"date":371,"score":185,"percentile":372},"2026-09-05",0.11009,{"date":374,"score":185,"percentile":375},"2026-09-06",0.11029,{"date":377,"score":185,"percentile":378},"2026-09-07",0.1102,{"date":380,"score":185,"percentile":378},"2026-09-08",{"date":382,"score":185,"percentile":383},"2026-09-09",0.11075,{"date":385,"score":185,"percentile":386},"2026-09-10",0.1107,{"date":388,"score":185,"percentile":389},"2026-09-11",0.11063,{"date":391,"score":185,"percentile":392},"2026-09-12",0.11174,{"date":394,"score":185,"percentile":395},"2026-09-13",0.11128,{"date":397,"score":185,"percentile":398},"2026-09-14",0.11142,{"date":400,"score":185,"percentile":401},"2026-09-15",0.11196,{"date":403,"score":185,"percentile":404},"2026-09-16",0.1124,{"date":406,"score":185,"percentile":407},"2026-09-17",0.11274,{"date":409,"score":185,"percentile":410},"2026-09-18",0.11378,{"date":239,"score":185,"percentile":240},[413,421,425,428,430,433,435],{"source":189,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":414,"cvss_v4_0":418},{"baseScore":187,"baseSeverity":415,"vectorString":190,"impactScore":416,"exploitabilityScore":417},"MEDIUM",4.5,7.2,{"baseScore":419,"baseSeverity":415,"vectorString":420,"impactScore":9,"exploitabilityScore":9},5.1,"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N",{"source":195,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":422,"cvss_v4_0":423},{"baseScore":187,"baseSeverity":415,"vectorString":190,"impactScore":416,"exploitabilityScore":417},{"baseScore":419,"baseSeverity":415,"vectorString":424,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",{"source":196,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":426,"cvss_v4_0":427},{"baseScore":187,"baseSeverity":9,"vectorString":190,"impactScore":416,"exploitabilityScore":417},{"baseScore":419,"baseSeverity":9,"vectorString":420,"impactScore":9,"exploitabilityScore":9},{"source":222,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":429},{"baseScore":419,"baseSeverity":9,"vectorString":424,"impactScore":9,"exploitabilityScore":9},{"source":197,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":431},{"baseScore":419,"baseSeverity":9,"vectorString":432,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P",{"source":198,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":434},{"baseScore":419,"baseSeverity":9,"vectorString":420,"impactScore":9,"exploitabilityScore":9},{"source":199,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":436},{"baseScore":419,"baseSeverity":9,"vectorString":420,"impactScore":9,"exploitabilityScore":9},[438,448,452,456,460,464,468,472,476,480,484,488,496,500,504,508,512,516,520,524,528,532,539,545,549,555,561,567,573,577,583,589,595,601,605,609,613,617,621,625,629,633,637,641,645,649,653,657,661,665,669,674,677,680,683,695,706,713],{"ecosystem":439,"name":440,"vendor":441,"product":440,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":440,"source":9,"versions":443},"Chainguard","airflow-2","chainguard","apk",[444],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",true,"ecosystem",{"ecosystem":439,"name":449,"vendor":441,"product":449,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":449,"source":9,"versions":450},"airflow-core-2",[451],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":439,"name":453,"vendor":441,"product":453,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":453,"source":9,"versions":454},"gitlab-rails-ce-18.1",[455],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":439,"name":457,"vendor":441,"product":457,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":457,"source":9,"versions":458},"gitlab-rails-ce-18.10",[459],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":439,"name":461,"vendor":441,"product":461,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":461,"source":9,"versions":462},"gitlab-rails-ce-18.11",[463],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":439,"name":465,"vendor":441,"product":465,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":465,"source":9,"versions":466},"gitlab-rails-ce-18.5",[467],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":439,"name":469,"vendor":441,"product":469,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":469,"source":9,"versions":470},"gitlab-rails-ce-18.6",[471],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":439,"name":473,"vendor":441,"product":473,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":473,"source":9,"versions":474},"gitlab-rails-ce-18.7",[475],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":439,"name":477,"vendor":441,"product":477,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":477,"source":9,"versions":478},"gitlab-rails-ce-18.8",[479],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":439,"name":481,"vendor":441,"product":481,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":481,"source":9,"versions":482},"gitlab-rails-ce-18.9",[483],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":439,"name":485,"vendor":441,"product":485,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":485,"source":9,"versions":486},"gitlab-rails-ce-19.0",[487],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":439,"name":489,"vendor":441,"product":489,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":489,"source":9,"versions":490},"gitlab-rails-ce-19.1",[491,492],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":493,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":494,"version_end_type":495,"fixed_in":9},"lt19_1_7_r6","19.1.7-r6","excluding",{"ecosystem":439,"name":497,"vendor":441,"product":497,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":497,"source":9,"versions":498},"gitlab-rails-ce-fips-18.1",[499],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":439,"name":501,"vendor":441,"product":501,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":501,"source":9,"versions":502},"gitlab-rails-ce-fips-18.10",[503],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":439,"name":505,"vendor":441,"product":505,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":505,"source":9,"versions":506},"gitlab-rails-ce-fips-18.11",[507],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":439,"name":509,"vendor":441,"product":509,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":509,"source":9,"versions":510},"gitlab-rails-ce-fips-18.5",[511],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":439,"name":513,"vendor":441,"product":513,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":513,"source":9,"versions":514},"gitlab-rails-ce-fips-18.6",[515],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":439,"name":517,"vendor":441,"product":517,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":517,"source":9,"versions":518},"gitlab-rails-ce-fips-18.7",[519],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":439,"name":521,"vendor":441,"product":521,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":521,"source":9,"versions":522},"gitlab-rails-ce-fips-18.8",[523],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":439,"name":525,"vendor":441,"product":525,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":525,"source":9,"versions":526},"gitlab-rails-ce-fips-18.9",[527],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":439,"name":529,"vendor":441,"product":529,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":529,"source":9,"versions":530},"gitlab-rails-ce-fips-19.0",[531],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":439,"name":533,"vendor":441,"product":533,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":533,"source":9,"versions":534},"gitlab-rails-ce-fips-19.1",[535,536],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":537,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":538,"version_end_type":495,"fixed_in":9},"lt19_1_7_r7","19.1.7-r7",{"ecosystem":439,"name":540,"vendor":441,"product":540,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":540,"source":9,"versions":541},"kibana-9.4",[542],{"version":543,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":544,"version_end_type":495,"fixed_in":9},"lt9_4_2_r6","9.4.2-r6",{"ecosystem":439,"name":546,"vendor":441,"product":546,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":546,"source":9,"versions":547},"kibana-9.4-iamguarded",[548],{"version":543,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":544,"version_end_type":495,"fixed_in":9},{"ecosystem":439,"name":550,"vendor":441,"product":550,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":550,"source":9,"versions":551},"langfuse-3-compat",[552],{"version":553,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":554,"version_end_type":495,"fixed_in":9},"lt3_225_7_r6","3.225.7-r6",{"ecosystem":439,"name":556,"vendor":441,"product":556,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":556,"source":9,"versions":557},"langfuse-3-worker",[558],{"version":559,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":560,"version_end_type":495,"fixed_in":9},"lt3_191_0_r0","3.191.0-r0",{"ecosystem":439,"name":562,"vendor":441,"product":562,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":562,"source":9,"versions":563},"langfuse-fips-3-worker",[564],{"version":565,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":566,"version_end_type":495,"fixed_in":9},"lt3_192_0_r0","3.192.0-r0",{"ecosystem":439,"name":568,"vendor":441,"product":568,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":568,"source":9,"versions":569},"librechat",[570],{"version":571,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":572,"version_end_type":495,"fixed_in":9},"lt0_8_7_r1","0.8.7-r1",{"ecosystem":439,"name":574,"vendor":441,"product":574,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":574,"source":9,"versions":575},"nextcloud-server-31",[576],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":439,"name":578,"vendor":441,"product":578,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":578,"source":9,"versions":579},"nextcloud-server-32",[580],{"version":581,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":582,"version_end_type":495,"fixed_in":9},"lt32_0_12_r0","32.0.12-r0",{"ecosystem":439,"name":584,"vendor":441,"product":584,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":584,"source":9,"versions":585},"nextcloud-server-33",[586],{"version":587,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":588,"version_end_type":495,"fixed_in":9},"lt33_0_6_r0","33.0.6-r0",{"ecosystem":439,"name":590,"vendor":441,"product":590,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":590,"source":9,"versions":591},"nextcloud-server-34",[592],{"version":593,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":594,"version_end_type":495,"fixed_in":9},"lt34_0_1_r4","34.0.1-r4",{"ecosystem":439,"name":596,"vendor":441,"product":596,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":596,"source":9,"versions":597},"wazuh-dashboard",[598],{"version":599,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":600,"version_end_type":495,"fixed_in":9},"lt4_14_5_r7","4.14.5-r7",{"ecosystem":439,"name":602,"vendor":441,"product":602,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":602,"source":9,"versions":603},"wazuh-dashboard-alerting-dashboards-plugin",[604],{"version":599,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":600,"version_end_type":495,"fixed_in":9},{"ecosystem":439,"name":606,"vendor":441,"product":606,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":606,"source":9,"versions":607},"wazuh-dashboard-alerting-dashboards-plugin-fips",[608],{"version":599,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":600,"version_end_type":495,"fixed_in":9},{"ecosystem":439,"name":610,"vendor":441,"product":610,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":610,"source":9,"versions":611},"wazuh-dashboard-anomaly-detection-dashboards-plugin",[612],{"version":599,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":600,"version_end_type":495,"fixed_in":9},{"ecosystem":439,"name":614,"vendor":441,"product":614,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":614,"source":9,"versions":615},"wazuh-dashboard-anomaly-detection-dashboards-plugin-fips",[616],{"version":599,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":600,"version_end_type":495,"fixed_in":9},{"ecosystem":439,"name":618,"vendor":441,"product":618,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":618,"source":9,"versions":619},"wazuh-dashboard-dashboards-maps",[620],{"version":599,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":600,"version_end_type":495,"fixed_in":9},{"ecosystem":439,"name":622,"vendor":441,"product":622,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":622,"source":9,"versions":623},"wazuh-dashboard-dashboards-maps-fips",[624],{"version":599,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":600,"version_end_type":495,"fixed_in":9},{"ecosystem":439,"name":626,"vendor":441,"product":626,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":626,"source":9,"versions":627},"wazuh-dashboard-dashboards-notifications",[628],{"version":599,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":600,"version_end_type":495,"fixed_in":9},{"ecosystem":439,"name":630,"vendor":441,"product":630,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":630,"source":9,"versions":631},"wazuh-dashboard-dashboards-notifications-fips",[632],{"version":599,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":600,"version_end_type":495,"fixed_in":9},{"ecosystem":439,"name":634,"vendor":441,"product":634,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":634,"source":9,"versions":635},"wazuh-dashboard-dashboards-reporting",[636],{"version":599,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":600,"version_end_type":495,"fixed_in":9},{"ecosystem":439,"name":638,"vendor":441,"product":638,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":638,"source":9,"versions":639},"wazuh-dashboard-dashboards-reporting-fips",[640],{"version":599,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":600,"version_end_type":495,"fixed_in":9},{"ecosystem":439,"name":642,"vendor":441,"product":642,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":642,"source":9,"versions":643},"wazuh-dashboard-dashboards-visualizations",[644],{"version":599,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":600,"version_end_type":495,"fixed_in":9},{"ecosystem":439,"name":646,"vendor":441,"product":646,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":646,"source":9,"versions":647},"wazuh-dashboard-dashboards-visualizations-fips",[648],{"version":599,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":600,"version_end_type":495,"fixed_in":9},{"ecosystem":439,"name":650,"vendor":441,"product":650,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":650,"source":9,"versions":651},"wazuh-dashboard-fips",[652],{"version":599,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":600,"version_end_type":495,"fixed_in":9},{"ecosystem":439,"name":654,"vendor":441,"product":654,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":654,"source":9,"versions":655},"wazuh-dashboard-index-management-dashboards-plugin",[656],{"version":599,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":600,"version_end_type":495,"fixed_in":9},{"ecosystem":439,"name":658,"vendor":441,"product":658,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":658,"source":9,"versions":659},"wazuh-dashboard-index-management-dashboards-plugin-fips",[660],{"version":599,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":600,"version_end_type":495,"fixed_in":9},{"ecosystem":439,"name":662,"vendor":441,"product":662,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":662,"source":9,"versions":663},"wazuh-dashboard-plugins",[664],{"version":599,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":600,"version_end_type":495,"fixed_in":9},{"ecosystem":439,"name":666,"vendor":441,"product":666,"cpe_part":9,"purl_type":442,"purl_namespace":441,"purl_name":666,"source":9,"versions":667},"wazuh-dashboard-plugins-fips",[668],{"version":599,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":600,"version_end_type":495,"fixed_in":9},{"ecosystem":670,"name":550,"vendor":671,"product":550,"cpe_part":9,"purl_type":442,"purl_namespace":671,"purl_name":550,"source":9,"versions":672},"Wolfi","wolfi",[673],{"version":553,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":554,"version_end_type":495,"fixed_in":9},{"ecosystem":670,"name":556,"vendor":671,"product":556,"cpe_part":9,"purl_type":442,"purl_namespace":671,"purl_name":556,"source":9,"versions":675},[676],{"version":559,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":560,"version_end_type":495,"fixed_in":9},{"ecosystem":670,"name":578,"vendor":671,"product":578,"cpe_part":9,"purl_type":442,"purl_namespace":671,"purl_name":578,"source":9,"versions":678},[679],{"version":581,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":582,"version_end_type":495,"fixed_in":9},{"ecosystem":670,"name":584,"vendor":671,"product":584,"cpe_part":9,"purl_type":442,"purl_namespace":671,"purl_name":584,"source":9,"versions":681},[682],{"version":587,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":588,"version_end_type":495,"fixed_in":9},{"ecosystem":9,"name":684,"vendor":685,"product":686,"cpe_part":687,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":688},"DOMPurify","cure53","dompurify","a",[689],{"version":690,"is_range":446,"range_type":691,"version_start":692,"version_start_type":693,"version_end":694,"version_end_type":495,"fixed_in":9},"gte3.0.0_lt3.4.8","cpe","3.0.0","including","3.4.8",{"ecosystem":696,"name":697,"vendor":698,"product":697,"cpe_part":9,"purl_type":699,"purl_namespace":698,"purl_name":697,"source":9,"versions":700},"Debian","node-dompurify","debian","deb",[701,702,703],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":704,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":705,"version_end_type":495,"fixed_in":9},"lt3_4_12+dfsg_1","3.4.12+dfsg-1",{"ecosystem":707,"name":697,"vendor":708,"product":697,"cpe_part":9,"purl_type":699,"purl_namespace":708,"purl_name":697,"source":9,"versions":709},"Ubuntu","ubuntu",[710,711,712],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":714,"name":686,"vendor":714,"product":686,"cpe_part":9,"purl_type":715,"purl_namespace":9,"purl_name":686,"source":9,"versions":716},"Npm","npm",[717],{"version":718,"is_range":446,"range_type":719,"version_start":692,"version_start_type":693,"version_end":694,"version_end_type":495,"fixed_in":9},"gte3_0_0_lt3_4_8","semver"]