{"@context":"https://openvex.dev/ns/v0.2.0","@id":"pkg:github/datadog/datadog-serverless-functions@aws-dd-forwarder-5.4.10","author":"security@datadoghq.com","author_role":"Vulnerability Management","last_updated":"2026-08-17T11:25:49.709032295Z","statements":[{"action_statement":"","action_statement_timestamp":"2026-08-17T11:20:29.443747Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:20:29.443746Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:20:29.443746Z","vulnerability":{"name":"CVE-2026-1526"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:20:29.443838Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:20:29.443838Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:20:29.443838Z","vulnerability":{"name":"CVE-2026-2229"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:20:29.443929Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:20:29.443929Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:20:29.443928Z","vulnerability":{"name":"CVE-2026-12151"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:20:29.444108Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:20:29.444108Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:20:29.444107Z","vulnerability":{"name":"CVE-2026-1525"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:20:29.444236Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:20:29.444236Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:20:29.444235Z","vulnerability":{"name":"CVE-2026-22036"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:20:29.444407Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:20:29.444407Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:20:29.444406Z","vulnerability":{"name":"CVE-2026-9679"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:20:29.444479Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:20:29.444479Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:20:29.444479Z","vulnerability":{"name":"CVE-2026-1527"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:20:29.444555Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:20:29.444555Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:20:29.444554Z","vulnerability":{"name":"CVE-2026-16728"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:20:29.444694Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:20:29.444694Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:20:29.444694Z","vulnerability":{"name":"CVE-2026-16729"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:20:29.444772Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:20:29.444772Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:20:29.444771Z","vulnerability":{"name":"CVE-2026-11525"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:20:29.444847Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:20:29.444846Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:20:29.444846Z","vulnerability":{"name":"CVE-2026-6733"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:20:29.444941Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:20:29.444941Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:20:29.444941Z","vulnerability":{"name":"CVE-2026-15157"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:20:29.445016Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:20:29.445016Z","products":[{"@id":"pkg:npm/activity_logs_monitoring@1.0.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:20:29.445016Z","vulnerability":{"name":"GHSA-p57g-c9gq-6vxp"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:20:29.445057Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:20:29.445057Z","products":[{"@id":"pkg:npm/datadog-eventhub-forwarder@2.1.1"}],"status":"under_investigation","timestamp":"2026-08-17T11:20:29.445057Z","vulnerability":{"name":"MAL-2025-48623"}},{"action_statement":"This vulnerability was fixed in: 5.4.11","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:21:13.655163Z","products":[{"@id":"pkg:pypi/requests@2.22.0"}],"status":"affected","timestamp":"2026-08-17T11:20:29.443692Z","vulnerability":{"name":"CVE-2023-32681"}},{"action_statement":"This vulnerability was fixed in: 5.4.11","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:21:13.6552Z","products":[{"@id":"pkg:pypi/requests@2.22.0"}],"status":"affected","timestamp":"2026-08-17T11:20:29.44401Z","vulnerability":{"name":"CVE-2024-47081"}},{"action_statement":"This vulnerability was fixed in: 5.4.11","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:21:13.655206Z","products":[{"@id":"pkg:pypi/ddtrace@3.19.5"}],"status":"affected","timestamp":"2026-08-17T11:20:29.444059Z","vulnerability":{"name":"CVE-2026-50271"}},{"action_statement":"This vulnerability was fixed in: 5.4.11","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:21:13.655215Z","products":[{"@id":"pkg:pypi/setuptools@80.10.2"}],"status":"affected","timestamp":"2026-08-17T11:20:29.444311Z","vulnerability":{"name":"CVE-2026-59890"}},{"action_statement":"This vulnerability was fixed in: 5.4.11","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:21:13.65522Z","products":[{"@id":"pkg:pypi/requests@2.22.0"}],"status":"affected","timestamp":"2026-08-17T11:20:29.444362Z","vulnerability":{"name":"CVE-2024-35195"}},{"action_statement":"This vulnerability was fixed in: 5.4.11","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:21:13.655225Z","products":[{"@id":"pkg:pypi/requests@2.22.0"}],"status":"affected","timestamp":"2026-08-17T11:20:29.444635Z","vulnerability":{"name":"CVE-2026-25645"}}],"timestamp":"2026-08-15T15:23:31.111201616Z","tooling":"","version":3}