{"@context":"https://openvex.dev/ns/v0.2.0","@id":"pkg:github/datadog/datadog-serverless-functions@aws-dd-forwarder-5.4.9","author":"security@datadoghq.com","author_role":"Vulnerability Management","last_updated":"2026-08-17T11:25:49.984048837Z","statements":[{"action_statement":"","action_statement_timestamp":"2026-08-17T11:19:18.107375Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:19:18.107375Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:19:18.107374Z","vulnerability":{"name":"CVE-2026-16729"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:19:18.107456Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:19:18.107456Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:19:18.107456Z","vulnerability":{"name":"CVE-2026-11525"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:19:18.107528Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:19:18.107528Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:19:18.107527Z","vulnerability":{"name":"CVE-2026-6733"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:19:18.107611Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:19:18.107611Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:19:18.107611Z","vulnerability":{"name":"CVE-2026-15157"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:19:18.107678Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:19:18.107678Z","products":[{"@id":"pkg:npm/activity_logs_monitoring@1.0.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:19:18.107678Z","vulnerability":{"name":"GHSA-p57g-c9gq-6vxp"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:19:18.107736Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:19:18.107736Z","products":[{"@id":"pkg:npm/datadog-eventhub-forwarder@2.1.1"}],"status":"under_investigation","timestamp":"2026-08-17T11:19:18.107736Z","vulnerability":{"name":"MAL-2025-48623"}},{"action_statement":"This vulnerability was fixed in: 5.4.11","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:21:13.655163Z","products":[{"@id":"pkg:pypi/requests@2.22.0"}],"status":"affected","timestamp":"2026-08-17T11:19:18.106378Z","vulnerability":{"name":"CVE-2023-32681"}},{"action_statement":"This vulnerability was fixed in: 5.4.11","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:21:13.6552Z","products":[{"@id":"pkg:pypi/requests@2.22.0"}],"status":"affected","timestamp":"2026-08-17T11:19:18.106683Z","vulnerability":{"name":"CVE-2024-47081"}},{"action_statement":"This vulnerability was fixed in: 5.4.11","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:21:13.655206Z","products":[{"@id":"pkg:pypi/ddtrace@3.19.5"}],"status":"affected","timestamp":"2026-08-17T11:19:18.106723Z","vulnerability":{"name":"CVE-2026-50271"}},{"action_statement":"This vulnerability was fixed in: 5.4.11","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:21:13.655215Z","products":[{"@id":"pkg:pypi/setuptools@80.10.2"}],"status":"affected","timestamp":"2026-08-17T11:19:18.106959Z","vulnerability":{"name":"CVE-2026-59890"}},{"action_statement":"This vulnerability was fixed in: 5.4.11","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:21:13.65522Z","products":[{"@id":"pkg:pypi/requests@2.22.0"}],"status":"affected","timestamp":"2026-08-17T11:19:18.107017Z","vulnerability":{"name":"CVE-2024-35195"}},{"action_statement":"This vulnerability was fixed in: 5.4.11","action_statement_timestamp":"0001-01-01T00:00:00Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:21:13.655225Z","products":[{"@id":"pkg:pypi/requests@2.22.0"}],"status":"affected","timestamp":"2026-08-17T11:19:18.107319Z","vulnerability":{"name":"CVE-2026-25645"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:19:18.106443Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:19:18.106442Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:19:18.106442Z","vulnerability":{"name":"CVE-2026-1526"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:19:18.106538Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:19:18.106538Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:19:18.106537Z","vulnerability":{"name":"CVE-2026-2229"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:19:18.106611Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:19:18.106611Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:19:18.106611Z","vulnerability":{"name":"CVE-2026-12151"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:19:18.106771Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:19:18.106771Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:19:18.106771Z","vulnerability":{"name":"CVE-2026-1525"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:19:18.106854Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:19:18.106854Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:19:18.106853Z","vulnerability":{"name":"CVE-2026-22036"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:19:18.107068Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:19:18.107068Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:19:18.107068Z","vulnerability":{"name":"CVE-2026-9679"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:19:18.107148Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:19:18.107148Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:19:18.107148Z","vulnerability":{"name":"CVE-2026-1527"}},{"action_statement":"","action_statement_timestamp":"2026-08-17T11:19:18.107234Z","impact_statement":"","justification":"","last_updated":"2026-08-17T11:19:18.107234Z","products":[{"@id":"pkg:npm/undici@5.29.0"}],"status":"under_investigation","timestamp":"2026-08-17T11:19:18.107233Z","vulnerability":{"name":"CVE-2026-16728"}}],"timestamp":"2026-08-15T15:23:31.235026074Z","tooling":"","version":3}