[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-65902":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":19,"aliases":29,"duplicate_of":9,"upstream":144,"downstream":147,"duplicates":152,"related":153,"reserved_at":9,"published_at":156,"modified_at":157,"state":158,"summary":159,"references_raw":167,"kevs":219,"epss":220,"epss_history":223,"metrics":395,"affected":419},"CVE-2026-65902","DOMPurify before 3.4.7 (affected versions \u003C= 3.4.5) passes direct references to the module-level DEFAULT_ALLOWED_TAGS and DEFAULT_ALLOWED_ATTR sets to the uponSanitizeElement and uponSanitizeAttribute hooks via data.allowedTags / data.allowedAttributes when sanitize is called without an explicit cfg.ALLOWED_TAGS / cfg.ALLOWED_ATTR array. A hook that mutates these fields permanently widens the default allow-lists for the lifetime of the DOMPurify instance, so all subsequent default-config sanitize calls inherit the widened defaults and attacker payloads using the poisoned tag/attribute name survive sanitization. removeAllHooks(), clearConfig(), and passing a fresh cfg do not recover the state; only constructing a new DOMPurify instance does.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-501","Trust Boundary Violation","The product mixes trusted and untrusted data in the same data structure or structured message.","weakness","Draft","Base",[],[20],{"_key":21,"name":22,"source":23,"url":24,"maturity":25,"reliability_score":26,"verified":27,"type":9,"platforms":28,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_CURE53_DOMPURIFY","Dompurify","github","https://github.com/cure53/DOMPurify/security/advisories/GHSA-gx9m-whjm-85jf","poc",0.3,false,[],[30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143],"UBUNTU-CVE-2026-65902","DEBIAN-CVE-2026-65902","GHSA-76mc-f452-cxcm","CGA-2vr6-8v7h-5c26","CGA-66f7-8mpr-392j","CGA-7643-42rm-697c","CGA-7v6r-9387-v9qm","CGA-95q9-xf5v-xv2p","CGA-pm3p-hv57-63ch","CGA-277v-wr75-ppvh","CGA-28xf-q2q2-w9v2","CGA-2cmq-4j8g-qfqg","CGA-2rw9-9657-7rfj","CGA-2x6j-pjf4-87ww","CGA-323x-cccf-6w9g","CGA-32f4-vmrj-5fjg","CGA-32hf-7745-gcfr","CGA-3566-85h3-rc8r","CGA-36hj-99h2-hg3g","CGA-3p8g-hvvf-995c","CGA-44mj-27gp-mvxx","CGA-4539-v646-r7xc","CGA-4f93-mq8h-c657","CGA-4grm-2ccm-52qx","CGA-4jhf-x7w9-94rf","CGA-4wgx-4rcj-qxmv","CGA-522w-249p-5qx2","CGA-5j2g-mqp8-xmm6","CGA-5wcc-pmp2-336c","CGA-633q-qwpr-m2mp","CGA-64pp-5qrr-7j6f","CGA-66gv-hq5h-x6hc","CGA-6fr4-6crf-gp7r","CGA-6gp6-hqrf-cv5q","CGA-75v9-p79c-hg43","CGA-762f-c79h-3h55","CGA-7cvj-qcx8-jc48","CGA-7q47-mghr-wxh4","CGA-7r8m-w444-rmjp","CGA-7xwx-5qrf-rm3f","CGA-83g8-x353-68x9","CGA-85m4-893v-9575","CGA-85mj-fmq8-9h28","CGA-8f4m-c638-2c55","CGA-8f55-rmp9-j3pv","CGA-8rc8-3mww-4f8m","CGA-8x82-jg6j-7fwp","CGA-95pj-6rv6-c947","CGA-c872-8h4p-p2jp","CGA-cp49-wxpv-5f5x","CGA-cvjv-v8m4-xr3j","CGA-cwcp-cg47-7j5c","CGA-f378-fhcf-2wv7","CGA-f6qf-xjq2-h8j5","CGA-fj2m-qggw-wh49","CGA-fm23-24wf-2r2m","CGA-g24q-qx8f-p775","CGA-g3f3-44x5-qmmq","CGA-g6c4-5mfm-669m","CGA-g6cm-vqxq-xwph","CGA-g9w4-ch56-xf55","CGA-gr6h-7vfq-83v9","CGA-gr74-rrxv-h72m","CGA-gv7w-cr3m-xx8q","CGA-h3v7-9g8g-rjc6","CGA-h6rm-m222-m42g","CGA-h9rh-hf6h-rxgx","CGA-hfv9-x2jr-chr8","CGA-hpj2-ff23-9mq8","CGA-hrgx-9fp2-qjwg","CGA-j7rv-m628-gqfx","CGA-j8wg-hh25-xcr8","CGA-jhv8-28gh-fmh3","CGA-jrxr-fxgf-wq49","CGA-jxpp-xcj2-rp54","CGA-m89h-pfcj-97gw","CGA-mc99-hw3c-h6mg","CGA-mm4w-75h5-79vj","CGA-mpcq-3p47-f7f9","CGA-mrvj-c6h6-pr74","CGA-p3pw-mgfw-gpfc","CGA-pc2w-p3fj-hq6w","CGA-pm8j-3x5p-8rgc","CGA-pqcx-x6j6-g2pw","CGA-pw3c-vjx3-q3ph","CGA-q6x9-8c38-3jjw","CGA-qgw8-7xgw-j87f","CGA-qxh6-h3f3-p89r","CGA-r5j3-2j88-crx5","CGA-r85w-2hgc-v6vp","CGA-rf9m-hfw2-h9r3","CGA-rpg3-mwhr-j7m2","CGA-v3rh-r43w-c6x3","CGA-v7c6-568w-vv5c","CGA-v836-m955-gg9p","CGA-vgfg-cxw7-35q9","CGA-vvqq-8vrv-rrm2","CGA-w2ch-g8h5-7jxx","CGA-w5vr-638c-5wmm","CGA-w7xw-wgf2-xmj4","CGA-w8q8-87xp-p4cv","CGA-wcpm-gfwx-p68v","CGA-wpmq-mvqm-4hmv","CGA-wwfv-wjwr-f59j","CGA-wxxf-38xj-69cp","CGA-x38p-qx4r-3265","CGA-x58p-3wgq-3w4r","CGA-x9qf-3jr4-88h5","CGA-xfcj-rch5-xv3q","CGA-xfr6-m645-vwq7","CGA-xm63-vghm-xp98","CGA-xr87-3wx2-vjm8","CGA-xvmm-frhf-6qjq","CGA-x9mj-c599-5w26",[145],{"_key":146},"GHSA-76MC-F452-CXCM",[148,150],{"_key":149},"RHSA-2026:58500",{"_key":151},"RHSA-2026:58502",[],[154],{"_key":155},"CGA-WF33-VM7F-4Q7R","2026-07-23T13:16:20.528Z","2026-07-24T21:35:25.085Z","Analyzed",{"cisa_kev":27,"cisa_ransomware":27,"cisa_vendor":9,"epss_severity":160,"epss_score":161,"severity":162,"severity_score":163,"severity_version":164,"severity_source":165,"severity_vector":166,"severity_status":158},"low",0.00237,"medium",6.1,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",[168,183,189,193,197,201,206,211,215],{"url":169,"sources":170,"tags":176},"https://github.com/cure53/DOMPurify/security/advisories/GHSA-76mc-f452-cxcm",[165,171,172,173,174,175],"nvd","osv_ubuntu","osv_npm","osv_wolfi","osv_chainguard",[177,178,179,180,181,182],"Vendor Advisory","Exploit","Third Party Advisory","REPORT","WEB","Advisory",{"url":184,"sources":185,"tags":186},"https://github.com/cure53/DOMPurify/commit/7996f1dc78eb8b7922388aed75d94a9f8fad9a36",[165,171,174,175],[187,188],"Patch","FIX",{"url":190,"sources":191,"tags":192},"https://www.vulncheck.com/advisories/dompurify-before-hook-mutation-pollution-via-allowedtags",[165,171,174,175],[179,182],{"url":194,"sources":195,"tags":196},"https://ubuntu.com/security/CVE-2026-65902",[172],[180],{"url":198,"sources":199,"tags":200},"https://www.cve.org/CVERecord?id=CVE-2026-65902",[172],[180],{"url":202,"sources":203,"tags":205},"https://security-tracker.debian.org/tracker/CVE-2026-65902",[204],"osv_debian",[182],{"url":207,"sources":208,"tags":209},"https://github.com/cure53/DOMPurify",[173],[210],"PACKAGE",{"url":212,"sources":213,"tags":214},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65902.json",[174,175],[182],{"url":216,"sources":217,"tags":218},"https://nvd.nist.gov/vuln/detail/CVE-2026-65902",[174,175],[182],[],{"date":221,"score":161,"percentile":222},"2026-09-19",0.15075,[224,228,231,234,237,240,244,247,250,253,256,259,262,265,268,271,273,276,279,281,284,286,289,292,295,298,301,304,307,310,313,316,319,322,325,328,331,334,337,340,343,346,349,352,355,358,361,364,367,370,373,376,379,382,385,388,391,394],{"date":225,"score":226,"percentile":227},"2026-07-24",0.00195,0.095,{"date":229,"score":226,"percentile":230},"2026-07-25",0.09497,{"date":232,"score":226,"percentile":233},"2026-07-26",0.09539,{"date":235,"score":226,"percentile":236},"2026-07-27",0.09523,{"date":238,"score":226,"percentile":239},"2026-07-28",0.09574,{"date":241,"score":242,"percentile":243},"2026-07-29",0.0021,0.11352,{"date":245,"score":242,"percentile":246},"2026-07-30",0.11347,{"date":248,"score":242,"percentile":249},"2026-07-31",0.11342,{"date":251,"score":242,"percentile":252},"2026-08-01",0.11332,{"date":254,"score":242,"percentile":255},"2026-08-02",0.11326,{"date":257,"score":242,"percentile":258},"2026-08-03",0.1133,{"date":260,"score":242,"percentile":261},"2026-08-04",0.11293,{"date":263,"score":242,"percentile":264},"2026-08-05",0.11263,{"date":266,"score":242,"percentile":267},"2026-08-06",0.11261,{"date":269,"score":242,"percentile":270},"2026-08-07",0.11265,{"date":272,"score":242,"percentile":264},"2026-08-08",{"date":274,"score":242,"percentile":275},"2026-08-09",0.11249,{"date":277,"score":242,"percentile":278},"2026-08-10",0.11259,{"date":280,"score":242,"percentile":249},"2026-08-11",{"date":282,"score":242,"percentile":283},"2026-08-12",0.11365,{"date":285,"score":242,"percentile":283},"2026-08-13",{"date":287,"score":242,"percentile":288},"2026-08-14",0.11367,{"date":290,"score":242,"percentile":291},"2026-08-15",0.11466,{"date":293,"score":242,"percentile":294},"2026-08-16",0.11505,{"date":296,"score":242,"percentile":297},"2026-08-17",0.11463,{"date":299,"score":242,"percentile":300},"2026-08-18",0.11445,{"date":302,"score":242,"percentile":303},"2026-08-19",0.11487,{"date":305,"score":242,"percentile":306},"2026-08-20",0.11478,{"date":308,"score":242,"percentile":309},"2026-08-21",0.1149,{"date":311,"score":242,"percentile":312},"2026-08-22",0.11489,{"date":314,"score":242,"percentile":315},"2026-08-23",0.11457,{"date":317,"score":161,"percentile":318},"2026-08-24",0.14515,{"date":320,"score":161,"percentile":321},"2026-08-25",0.14516,{"date":323,"score":161,"percentile":324},"2026-08-26",0.14568,{"date":326,"score":161,"percentile":327},"2026-08-27",0.14564,{"date":329,"score":161,"percentile":330},"2026-08-28",0.14586,{"date":332,"score":161,"percentile":333},"2026-08-29",0.1459,{"date":335,"score":161,"percentile":336},"2026-08-30",0.14602,{"date":338,"score":161,"percentile":339},"2026-08-31",0.14597,{"date":341,"score":161,"percentile":342},"2026-09-01",0.1461,{"date":344,"score":161,"percentile":345},"2026-09-02",0.14616,{"date":347,"score":161,"percentile":348},"2026-09-03",0.14618,{"date":350,"score":161,"percentile":351},"2026-09-04",0.14635,{"date":353,"score":161,"percentile":354},"2026-09-05",0.14666,{"date":356,"score":161,"percentile":357},"2026-09-06",0.1468,{"date":359,"score":161,"percentile":360},"2026-09-07",0.14669,{"date":362,"score":161,"percentile":363},"2026-09-08",0.14671,{"date":365,"score":161,"percentile":366},"2026-09-09",0.14733,{"date":368,"score":161,"percentile":369},"2026-09-10",0.1473,{"date":371,"score":161,"percentile":372},"2026-09-11",0.14741,{"date":374,"score":161,"percentile":375},"2026-09-12",0.14855,{"date":377,"score":161,"percentile":378},"2026-09-13",0.14809,{"date":380,"score":161,"percentile":381},"2026-09-14",0.14824,{"date":383,"score":161,"percentile":384},"2026-09-15",0.14883,{"date":386,"score":161,"percentile":387},"2026-09-16",0.14934,{"date":389,"score":161,"percentile":390},"2026-09-17",0.14975,{"date":392,"score":161,"percentile":393},"2026-09-18",0.1511,{"date":221,"score":161,"percentile":222},[396,404,408,411,413,415,417],{"source":165,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":397,"cvss_v4_0":401},{"baseScore":163,"baseSeverity":398,"vectorString":166,"impactScore":399,"exploitabilityScore":400},"MEDIUM",4.5,7.2,{"baseScore":402,"baseSeverity":398,"vectorString":403,"impactScore":9,"exploitabilityScore":9},5.3,"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N",{"source":171,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":405,"cvss_v4_0":406},{"baseScore":163,"baseSeverity":398,"vectorString":166,"impactScore":399,"exploitabilityScore":400},{"baseScore":402,"baseSeverity":398,"vectorString":407,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",{"source":172,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":409,"cvss_v4_0":410},{"baseScore":163,"baseSeverity":9,"vectorString":166,"impactScore":399,"exploitabilityScore":400},{"baseScore":402,"baseSeverity":9,"vectorString":403,"impactScore":9,"exploitabilityScore":9},{"source":204,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":412,"cvss_v4_0":9},{"baseScore":163,"baseSeverity":9,"vectorString":166,"impactScore":399,"exploitabilityScore":400},{"source":173,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":414,"cvss_v4_0":9},{"baseScore":163,"baseSeverity":9,"vectorString":166,"impactScore":399,"exploitabilityScore":400},{"source":174,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":416},{"baseScore":402,"baseSeverity":9,"vectorString":403,"impactScore":9,"exploitabilityScore":9},{"source":175,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":418},{"baseScore":402,"baseSeverity":9,"vectorString":403,"impactScore":9,"exploitabilityScore":9},[420,430,434,438,442,446,450,454,458,462,466,470,478,482,486,490,494,498,502,506,510,514,521,527,531,537,543,549,555,559,565,571,577,583,587,591,595,599,603,607,611,615,619,623,627,631,635,639,643,647,651,656,659,662,665,675,686,693],{"ecosystem":421,"name":422,"vendor":423,"product":422,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":422,"source":9,"versions":425},"Chainguard","airflow-2","chainguard","apk",[426],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",true,"ecosystem",{"ecosystem":421,"name":431,"vendor":423,"product":431,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":431,"source":9,"versions":432},"airflow-core-2",[433],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":421,"name":435,"vendor":423,"product":435,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":435,"source":9,"versions":436},"gitlab-rails-ce-18.1",[437],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":421,"name":439,"vendor":423,"product":439,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":439,"source":9,"versions":440},"gitlab-rails-ce-18.10",[441],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":421,"name":443,"vendor":423,"product":443,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":443,"source":9,"versions":444},"gitlab-rails-ce-18.11",[445],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":421,"name":447,"vendor":423,"product":447,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":447,"source":9,"versions":448},"gitlab-rails-ce-18.5",[449],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":421,"name":451,"vendor":423,"product":451,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":451,"source":9,"versions":452},"gitlab-rails-ce-18.6",[453],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":421,"name":455,"vendor":423,"product":455,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":455,"source":9,"versions":456},"gitlab-rails-ce-18.7",[457],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":421,"name":459,"vendor":423,"product":459,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":459,"source":9,"versions":460},"gitlab-rails-ce-18.8",[461],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":421,"name":463,"vendor":423,"product":463,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":463,"source":9,"versions":464},"gitlab-rails-ce-18.9",[465],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":421,"name":467,"vendor":423,"product":467,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":467,"source":9,"versions":468},"gitlab-rails-ce-19.0",[469],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":421,"name":471,"vendor":423,"product":471,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":471,"source":9,"versions":472},"gitlab-rails-ce-19.1",[473,474],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":475,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":476,"version_end_type":477,"fixed_in":9},"lt19_1_7_r6","19.1.7-r6","excluding",{"ecosystem":421,"name":479,"vendor":423,"product":479,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":479,"source":9,"versions":480},"gitlab-rails-ce-fips-18.1",[481],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":421,"name":483,"vendor":423,"product":483,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":483,"source":9,"versions":484},"gitlab-rails-ce-fips-18.10",[485],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":421,"name":487,"vendor":423,"product":487,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":487,"source":9,"versions":488},"gitlab-rails-ce-fips-18.11",[489],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":421,"name":491,"vendor":423,"product":491,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":491,"source":9,"versions":492},"gitlab-rails-ce-fips-18.5",[493],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":421,"name":495,"vendor":423,"product":495,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":495,"source":9,"versions":496},"gitlab-rails-ce-fips-18.6",[497],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":421,"name":499,"vendor":423,"product":499,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":499,"source":9,"versions":500},"gitlab-rails-ce-fips-18.7",[501],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":421,"name":503,"vendor":423,"product":503,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":503,"source":9,"versions":504},"gitlab-rails-ce-fips-18.8",[505],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":421,"name":507,"vendor":423,"product":507,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":507,"source":9,"versions":508},"gitlab-rails-ce-fips-18.9",[509],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":421,"name":511,"vendor":423,"product":511,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":511,"source":9,"versions":512},"gitlab-rails-ce-fips-19.0",[513],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":421,"name":515,"vendor":423,"product":515,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":515,"source":9,"versions":516},"gitlab-rails-ce-fips-19.1",[517,518],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":519,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":520,"version_end_type":477,"fixed_in":9},"lt19_1_7_r7","19.1.7-r7",{"ecosystem":421,"name":522,"vendor":423,"product":522,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":522,"source":9,"versions":523},"kibana-9.4",[524],{"version":525,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":526,"version_end_type":477,"fixed_in":9},"lt9_4_2_r6","9.4.2-r6",{"ecosystem":421,"name":528,"vendor":423,"product":528,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":528,"source":9,"versions":529},"kibana-9.4-iamguarded",[530],{"version":525,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":526,"version_end_type":477,"fixed_in":9},{"ecosystem":421,"name":532,"vendor":423,"product":532,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":532,"source":9,"versions":533},"langfuse-3-compat",[534],{"version":535,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":536,"version_end_type":477,"fixed_in":9},"lt3_225_7_r6","3.225.7-r6",{"ecosystem":421,"name":538,"vendor":423,"product":538,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":538,"source":9,"versions":539},"langfuse-3-worker",[540],{"version":541,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":542,"version_end_type":477,"fixed_in":9},"lt3_191_0_r0","3.191.0-r0",{"ecosystem":421,"name":544,"vendor":423,"product":544,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":544,"source":9,"versions":545},"langfuse-fips-3-worker",[546],{"version":547,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":548,"version_end_type":477,"fixed_in":9},"lt3_192_0_r0","3.192.0-r0",{"ecosystem":421,"name":550,"vendor":423,"product":550,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":550,"source":9,"versions":551},"librechat",[552],{"version":553,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":554,"version_end_type":477,"fixed_in":9},"lt0_8_7_r1","0.8.7-r1",{"ecosystem":421,"name":556,"vendor":423,"product":556,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":556,"source":9,"versions":557},"nextcloud-server-31",[558],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":421,"name":560,"vendor":423,"product":560,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":560,"source":9,"versions":561},"nextcloud-server-32",[562],{"version":563,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":564,"version_end_type":477,"fixed_in":9},"lt32_0_12_r0","32.0.12-r0",{"ecosystem":421,"name":566,"vendor":423,"product":566,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":566,"source":9,"versions":567},"nextcloud-server-33",[568],{"version":569,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":570,"version_end_type":477,"fixed_in":9},"lt33_0_6_r0","33.0.6-r0",{"ecosystem":421,"name":572,"vendor":423,"product":572,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":572,"source":9,"versions":573},"nextcloud-server-34",[574],{"version":575,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":576,"version_end_type":477,"fixed_in":9},"lt34_0_1_r4","34.0.1-r4",{"ecosystem":421,"name":578,"vendor":423,"product":578,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":578,"source":9,"versions":579},"wazuh-dashboard",[580],{"version":581,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":582,"version_end_type":477,"fixed_in":9},"lt4_14_5_r7","4.14.5-r7",{"ecosystem":421,"name":584,"vendor":423,"product":584,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":584,"source":9,"versions":585},"wazuh-dashboard-alerting-dashboards-plugin",[586],{"version":581,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":582,"version_end_type":477,"fixed_in":9},{"ecosystem":421,"name":588,"vendor":423,"product":588,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":588,"source":9,"versions":589},"wazuh-dashboard-alerting-dashboards-plugin-fips",[590],{"version":581,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":582,"version_end_type":477,"fixed_in":9},{"ecosystem":421,"name":592,"vendor":423,"product":592,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":592,"source":9,"versions":593},"wazuh-dashboard-anomaly-detection-dashboards-plugin",[594],{"version":581,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":582,"version_end_type":477,"fixed_in":9},{"ecosystem":421,"name":596,"vendor":423,"product":596,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":596,"source":9,"versions":597},"wazuh-dashboard-anomaly-detection-dashboards-plugin-fips",[598],{"version":581,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":582,"version_end_type":477,"fixed_in":9},{"ecosystem":421,"name":600,"vendor":423,"product":600,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":600,"source":9,"versions":601},"wazuh-dashboard-dashboards-maps",[602],{"version":581,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":582,"version_end_type":477,"fixed_in":9},{"ecosystem":421,"name":604,"vendor":423,"product":604,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":604,"source":9,"versions":605},"wazuh-dashboard-dashboards-maps-fips",[606],{"version":581,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":582,"version_end_type":477,"fixed_in":9},{"ecosystem":421,"name":608,"vendor":423,"product":608,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":608,"source":9,"versions":609},"wazuh-dashboard-dashboards-notifications",[610],{"version":581,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":582,"version_end_type":477,"fixed_in":9},{"ecosystem":421,"name":612,"vendor":423,"product":612,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":612,"source":9,"versions":613},"wazuh-dashboard-dashboards-notifications-fips",[614],{"version":581,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":582,"version_end_type":477,"fixed_in":9},{"ecosystem":421,"name":616,"vendor":423,"product":616,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":616,"source":9,"versions":617},"wazuh-dashboard-dashboards-reporting",[618],{"version":581,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":582,"version_end_type":477,"fixed_in":9},{"ecosystem":421,"name":620,"vendor":423,"product":620,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":620,"source":9,"versions":621},"wazuh-dashboard-dashboards-reporting-fips",[622],{"version":581,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":582,"version_end_type":477,"fixed_in":9},{"ecosystem":421,"name":624,"vendor":423,"product":624,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":624,"source":9,"versions":625},"wazuh-dashboard-dashboards-visualizations",[626],{"version":581,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":582,"version_end_type":477,"fixed_in":9},{"ecosystem":421,"name":628,"vendor":423,"product":628,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":628,"source":9,"versions":629},"wazuh-dashboard-dashboards-visualizations-fips",[630],{"version":581,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":582,"version_end_type":477,"fixed_in":9},{"ecosystem":421,"name":632,"vendor":423,"product":632,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":632,"source":9,"versions":633},"wazuh-dashboard-fips",[634],{"version":581,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":582,"version_end_type":477,"fixed_in":9},{"ecosystem":421,"name":636,"vendor":423,"product":636,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":636,"source":9,"versions":637},"wazuh-dashboard-index-management-dashboards-plugin",[638],{"version":581,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":582,"version_end_type":477,"fixed_in":9},{"ecosystem":421,"name":640,"vendor":423,"product":640,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":640,"source":9,"versions":641},"wazuh-dashboard-index-management-dashboards-plugin-fips",[642],{"version":581,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":582,"version_end_type":477,"fixed_in":9},{"ecosystem":421,"name":644,"vendor":423,"product":644,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":644,"source":9,"versions":645},"wazuh-dashboard-plugins",[646],{"version":581,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":582,"version_end_type":477,"fixed_in":9},{"ecosystem":421,"name":648,"vendor":423,"product":648,"cpe_part":9,"purl_type":424,"purl_namespace":423,"purl_name":648,"source":9,"versions":649},"wazuh-dashboard-plugins-fips",[650],{"version":581,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":582,"version_end_type":477,"fixed_in":9},{"ecosystem":652,"name":532,"vendor":653,"product":532,"cpe_part":9,"purl_type":424,"purl_namespace":653,"purl_name":532,"source":9,"versions":654},"Wolfi","wolfi",[655],{"version":535,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":536,"version_end_type":477,"fixed_in":9},{"ecosystem":652,"name":538,"vendor":653,"product":538,"cpe_part":9,"purl_type":424,"purl_namespace":653,"purl_name":538,"source":9,"versions":657},[658],{"version":541,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":542,"version_end_type":477,"fixed_in":9},{"ecosystem":652,"name":560,"vendor":653,"product":560,"cpe_part":9,"purl_type":424,"purl_namespace":653,"purl_name":560,"source":9,"versions":660},[661],{"version":563,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":564,"version_end_type":477,"fixed_in":9},{"ecosystem":652,"name":566,"vendor":653,"product":566,"cpe_part":9,"purl_type":424,"purl_namespace":653,"purl_name":566,"source":9,"versions":663},[664],{"version":569,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":570,"version_end_type":477,"fixed_in":9},{"ecosystem":9,"name":666,"vendor":667,"product":668,"cpe_part":669,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":670},"DOMPurify","cure53","dompurify","a",[671],{"version":672,"is_range":428,"range_type":673,"version_start":9,"version_start_type":9,"version_end":674,"version_end_type":477,"fixed_in":9},"lt3.4.7","cpe","3.4.7",{"ecosystem":676,"name":677,"vendor":678,"product":677,"cpe_part":9,"purl_type":679,"purl_namespace":678,"purl_name":677,"source":9,"versions":680},"Debian","node-dompurify","debian","deb",[681,682,683],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":684,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":685,"version_end_type":477,"fixed_in":9},"lt3_4_12+dfsg_1","3.4.12+dfsg-1",{"ecosystem":687,"name":677,"vendor":688,"product":677,"cpe_part":9,"purl_type":679,"purl_namespace":688,"purl_name":677,"source":9,"versions":689},"Ubuntu","ubuntu",[690,691,692],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":694,"name":668,"vendor":694,"product":668,"cpe_part":9,"purl_type":695,"purl_namespace":9,"purl_name":668,"source":9,"versions":696},"Npm","npm",[697],{"version":698,"is_range":428,"range_type":699,"version_start":9,"version_start_type":9,"version_end":674,"version_end_type":477,"fixed_in":9},"lt3_4_7","semver"]