{"schemaVersion":3,"id":"CVE-2026-71849","aliases":["CGA-cwxh-pg77-gg3g","CGA-qjc4-h4qj-459f","CGA-x76q-m3c2-g8jh","GHSA-79qm-7rj5-m7r9","CGA-2hc5-q56f-m4v8","CGA-2rrg-cr22-789c","CGA-2vfx-pr7p-4jw7","CGA-2x66-g4fr-25r5","CGA-32qq-wfqh-phvc","CGA-386g-pfr4-fcvm","CGA-3gc9-34xp-gr8c","CGA-3gg3-wv39-jfp5","CGA-3pvp-f455-6f2q","CGA-44m6-789q-hvr9","CGA-48vh-72q9-h4v9","CGA-4mp8-7qmc-23fm","CGA-4pm7-463w-97pp","CGA-4xjv-x6hm-jw97","CGA-535r-9mh5-g284","CGA-5782-qqp5-cv6v","CGA-5gj7-97wc-8w82","CGA-5q6h-q4mm-pq9r","CGA-5w8g-w6p9-hc62","CGA-65c3-h927-23r2","CGA-6989-p74c-qh6r","CGA-6wgv-xfwh-p64p","CGA-756q-xhmf-q59j","CGA-7jh7-j9rf-m62f","CGA-7qq7-ppcr-fjvv","CGA-7r6w-mjjw-5m3m","CGA-7wcv-c3c8-vp28","CGA-8546-r62c-jq39","CGA-88vv-c2c9-p57v","CGA-8m57-9jf4-g2cj","CGA-8vhf-955g-vpx2","CGA-9272-xr3m-759g","CGA-96p2-2x5w-qrfh","CGA-9929-g8mj-mh42","CGA-9g6g-q8xx-m2hw","CGA-9v3v-8wcc-wwq9","CGA-9vhv-68w7-rxh2","CGA-c77c-8rvq-xvw8","CGA-cfj5-4r9f-pvhw","CGA-cr5f-j43j-53c3","CGA-f8c6-fw9f-hm9j","CGA-f9p7-6x29-3979","CGA-f9xf-p7mr-r2cf","CGA-fm7w-2922-qm5r","CGA-g595-cgh8-xrfq","CGA-g96w-w9pp-fcxx","CGA-gq85-mg5c-xq7v","CGA-gx2h-gcwf-8gg6","CGA-h39w-5mh5-8w8j","CGA-hcxq-2xmw-h5r9","CGA-hm9q-6h5r-v7g3","CGA-j5qm-3w3r-v2qx","CGA-jh8r-q37j-gxx9","CGA-jqj2-wv56-789m","CGA-jv8x-hphv-5m4j","CGA-mch9-7cpc-94p9","CGA-mvcc-6fgw-3qcw","CGA-p2w2-5c95-g25f","CGA-p2wp-8whx-q5h7","CGA-p338-wmv5-2r6c","CGA-pfp5-jwph-fp8g","CGA-pxfm-h8c7-4jcm","CGA-q3wp-33h6-mm85","CGA-q6hg-5hp5-rx3r","CGA-q6x6-9j7x-679q","CGA-qj96-jwhx-355j","CGA-qq39-pm97-v9qc","CGA-r26x-8xg9-6f28","CGA-r65j-c3vv-gwvr","CGA-r9pr-44j4-7mhm","CGA-rc47-942x-m7g3","CGA-rcc3-w7g8-ffg5","CGA-rf3x-9cjx-9v3x","CGA-rgmf-xrxp-wcg4","CGA-rqf6-fpr7-g7gc","CGA-rv2j-p82v-6696","CGA-rwhm-xmw5-f2gq","CGA-v8f9-m566-66c8","CGA-vvmg-pgpv-p537","CGA-wm9j-hh5h-x4c2","CGA-wvg7-58x6-44fh","CGA-wvx9-9652-j9xj","CGA-x527-6ggj-pp57","CGA-x74w-9h97-37g8","CGA-x95f-px7g-vjrq","CGA-xv29-mw9q-qcg5"],"status":"published","duplicateOf":null,"title":null,"description":"Hono is a Web application framework that provides support for any JavaScript runtime. From 4.7.0 to 4.12.33, the Proxy Helper proxy() function in hono/proxy does not remove response headers named by the origin's Connection header. Per RFC 9110 Section 7.6.1, an intermediary must remove the header fields listed in a message's Connection header field before forwarding the message, in addition to the well known hop by hop headers, but the proxy() function only removed the well known hop by hop headers, including Connection itself, from origin responses. A client may therefore receive response headers that the origin intended only for its immediate peer, disclosing connection scoped or internal metadata contained in such headers, when an application proxies responses from an origin that declares additional, non standard headers as hop by hop via the Connection response header. This issue is fixed in version 4.12.34.","dates":{"published":"2026-08-07T18:38:16.287Z","modified":"2026-08-10T12:03:12.470Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":3.7,"severity":"low","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00355,"percentile":0.27707,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.11900000000000001,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00236},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00355,"percentile":0.27707}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00355,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00355,"percentile":0.27707}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/200.html"}],"affected":[{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.1","name":"commercial-gitlab-rails-ee-19.1","label":"commercial-gitlab-rails-ee-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.1","purlType":"apk","versions":[{"text":"< 19.1.7-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.7-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.2","name":"commercial-gitlab-rails-ee-19.2","label":"commercial-gitlab-rails-ee-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.2","purlType":"apk","versions":[{"text":"< 19.2.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.3","name":"commercial-gitlab-rails-ee-19.3","label":"commercial-gitlab-rails-ee-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.3","purlType":"apk","versions":[{"text":"< 19.3.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.4","name":"commercial-gitlab-rails-ee-19.4","label":"commercial-gitlab-rails-ee-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.4","purlType":"apk","versions":[{"text":"< 19.4.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.4.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.1","name":"commercial-gitlab-rails-ee-fips-19.1","label":"commercial-gitlab-rails-ee-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.2","name":"commercial-gitlab-rails-ee-fips-19.2","label":"commercial-gitlab-rails-ee-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.2","purlType":"apk","versions":[{"text":"< 19.2.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.3","name":"commercial-gitlab-rails-ee-fips-19.3","label":"commercial-gitlab-rails-ee-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.3","purlType":"apk","versions":[{"text":"< 19.3.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.4","name":"commercial-gitlab-rails-ee-fips-19.4","label":"commercial-gitlab-rails-ee-fips-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.4","purlType":"apk","versions":[{"text":"< 19.4.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.4.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.1","name":"kibana-9.1","label":"kibana-9.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.1-iamguarded","name":"kibana-9.1-iamguarded","label":"kibana-9.1-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.1-iamguarded","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3","name":"kibana-9.3","label":"kibana-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3","purlType":"apk","versions":[{"text":"< 9.3.8-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.8-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3-iamguarded","name":"kibana-9.3-iamguarded","label":"kibana-9.3-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3-iamguarded","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.4","name":"kibana-9.4","label":"kibana-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.4","purlType":"apk","versions":[{"text":"< 9.4.4-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.4-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.4-iamguarded","name":"kibana-9.4-iamguarded","label":"kibana-9.4-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.4-iamguarded","purlType":"apk","versions":[{"text":"< 9.4.4-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.4-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-3-compat","name":"langfuse-3-compat","label":"langfuse-3-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-3-compat","purlType":"apk","versions":[{"text":"< 3.225.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-3-worker","name":"langfuse-3-worker","label":"langfuse-3-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-3-worker","purlType":"apk","versions":[{"text":"< 3.225.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-4-worker","name":"langfuse-4-worker","label":"langfuse-4-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-4-worker","purlType":"apk","versions":[{"text":"< 4.7.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.7.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-3-worker","name":"langfuse-fips-3-worker","label":"langfuse-fips-3-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-3-worker","purlType":"apk","versions":[{"text":"< 3.225.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-4-worker","name":"langfuse-fips-4-worker","label":"langfuse-fips-4-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-4-worker","purlType":"apk","versions":[{"text":"< 4.7.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.7.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard","name":"wazuh-dashboard","label":"wazuh-dashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-alerting-dashboards-plugin","name":"wazuh-dashboard-alerting-dashboards-plugin","label":"wazuh-dashboard-alerting-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-alerting-dashboards-plugin-fips","name":"wazuh-dashboard-alerting-dashboards-plugin-fips","label":"wazuh-dashboard-alerting-dashboards-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-alerting-dashboards-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-anomaly-detection-dashboards-plugin","name":"wazuh-dashboard-anomaly-detection-dashboards-plugin","label":"wazuh-dashboard-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-anomaly-detection-dashboards-plugin","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-anomaly-detection-dashboards-plugin-fips","name":"wazuh-dashboard-anomaly-detection-dashboards-plugin-fips","label":"wazuh-dashboard-anomaly-detection-dashboards-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-anomaly-detection-dashboards-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-maps","name":"wazuh-dashboard-dashboards-maps","label":"wazuh-dashboard-dashboards-maps","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-maps","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-maps-fips","name":"wazuh-dashboard-dashboards-maps-fips","label":"wazuh-dashboard-dashboards-maps-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-maps-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-notifications","name":"wazuh-dashboard-dashboards-notifications","label":"wazuh-dashboard-dashboards-notifications","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-notifications","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-notifications-fips","name":"wazuh-dashboard-dashboards-notifications-fips","label":"wazuh-dashboard-dashboards-notifications-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-notifications-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-reporting","name":"wazuh-dashboard-dashboards-reporting","label":"wazuh-dashboard-dashboards-reporting","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-reporting","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-reporting-fips","name":"wazuh-dashboard-dashboards-reporting-fips","label":"wazuh-dashboard-dashboards-reporting-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-reporting-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-visualizations","name":"wazuh-dashboard-dashboards-visualizations","label":"wazuh-dashboard-dashboards-visualizations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-visualizations","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-visualizations-fips","name":"wazuh-dashboard-dashboards-visualizations-fips","label":"wazuh-dashboard-dashboards-visualizations-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-visualizations-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-fips","name":"wazuh-dashboard-fips","label":"wazuh-dashboard-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-index-management-dashboards-plugin","name":"wazuh-dashboard-index-management-dashboards-plugin","label":"wazuh-dashboard-index-management-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-index-management-dashboards-plugin","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-index-management-dashboards-plugin-fips","name":"wazuh-dashboard-index-management-dashboards-plugin-fips","label":"wazuh-dashboard-index-management-dashboards-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-index-management-dashboards-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-plugins","name":"wazuh-dashboard-plugins","label":"wazuh-dashboard-plugins","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-plugins","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-plugins-fips","name":"wazuh-dashboard-plugins-fips","label":"wazuh-dashboard-plugins-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-security-plugin","name":"wazuh-dashboard-security-plugin","label":"wazuh-dashboard-security-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-security-plugin-fips","name":"wazuh-dashboard-security-plugin-fips","label":"wazuh-dashboard-security-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"langfuse-3-compat","name":"langfuse-3-compat","label":"langfuse-3-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/langfuse-3-compat","purlType":"apk","versions":[{"text":"< 3.225.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.7-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"langfuse-3-worker","name":"langfuse-3-worker","label":"langfuse-3-worker","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/langfuse-3-worker","purlType":"apk","versions":[{"text":"< 3.225.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.1-r2","eol":null,"hubHref":null},{"vendor":"honojs","product":"hono","name":"hono","label":"hono","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.7.0, < 4.12.34","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.7.0, < 4.12.34","eol":null,"hubHref":"/vendor/honojs/hono"},{"vendor":"Npm","product":"hono","name":"hono","label":"hono","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/hono","purlType":"npm","versions":[{"text":"≥ 4.7.0, < 4.12.34","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.7.0, < 4.12.34","eol":null,"hubHref":null}],"affectedCount":43,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/honojs/hono/security/advisories/GHSA-79qm-7rj5-m7r9","label":"github.com/honojs/hono/security/advisories/GHSA-79qm-7rj5-m7r9","hostname":"github.com","tags":["X Refsource CONFIRM","Advisory","WEB"]},{"url":"https://github.com/honojs/hono/commit/720b566290793d4358bf39843adcb7cf4da4548f","label":"github.com/honojs/hono/commit/720b566290793d4358bf39843adcb7cf4da4548f","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/honojs/hono/releases/tag/v4.12.34","label":"github.com/honojs/hono/releases/tag/v4.12.34","hostname":"github.com","tags":["X Refsource MISC","WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/71xxx/CVE-2026-71849.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/71xxx/CVE-2026-71849.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-71849","label":"nvd.nist.gov/vuln/detail/CVE-2026-71849","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/honojs/hono","label":"github.com/honojs/hono","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-6X9F-W6MR-2RRJ"]},"timeline":[{"kind":"published","date":"2026-08-07T18:38:16.287Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-10T12:03:12.470Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":15,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T05:47:31.957Z","stale":false,"partial":false}}