[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-85152":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":424,"aliases":425,"duplicate_of":9,"upstream":429,"downstream":441,"duplicates":447,"related":448,"reserved_at":9,"published_at":449,"modified_at":450,"state":451,"summary":452,"references_raw":461,"kevs":622,"epss":623,"epss_history":626,"metrics":671,"affected":685},"CVE-2026-85152","undici 8.10.0 omits the destination origin from the cache and request-deduplication keys when the cache or deduplicate interceptor is composed directly onto a Client or Pool. Because the internal cache key falls back to an empty origin string, a cacheable or in-flight response from one upstream origin is returned for a request to a different, trusted origin whenever the method, path, and relevant headers match, which permits cross-origin information disclosure and persistent cache poisoning. The reporter demonstrated a full authentication bypass in which a JWT signed with an attacker-controlled key was accepted as belonging to a trusted issuer, and the trusted origin was never contacted. This is a regression introduced in 8.10.0 and affects undici versions from 8.10.0 up to 8.10.2. Applications using an Agent, which carries the origin in its dispatch options, are not affected. Users should upgrade to undici 8.10.2.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-346","Origin Validation Error","The product does not properly verify that the source of data or communication is valid.","weakness","Draft","Class",[19,23,76,88,92,263,267,271,275,279,283,287,291,412,416,420],{"id":20,"name":21,"techniques":22},"CAPEC-111","JSON Hijacking (aka JavaScript Hijacking)",[],{"id":24,"name":25,"techniques":26},"CAPEC-141","Cache Poisoning",[27],{"id":28,"name":29,"tactics":30,"countermeasures":37},"T1557.002","ARP Cache Poisoning",[31,34],{"id":32,"name":33},"TA0031","Credential Access",{"id":35,"name":36},"TA0100","Collection",[38,43,48,52,56,60,64,68,72],{"id":39,"name":40,"tactic":41},"D3-NTF","Network Traffic Filtering",{"name":42},"Isolate",{"id":44,"name":45,"tactic":46},"D3-NTCD","Network Traffic Community Deviation",{"name":47},"Detect",{"id":49,"name":50,"tactic":51},"D3-RTSD","Remote Terminal Session Detection",{"name":47},{"id":53,"name":54,"tactic":55},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":47},{"id":57,"name":58,"tactic":59},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":47},{"id":61,"name":62,"tactic":63},"D3-CSPP","Client-server Payload Profiling",{"name":47},{"id":65,"name":66,"tactic":67},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":47},{"id":69,"name":70,"tactic":71},"D3-NTSA","Network Traffic Signature Analysis",{"name":47},{"id":73,"name":74,"tactic":75},"D3-APCA","Application Protocol Command Analysis",{"name":47},{"id":77,"name":78,"techniques":79},"CAPEC-142","DNS Cache Poisoning",[80],{"id":81,"name":82,"tactics":83,"countermeasures":87},"T1584.002","DNS Server",[84],{"id":85,"name":86},"TA0042","Resource Development",[],{"id":89,"name":90,"techniques":91},"CAPEC-160","Exploit Script-Based APIs",[],{"id":93,"name":94,"techniques":95},"CAPEC-21","Exploitation of Trusted Identifiers",[96,211,239],{"id":97,"name":98,"tactics":99,"countermeasures":109},"T1134","Access Token Manipulation",[100,103,106],{"id":101,"name":102},"TA0030","Defense Evasion",{"id":104,"name":105},"TA0005","Stealth",{"id":107,"name":108},"TA0111","Privilege Escalation",[110,114,118,122,126,131,136,140,144,149,153,158,162,166,170,174,178,183,187,191,195,199,203,207],{"id":111,"name":112,"tactic":113},"D3-CTS","Credential Transmission Scoping",{"name":42},{"id":115,"name":116,"tactic":117},"D3-CCSA","Credential Compromise Scope Analysis",{"name":47},{"id":119,"name":120,"tactic":121},"D3-OPM","Operational Process Monitoring",{"name":47},{"id":123,"name":124,"tactic":125},"D3-PSA","Process Spawn Analysis",{"name":47},{"id":127,"name":128,"tactic":129},"D3-ST","Session Termination",{"name":130},"Evict",{"id":132,"name":133,"tactic":134},"D3-NTPM","Network Traffic Policy Mapping",{"name":135},"Model",{"id":137,"name":138,"tactic":139},"D3-CR","Credential Revocation",{"name":130},{"id":141,"name":142,"tactic":143},"D3-ANCI","Authentication Cache Invalidation",{"name":130},{"id":145,"name":146,"tactic":147},"D3-DUC","Decoy User Credential",{"name":148},"Deceive",{"id":150,"name":151,"tactic":152},"D3-AM","Access Modeling",{"name":135},{"id":154,"name":155,"tactic":156},"D3-CH","Credential Hardening",{"name":157},"Harden",{"id":159,"name":160,"tactic":161},"D3-MFA","Multi-factor Authentication",{"name":157},{"id":163,"name":164,"tactic":165},"D3-CRO","Credential Rotation",{"name":157},{"id":167,"name":168,"tactic":169},"D3-HBPI","Hardware-based Process Isolation",{"name":42},{"id":171,"name":172,"tactic":173},"D3-TB","Token Binding",{"name":157},{"id":175,"name":176,"tactic":177},"D3-TBA","Token-based Authentication",{"name":157},{"id":179,"name":180,"tactic":181},"D3-RC","Restore Configuration",{"name":182},"Restore",{"id":184,"name":185,"tactic":186},"D3-AEM","Application Exception Monitoring",{"name":47},{"id":188,"name":189,"tactic":190},"D3-RIC","Reissue Credential",{"name":182},{"id":192,"name":193,"tactic":194},"D3-CI","Configuration Inventory",{"name":135},{"id":196,"name":197,"tactic":198},"D3-SCA","System Call Analysis",{"name":47},{"id":200,"name":201,"tactic":202},"D3-SCF","System Call Filtering",{"name":42},{"id":204,"name":205,"tactic":206},"D3-EAL","Executable Allowlisting",{"name":42},{"id":208,"name":209,"tactic":210},"D3-EDL","Executable Denylisting",{"name":42},{"id":212,"name":213,"tactics":214,"countermeasures":216},"T1528","Steal Application Access Token",[215],{"id":32,"name":33},[217,219,221,223,225,227,229,231,233,235,237],{"id":154,"name":155,"tactic":218},{"name":157},{"id":188,"name":189,"tactic":220},{"name":182},{"id":141,"name":142,"tactic":222},{"name":130},{"id":171,"name":172,"tactic":224},{"name":157},{"id":111,"name":112,"tactic":226},{"name":42},{"id":159,"name":160,"tactic":228},{"name":157},{"id":137,"name":138,"tactic":230},{"name":130},{"id":175,"name":176,"tactic":232},{"name":157},{"id":115,"name":116,"tactic":234},{"name":47},{"id":163,"name":164,"tactic":236},{"name":157},{"id":145,"name":146,"tactic":238},{"name":148},{"id":240,"name":241,"tactics":242,"countermeasures":244},"T1539","Steal Web Session Cookie",[243],{"id":32,"name":33},[245,247,249,251,253,255,257,259,261],{"id":111,"name":112,"tactic":246},{"name":42},{"id":145,"name":146,"tactic":248},{"name":148},{"id":154,"name":155,"tactic":250},{"name":157},{"id":159,"name":160,"tactic":252},{"name":157},{"id":141,"name":142,"tactic":254},{"name":130},{"id":115,"name":116,"tactic":256},{"name":47},{"id":163,"name":164,"tactic":258},{"name":157},{"id":137,"name":138,"tactic":260},{"name":130},{"id":188,"name":189,"tactic":262},{"name":182},{"id":264,"name":265,"techniques":266},"CAPEC-384","Application API Message Manipulation via Man-in-the-Middle",[],{"id":268,"name":269,"techniques":270},"CAPEC-385","Transaction or Event Tampering via Application API Manipulation",[],{"id":272,"name":273,"techniques":274},"CAPEC-386","Application API Navigation Remapping",[],{"id":276,"name":277,"techniques":278},"CAPEC-387","Navigation Remapping To Propagate Malicious Content",[],{"id":280,"name":281,"techniques":282},"CAPEC-388","Application API Button Hijacking",[],{"id":284,"name":285,"techniques":286},"CAPEC-510","SaaS User Request Forgery",[],{"id":288,"name":289,"techniques":290},"CAPEC-59","Session Credential Falsification through Prediction",[],{"id":292,"name":293,"techniques":294},"CAPEC-60","Reusing Session IDs (aka Session Replay)",[295,325],{"id":296,"name":297,"tactics":298,"countermeasures":302},"T1134.001","Token Impersonation/Theft",[299,300,301],{"id":101,"name":102},{"id":104,"name":105},{"id":107,"name":108},[303,305,307,309,311,313,315,317,319,321,323],{"id":137,"name":138,"tactic":304},{"name":130},{"id":115,"name":116,"tactic":306},{"name":47},{"id":111,"name":112,"tactic":308},{"name":42},{"id":141,"name":142,"tactic":310},{"name":130},{"id":171,"name":172,"tactic":312},{"name":157},{"id":175,"name":176,"tactic":314},{"name":157},{"id":145,"name":146,"tactic":316},{"name":148},{"id":154,"name":155,"tactic":318},{"name":157},{"id":163,"name":164,"tactic":320},{"name":157},{"id":159,"name":160,"tactic":322},{"name":157},{"id":188,"name":189,"tactic":324},{"name":182},{"id":326,"name":327,"tactics":328,"countermeasures":333},"T1550.004","Web Session Cookie",[329,330],{"id":101,"name":102},{"id":331,"name":332},"TA0109","Lateral Movement",[334,336,338,340,342,344,346,350,352,354,356,360,364,368,370,372,376,378,380,382,384,388,390,392,396,398,402,404,406,410],{"id":163,"name":164,"tactic":335},{"name":157},{"id":200,"name":201,"tactic":337},{"name":42},{"id":188,"name":189,"tactic":339},{"name":182},{"id":111,"name":112,"tactic":341},{"name":42},{"id":65,"name":66,"tactic":343},{"name":47},{"id":73,"name":74,"tactic":345},{"name":47},{"id":347,"name":348,"tactic":349},"D3-PSMD","Process Self-Modification Detection",{"name":47},{"id":49,"name":50,"tactic":351},{"name":47},{"id":123,"name":124,"tactic":353},{"name":47},{"id":167,"name":168,"tactic":355},{"name":42},{"id":357,"name":358,"tactic":359},"D3-KBPI","Kernel-based Process Isolation",{"name":42},{"id":361,"name":362,"tactic":363},"D3-ABPI","Application-based Process Isolation",{"name":42},{"id":365,"name":366,"tactic":367},"D3-HS","Host Shutdown",{"name":130},{"id":57,"name":58,"tactic":369},{"name":47},{"id":137,"name":138,"tactic":371},{"name":130},{"id":373,"name":374,"tactic":375},"D3-HR","Host Reboot",{"name":130},{"id":115,"name":116,"tactic":377},{"name":47},{"id":39,"name":40,"tactic":379},{"name":42},{"id":145,"name":146,"tactic":381},{"name":148},{"id":61,"name":62,"tactic":383},{"name":47},{"id":385,"name":386,"tactic":387},"D3-PT","Process Termination",{"name":130},{"id":154,"name":155,"tactic":389},{"name":157},{"id":159,"name":160,"tactic":391},{"name":157},{"id":393,"name":394,"tactic":395},"D3-PLA","Process Lineage Analysis",{"name":47},{"id":44,"name":45,"tactic":397},{"name":47},{"id":399,"name":400,"tactic":401},"D3-PS","Process Suspension",{"name":130},{"id":141,"name":142,"tactic":403},{"name":130},{"id":69,"name":70,"tactic":405},{"name":47},{"id":407,"name":408,"tactic":409},"D3-WSAM","Web Session Access Mediation",{"name":42},{"id":53,"name":54,"tactic":411},{"name":47},{"id":413,"name":414,"techniques":415},"CAPEC-75","Manipulating Writeable Configuration Files",[],{"id":417,"name":418,"techniques":419},"CAPEC-76","Manipulating Web Input to File System Calls",[],{"id":421,"name":422,"techniques":423},"CAPEC-89","Pharming",[],[],[426,427,428],"RHSA-2026:54438","DEBIAN-CVE-2026-85152","UBUNTU-CVE-2026-85152",[430,432,434,436,438,440],{"_key":431},"CVE-2026-18149",{"_key":433},"CVE-2026-84890",{"_key":435},"CVE-2026-84933",{"_key":437},"CVE-2026-85008",{"_key":439},"CVE-2026-85014",{"_key":7},[442,444,445],{"_key":443},"RHSA-2026:54389",{"_key":7},{"_key":446},"RHSA-2026:63782",[],[],"2026-09-04T16:36:28.085Z","2026-09-04T19:29:29.802Z","Analyzed",{"cisa_kev":453,"cisa_ransomware":453,"cisa_vendor":9,"epss_severity":454,"epss_score":455,"severity":456,"severity_score":457,"severity_version":458,"severity_source":459,"severity_vector":460,"severity_status":451},false,"low",0.00164,"high",7.4,"v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",[462,472,476,481,485,489,493,497,501,505,509,514,518,522,526,530,534,538,542,546,550,554,558,562,566,570,574,578,582,586,590,594,598,602,606,610,614,618],{"url":463,"sources":464,"tags":468},"https://github.com/nodejs/undici/security/advisories/GHSA-vp8m-p9jh-q5pm",[459,465,466,467],"nvd","osv_red_hat","osv_ubuntu",[469,470,471],"ARTICLE","REPORT","Vendor Advisory",{"url":473,"sources":474,"tags":475},"https://cna.openjsf.org/security-advisories.html",[459,465,466],[469,471],{"url":477,"sources":478,"tags":479},"https://access.redhat.com/errata/RHSA-2026:54438",[466],[480],"Advisory",{"url":482,"sources":483,"tags":484},"https://images.redhat.com/",[466],[469],{"url":486,"sources":487,"tags":488},"https://access.redhat.com/security/cve/CVE-2026-85152",[466],[470],{"url":490,"sources":491,"tags":492},"https://access.redhat.com/security/updates/classification/",[466],[469],{"url":494,"sources":495,"tags":496},"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54438.json",[466],[480],{"url":498,"sources":499,"tags":500},"https://bugzilla.redhat.com/show_bug.cgi?id=2528717",[466],[470],{"url":502,"sources":503,"tags":504},"https://www.cve.org/CVERecord?id=CVE-2026-85152",[466,467],[480,470],{"url":506,"sources":507,"tags":508},"https://nvd.nist.gov/vuln/detail/CVE-2026-85152",[466],[480],{"url":510,"sources":511,"tags":513},"https://security-tracker.debian.org/tracker/CVE-2026-85152",[512],"osv_debian",[480],{"url":515,"sources":516,"tags":517},"https://access.redhat.com/security/cve/CVE-2026-18149",[466],[470],{"url":519,"sources":520,"tags":521},"https://access.redhat.com/security/cve/CVE-2026-84933",[466],[470],{"url":523,"sources":524,"tags":525},"https://access.redhat.com/security/cve/CVE-2026-85008",[466],[470],{"url":527,"sources":528,"tags":529},"https://access.redhat.com/security/cve/CVE-2026-84890",[466],[470],{"url":531,"sources":532,"tags":533},"https://bugzilla.redhat.com/show_bug.cgi?id=2528802",[466],[470],{"url":535,"sources":536,"tags":537},"https://www.cve.org/CVERecord?id=CVE-2026-18149",[466],[480],{"url":539,"sources":540,"tags":541},"https://nvd.nist.gov/vuln/detail/CVE-2026-18149",[466],[480],{"url":543,"sources":544,"tags":545},"https://github.com/nodejs/undici/security/advisories/GHSA-pmjh-fq2x-6v4x",[466],[469],{"url":547,"sources":548,"tags":549},"https://bugzilla.redhat.com/show_bug.cgi?id=2528772",[466],[470],{"url":551,"sources":552,"tags":553},"https://www.cve.org/CVERecord?id=CVE-2026-84890",[466],[480],{"url":555,"sources":556,"tags":557},"https://nvd.nist.gov/vuln/detail/CVE-2026-84890",[466],[480],{"url":559,"sources":560,"tags":561},"https://github.com/nodejs/undici/security/advisories/GHSA-3xpg-4rpp-hhhm",[466],[469],{"url":563,"sources":564,"tags":565},"https://bugzilla.redhat.com/show_bug.cgi?id=2528756",[466],[470],{"url":567,"sources":568,"tags":569},"https://www.cve.org/CVERecord?id=CVE-2026-84933",[466],[480],{"url":571,"sources":572,"tags":573},"https://nvd.nist.gov/vuln/detail/CVE-2026-84933",[466],[480],{"url":575,"sources":576,"tags":577},"https://github.com/nodejs/undici/security/advisories/GHSA-2jfj-6hjv-fm6j",[466],[469],{"url":579,"sources":580,"tags":581},"https://bugzilla.redhat.com/show_bug.cgi?id=2528747",[466],[470],{"url":583,"sources":584,"tags":585},"https://www.cve.org/CVERecord?id=CVE-2026-85008",[466],[480],{"url":587,"sources":588,"tags":589},"https://nvd.nist.gov/vuln/detail/CVE-2026-85008",[466],[480],{"url":591,"sources":592,"tags":593},"https://github.com/nodejs/undici/security/advisories/GHSA-8436-99hf-9mmv",[466],[469],{"url":595,"sources":596,"tags":597},"https://ubuntu.com/security/CVE-2026-85152",[467],[470],{"url":599,"sources":600,"tags":601},"https://access.redhat.com/security/cve/CVE-2026-85014",[466],[470],{"url":603,"sources":604,"tags":605},"https://access.redhat.com/security/cve/CVE-2026-48932",[466],[469],{"url":607,"sources":608,"tags":609},"https://bugzilla.redhat.com/show_bug.cgi?id=2528712",[466],[470],{"url":611,"sources":612,"tags":613},"https://www.cve.org/CVERecord?id=CVE-2026-85014",[466],[480],{"url":615,"sources":616,"tags":617},"https://nvd.nist.gov/vuln/detail/CVE-2026-85014",[466],[480],{"url":619,"sources":620,"tags":621},"https://github.com/nodejs/undici/security/advisories/GHSA-rx4f-c7p8-82vq",[466],[469],[],{"date":624,"score":455,"percentile":625},"2026-09-19",0.06085,[627,631,634,637,640,643,646,649,652,655,658,661,664,667,670],{"date":628,"score":629,"percentile":630},"2026-09-05",0.00173,0.06849,{"date":632,"score":629,"percentile":633},"2026-09-06",0.06867,{"date":635,"score":629,"percentile":636},"2026-09-07",0.06856,{"date":638,"score":629,"percentile":639},"2026-09-08",0.0683,{"date":641,"score":629,"percentile":642},"2026-09-09",0.06864,{"date":644,"score":629,"percentile":645},"2026-09-10",0.06855,{"date":647,"score":629,"percentile":648},"2026-09-11",0.06858,{"date":650,"score":629,"percentile":651},"2026-09-12",0.06908,{"date":653,"score":629,"percentile":654},"2026-09-13",0.06905,{"date":656,"score":629,"percentile":657},"2026-09-14",0.06917,{"date":659,"score":629,"percentile":660},"2026-09-15",0.06949,{"date":662,"score":629,"percentile":663},"2026-09-16",0.06993,{"date":665,"score":455,"percentile":666},"2026-09-17",0.06055,{"date":668,"score":455,"percentile":669},"2026-09-18",0.06064,{"date":624,"score":455,"percentile":625},[672,677,679,681,683],{"source":459,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":673,"cvss_v4_0":9},{"baseScore":457,"baseSeverity":674,"vectorString":460,"impactScore":675,"exploitabilityScore":676},"HIGH",8.7,5.6,{"source":465,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":678,"cvss_v4_0":9},{"baseScore":457,"baseSeverity":674,"vectorString":460,"impactScore":675,"exploitabilityScore":676},{"source":466,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":680,"cvss_v4_0":9},{"baseScore":457,"baseSeverity":9,"vectorString":460,"impactScore":675,"exploitabilityScore":676},{"source":512,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":682,"cvss_v4_0":9},{"baseScore":457,"baseSeverity":9,"vectorString":460,"impactScore":675,"exploitabilityScore":676},{"source":467,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":684,"cvss_v4_0":9},{"baseScore":457,"baseSeverity":9,"vectorString":460,"impactScore":675,"exploitabilityScore":676},[686,702,708,719,728,732],{"ecosystem":687,"name":688,"vendor":689,"product":688,"cpe_part":9,"purl_type":690,"purl_namespace":689,"purl_name":688,"source":9,"versions":691},"Debian","node-undici","debian","deb",[692,696,697,698],{"version":693,"is_range":694,"range_type":695,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",true,"ecosystem",{"version":693,"is_range":694,"range_type":695,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":693,"is_range":694,"range_type":695,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":699,"is_range":694,"range_type":695,"version_start":9,"version_start_type":9,"version_end":700,"version_end_type":701,"fixed_in":9},"lt8_10_2+dfsg+~cs3_2_2_1","8.10.2+dfsg+~cs3.2.2-1","excluding",{"ecosystem":703,"name":688,"vendor":704,"product":688,"cpe_part":9,"purl_type":690,"purl_namespace":704,"purl_name":688,"source":9,"versions":705},"Ubuntu","ubuntu",[706,707],{"version":693,"is_range":694,"range_type":695,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":693,"is_range":694,"range_type":695,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":709,"vendor":710,"product":709,"cpe_part":711,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":712},"undici","nodejs","a",[713],{"version":714,"is_range":694,"range_type":715,"version_start":716,"version_start_type":717,"version_end":718,"version_end_type":701,"fixed_in":9},"gte8.10.0_lt8.10.2","cpe","8.10.0","including","8.10.2",{"ecosystem":720,"name":721,"vendor":722,"product":721,"cpe_part":9,"purl_type":723,"purl_namespace":722,"purl_name":721,"source":9,"versions":724},"Red Hat","nodejs24","redhat","rpm",[725],{"version":726,"is_range":694,"range_type":695,"version_start":9,"version_start_type":9,"version_end":727,"version_end_type":701,"fixed_in":9},"lt0:24_18_1_0_2_2_hum1","0:24.18.1-0.2.2.hum1",{"ecosystem":720,"name":729,"vendor":722,"product":729,"cpe_part":9,"purl_type":723,"purl_namespace":722,"purl_name":729,"source":9,"versions":730},"nodejs24-bin",[731],{"version":726,"is_range":694,"range_type":695,"version_start":9,"version_start_type":9,"version_end":727,"version_end_type":701,"fixed_in":9},{"ecosystem":9,"name":709,"vendor":709,"product":709,"cpe_part":711,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":733},[734],{"version":735,"is_range":694,"range_type":459,"version_start":716,"version_start_type":717,"version_end":718,"version_end_type":701,"fixed_in":9},">= 8.10.0, \u003C 8.10.2"]