{"schemaVersion":3,"id":"CVE-2026-9595","aliases":["UBUNTU-CVE-2026-9595","CGA-24p8-mppv-rp5c","CGA-27f6-f6mc-qpg3","CGA-2xhq-5jv7-qvmp","CGA-32f4-gm6g-wx2r","CGA-36c9-pvcq-g5r7","CGA-3v32-8576-q8m2","CGA-4354-4jhj-m3m3","CGA-487x-96h2-65hm","CGA-4wcf-jggx-x99h","CGA-5fqx-6mqp-h6x5","CGA-5p8p-xf95-g4q9","CGA-835q-m3xc-h7mp","CGA-8qg4-275c-67c2","CGA-8v67-928x-pwfg","CGA-gw7p-7fcj-h7fh","CGA-h7cv-g6jm-jwfv","CGA-hrmh-wr37-993v","CGA-mfw7-9mrq-mgwj","CGA-pj9m-mgmh-pwm9","CGA-q3rg-mf65-8m6f","CGA-r472-r4v6-gmvg","CGA-wfmx-pmr3-4wx5","CGA-wgr6-wpfr-rw89","CGA-wx7x-pr9r-c422","CGA-x63f-85r2-qmgh","CGA-xhwj-vj6x-cfh6","GHSA-mx8g-39q3-5c79","CGA-25j5-grcq-68v9","CGA-2jp9-2rvf-p954","CGA-2p98-p282-cjwj","CGA-2qxq-f9jc-j43r","CGA-3v2w-cw3g-6pj5","CGA-4j94-m6jf-2jw6","CGA-4m8m-f353-5j2g","CGA-55rx-9c8g-74mj","CGA-5mr2-v3f5-6h7q","CGA-5wqq-g5cf-f5fq","CGA-6m3r-cx95-p27x","CGA-6vvj-cqg2-8pxm","CGA-76f9-6wph-3rp8","CGA-8f46-x98p-x4gr","CGA-8r6m-82j5-4cwx","CGA-94cm-p4h2-pmp4","CGA-94j8-rw6h-3477","CGA-983r-5h72-r3wp","CGA-9c8f-737r-m2c7","CGA-9rqq-rm8r-fhxc","CGA-c8cx-825m-qvvm","CGA-cj9j-6665-4rhx","CGA-cjjp-7h68-8h24","CGA-cp5v-3gvc-4jjq","CGA-f8x4-qwf7-5pwj","CGA-fc57-c8pp-7g9f","CGA-gfhx-v234-fpv9","CGA-h4jh-9r75-xgv7","CGA-h5fq-2mvm-gqj2","CGA-hhxg-m4q4-jhpr","CGA-hpmj-cwxc-xhx4","CGA-hx5h-2r3h-ph97","CGA-jc39-qj4q-rwc5","CGA-jr5g-7q48-pj39","CGA-m85c-q5g5-7775","CGA-mjwh-76h6-8cfv","CGA-mx9x-cq9r-pg5c","CGA-p4j6-889p-3379","CGA-p9f6-x632-r5gr","CGA-pgfx-2v5q-2wqv","CGA-q3rf-jphf-qf8h","CGA-qf9v-pfx2-4jxx","CGA-qw7v-fvrq-79r7","CGA-r63m-hqcc-c3q6","CGA-rpgp-p4wf-hf6p","CGA-rpvj-m537-x5c5","CGA-rqw4-m4jv-p3j6","CGA-v5wr-jq52-g6pw","CGA-v9p8-cr65-pvgg","CGA-w24p-4rf6-62qr","CGA-w55p-5x7c-g4mp","CGA-wg7p-ggxc-632r","CGA-x67g-43qh-wqhp","CGA-xcqj-922q-h6h3","CGA-xfc8-8r3c-mqqh","CGA-xv8r-4cjc-wj9v"],"status":"published","duplicateOf":null,"title":null,"description":"Impact: When a user-configured proxy on webpack-dev-server has a broad context (e.g. /) and ws: true, it also intercepts the dev server's own HMR WebSocket and forwards it to the proxy target. This leaks the browser's cookies and Origin header to the backend, bypasses the dev server's Host/Origin validation, and corrupts the HMR socket (both HMR and the proxy end up writing to the same socket).\n\nPatches: Fixed in webpack-dev-server@5.2.5.\n\nWorkarounds: Scope user-defined proxy context to specific paths instead of /, or omit ws: true from the proxy entry when WebSocket forwarding is not required.","dates":{"published":"2026-06-15T15:00:21.488Z","modified":"2026-06-15T16:08:35.549Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":4.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","exploitability":7.2,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":4.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00233,"percentile":0.13275,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.07,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00163},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00163,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00163,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00163,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00163,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00163,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00163,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00163,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00163,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00163,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00163,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00233,"percentile":0.13275}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00163,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00163,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00163,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00163,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00233,"percentile":0.13275}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-346","name":"Origin Validation Error","description":"The product does not properly verify that the source of data or communication is valid.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/346.html"},{"id":"CWE-441","name":"Unintended Proxy or Intermediary ('Confused Deputy')","description":"The product receives a request, message, or directive from an upstream component, but the product does not sufficiently preserve the original source of the request before forwarding the request to an external actor that is outside of the product's control sphere. This causes the product to appear to be the source of the request, leading it to act as a proxy or other intermediary between the upstream component and the external actor.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/441.html"}],"affected":[{"vendor":"chainguard","product":"arangodb-3.11","name":"arangodb-3.11","label":"arangodb-3.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/arangodb-3.11","purlType":"apk","versions":[{"text":"< 3.11.14.5-r25","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.11.14.5-r25","eol":null,"hubHref":null},{"vendor":"chainguard","product":"arangodb-3.12","name":"arangodb-3.12","label":"arangodb-3.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/arangodb-3.12","purlType":"apk","versions":[{"text":"< 3.12.11-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.11-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"argo-workflows-ui-3.6","name":"argo-workflows-ui-3.6","label":"argo-workflows-ui-3.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/argo-workflows-ui-3.6","purlType":"apk","versions":[{"text":"< 3.6.19-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.19-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"argo-workflows-ui-3.7","name":"argo-workflows-ui-3.7","label":"argo-workflows-ui-3.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/argo-workflows-ui-3.7","purlType":"apk","versions":[{"text":"< 3.7.15-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.15-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"argo-workflows-ui-4.0","name":"argo-workflows-ui-4.0","label":"argo-workflows-ui-4.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/argo-workflows-ui-4.0","purlType":"apk","versions":[{"text":"< 4.0.6-r1","noFixRecorded":false,"fixedIn":null},{"text":"< 4.0.11-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.6-r1 | < 4.0.11-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.1","name":"gitlab-rails-ce-18.1","label":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.10","name":"gitlab-rails-ce-18.10","label":"gitlab-rails-ce-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.11","name":"gitlab-rails-ce-18.11","label":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.5","name":"gitlab-rails-ce-18.5","label":"gitlab-rails-ce-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.6","name":"gitlab-rails-ce-18.6","label":"gitlab-rails-ce-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.7","name":"gitlab-rails-ce-18.7","label":"gitlab-rails-ce-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.8","name":"gitlab-rails-ce-18.8","label":"gitlab-rails-ce-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.9","name":"gitlab-rails-ce-18.9","label":"gitlab-rails-ce-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.0","name":"gitlab-rails-ce-19.0","label":"gitlab-rails-ce-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.1","name":"gitlab-rails-ce-19.1","label":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1","purlType":"apk","versions":[{"text":"< 19.1.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.2","name":"gitlab-rails-ce-19.2","label":"gitlab-rails-ce-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.2","purlType":"apk","versions":[{"text":"< 19.2.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.3","name":"gitlab-rails-ce-19.3","label":"gitlab-rails-ce-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.3","purlType":"apk","versions":[{"text":"< 19.3.1-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.1-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.1","name":"gitlab-rails-ce-fips-18.1","label":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.10","name":"gitlab-rails-ce-fips-18.10","label":"gitlab-rails-ce-fips-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.10","purlType":"apk","versions":[{"text":"< 18.10.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.10.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.11","name":"gitlab-rails-ce-fips-18.11","label":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11","purlType":"apk","versions":[{"text":"< 18.11.12-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.12-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.5","name":"gitlab-rails-ce-fips-18.5","label":"gitlab-rails-ce-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.6","name":"gitlab-rails-ce-fips-18.6","label":"gitlab-rails-ce-fips-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.7","name":"gitlab-rails-ce-fips-18.7","label":"gitlab-rails-ce-fips-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.8","name":"gitlab-rails-ce-fips-18.8","label":"gitlab-rails-ce-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.9","name":"gitlab-rails-ce-fips-18.9","label":"gitlab-rails-ce-fips-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.9","purlType":"apk","versions":[{"text":"< 18.9.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.0","name":"gitlab-rails-ce-fips-19.0","label":"gitlab-rails-ce-fips-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.0","purlType":"apk","versions":[{"text":"< 19.0.9-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.9-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.1","name":"gitlab-rails-ce-fips-19.1","label":"gitlab-rails-ce-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.1","purlType":"apk","versions":[{"text":"< 19.1.7-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.7-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.2","name":"gitlab-rails-ce-fips-19.2","label":"gitlab-rails-ce-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.2","purlType":"apk","versions":[{"text":"< 19.2.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.3","name":"gitlab-rails-ce-fips-19.3","label":"gitlab-rails-ce-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.3","purlType":"apk","versions":[{"text":"< 19.3.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.1-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-earlystopping","name":"katib-earlystopping","label":"katib-earlystopping","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-earlystopping","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-goptuna-compat","name":"katib-suggestion-goptuna-compat","label":"katib-suggestion-goptuna-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-goptuna-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-hyperband","name":"katib-suggestion-hyperband","label":"katib-suggestion-hyperband","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-hyperband","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-hyperopt","name":"katib-suggestion-hyperopt","label":"katib-suggestion-hyperopt","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-hyperopt","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null},{"text":"< 0.19.0-r40","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31 | < 0.19.0-r40","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-nas-darts","name":"katib-suggestion-nas-darts","label":"katib-suggestion-nas-darts","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-nas-darts","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-nas-enas","name":"katib-suggestion-nas-enas","label":"katib-suggestion-nas-enas","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-nas-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-optuna-enas","name":"katib-suggestion-optuna-enas","label":"katib-suggestion-optuna-enas","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-optuna-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-pbt-enas","name":"katib-suggestion-pbt-enas","label":"katib-suggestion-pbt-enas","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-pbt-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-skopt-enas","name":"katib-suggestion-skopt-enas","label":"katib-suggestion-skopt-enas","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-skopt-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-tfevent-metricscollector","name":"katib-tfevent-metricscollector","label":"katib-tfevent-metricscollector","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-tfevent-metricscollector","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"argo-workflows-ui-3.7","name":"argo-workflows-ui-3.7","label":"argo-workflows-ui-3.7","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/argo-workflows-ui-3.7","purlType":"apk","versions":[{"text":"< 3.7.15-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.15-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"argo-workflows-ui-4.0","name":"argo-workflows-ui-4.0","label":"argo-workflows-ui-4.0","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/argo-workflows-ui-4.0","purlType":"apk","versions":[{"text":"< 4.0.6-r1","noFixRecorded":false,"fixedIn":null},{"text":"< 4.0.11-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.6-r1 | < 4.0.11-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-earlystopping","name":"katib-earlystopping","label":"katib-earlystopping","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-earlystopping","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-goptuna-compat","name":"katib-suggestion-goptuna-compat","label":"katib-suggestion-goptuna-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-goptuna-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-hyperband","name":"katib-suggestion-hyperband","label":"katib-suggestion-hyperband","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-hyperband","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-hyperopt","name":"katib-suggestion-hyperopt","label":"katib-suggestion-hyperopt","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-hyperopt","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null},{"text":"< 0.19.0-r40","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31 | < 0.19.0-r40","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-nas-darts","name":"katib-suggestion-nas-darts","label":"katib-suggestion-nas-darts","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-nas-darts","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-nas-enas","name":"katib-suggestion-nas-enas","label":"katib-suggestion-nas-enas","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-nas-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-optuna-enas","name":"katib-suggestion-optuna-enas","label":"katib-suggestion-optuna-enas","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-optuna-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-pbt-enas","name":"katib-suggestion-pbt-enas","label":"katib-suggestion-pbt-enas","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-pbt-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-skopt-enas","name":"katib-suggestion-skopt-enas","label":"katib-suggestion-skopt-enas","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-skopt-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-tfevent-metricscollector","name":"katib-tfevent-metricscollector","label":"katib-tfevent-metricscollector","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-tfevent-metricscollector","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"node-webpack","name":"node-webpack","label":"node-webpack","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/node-webpack","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"vue.js","name":"vue.js","label":"vue.js","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/vue.js","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"Npm","product":"webpack-dev-server","name":"webpack-dev-server","label":"webpack-dev-server","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/webpack-dev-server","purlType":"npm","versions":[{"text":"< 5.2.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.5","eol":null,"hubHref":null},{"vendor":"webpack-dev-server","product":"webpack-dev-server","name":"webpack-dev-server","label":"webpack-dev-server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.2.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.5","eol":null,"hubHref":"/vendor/webpack-dev-server/webpack-dev-server"},{"vendor":"webpack.js","product":"webpack-dev-server","name":"webpack-dev-server","label":"webpack-dev-server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.2.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.5","eol":null,"hubHref":"/vendor/webpackjs/webpack-dev-server"}],"affectedCount":56,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-mx8g-39q3-5c79","label":"github.com/webpack/webpack-dev-server/security/advisories/GHSA-mx8g-39q3-5c79","hostname":"github.com","tags":["REPORT","Advisory","WEB","Mitigation","Vendor Advisory"]},{"url":"https://cna.openjsf.org/security-advisories.html","label":"cna.openjsf.org/security-advisories.html","hostname":"cna.openjsf.org","tags":["REPORT","Advisory","WEB","Vendor Advisory"]},{"url":"https://github.com/webpack/webpack-dev-server/pull/4316","label":"github.com/webpack/webpack-dev-server/pull/4316","hostname":"github.com","tags":["REPORT","FIX","WEB","Issue Tracking","Patch"]},{"url":"https://github.com/vuejs/vue-cli/commit/72ba7505aff2a8314e82aa5082379a77504a1fcb","label":"github.com/vuejs/vue-cli/commit/72ba7505aff2a8314e82aa5082379a77504a1fcb","hostname":"github.com","tags":["REPORT","FIX","WEB","Patch"]},{"url":"https://github.com/facebook/create-react-app/pull/7444","label":"github.com/facebook/create-react-app/pull/7444","hostname":"github.com","tags":["REPORT","FIX","WEB","Issue Tracking","Patch"]},{"url":"https://ubuntu.com/security/CVE-2026-9595","label":"ubuntu.com/security/CVE-2026-9595","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-9595","label":"www.cve.org/CVERecord?id=CVE-2026-9595","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/9xxx/CVE-2026-9595.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/9xxx/CVE-2026-9595.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-9595","label":"nvd.nist.gov/vuln/detail/CVE-2026-9595","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/webpack/webpack-dev-server","label":"github.com/webpack/webpack-dev-server","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":["RHSA-2026:57590"],"duplicates":[],"related":["CGA-VV36-83JW-HJFF"]},"timeline":[{"kind":"published","date":"2026-06-15T15:00:21.488Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-15T16:08:35.549Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T09:03:44.309Z","stale":false,"partial":false}}