diff --git a/.DS_Store b/.DS_Store new file mode 100644 index 00000000..58280dc2 Binary files /dev/null and b/.DS_Store differ diff --git a/00-environments/.DS_Store b/00-environments/.DS_Store new file mode 100644 index 00000000..416edf09 Binary files /dev/null and b/00-environments/.DS_Store differ diff --git a/01-sql-injection/.DS_Store b/01-sql-injection/.DS_Store new file mode 100644 index 00000000..648b0fb8 Binary files /dev/null and b/01-sql-injection/.DS_Store differ diff --git a/02-xss/.DS_Store b/02-xss/.DS_Store new file mode 100644 index 00000000..841f0b0c Binary files /dev/null and b/02-xss/.DS_Store differ diff --git a/03-authentication/.DS_Store b/03-authentication/.DS_Store new file mode 100644 index 00000000..cdb9f6cf Binary files /dev/null and b/03-authentication/.DS_Store differ diff --git a/04-server-security/.DS_Store b/04-server-security/.DS_Store new file mode 100644 index 00000000..d97a229f Binary files /dev/null and b/04-server-security/.DS_Store differ diff --git a/05-defense/.DS_Store b/05-defense/.DS_Store new file mode 100644 index 00000000..e931871e Binary files /dev/null and b/05-defense/.DS_Store differ diff --git a/06-case-studies/.DS_Store b/06-case-studies/.DS_Store new file mode 100644 index 00000000..8ccaae2e Binary files /dev/null and b/06-case-studies/.DS_Store differ diff --git a/07-framework-security/.DS_Store b/07-framework-security/.DS_Store new file mode 100644 index 00000000..254bf606 Binary files /dev/null and b/07-framework-security/.DS_Store differ diff --git a/07-framework-security/cms/directus/INDEX.md b/07-framework-security/cms/directus/INDEX.md index 3decf36a..98ce1740 100644 --- a/07-framework-security/cms/directus/INDEX.md +++ b/07-framework-security/cms/directus/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `29` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/cms/discourse/INDEX.md b/07-framework-security/cms/discourse/INDEX.md index 80704345..d062b892 100644 --- a/07-framework-security/cms/discourse/INDEX.md +++ b/07-framework-security/cms/discourse/INDEX.md @@ -5,14 +5,14 @@ - 系统 ID: `discourse` - 分类: `cms` - 覆盖策略: `rolling-24m` -- 总案例数: `30` +- 总案例数: `31` - 近 30 天新增/更新: `0` - 重点 Markdown 案例数: `0` - 已实证(真实版本): `0` - 已实证(synthetic): `0` - 阻塞数: `0` -- 待人工/缺浏览器证据: `30` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 待人工/缺浏览器证据: `31` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 @@ -44,6 +44,7 @@ | 3.5.0.beta7: Smart link editing, better invite tracking, unique icons, and fixing name management | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `Wed, 25 Jun 2025 03:38:45 +0000` | - | | 3.4.0.beta4: Redesigned emojis, exporting user data, flagging illegal content and more | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `Wed, 05 Feb 2025 14:26:56 +0000` | - | | 3.3.4: Security and maintenance release | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `Wed, 05 Feb 2025 14:26:22 +0000` | - | +| March 2026 monthly release | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `Tue, 31 Mar 2026 14:35:49 +0000` | - | | 3.5.1: Security and maintenance release | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `Tue, 30 Sep 2025 02:59:22 +0000` | - | | 3.6.0.beta1: Color palette editing, user fields on sign up, themeable site setting discovery, images with Google AI, and reliable drafts | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `Tue, 30 Sep 2025 02:59:19 +0000` | - | | Release v3.5.3: Security and maintenance release | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `Tue, 30 Dec 2025 15:07:18 +0000` | - | diff --git a/07-framework-security/cms/drupal/INDEX.md b/07-framework-security/cms/drupal/INDEX.md index e70e1a55..a5ea8579 100644 --- a/07-framework-security/cms/drupal/INDEX.md +++ b/07-framework-security/cms/drupal/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `70` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/cms/ghost/INDEX.md b/07-framework-security/cms/ghost/INDEX.md index 2aec6f9c..6ab9edb1 100644 --- a/07-framework-security/cms/ghost/INDEX.md +++ b/07-framework-security/cms/ghost/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `23` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/cms/joomla/INDEX.md b/07-framework-security/cms/joomla/INDEX.md index 954d182b..dff89e6b 100644 --- a/07-framework-security/cms/joomla/INDEX.md +++ b/07-framework-security/cms/joomla/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `100` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/cms/mediawiki/INDEX.md b/07-framework-security/cms/mediawiki/INDEX.md index 14a7aa12..10c592c7 100644 --- a/07-framework-security/cms/mediawiki/INDEX.md +++ b/07-framework-security/cms/mediawiki/INDEX.md @@ -5,14 +5,14 @@ - 系统 ID: `mediawiki` - 分类: `cms` - 覆盖策略: `rolling-24m` -- 总案例数: `71` +- 总案例数: `72` - 近 30 天新增/更新: `0` - 重点 Markdown 案例数: `0` - 已实证(真实版本): `0` - 已实证(synthetic): `0` - 阻塞数: `0` -- 待人工/缺浏览器证据: `71` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 待人工/缺浏览器证据: `72` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 @@ -40,6 +40,7 @@ | [MediaWiki-announce] Re: MediaWiki 1.44-beta has been branched | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `Wed, 07 May 2025 07:47:35 +0000` | - | | [MediaWiki-announce] Announcing MediaWiki 1.44.0 | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `Wed, 02 Jul 2025 21:30:40 +0000` | - | | [MediaWiki-announce] Security pre-release announcement: 1.39.14 / 1.43.4 / 1.44.1 | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `Wed, 01 Oct 2025 20:33:01 +0000` | - | +| [MediaWiki-announce] Security and maintenance release: 1.43.7 / 1.44.4 / 1.45.2 | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `Tue, 31 Mar 2026 23:06:16 +0000` | - | | [MediaWiki-announce] Maintenance release: MediaWiki 1.39.17 | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `Tue, 16 Dec 2025 18:21:00 +0000` | - | | [MediaWiki-announce] MediaWiki Extensions and Skins Security Release Supplement (1.39.11/1.41.5/1.42.4) | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `Tue, 14 Jan 2025 19:41:18 +0000` | - | | [MediaWiki-announce] MediaWiki 1.45-alpha will be branched as a beta on 28-10-2025 | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `Tue, 07 Oct 2025 15:18:36 +0000` | - | diff --git a/07-framework-security/cms/moodle/INDEX.md b/07-framework-security/cms/moodle/INDEX.md index e4890154..ec910da7 100644 --- a/07-framework-security/cms/moodle/INDEX.md +++ b/07-framework-security/cms/moodle/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `40` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/cms/strapi/INDEX.md b/07-framework-security/cms/strapi/INDEX.md index b95abe78..7a55710d 100644 --- a/07-framework-security/cms/strapi/INDEX.md +++ b/07-framework-security/cms/strapi/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `26` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/cms/wordpress/INDEX.md b/07-framework-security/cms/wordpress/INDEX.md index 7ac23b8f..ee8b4b84 100644 --- a/07-framework-security/cms/wordpress/INDEX.md +++ b/07-framework-security/cms/wordpress/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `140` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/ecommerce/adobe-commerce/INDEX.md b/07-framework-security/ecommerce/adobe-commerce/INDEX.md index 28ec61b3..04ae1cf1 100644 --- a/07-framework-security/ecommerce/adobe-commerce/INDEX.md +++ b/07-framework-security/ecommerce/adobe-commerce/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `81` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/ecommerce/magento-open-source/INDEX.md b/07-framework-security/ecommerce/magento-open-source/INDEX.md index 42fe13ec..2ecb2082 100644 --- a/07-framework-security/ecommerce/magento-open-source/INDEX.md +++ b/07-framework-security/ecommerce/magento-open-source/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `89` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/ecommerce/medusa/INDEX.md b/07-framework-security/ecommerce/medusa/INDEX.md index 9358c244..b7824eb8 100644 --- a/07-framework-security/ecommerce/medusa/INDEX.md +++ b/07-framework-security/ecommerce/medusa/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `15` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/ecommerce/opencart/INDEX.md b/07-framework-security/ecommerce/opencart/INDEX.md index 33b9fb7b..33f80c94 100644 --- a/07-framework-security/ecommerce/opencart/INDEX.md +++ b/07-framework-security/ecommerce/opencart/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `100` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/ecommerce/openmage/INDEX.md b/07-framework-security/ecommerce/openmage/INDEX.md index 20930f6c..add97e62 100644 --- a/07-framework-security/ecommerce/openmage/INDEX.md +++ b/07-framework-security/ecommerce/openmage/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `27` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/ecommerce/prestashop/INDEX.md b/07-framework-security/ecommerce/prestashop/INDEX.md index 8fa43be5..c39590fd 100644 --- a/07-framework-security/ecommerce/prestashop/INDEX.md +++ b/07-framework-security/ecommerce/prestashop/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `114` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/ecommerce/saleor/INDEX.md b/07-framework-security/ecommerce/saleor/INDEX.md index df6b2b9f..1b806ff7 100644 --- a/07-framework-security/ecommerce/saleor/INDEX.md +++ b/07-framework-security/ecommerce/saleor/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `24` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/ecommerce/shopware/INDEX.md b/07-framework-security/ecommerce/shopware/INDEX.md index 954e78d9..6f2ba3a4 100644 --- a/07-framework-security/ecommerce/shopware/INDEX.md +++ b/07-framework-security/ecommerce/shopware/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `71` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/ecommerce/woocommerce/INDEX.md b/07-framework-security/ecommerce/woocommerce/INDEX.md index 97f4ee86..7f9e9bd2 100644 --- a/07-framework-security/ecommerce/woocommerce/INDEX.md +++ b/07-framework-security/ecommerce/woocommerce/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `111` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/angular/INDEX.md b/07-framework-security/frameworks/angular/INDEX.md index e16a41bf..28ef29c9 100644 --- a/07-framework-security/frameworks/angular/INDEX.md +++ b/07-framework-security/frameworks/angular/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `2` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/aspnet-core/INDEX.md b/07-framework-security/frameworks/aspnet-core/INDEX.md index 6720fe72..7566051e 100644 --- a/07-framework-security/frameworks/aspnet-core/INDEX.md +++ b/07-framework-security/frameworks/aspnet-core/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `3` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/astro/INDEX.md b/07-framework-security/frameworks/astro/INDEX.md index e1d84f01..d60ea73d 100644 --- a/07-framework-security/frameworks/astro/INDEX.md +++ b/07-framework-security/frameworks/astro/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `15` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/django/INDEX.md b/07-framework-security/frameworks/django/INDEX.md index 30dd047c..774ffc27 100644 --- a/07-framework-security/frameworks/django/INDEX.md +++ b/07-framework-security/frameworks/django/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `82` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/echo/INDEX.md b/07-framework-security/frameworks/echo/INDEX.md index 1093e9cb..81a329ca 100644 --- a/07-framework-security/frameworks/echo/INDEX.md +++ b/07-framework-security/frameworks/echo/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `2` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/esbuild/INDEX.md b/07-framework-security/frameworks/esbuild/INDEX.md index ef606fb9..fca4e603 100644 --- a/07-framework-security/frameworks/esbuild/INDEX.md +++ b/07-framework-security/frameworks/esbuild/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `1` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/express/INDEX.md b/07-framework-security/frameworks/express/INDEX.md index 4167ac3a..3ae19ee6 100644 --- a/07-framework-security/frameworks/express/INDEX.md +++ b/07-framework-security/frameworks/express/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `1` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/fastify/INDEX.md b/07-framework-security/frameworks/fastify/INDEX.md index d942d9ad..e1a90007 100644 --- a/07-framework-security/frameworks/fastify/INDEX.md +++ b/07-framework-security/frameworks/fastify/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `2` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/flask/INDEX.md b/07-framework-security/frameworks/flask/INDEX.md index ec51e90d..6e353673 100644 --- a/07-framework-security/frameworks/flask/INDEX.md +++ b/07-framework-security/frameworks/flask/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `1` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/gin/INDEX.md b/07-framework-security/frameworks/gin/INDEX.md index 766b238d..8602bd81 100644 --- a/07-framework-security/frameworks/gin/INDEX.md +++ b/07-framework-security/frameworks/gin/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `1` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/hapi/INDEX.md b/07-framework-security/frameworks/hapi/INDEX.md index 77b6ca46..1a95b595 100644 --- a/07-framework-security/frameworks/hapi/INDEX.md +++ b/07-framework-security/frameworks/hapi/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `1` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/koa/INDEX.md b/07-framework-security/frameworks/koa/INDEX.md index 4b8defc4..4c7e8a77 100644 --- a/07-framework-security/frameworks/koa/INDEX.md +++ b/07-framework-security/frameworks/koa/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `1` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/laravel/INDEX.md b/07-framework-security/frameworks/laravel/INDEX.md index 6e428311..ae711620 100644 --- a/07-framework-security/frameworks/laravel/INDEX.md +++ b/07-framework-security/frameworks/laravel/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `2` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/nestjs/INDEX.md b/07-framework-security/frameworks/nestjs/INDEX.md index 108d816d..e33cf786 100644 --- a/07-framework-security/frameworks/nestjs/INDEX.md +++ b/07-framework-security/frameworks/nestjs/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `2` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/nextjs/INDEX.md b/07-framework-security/frameworks/nextjs/INDEX.md index 70bc4ea4..97f312f2 100644 --- a/07-framework-security/frameworks/nextjs/INDEX.md +++ b/07-framework-security/frameworks/nextjs/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `40` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/nodejs/INDEX.md b/07-framework-security/frameworks/nodejs/INDEX.md index cd53f9cc..bf0c68c1 100644 --- a/07-framework-security/frameworks/nodejs/INDEX.md +++ b/07-framework-security/frameworks/nodejs/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `8` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/nuxt/INDEX.md b/07-framework-security/frameworks/nuxt/INDEX.md index 9d39b765..fe9c132b 100644 --- a/07-framework-security/frameworks/nuxt/INDEX.md +++ b/07-framework-security/frameworks/nuxt/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `28` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/rails/INDEX.md b/07-framework-security/frameworks/rails/INDEX.md index ce282bbd..5d6f8d7a 100644 --- a/07-framework-security/frameworks/rails/INDEX.md +++ b/07-framework-security/frameworks/rails/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `42` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/react/INDEX.md b/07-framework-security/frameworks/react/INDEX.md index 3c909e18..e2c687a1 100644 --- a/07-framework-security/frameworks/react/INDEX.md +++ b/07-framework-security/frameworks/react/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `21` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/spring-boot/INDEX.md b/07-framework-security/frameworks/spring-boot/INDEX.md index a87fa583..140625e5 100644 --- a/07-framework-security/frameworks/spring-boot/INDEX.md +++ b/07-framework-security/frameworks/spring-boot/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `2` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/spring-framework/INDEX.md b/07-framework-security/frameworks/spring-framework/INDEX.md index c8b4cb08..2e981936 100644 --- a/07-framework-security/frameworks/spring-framework/INDEX.md +++ b/07-framework-security/frameworks/spring-framework/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `11` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/spring-security/INDEX.md b/07-framework-security/frameworks/spring-security/INDEX.md index c9781587..b8d11617 100644 --- a/07-framework-security/frameworks/spring-security/INDEX.md +++ b/07-framework-security/frameworks/spring-security/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `4` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/sveltekit/INDEX.md b/07-framework-security/frameworks/sveltekit/INDEX.md index 68c9bd9f..84f0afa0 100644 --- a/07-framework-security/frameworks/sveltekit/INDEX.md +++ b/07-framework-security/frameworks/sveltekit/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `3` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/symfony/INDEX.md b/07-framework-security/frameworks/symfony/INDEX.md index 0fd8f5c2..848fc542 100644 --- a/07-framework-security/frameworks/symfony/INDEX.md +++ b/07-framework-security/frameworks/symfony/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `9` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/undici/INDEX.md b/07-framework-security/frameworks/undici/INDEX.md index b797129d..407f2e02 100644 --- a/07-framework-security/frameworks/undici/INDEX.md +++ b/07-framework-security/frameworks/undici/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `9` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/vite/INDEX.md b/07-framework-security/frameworks/vite/INDEX.md index 539b1262..55f6c70f 100644 --- a/07-framework-security/frameworks/vite/INDEX.md +++ b/07-framework-security/frameworks/vite/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `30` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/vue/INDEX.md b/07-framework-security/frameworks/vue/INDEX.md index f2a1a2e7..2e48d014 100644 --- a/07-framework-security/frameworks/vue/INDEX.md +++ b/07-framework-security/frameworks/vue/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `15` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/webpack/INDEX.md b/07-framework-security/frameworks/webpack/INDEX.md index a2ad7462..b3245f54 100644 --- a/07-framework-security/frameworks/webpack/INDEX.md +++ b/07-framework-security/frameworks/webpack/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `1` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/werkzeug/INDEX.md b/07-framework-security/frameworks/werkzeug/INDEX.md index acb552bf..01311ac1 100644 --- a/07-framework-security/frameworks/werkzeug/INDEX.md +++ b/07-framework-security/frameworks/werkzeug/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `1` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/platforms/adminer/INDEX.md b/07-framework-security/platforms/adminer/INDEX.md index a1d2b5d8..65e5aea8 100644 --- a/07-framework-security/platforms/adminer/INDEX.md +++ b/07-framework-security/platforms/adminer/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `2` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/platforms/gitea/INDEX.md b/07-framework-security/platforms/gitea/INDEX.md index 35b86458..c907dee0 100644 --- a/07-framework-security/platforms/gitea/INDEX.md +++ b/07-framework-security/platforms/gitea/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `13` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/platforms/gitlab-ce/INDEX.md b/07-framework-security/platforms/gitlab-ce/INDEX.md index e7169cba..91d104cb 100644 --- a/07-framework-security/platforms/gitlab-ce/INDEX.md +++ b/07-framework-security/platforms/gitlab-ce/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `56` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/platforms/grafana/INDEX.md b/07-framework-security/platforms/grafana/INDEX.md index 36ba0302..b139cc7b 100644 --- a/07-framework-security/platforms/grafana/INDEX.md +++ b/07-framework-security/platforms/grafana/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `60` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/platforms/jenkins/INDEX.md b/07-framework-security/platforms/jenkins/INDEX.md index 02577182..f320e9a6 100644 --- a/07-framework-security/platforms/jenkins/INDEX.md +++ b/07-framework-security/platforms/jenkins/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `60` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/platforms/kibana/INDEX.md b/07-framework-security/platforms/kibana/INDEX.md index 62b157f9..6c98b803 100644 --- a/07-framework-security/platforms/kibana/INDEX.md +++ b/07-framework-security/platforms/kibana/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `47` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/platforms/mattermost/INDEX.md b/07-framework-security/platforms/mattermost/INDEX.md index 54c432b4..6ae7c0e4 100644 --- a/07-framework-security/platforms/mattermost/INDEX.md +++ b/07-framework-security/platforms/mattermost/INDEX.md @@ -5,14 +5,14 @@ - 系统 ID: `mattermost` - 分类: `platforms` - 覆盖策略: `rolling-24m` -- 总案例数: `35` -- 近 30 天新增/更新: `23` -- 重点 Markdown 案例数: `35` +- 总案例数: `36` +- 近 30 天新增/更新: `24` +- 重点 Markdown 案例数: `36` - 已实证(真实版本): `0` - 已实证(synthetic): `0` - 阻塞数: `0` -- 待人工/缺浏览器证据: `35` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 待人工/缺浏览器证据: `36` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 @@ -34,6 +34,7 @@ | 标题 | 严重度 | 案例状态 | 实证状态 | 实证方式 | 来源置信度 | 更新时间 | 案例页 | |------|--------|----------|----------|----------|------------|----------|--------| | Issue Identifier | `severity` | `generated` | `triage-manual` | `synthetic` | `official` | `Fix Release Date` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-issue-identifier.md) | +| Mattermost doesn't set permissions on downloaded bulk export | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-31T23:19:38.844657Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-3113.md) | | Mattermost allows attackers to take over arbitrary user accounts via overly permissive substring matching flaw | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-31T05:32:49.079377Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-27656.md) | | Mattermost doesn't rate limit login requests, allowing DoS | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-31T05:31:41.869147Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-26233.md) | | Mattermost fails to validate user's authentication method when processing account auth type switch | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-23T18:56:23.696710Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-22545.md) | diff --git a/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-3113.md b/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-3113.md new file mode 100644 index 00000000..976de0e3 --- /dev/null +++ b/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-3113.md @@ -0,0 +1,170 @@ +--- +title: "Mattermost doesn't set permissions on downloaded bulk export" +system_id: "mattermost" +category: "platforms" +advisory_mode: "core" +published_date: "2026-03-26T18:31:42Z" +updated_date: "2026-03-31T23:19:38.844657Z" +severity: "low" +exploit_status: "unknown" +source_confidence: "ecosystem-authority" +verification_status: "triage-manual" +verification_mode: "synthetic" +artifact_mode: "synthetic" +last_run_id: "" +target_types: + - "lab-local" + - "lab-public" + - "authorized-third-party" +allow_public_validation: "yes, with ownership or explicit authorization" +authorization_prerequisite: "asset ownership proof or explicit written authorization" +minimal_validation: "read-only probe, controlled payload, reversible test" +aliases: + - "CVE-2026-3113" + - "GHSA-4765-v66x-rqx7" +affected_versions: + - "introduced=11.4.0-rc1, fixed<11.4.1" + - "introduced=11.3.0-rc1, fixed<11.3.2" + - "introduced=11.2.0-rc1, fixed<11.2.4" + - "introduced=10.11.0-rc1, fixed<10.11.12" + - "introduced=8.0.0-20260105080200-d27a2195068d, fixed<8.0.0-20260217110922-b7d4a1f1f59b" +fixed_versions: + - "11.4.1" + - "11.3.2" + - "11.2.4" + - "10.11.12" + - "8.0.0-20260217110922-b7d4a1f1f59b" +entity_refs: + - "mattermost:system:root-system" + - "mattermost--repo--github-com-mattermost-mattermost-server:repo:affected-component" +secure_code_topics: + - "authz-server-side-recheck" + - "xss-output-encoding" + - "token-cookie-storage" + - "dependency-upgrade-policy" +primary_source: "https://nvd.nist.gov/vuln/detail/CVE-2026-3113" +--- + +# Mattermost doesn't set permissions on downloaded bulk export + +## 本地实证状态 + +- 实证状态: `triage-manual` +- 实证方式: `synthetic` +- Artifact 模式: `synthetic` +- 最近运行: `-` +- 浏览器证据: `missing` +- Run Bundle: `-` + +## 事件层 + +- Canonical ID: `mattermost--CVE-2026-3113` +- 系统: `mattermost` +- 严重度: `low` +- 来源置信度: `ecosystem-authority` +- 官方主源: https://nvd.nist.gov/vuln/detail/CVE-2026-3113 +- 影响版本: `introduced=11.4.0-rc1, fixed<11.4.1, introduced=11.3.0-rc1, fixed<11.3.2, introduced=11.2.0-rc1, fixed<11.2.4, introduced=10.11.0-rc1, fixed<10.11.12, introduced=8.0.0-20260105080200-d27a2195068d, fixed<8.0.0-20260217110922-b7d4a1f1f59b` +- 修复版本: `11.4.1, 11.3.2, 11.2.4, 10.11.12, 8.0.0-20260217110922-b7d4a1f1f59b` + +## 对象与版本映射 + +- Advisory Scope: `repo` +- 影响对象: `mattermost / mattermost-server` +- Entity Refs: `mattermost, mattermost--repo--github-com-mattermost-mattermost-server` +- 版本置信度: `high` +- 版本缺口: `-` +- 版本证据源: `https://nvd.nist.gov/vuln/detail/CVE-2026-3113, https://github.com/mattermost/mattermost, https://mattermost.com/security-updates` + +## 受控验证流程 + +- Workflow ID: `mattermost--CVE-2026-3113--workflow` +- 漏洞家族: `unknown` +- 入口面: `repo-surface` +- 需要角色: `unknown` +- 触发向量: 对 `unknown` 家族入口投递最小化、可审计、可回滚的受控输入,比较修复前后差异。 +- 请求/页面入口: `/repo` +- 输入形态: 提交最小化、可审计、可回滚的受控输入。 +- 预期不安全行为: 目标表现出超出设计边界的行为。 + +## 其他来源 + +- https://github.com/mattermost/mattermost +- https://mattermost.com/security-updates + +## 证据点与补丁验证 + +### 服务端证据点 + +- 应用日志中的命中路径、鉴权决策和异常栈 +- 反向代理或边界层日志中的请求头、来源 IP 与路由决策 + +### 浏览器证据点 + +- 基线截图与攻击后截图的 DOM/视觉差异 +- console、network 与 response metadata 中的异常信号 + +### 数据库/文件系统证据点 + +- 数据库中新增/越权读取的测试数据 +- 文件系统中新增上传样本、缓存条目或越权读取痕迹 + +### 检测信号 + +- WAF / reverse proxy 异常日志、访问日志和告警 +- 应用审计日志中的权限错误、重定向异常、模板渲染或上传落盘事件 + +### 补丁验证步骤 + +- 确认目标版本从 `introduced=11.4.0-rc1, fixed<11.4.1, introduced=11.3.0-rc1, fixed<11.3.2, introduced=11.2.0-rc1, fixed<11.2.4` 升级或回移到 `11.4.1`。 +- 保留同一组受控输入,在修复前后分别执行并比对响应、日志与浏览器证据。 +- 确认修复后仅保留预期业务行为,不再触发越权、回显、异常渲染或错误请求。 +- 补充 `unknown` 族自动化回归,避免同类路径在插件、主题或代理链中回归。 + +### 实验安全备注 + +- 只使用回环地址、哨兵目标、无害样本或可回滚测试数据。 +- 禁止造成持久破坏、越权下载真实数据或不可回滚 side effect。 +- 如需浏览器证据,保留 baseline / proof 两份快照以及 console / network 记录。 + +## 实验层 + +- 仅用于自有资产、测试环境或已明确授权目标。 +- 允许公网可达目标,但必须满足资产归属或明确授权前提。 +- 最小化验证方式: 最小化验证、只读探测、可审计回显、受控注入。 +- 若该案例涉及插件、模块或扩展,应同时检查供应链与升级策略。 +- 禁止场景: 无归属证明或无明确授权的公网目标;知名公共网站或与测试无关的第三方资产;会造成持久破坏、数据越权下载或不可回滚影响的动作 + +## 修复示例 + +- [javascript-typescript:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/javascript-typescript/authz-server-side-recheck.md) +- [nodejs:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/nodejs/authz-server-side-recheck.md) +- [java:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/java/authz-server-side-recheck.md) +- [php:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/php/authz-server-side-recheck.md) +- [python:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/python/authz-server-side-recheck.md) +- [ruby:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/ruby/authz-server-side-recheck.md) +- [csharp:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/csharp/authz-server-side-recheck.md) +- [go:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/go/authz-server-side-recheck.md) +- [javascript-typescript:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/javascript-typescript/xss-output-encoding.md) +- [nodejs:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/nodejs/xss-output-encoding.md) +- [java:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/java/xss-output-encoding.md) +- [php:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/php/xss-output-encoding.md) +- [python:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/python/xss-output-encoding.md) +- [ruby:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/ruby/xss-output-encoding.md) +- [csharp:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/csharp/xss-output-encoding.md) +- [go:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/go/xss-output-encoding.md) +- [javascript-typescript:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/javascript-typescript/token-cookie-storage.md) +- [nodejs:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/nodejs/token-cookie-storage.md) +- [java:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/java/token-cookie-storage.md) +- [php:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/php/token-cookie-storage.md) +- [python:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/python/token-cookie-storage.md) +- [ruby:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/ruby/token-cookie-storage.md) +- [csharp:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/csharp/token-cookie-storage.md) +- [go:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/go/token-cookie-storage.md) +- [javascript-typescript:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/javascript-typescript/dependency-upgrade-policy.md) +- [nodejs:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/nodejs/dependency-upgrade-policy.md) +- [java:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/java/dependency-upgrade-policy.md) +- [php:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/php/dependency-upgrade-policy.md) +- [python:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/python/dependency-upgrade-policy.md) +- [ruby:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/ruby/dependency-upgrade-policy.md) +- [csharp:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/csharp/dependency-upgrade-policy.md) +- [go:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/go/dependency-upgrade-policy.md) diff --git a/07-framework-security/platforms/phpmyadmin/INDEX.md b/07-framework-security/platforms/phpmyadmin/INDEX.md index 1acc650a..653cb845 100644 --- a/07-framework-security/platforms/phpmyadmin/INDEX.md +++ b/07-framework-security/platforms/phpmyadmin/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `50` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/platforms/redmine/INDEX.md b/07-framework-security/platforms/redmine/INDEX.md index dcf898cc..98c93ab5 100644 --- a/07-framework-security/platforms/redmine/INDEX.md +++ b/07-framework-security/platforms/redmine/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `50` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/servers/apache-httpd/INDEX.md b/07-framework-security/servers/apache-httpd/INDEX.md index 1eb5ba4c..9d66bb88 100644 --- a/07-framework-security/servers/apache-httpd/INDEX.md +++ b/07-framework-security/servers/apache-httpd/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `135` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/servers/apache-tomcat/INDEX.md b/07-framework-security/servers/apache-tomcat/INDEX.md index d24e9c89..174a4cc5 100644 --- a/07-framework-security/servers/apache-tomcat/INDEX.md +++ b/07-framework-security/servers/apache-tomcat/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `136` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/servers/caddy/INDEX.md b/07-framework-security/servers/caddy/INDEX.md index 8a2616b0..46c196cf 100644 --- a/07-framework-security/servers/caddy/INDEX.md +++ b/07-framework-security/servers/caddy/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `29` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/servers/haproxy/INDEX.md b/07-framework-security/servers/haproxy/INDEX.md index 70d5cd17..d41f7c23 100644 --- a/07-framework-security/servers/haproxy/INDEX.md +++ b/07-framework-security/servers/haproxy/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `7` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/servers/nginx/INDEX.md b/07-framework-security/servers/nginx/INDEX.md index 9847f26a..f7f6825d 100644 --- a/07-framework-security/servers/nginx/INDEX.md +++ b/07-framework-security/servers/nginx/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `110` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/07-framework-security/servers/traefik/INDEX.md b/07-framework-security/servers/traefik/INDEX.md index f9720db6..29402222 100644 --- a/07-framework-security/servers/traefik/INDEX.md +++ b/07-framework-security/servers/traefik/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `48` -- 最近渲染时间: `2026-03-31T09:18:20+00:00` +- 最近渲染时间: `2026-04-01T09:21:04+00:00` ## 目标约束 diff --git a/08-threat-intel/.DS_Store b/08-threat-intel/.DS_Store new file mode 100644 index 00000000..17bec4c4 Binary files /dev/null and b/08-threat-intel/.DS_Store differ diff --git a/08-threat-intel/generated/coverage-matrix.md b/08-threat-intel/generated/coverage-matrix.md index 03c7c167..7ce0d044 100644 --- a/08-threat-intel/generated/coverage-matrix.md +++ b/08-threat-intel/generated/coverage-matrix.md @@ -11,7 +11,7 @@ | Astro | `frameworks` | `rolling-24m` | `-` | `yes` | `15` | `15` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-03-26T19:01:26.420643Z` | | Caddy | `servers` | `rolling-24m` | `-` | `yes` | `29` | `0` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-03-23T04:52:47.870034Z` | | Directus | `cms` | `rolling-24m` | `-` | `yes` | `29` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` | -| Discourse | `cms` | `rolling-24m` | `-` | `yes` | `30` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `30` | `Wed, 28 May 2025 05:22:52 +0000` | +| Discourse | `cms` | `rolling-24m` | `-` | `yes` | `31` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `31` | `Wed, 28 May 2025 05:22:52 +0000` | | Django | `frameworks` | `rolling-24m` | `-` | `yes` | `82` | `5` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-03-13T21:56:20.301637Z` | | Drupal | `cms` | `history-full` | `yes` | `yes` | `70` | `0` | `4` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `Wed, 20 Sep 2023 16:23:05 +0000` | | Echo | `frameworks` | `rolling-24m` | `-` | `yes` | `2` | `2` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2024-05-20T16:03:47Z` | @@ -32,8 +32,8 @@ | Koa | `frameworks` | `rolling-24m` | `-` | `yes` | `1` | `1` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-02-26T23:36:36.294040Z` | | Laravel | `frameworks` | `rolling-24m` | `-` | `yes` | `2` | `2` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-03-13T22:15:34.333730Z` | | Magento Open Source | `ecommerce` | `history-full` | `yes` | `yes` | `89` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2025-04-20T01:37:25.860` | -| Mattermost | `platforms` | `rolling-24m` | `-` | `yes` | `35` | `35` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `Fix Release Date` | -| MediaWiki | `cms` | `rolling-24m` | `-` | `yes` | `71` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `71` | `Wed, 22 Oct 2025 21:44:43 +0000` | +| Mattermost | `platforms` | `rolling-24m` | `-` | `yes` | `36` | `36` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `Fix Release Date` | +| MediaWiki | `cms` | `rolling-24m` | `-` | `yes` | `72` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `72` | `Wed, 22 Oct 2025 21:44:43 +0000` | | Medusa | `ecommerce` | `rolling-24m` | `-` | `yes` | `15` | `0` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `15` | `` | | Moodle | `cms` | `rolling-24m` | `-` | `yes` | `40` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `40` | `2025-04-09T00:30:58.490` | | NestJS | `frameworks` | `rolling-24m` | `-` | `yes` | `2` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `2` | `2026-03-02T20:30:10.923` | diff --git a/08-threat-intel/generated/dashboard/advisories.json b/08-threat-intel/generated/dashboard/advisories.json index 71275394..28a729c2 100644 --- a/08-threat-intel/generated/dashboard/advisories.json +++ b/08-threat-intel/generated/dashboard/advisories.json @@ -4110,6 +4110,219 @@ "review_state": "needs-version-gap-review" } }, + "mediawiki--469c5db88b": { + "canonical_id": "mediawiki--469c5db88b", + "title": "[MediaWiki-announce] Security and maintenance release: 1.43.7 / 1.44.4 / 1.45.2", + "summary": "I would like to announce the release of MediaWiki 1.43.7, 1.44.4 and 1.45.2!\n\nThese releases serve as security and maintenance releases for these\nbranches.\n\nThey ended up a little later than expected in the day, due a last minute\naddition of the fix to Echo in T420154.\n\nThe tarballs have already been uploaded as of this email, and the git tags\nwill be pushed shortly.\n\nA \"MediaWiki Extensions Security Release Supplement\" e-mail will follow\nthis one, covering security updates for non-bundled extensions.\n\nReports of bugs with PHP 8.0 to 8.5 support are particularly welcome, and\nfixes will be back-ported when possible. If you find issues that haven't\nbeen backported, please report these too, referring to the relevant\nsupported release.\n\nPHP 8.x workboards:\n* https://phabricator.wikimedia.org/tag/php_8.0_support/\n* https://phabricator.wikimedia.org/tag/php_8.1_support/\n* https://phabricator.wikimedia.org/tag/php_8.2_support/\n* https://phabricator.wikimedia.org/tag/php_8.3_support/\n* https://phabricator.wikimedia.org/tag/php_8.4_support/\n* https://phabricator.wikimedia.org/tag/php_8.5_support/\n\nAs a reminder, MediaWiki 1.39 became EOL in December 2025 and MediaWiki\n1.42 became EOL in June 2025.\n\n== Security fixes ==\n\n* (T384147, CVE-2026-34092) SECURITY: Block UI elements in 'tools'-sidebar\nshows presence of an autoblocked IP.\n* (T410429, CVE-2026-34088) SECURITY: RecentChanges entries expose\nsuppressed content via generated log page html.\n* (T411305, CVE-2026-34091) SECURITY: User localization leaked by\nAbuseFilter + EventStream.\n* (T411366, CVE-2026-34090) SECURITY: Suggested investigations: Handle\nsuppressed usernames.\n* (T412061, CVE-2026-34087) SECURITY: Users API leaks whether privileged\nusers have their user groups disabled for lack of 2FA.\n* (T414547, CVE-2026-34093) SECURITY: Special:UserRights allows viewing\nuser rights from private wiki.\n* (T415584, CVE-2026-34086) SECURITY: AbuseFilter misuses\n::userCanBitfield, exposing access-controlled information.\n* (T416090, CVE-2026-34094) SECURITY: Customized help link for page\nprotection indicator is relative to subpage name, because the link target\nis missing the \"/wiki/\" prefix.\n* (T419168, CVE-2026-34089) SECURITY: Memory leak in Scribunto causes\nrunJobs.php to run out of memory.\n* (T419192, CVE-2026-34095) SECURITY: action=raw with Special:Mypage\nsubpage title responds with \"Content-Type) SECURITY: text/html\" on\nctype=text/javascript request.\n* (T420154, CVE-2026-5266) SECURITY: Notifications (Echo) API can be used\nby any OAuth tool.\n\n== Links to all mentioned tasks ==\n\n* https://phabricator.wikimedia.org/T384147\n* https://phabricator.wikimedia.org/T410429\n* https://phabricator.wikimedia.org/T411305\n* https://phabricator.wikimedia.org/T411366\n* https://phabricator.wikimedia.org/T412061\n* https://phabricator.wikimedia.org/T414547\n* https://phabricator.wikimedia.org/T415584\n* https://phabricator.wikimedia.org/T416090\n* https://phabricator.wikimedia.org/T419168\n* https://phabricator.wikimedia.org/T419192\n* https://phabricator.wikimedia.org/T420154\n\n== Release notes ==\n\nFull release notes for 1.43.7:\nhttps://phabricator.wikimedia.org/diffusion/MW/browse/REL1_43/RELEASE-NOTES-1.43\nhttps://www.mediawiki.org/wiki/Release_notes/1.43\n\nFull release notes for 1.44.4:\nhttps://phabricator.wikimedia.org/diffusion/MW/browse/REL1_44/RELEASE-NOTES-1.44\nhttps://www.mediawiki.org/wiki/Release_notes/1.44\n\nFull release notes for 1.45.2:\nhttps://phabricator.wikimedia.org/diffusion/MW/browse/REL1_45/RELEASE-NOTES-1.45\nhttps://www.mediawiki.org/wiki/Release_notes/1.45\n\nFor information about how to upgrade, see\n\n\n**********************************************************************\nDownload:\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.7.tar.gz\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.7.zip\n\nDownload without bundled extensions:\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-core-1.43.7.tar.gz\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-core-1.43.7.zip\n\nPatch to previous version (1.43.6):\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.7.patch.gz\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.7.patch.zip\n\nGPG signatures:\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-core-1.43.7.tar.gz.sig\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-core-1.43.7.zip.sig\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.7.tar.gz.sig\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.7.zip.sig\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.7.patch.gz.sig\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.7.patch.zip.sig\n\nPublic keys:\nhttps://www.mediawiki.org/keys/keys.html\n\n**********************************************************************\nDownload:\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.4.tar.gz\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.4.zip\n\nDownload without bundled extensions:\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-core-1.44.4.tar.gz\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-core-1.44.4.zip\n\nPatch to previous version (1.44.3):\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.4.patch.gz\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.4.patch.zip\n\nGPG signatures:\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-core-1.44.4.tar.gz.sig\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-core-1.44.4.zip.sig\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.4.tar.gz.sig\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.4.zip.sig\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.4.patch.gz.sig\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.4.patch.zip.sig\n\nPublic keys:\nhttps://www.mediawiki.org/keys/keys.html\n\n**********************************************************************\nDownload:\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.2.tar.gz\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.2.zip\n\nDownload without bundled extensions:\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-core-1.45.2.tar.gz\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-core-1.45.2.zip\n\nPatch to previous version (1.45.1):\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.2.patch.gz\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.2.patch.zip\n\nGPG signatures:\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-core-1.45.2.tar.gz.sig\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-core-1.45.2.zip.sig\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.2.tar.gz.sig\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.2.zip.sig\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.2.patch.gz.sig\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.2.patch.zip.sig\n\nPublic keys:\nhttps://www.mediawiki.org/keys/keys.html", + "display_name": "MediaWiki", + "system_id": "mediawiki", + "category": "cms", + "severity": "unknown", + "cvss_score": null, + "exploit_status": "unknown", + "published_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "updated_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "official_source_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "secondary_source_urls": [], + "aliases": [], + "secure_code_topics": [ + "xss-output-encoding", + "authz-server-side-recheck", + "file-upload-validation", + "plugin-extension-trust-policy" + ], + "verification_status": "triage-manual", + "verification_mode": "synthetic", + "artifact_mode": "synthetic", + "blocked_reason": null, + "browser_evidence": { + "required": false, + "present": false, + "refs": [] + }, + "entity_refs": [ + { + "entity_id": "mediawiki", + "entity_type": "system", + "relation": "root-system", + "root_system_id": "mediawiki", + "official": true + } + ], + "affected_components": [ + { + "name": "MediaWiki", + "entity_id": "mediawiki", + "scope": "core", + "package_name": null, + "official": true + } + ], + "affected_version_ranges": [], + "fixed_version_ranges": [], + "introduced_version": null, + "patched_version": null, + "version_confidence": "low", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions", + "version_resolution_needed": true, + "advisory_scope": "core", + "workflow": { + "workflow_id": "mediawiki--469c5db88b--workflow", + "vuln_family": "plugin-extension", + "entry_surface": "extension-management-surface", + "preconditions": [ + "\u4ec5\u5728 lab-local\u3001lab-public \u6216\u660e\u786e\u6388\u6743\u76ee\u6807\u4e2d\u6267\u884c\u3002", + "\u786e\u8ba4\u76ee\u6807\u547d\u4e2d\u7248\u672c\u65ad\u8a00: \u9700\u8981\u4ece\u516c\u544a\u3001\u9501\u6587\u4ef6\u3001\u7248\u672c\u9875\u6216\u5173\u4e8e\u9875\u9762\u4eba\u5de5\u786e\u8ba4\u7248\u672c\u547d\u4e2d", + "\u82e5\u5bf9\u8c61\u5c5e\u4e8e `core`\uff0c\u5148\u786e\u8ba4\u6269\u5c55/\u4ed3\u5e93/\u5305\u5df2\u542f\u7528\u5e76\u5904\u4e8e\u53d7\u5f71\u54cd\u7248\u672c\u3002" + ], + "required_role": "plugin-manager-or-admin", + "affected_version_assertion": [ + "\u9700\u8981\u4ece\u516c\u544a\u3001\u9501\u6587\u4ef6\u3001\u7248\u672c\u9875\u6216\u5173\u4e8e\u9875\u9762\u4eba\u5de5\u786e\u8ba4\u7248\u672c\u547d\u4e2d" + ], + "trigger_vector": "\u5bf9 `plugin-extension` \u5bb6\u65cf\u5165\u53e3\u6295\u9012\u6700\u5c0f\u5316\u3001\u53ef\u5ba1\u8ba1\u3001\u53ef\u56de\u6eda\u7684\u53d7\u63a7\u8f93\u5165\uff0c\u6bd4\u8f83\u4fee\u590d\u524d\u540e\u5dee\u5f02\u3002", + "request_or_ui_path": [ + "/plugins", + "/extensions", + "/themes" + ], + "input_shape": "\u5728\u6269\u5c55\u7ba1\u7406\u6216\u6269\u5c55\u529f\u80fd\u5165\u53e3\u4e2d\u63d0\u4ea4\u53d7\u63a7\u914d\u7f6e/\u5185\u5bb9\u3002", + "expected_unsafe_behavior": "\u6269\u5c55\u5b89\u88c5\u3001\u914d\u7f6e\u6216\u8fd0\u884c\u7a81\u7834\u4e86\u4fe1\u4efb\u8fb9\u754c\u3002", + "server_evidence_points": [ + "\u5e94\u7528\u65e5\u5fd7\u4e2d\u7684\u547d\u4e2d\u8def\u5f84\u3001\u9274\u6743\u51b3\u7b56\u548c\u5f02\u5e38\u6808", + "\u53cd\u5411\u4ee3\u7406\u6216\u8fb9\u754c\u5c42\u65e5\u5fd7\u4e2d\u7684\u8bf7\u6c42\u5934\u3001\u6765\u6e90 IP \u4e0e\u8def\u7531\u51b3\u7b56" + ], + "browser_evidence_points": [ + "\u57fa\u7ebf\u622a\u56fe\u4e0e\u653b\u51fb\u540e\u622a\u56fe\u7684 DOM/\u89c6\u89c9\u5dee\u5f02", + "console\u3001network \u4e0e response metadata \u4e2d\u7684\u5f02\u5e38\u4fe1\u53f7" + ], + "db_or_fs_evidence_points": [ + "\u6570\u636e\u5e93\u4e2d\u65b0\u589e/\u8d8a\u6743\u8bfb\u53d6\u7684\u6d4b\u8bd5\u6570\u636e", + "\u6587\u4ef6\u7cfb\u7edf\u4e2d\u65b0\u589e\u4e0a\u4f20\u6837\u672c\u3001\u7f13\u5b58\u6761\u76ee\u6216\u8d8a\u6743\u8bfb\u53d6\u75d5\u8ff9" + ], + "detection_signals": [ + "WAF / reverse proxy \u5f02\u5e38\u65e5\u5fd7\u3001\u8bbf\u95ee\u65e5\u5fd7\u548c\u544a\u8b66", + "\u5e94\u7528\u5ba1\u8ba1\u65e5\u5fd7\u4e2d\u7684\u6743\u9650\u9519\u8bef\u3001\u91cd\u5b9a\u5411\u5f02\u5e38\u3001\u6a21\u677f\u6e32\u67d3\u6216\u4e0a\u4f20\u843d\u76d8\u4e8b\u4ef6" + ], + "mitigation_summary": "\u4f18\u5148\u5347\u7ea7\u5230\u4fee\u590d\u7248\u672c\uff0c\u5e76\u540c\u65f6\u6536\u7d27\u8f93\u5165\u6821\u9a8c\u3001\u670d\u52a1\u7aef\u9274\u6743\u3001\u4ee3\u7406\u4fe1\u4efb\u8fb9\u754c\u3001\u6269\u5c55\u5b89\u88c5\u4fe1\u4efb\u548c\u5ba1\u8ba1\u65e5\u5fd7\u3002", + "patch_validation_steps": [ + "\u786e\u8ba4\u76ee\u6807\u7248\u672c\u4ece `\u53d7\u5f71\u54cd\u7248\u672c\u533a\u95f4` \u5347\u7ea7\u6216\u56de\u79fb\u5230 `\u4fee\u590d\u7248\u672c`\u3002", + "\u4fdd\u7559\u540c\u4e00\u7ec4\u53d7\u63a7\u8f93\u5165\uff0c\u5728\u4fee\u590d\u524d\u540e\u5206\u522b\u6267\u884c\u5e76\u6bd4\u5bf9\u54cd\u5e94\u3001\u65e5\u5fd7\u4e0e\u6d4f\u89c8\u5668\u8bc1\u636e\u3002", + "\u786e\u8ba4\u4fee\u590d\u540e\u4ec5\u4fdd\u7559\u9884\u671f\u4e1a\u52a1\u884c\u4e3a\uff0c\u4e0d\u518d\u89e6\u53d1\u8d8a\u6743\u3001\u56de\u663e\u3001\u5f02\u5e38\u6e32\u67d3\u6216\u9519\u8bef\u8bf7\u6c42\u3002", + "\u8865\u5145 `plugin-extension` \u65cf\u81ea\u52a8\u5316\u56de\u5f52\uff0c\u907f\u514d\u540c\u7c7b\u8def\u5f84\u5728\u63d2\u4ef6\u3001\u4e3b\u9898\u6216\u4ee3\u7406\u94fe\u4e2d\u56de\u5f52\u3002" + ], + "lab_safety_notes": [ + "\u53ea\u4f7f\u7528\u56de\u73af\u5730\u5740\u3001\u54e8\u5175\u76ee\u6807\u3001\u65e0\u5bb3\u6837\u672c\u6216\u53ef\u56de\u6eda\u6d4b\u8bd5\u6570\u636e\u3002", + "\u7981\u6b62\u9020\u6210\u6301\u4e45\u7834\u574f\u3001\u8d8a\u6743\u4e0b\u8f7d\u771f\u5b9e\u6570\u636e\u6216\u4e0d\u53ef\u56de\u6eda side effect\u3002", + "\u5982\u9700\u6d4f\u89c8\u5668\u8bc1\u636e\uff0c\u4fdd\u7559 baseline / proof \u4e24\u4efd\u5feb\u7167\u4ee5\u53ca console / network \u8bb0\u5f55\u3002" + ], + "review_state": "needs-version-gap-review" + } + }, + "discourse--5dce90675e": { + "canonical_id": "discourse--5dce90675e", + "title": "March 2026 monthly release", + "summary": "

For more information on all the changes released in 2026.3, check out:

\n\n\n

Patch releases for other supported versions have also been released:

\n\n

2 posts - 2 participants

\n

Read full topic

", + "display_name": "Discourse", + "system_id": "discourse", + "category": "cms", + "severity": "unknown", + "cvss_score": null, + "exploit_status": "unknown", + "published_at": "Tue, 31 Mar 2026 14:35:49 +0000", + "updated_at": "Tue, 31 Mar 2026 14:35:49 +0000", + "official_source_url": "https://meta.discourse.org/t/march-2026-monthly-release/399630", + "secondary_source_urls": [], + "aliases": [], + "secure_code_topics": [ + "authz-server-side-recheck", + "xss-output-encoding", + "plugin-extension-trust-policy" + ], + "verification_status": "triage-manual", + "verification_mode": "synthetic", + "artifact_mode": "synthetic", + "blocked_reason": null, + "browser_evidence": { + "required": false, + "present": false, + "refs": [] + }, + "entity_refs": [ + { + "entity_id": "discourse", + "entity_type": "system", + "relation": "root-system", + "root_system_id": "discourse", + "official": true + } + ], + "affected_components": [ + { + "name": "Discourse", + "entity_id": "discourse", + "scope": "core", + "package_name": null, + "official": true + } + ], + "affected_version_ranges": [], + "fixed_version_ranges": [], + "introduced_version": null, + "patched_version": null, + "version_confidence": "low", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions", + "version_resolution_needed": true, + "advisory_scope": "core", + "workflow": { + "workflow_id": "discourse--5dce90675e--workflow", + "vuln_family": "unknown", + "entry_surface": "core-surface", + "preconditions": [ + "\u4ec5\u5728 lab-local\u3001lab-public \u6216\u660e\u786e\u6388\u6743\u76ee\u6807\u4e2d\u6267\u884c\u3002", + "\u786e\u8ba4\u76ee\u6807\u547d\u4e2d\u7248\u672c\u65ad\u8a00: \u9700\u8981\u4ece\u516c\u544a\u3001\u9501\u6587\u4ef6\u3001\u7248\u672c\u9875\u6216\u5173\u4e8e\u9875\u9762\u4eba\u5de5\u786e\u8ba4\u7248\u672c\u547d\u4e2d", + "\u82e5\u5bf9\u8c61\u5c5e\u4e8e `core`\uff0c\u5148\u786e\u8ba4\u6269\u5c55/\u4ed3\u5e93/\u5305\u5df2\u542f\u7528\u5e76\u5904\u4e8e\u53d7\u5f71\u54cd\u7248\u672c\u3002" + ], + "required_role": "unknown", + "affected_version_assertion": [ + "\u9700\u8981\u4ece\u516c\u544a\u3001\u9501\u6587\u4ef6\u3001\u7248\u672c\u9875\u6216\u5173\u4e8e\u9875\u9762\u4eba\u5de5\u786e\u8ba4\u7248\u672c\u547d\u4e2d" + ], + "trigger_vector": "\u5bf9 `unknown` \u5bb6\u65cf\u5165\u53e3\u6295\u9012\u6700\u5c0f\u5316\u3001\u53ef\u5ba1\u8ba1\u3001\u53ef\u56de\u6eda\u7684\u53d7\u63a7\u8f93\u5165\uff0c\u6bd4\u8f83\u4fee\u590d\u524d\u540e\u5dee\u5f02\u3002", + "request_or_ui_path": [ + "/core" + ], + "input_shape": "\u63d0\u4ea4\u6700\u5c0f\u5316\u3001\u53ef\u5ba1\u8ba1\u3001\u53ef\u56de\u6eda\u7684\u53d7\u63a7\u8f93\u5165\u3002", + "expected_unsafe_behavior": "\u76ee\u6807\u8868\u73b0\u51fa\u8d85\u51fa\u8bbe\u8ba1\u8fb9\u754c\u7684\u884c\u4e3a\u3002", + "server_evidence_points": [ + "\u5e94\u7528\u65e5\u5fd7\u4e2d\u7684\u547d\u4e2d\u8def\u5f84\u3001\u9274\u6743\u51b3\u7b56\u548c\u5f02\u5e38\u6808", + "\u53cd\u5411\u4ee3\u7406\u6216\u8fb9\u754c\u5c42\u65e5\u5fd7\u4e2d\u7684\u8bf7\u6c42\u5934\u3001\u6765\u6e90 IP \u4e0e\u8def\u7531\u51b3\u7b56" + ], + "browser_evidence_points": [ + "\u57fa\u7ebf\u622a\u56fe\u4e0e\u653b\u51fb\u540e\u622a\u56fe\u7684 DOM/\u89c6\u89c9\u5dee\u5f02", + "console\u3001network \u4e0e response metadata \u4e2d\u7684\u5f02\u5e38\u4fe1\u53f7" + ], + "db_or_fs_evidence_points": [ + "\u6570\u636e\u5e93\u4e2d\u65b0\u589e/\u8d8a\u6743\u8bfb\u53d6\u7684\u6d4b\u8bd5\u6570\u636e", + "\u6587\u4ef6\u7cfb\u7edf\u4e2d\u65b0\u589e\u4e0a\u4f20\u6837\u672c\u3001\u7f13\u5b58\u6761\u76ee\u6216\u8d8a\u6743\u8bfb\u53d6\u75d5\u8ff9" + ], + "detection_signals": [ + "WAF / reverse proxy \u5f02\u5e38\u65e5\u5fd7\u3001\u8bbf\u95ee\u65e5\u5fd7\u548c\u544a\u8b66", + "\u5e94\u7528\u5ba1\u8ba1\u65e5\u5fd7\u4e2d\u7684\u6743\u9650\u9519\u8bef\u3001\u91cd\u5b9a\u5411\u5f02\u5e38\u3001\u6a21\u677f\u6e32\u67d3\u6216\u4e0a\u4f20\u843d\u76d8\u4e8b\u4ef6" + ], + "mitigation_summary": "\u4f18\u5148\u5347\u7ea7\u5230\u4fee\u590d\u7248\u672c\uff0c\u5e76\u540c\u65f6\u6536\u7d27\u8f93\u5165\u6821\u9a8c\u3001\u670d\u52a1\u7aef\u9274\u6743\u3001\u4ee3\u7406\u4fe1\u4efb\u8fb9\u754c\u3001\u6269\u5c55\u5b89\u88c5\u4fe1\u4efb\u548c\u5ba1\u8ba1\u65e5\u5fd7\u3002", + "patch_validation_steps": [ + "\u786e\u8ba4\u76ee\u6807\u7248\u672c\u4ece `\u53d7\u5f71\u54cd\u7248\u672c\u533a\u95f4` \u5347\u7ea7\u6216\u56de\u79fb\u5230 `\u4fee\u590d\u7248\u672c`\u3002", + "\u4fdd\u7559\u540c\u4e00\u7ec4\u53d7\u63a7\u8f93\u5165\uff0c\u5728\u4fee\u590d\u524d\u540e\u5206\u522b\u6267\u884c\u5e76\u6bd4\u5bf9\u54cd\u5e94\u3001\u65e5\u5fd7\u4e0e\u6d4f\u89c8\u5668\u8bc1\u636e\u3002", + "\u786e\u8ba4\u4fee\u590d\u540e\u4ec5\u4fdd\u7559\u9884\u671f\u4e1a\u52a1\u884c\u4e3a\uff0c\u4e0d\u518d\u89e6\u53d1\u8d8a\u6743\u3001\u56de\u663e\u3001\u5f02\u5e38\u6e32\u67d3\u6216\u9519\u8bef\u8bf7\u6c42\u3002", + "\u8865\u5145 `unknown` \u65cf\u81ea\u52a8\u5316\u56de\u5f52\uff0c\u907f\u514d\u540c\u7c7b\u8def\u5f84\u5728\u63d2\u4ef6\u3001\u4e3b\u9898\u6216\u4ee3\u7406\u94fe\u4e2d\u56de\u5f52\u3002" + ], + "lab_safety_notes": [ + "\u53ea\u4f7f\u7528\u56de\u73af\u5730\u5740\u3001\u54e8\u5175\u76ee\u6807\u3001\u65e0\u5bb3\u6837\u672c\u6216\u53ef\u56de\u6eda\u6d4b\u8bd5\u6570\u636e\u3002", + "\u7981\u6b62\u9020\u6210\u6301\u4e45\u7834\u574f\u3001\u8d8a\u6743\u4e0b\u8f7d\u771f\u5b9e\u6570\u636e\u6216\u4e0d\u53ef\u56de\u6eda side effect\u3002", + "\u5982\u9700\u6d4f\u89c8\u5668\u8bc1\u636e\uff0c\u4fdd\u7559 baseline / proof \u4e24\u4efd\u5feb\u7167\u4ee5\u53ca console / network \u8bb0\u5f55\u3002" + ], + "review_state": "needs-version-gap-review" + } + }, "discourse--9812e0316d": { "canonical_id": "discourse--9812e0316d", "title": "3.5.1: Security and maintenance release", @@ -10273,6 +10486,141 @@ "review_state": "ready" } }, + "mattermost--CVE-2026-3113": { + "canonical_id": "mattermost--CVE-2026-3113", + "title": "Mattermost doesn't set permissions on downloaded bulk export", + "summary": "Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to set permissions on downloaded bulk export which allows other local users on the server to be able to read contents of the bulk export. Mattermost Advisory ID: MMSA-2026-00593.", + "display_name": "Mattermost", + "system_id": "mattermost", + "category": "platforms", + "severity": "low", + "cvss_score": 3.1, + "exploit_status": "unknown", + "published_at": "2026-03-26T18:31:42Z", + "updated_at": "2026-03-31T23:19:38.844657Z", + "official_source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3113", + "secondary_source_urls": [ + "https://github.com/mattermost/mattermost", + "https://mattermost.com/security-updates" + ], + "aliases": [ + "CVE-2026-3113", + "GHSA-4765-v66x-rqx7" + ], + "secure_code_topics": [ + "authz-server-side-recheck", + "xss-output-encoding", + "token-cookie-storage", + "dependency-upgrade-policy" + ], + "verification_status": "triage-manual", + "verification_mode": "synthetic", + "artifact_mode": "synthetic", + "blocked_reason": null, + "browser_evidence": { + "required": false, + "present": false, + "refs": [] + }, + "entity_refs": [ + { + "entity_id": "mattermost", + "entity_type": "system", + "relation": "root-system", + "root_system_id": "mattermost", + "official": true + }, + { + "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", + "entity_type": "repo", + "relation": "affected-component", + "root_system_id": "mattermost", + "official": false + } + ], + "affected_components": [ + { + "name": "mattermost / mattermost-server", + "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", + "scope": "repo", + "package_name": "github.com/mattermost/mattermost-server", + "official": false + } + ], + "affected_version_ranges": [ + "introduced=11.4.0-rc1, fixed<11.4.1", + "introduced=11.3.0-rc1, fixed<11.3.2", + "introduced=11.2.0-rc1, fixed<11.2.4", + "introduced=10.11.0-rc1, fixed<10.11.12", + "introduced=8.0.0-20260105080200-d27a2195068d, fixed<8.0.0-20260217110922-b7d4a1f1f59b" + ], + "fixed_version_ranges": [ + "11.4.1", + "11.3.2", + "11.2.4", + "10.11.12", + "8.0.0-20260217110922-b7d4a1f1f59b" + ], + "introduced_version": "introduced=8.0.0-20260105080200-d27a2195068d, fixed<8.0.0-20260217110922-b7d4a1f1f59b", + "patched_version": "11.4.1", + "version_confidence": "high", + "version_gap_reason": "", + "version_resolution_needed": false, + "advisory_scope": "repo", + "workflow": { + "workflow_id": "mattermost--CVE-2026-3113--workflow", + "vuln_family": "unknown", + "entry_surface": "repo-surface", + "preconditions": [ + "\u4ec5\u5728 lab-local\u3001lab-public \u6216\u660e\u786e\u6388\u6743\u76ee\u6807\u4e2d\u6267\u884c\u3002", + "\u786e\u8ba4\u76ee\u6807\u547d\u4e2d\u7248\u672c\u65ad\u8a00: introduced=11.4.0-rc1, fixed<11.4.1, introduced=11.3.0-rc1, fixed<11.3.2, introduced=11.2.0-rc1, fixed<11.2.4", + "\u82e5\u5bf9\u8c61\u5c5e\u4e8e `repo`\uff0c\u5148\u786e\u8ba4\u6269\u5c55/\u4ed3\u5e93/\u5305\u5df2\u542f\u7528\u5e76\u5904\u4e8e\u53d7\u5f71\u54cd\u7248\u672c\u3002" + ], + "required_role": "unknown", + "affected_version_assertion": [ + "introduced=11.4.0-rc1, fixed<11.4.1", + "introduced=11.3.0-rc1, fixed<11.3.2", + "introduced=11.2.0-rc1, fixed<11.2.4", + "introduced=10.11.0-rc1, fixed<10.11.12", + "introduced=8.0.0-20260105080200-d27a2195068d, fixed<8.0.0-20260217110922-b7d4a1f1f59b" + ], + "trigger_vector": "\u5bf9 `unknown` \u5bb6\u65cf\u5165\u53e3\u6295\u9012\u6700\u5c0f\u5316\u3001\u53ef\u5ba1\u8ba1\u3001\u53ef\u56de\u6eda\u7684\u53d7\u63a7\u8f93\u5165\uff0c\u6bd4\u8f83\u4fee\u590d\u524d\u540e\u5dee\u5f02\u3002", + "request_or_ui_path": [ + "/repo" + ], + "input_shape": "\u63d0\u4ea4\u6700\u5c0f\u5316\u3001\u53ef\u5ba1\u8ba1\u3001\u53ef\u56de\u6eda\u7684\u53d7\u63a7\u8f93\u5165\u3002", + "expected_unsafe_behavior": "\u76ee\u6807\u8868\u73b0\u51fa\u8d85\u51fa\u8bbe\u8ba1\u8fb9\u754c\u7684\u884c\u4e3a\u3002", + "server_evidence_points": [ + "\u5e94\u7528\u65e5\u5fd7\u4e2d\u7684\u547d\u4e2d\u8def\u5f84\u3001\u9274\u6743\u51b3\u7b56\u548c\u5f02\u5e38\u6808", + "\u53cd\u5411\u4ee3\u7406\u6216\u8fb9\u754c\u5c42\u65e5\u5fd7\u4e2d\u7684\u8bf7\u6c42\u5934\u3001\u6765\u6e90 IP \u4e0e\u8def\u7531\u51b3\u7b56" + ], + "browser_evidence_points": [ + "\u57fa\u7ebf\u622a\u56fe\u4e0e\u653b\u51fb\u540e\u622a\u56fe\u7684 DOM/\u89c6\u89c9\u5dee\u5f02", + "console\u3001network \u4e0e response metadata \u4e2d\u7684\u5f02\u5e38\u4fe1\u53f7" + ], + "db_or_fs_evidence_points": [ + "\u6570\u636e\u5e93\u4e2d\u65b0\u589e/\u8d8a\u6743\u8bfb\u53d6\u7684\u6d4b\u8bd5\u6570\u636e", + "\u6587\u4ef6\u7cfb\u7edf\u4e2d\u65b0\u589e\u4e0a\u4f20\u6837\u672c\u3001\u7f13\u5b58\u6761\u76ee\u6216\u8d8a\u6743\u8bfb\u53d6\u75d5\u8ff9" + ], + "detection_signals": [ + "WAF / reverse proxy \u5f02\u5e38\u65e5\u5fd7\u3001\u8bbf\u95ee\u65e5\u5fd7\u548c\u544a\u8b66", + "\u5e94\u7528\u5ba1\u8ba1\u65e5\u5fd7\u4e2d\u7684\u6743\u9650\u9519\u8bef\u3001\u91cd\u5b9a\u5411\u5f02\u5e38\u3001\u6a21\u677f\u6e32\u67d3\u6216\u4e0a\u4f20\u843d\u76d8\u4e8b\u4ef6" + ], + "mitigation_summary": "\u4f18\u5148\u5347\u7ea7\u5230\u4fee\u590d\u7248\u672c\uff0c\u5e76\u540c\u65f6\u6536\u7d27\u8f93\u5165\u6821\u9a8c\u3001\u670d\u52a1\u7aef\u9274\u6743\u3001\u4ee3\u7406\u4fe1\u4efb\u8fb9\u754c\u3001\u6269\u5c55\u5b89\u88c5\u4fe1\u4efb\u548c\u5ba1\u8ba1\u65e5\u5fd7\u3002", + "patch_validation_steps": [ + "\u786e\u8ba4\u76ee\u6807\u7248\u672c\u4ece `introduced=11.4.0-rc1, fixed<11.4.1, introduced=11.3.0-rc1, fixed<11.3.2, introduced=11.2.0-rc1, fixed<11.2.4` \u5347\u7ea7\u6216\u56de\u79fb\u5230 `11.4.1`\u3002", + "\u4fdd\u7559\u540c\u4e00\u7ec4\u53d7\u63a7\u8f93\u5165\uff0c\u5728\u4fee\u590d\u524d\u540e\u5206\u522b\u6267\u884c\u5e76\u6bd4\u5bf9\u54cd\u5e94\u3001\u65e5\u5fd7\u4e0e\u6d4f\u89c8\u5668\u8bc1\u636e\u3002", + "\u786e\u8ba4\u4fee\u590d\u540e\u4ec5\u4fdd\u7559\u9884\u671f\u4e1a\u52a1\u884c\u4e3a\uff0c\u4e0d\u518d\u89e6\u53d1\u8d8a\u6743\u3001\u56de\u663e\u3001\u5f02\u5e38\u6e32\u67d3\u6216\u9519\u8bef\u8bf7\u6c42\u3002", + "\u8865\u5145 `unknown` \u65cf\u81ea\u52a8\u5316\u56de\u5f52\uff0c\u907f\u514d\u540c\u7c7b\u8def\u5f84\u5728\u63d2\u4ef6\u3001\u4e3b\u9898\u6216\u4ee3\u7406\u94fe\u4e2d\u56de\u5f52\u3002" + ], + "lab_safety_notes": [ + "\u53ea\u4f7f\u7528\u56de\u73af\u5730\u5740\u3001\u54e8\u5175\u76ee\u6807\u3001\u65e0\u5bb3\u6837\u672c\u6216\u53ef\u56de\u6eda\u6d4b\u8bd5\u6570\u636e\u3002", + "\u7981\u6b62\u9020\u6210\u6301\u4e45\u7834\u574f\u3001\u8d8a\u6743\u4e0b\u8f7d\u771f\u5b9e\u6570\u636e\u6216\u4e0d\u53ef\u56de\u6eda side effect\u3002", + "\u5982\u9700\u6d4f\u89c8\u5668\u8bc1\u636e\uff0c\u4fdd\u7559 baseline / proof \u4e24\u4efd\u5feb\u7167\u4ee5\u53ca console / network \u8bb0\u5f55\u3002" + ], + "review_state": "ready" + } + }, "mattermost--CVE-2026-27656": { "canonical_id": "mattermost--CVE-2026-27656", "title": "Mattermost allows attackers to take over arbitrary user accounts via overly permissive substring matching flaw", diff --git a/08-threat-intel/generated/dashboard/architecture.json b/08-threat-intel/generated/dashboard/architecture.json index 8a757be4..5fbbc6f7 100644 --- a/08-threat-intel/generated/dashboard/architecture.json +++ b/08-threat-intel/generated/dashboard/architecture.json @@ -1,5 +1,5 @@ { - "generated_at": "2026-03-31T09:18:21+00:00", + "generated_at": "2026-04-01T09:21:06+00:00", "title": "\u5f53\u524d\u67b6\u6784\u5e93", "summary": "\u5de5\u4f5c\u53f0\u3001\u63a7\u5236\u9762\u3001\u6570\u636e\u5c42\u3001\u6388\u6743\u8fb9\u754c\u4e0e\u7cfb\u7edf\u8986\u76d6\u7684\u5f53\u524d\u771f\u503c\u89c6\u56fe\u3002", "sections": [ @@ -39,7 +39,7 @@ }, { "label": "\u5f53\u524d\u6f0f\u6d1e\u6761\u76ee", - "value": "2428" + "value": "2431" } ], "fields": [ @@ -57,7 +57,7 @@ }, { "label": "\u751f\u6210\u65f6\u95f4", - "value": "2026-03-31T09:18:21+00:00" + "value": "2026-04-01T09:21:06+00:00" } ], "links": [ @@ -5973,7 +5973,7 @@ }, { "label": "Advisory \u6570", - "value": "2428" + "value": "2431" }, { "label": "\u72b6\u6001\u7c7b\u578b", @@ -5992,7 +5992,7 @@ "items": [ { "title": "\u4eba\u5de5\u5206\u8bca", - "summary": "\u5f53\u524d\u7d2f\u8ba1 2339 \u6761\u3002", + "summary": "\u5f53\u524d\u7d2f\u8ba1 2342 \u6761\u3002", "open": false, "fields": [ { @@ -6001,7 +6001,7 @@ }, { "label": "\u6570\u91cf", - "value": "2339" + "value": "2342" } ] }, diff --git a/08-threat-intel/generated/dashboard/data/completeness.json b/08-threat-intel/generated/dashboard/data/completeness.json index fdbbe6e8..b950e939 100644 --- a/08-threat-intel/generated/dashboard/data/completeness.json +++ b/08-threat-intel/generated/dashboard/data/completeness.json @@ -1,7 +1,7 @@ { - "generated_at": "2026-03-31T09:18:21+00:00", + "generated_at": "2026-04-01T09:21:06+00:00", "advisory_total": 89, - "registry_advisory_total": 2428, + "registry_advisory_total": 2431, "scope": "latest-run-backed-advisories", "latest_statuses": { "verified-real": 89 @@ -175,12 +175,12 @@ "active_source_count": 102, "green_source_count": 102, "failure_count": 0, - "last_fully_green_run": "2026-03-31T09:18:05+00:00", + "last_fully_green_run": "2026-04-01T09:20:10+00:00", "open_alert_count": 0, "resolved_alert_count": 101 }, "entity_coverage": { - "generated_at": "2026-03-31T09:18:20+00:00", + "generated_at": "2026-04-01T09:21:04+00:00", "cataloged_entity_total": 110, "candidate_entity_total": 7, "history_full_complete_count": 41, @@ -990,7 +990,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "entity_type": "repo", "display_name": "mattermost / mattermost-server", - "advisory_count": 16, + "advisory_count": 17, "history_backfill_status": "seeded", "latest_sync_status": "green" }, @@ -1950,17 +1950,17 @@ "discovery_queue": 7, "history_queue": 27, "latest_queue": 10, - "workflow_queue": 2179 + "workflow_queue": 2181 } }, "monitor_summary": { - "generated_at": "2026-03-31T09:18:05+00:00", + "generated_at": "2026-04-01T09:20:10+00:00", "active_source_count": 102, "green_source_count": 102, "source_failure_count": 0, "open_alert_count": 0, "resolved_alert_count": 101, - "last_fully_green_run": "2026-03-31T09:18:05+00:00", + "last_fully_green_run": "2026-04-01T09:20:10+00:00", "source_catalog": { "system_count": 62, "source_count": 179, @@ -1968,12 +1968,12 @@ }, "ingest": { "new_count": 3, - "updated_count": 2, + "updated_count": 0, "failure_count": 0, "systems_touched": [ + "discourse", "mattermost", - "mediawiki", - "prestashop" + "mediawiki" ] }, "validation": { @@ -1993,14 +1993,14 @@ "cataloged_entity_total": 110, "latest_version_synced_count": 95, "source_gap_count": 15, - "security_version_total": 6290, + "security_version_total": 6316, "security_version_entity_count": 83, "auto_promoted_entity_count": 10, "lab_enqueued_count": 3 }, "lab_enqueue": { "enqueued": 3, - "queue_total": 2384, + "queue_total": 2387, "pending_count": 0 } }, diff --git a/08-threat-intel/generated/dashboard/data/entity-completeness.json b/08-threat-intel/generated/dashboard/data/entity-completeness.json index 3cca9d7e..6e7dfd5d 100644 --- a/08-threat-intel/generated/dashboard/data/entity-completeness.json +++ b/08-threat-intel/generated/dashboard/data/entity-completeness.json @@ -1,5 +1,5 @@ { - "generated_at": "2026-03-31T09:18:20+00:00", + "generated_at": "2026-04-01T09:21:04+00:00", "cataloged_entity_total": 110, "candidate_entity_total": 7, "history_full_complete_count": 41, @@ -809,7 +809,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "entity_type": "repo", "display_name": "mattermost / mattermost-server", - "advisory_count": 16, + "advisory_count": 17, "history_backfill_status": "seeded", "latest_sync_status": "green" }, @@ -1769,6 +1769,6 @@ "discovery_queue": 7, "history_queue": 27, "latest_queue": 10, - "workflow_queue": 2179 + "workflow_queue": 2181 } } diff --git a/08-threat-intel/generated/dashboard/data/entity-queues.json b/08-threat-intel/generated/dashboard/data/entity-queues.json index e4c72e94..2c9a19dd 100644 --- a/08-threat-intel/generated/dashboard/data/entity-queues.json +++ b/08-threat-intel/generated/dashboard/data/entity-queues.json @@ -1,5 +1,5 @@ { - "generated_at": "2026-03-31T09:18:20+00:00", + "generated_at": "2026-04-01T09:21:04+00:00", "discovery_queue": { "count": 7, "items": [ @@ -408,7 +408,7 @@ ] }, "workflow_queue": { - "count": 2179, + "count": 2181, "items": [ { "canonical_id": "adminer--CVE-2026-25878", diff --git a/08-threat-intel/generated/dashboard/data/lab-enqueue-summary.json b/08-threat-intel/generated/dashboard/data/lab-enqueue-summary.json index 4c329fc3..e0e62a98 100644 --- a/08-threat-intel/generated/dashboard/data/lab-enqueue-summary.json +++ b/08-threat-intel/generated/dashboard/data/lab-enqueue-summary.json @@ -1,7 +1,7 @@ { - "generated_at": "2026-03-31T09:18:14+00:00", + "generated_at": "2026-04-01T09:20:55+00:00", "enqueued": 3, - "queue_total": 2384, + "queue_total": 2387, "items": [ { "advisory_id": "directus--05a97ef95a", @@ -148,6 +148,11 @@ "system_id": "directus", "priority": "version-sync" }, + { + "advisory_id": "discourse--5dce90675e", + "system_id": "discourse", + "priority": "version-sync" + }, { "advisory_id": "django--039dc7ddc9", "system_id": "django", @@ -1094,17 +1099,12 @@ "priority": "version-sync" }, { - "advisory_id": "mattermost--CVE-2026-26233", + "advisory_id": "mattermost--CVE-2026-3113", "system_id": "mattermost", "priority": "version-sync" }, { - "advisory_id": "mattermost--CVE-2026-27656", - "system_id": "mattermost", - "priority": "version-sync" - }, - { - "advisory_id": "mediawiki--7a3e57910a", + "advisory_id": "mediawiki--469c5db88b", "system_id": "mediawiki", "priority": "version-sync" }, @@ -2772,561 +2772,6 @@ "advisory_id": "strapi--ea5ecc42f3", "system_id": "strapi", "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--05da41121f", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--06e151b334", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--08ab0e40fd", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--08ff88b89e", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--1129617837", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--18f94418c3", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--1b2a89ca9c", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--2646cca050", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--2acb79d818", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--30c7084831", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--313be91ecc", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--35d1bcc8fd", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--38e031b62a", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--3b3ee22bdd", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--3d4415cd8c", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--3f7bcf6460", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--40fad2352c", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--46dfa1debb", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--4703641b3e", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--4b8901521b", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--4e5d64d078", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--509829ee63", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--5431e35cb9", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--583e91c778", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--5ea81bed02", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--5ebeb363ab", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--5f95d49feb", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--608614d706", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--61bcf00c63", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--6398a77e67", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--669aeb4ed9", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--69fa3cd79b", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--6a9eb36c09", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--6c455c6050", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--6f6549cea3", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--6ff424270d", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--7f9ac413c1", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--8197f55ac4", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--81f7400465", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--82db1502da", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--8aa1dccc64", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--94b883541e", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--9848665054", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--9b9e3ff8e5", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--9c50136dd9", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2014-4549", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2014-4558", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2014-6313", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2015-2069", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2015-2329", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2015-5065", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2016-10112", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2016-10922", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2016-10923", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2016-10935", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2017-17058", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2017-18356", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2017-18506", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2017-18592", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2018-11485", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2018-11486", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2018-11525", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2018-11579", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2018-20714", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2018-20782", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2018-20966", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2018-5316", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2018-8710", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2018-8711", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-1010124", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-11807", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-14774", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-14796", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-14948", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-14978", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-14979", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-15092", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-18668", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-18834", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-20891", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-5979", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-7441", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-9168", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2020-11727", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2020-8819", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--a130ac93bb", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--a72c466a05", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--a89ba1be4d", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--aa9bdbc2ce", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--aabb0dbc7f", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--ab923ae740", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--ac4a14e633", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--ac8969a095", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--b0bcd8ad54", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--b19dfd0a1c", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--b213245e4b", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--bc8055b458", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--c4c5c5cb89", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--d01b27ef60", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--d3da259278", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--d717626a6f", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--dd8265593a", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--e0fa01b204", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--e2b8d0d0e4", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--e8abb34bbb", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--eb8448be50", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--ec096f5867", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--ef0c884c7a", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--ef9e14861f", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--f0e42669e3", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--fe6541027e", - "system_id": "woocommerce", - "priority": "version-sync" } ], "pending": [] diff --git a/08-threat-intel/generated/dashboard/data/monitor-summary.json b/08-threat-intel/generated/dashboard/data/monitor-summary.json index 92c5a24e..b17c7dd7 100644 --- a/08-threat-intel/generated/dashboard/data/monitor-summary.json +++ b/08-threat-intel/generated/dashboard/data/monitor-summary.json @@ -1,11 +1,11 @@ { - "generated_at": "2026-03-31T09:18:05+00:00", + "generated_at": "2026-04-01T09:20:10+00:00", "active_source_count": 102, "green_source_count": 102, "source_failure_count": 0, "open_alert_count": 0, "resolved_alert_count": 101, - "last_fully_green_run": "2026-03-31T09:18:05+00:00", + "last_fully_green_run": "2026-04-01T09:20:10+00:00", "source_catalog": { "system_count": 62, "source_count": 179, @@ -13,12 +13,12 @@ }, "ingest": { "new_count": 3, - "updated_count": 2, + "updated_count": 0, "failure_count": 0, "systems_touched": [ + "discourse", "mattermost", - "mediawiki", - "prestashop" + "mediawiki" ] }, "validation": { @@ -38,14 +38,14 @@ "cataloged_entity_total": 110, "latest_version_synced_count": 95, "source_gap_count": 15, - "security_version_total": 6290, + "security_version_total": 6316, "security_version_entity_count": 83, "auto_promoted_entity_count": 10, "lab_enqueued_count": 3 }, "lab_enqueue": { "enqueued": 3, - "queue_total": 2384, + "queue_total": 2387, "pending_count": 0 } } diff --git a/08-threat-intel/generated/dashboard/data/release-index.json b/08-threat-intel/generated/dashboard/data/release-index.json index 0c71b79b..d47b827f 100644 --- a/08-threat-intel/generated/dashboard/data/release-index.json +++ b/08-threat-intel/generated/dashboard/data/release-index.json @@ -1,6 +1,6 @@ { - "generated_at": "2026-03-31T09:18:20+00:00", - "version_count": 6290, + "generated_at": "2026-04-01T09:21:05+00:00", + "version_count": 6316, "versions": [ { "version_id": "angular--package--angular-core--introduced-0-last-affected-18-2-14", @@ -1039,34 +1039,6 @@ "advisory_refs": [], "is_latest_snapshot": false }, - { - "version_id": "discourse--3-3-4-security-and-maintenance-release", - "entity_id": "discourse", - "root_system_id": "discourse", - "version": "3-3-4-security-and-maintenance-release", - "released_at": "Wed, 05 Feb 2025 14:26:22 +0000", - "release_url": "https://meta.discourse.org/t/3-3-4-security-and-maintenance-release/349301", - "source_name": "Discourse Release Notes RSS", - "source_confidence": "official", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "discourse--3-3-4", - "entity_id": "discourse", - "root_system_id": "discourse", - "version": "3.3.4", - "released_at": "Wed, 05 Feb 2025 14:26:22 +0000", - "release_url": "https://meta.discourse.org/t/3-3-4-security-and-maintenance-release/349301", - "source_name": "Discourse Release Notes RSS", - "source_confidence": "official", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, { "version_id": "discourse--3-4-0-beta4-redesigned-emojis-exporting-user-data-flagging-illegal-content-and-more", "entity_id": "discourse", @@ -2033,6 +2005,20 @@ "advisory_refs": [], "is_latest_snapshot": false }, + { + "version_id": "discourse--2026-1-3", + "entity_id": "discourse", + "root_system_id": "discourse", + "version": "2026.1.3", + "released_at": "Tue, 31 Mar 2026 14:35:49 +0000", + "release_url": "https://meta.discourse.org/t/march-2026-monthly-release/399630", + "source_name": "Discourse Release Notes RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, { "version_id": "discourse--2026-2", "entity_id": "discourse", @@ -2075,6 +2061,48 @@ "advisory_refs": [], "is_latest_snapshot": false }, + { + "version_id": "discourse--2026-2-2", + "entity_id": "discourse", + "root_system_id": "discourse", + "version": "2026.2.2", + "released_at": "Tue, 31 Mar 2026 14:35:49 +0000", + "release_url": "https://meta.discourse.org/t/march-2026-monthly-release/399630", + "source_name": "Discourse Release Notes RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "discourse--2026-3", + "entity_id": "discourse", + "root_system_id": "discourse", + "version": "2026.3", + "released_at": "Tue, 31 Mar 2026 14:35:49 +0000", + "release_url": "https://meta.discourse.org/t/march-2026-monthly-release/399630", + "source_name": "Discourse Release Notes RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "discourse--2026-3-0", + "entity_id": "discourse", + "root_system_id": "discourse", + "version": "2026.3.0", + "released_at": "Tue, 31 Mar 2026 14:35:49 +0000", + "release_url": "https://meta.discourse.org/t/march-2026-monthly-release/399630", + "source_name": "Discourse Release Notes RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, { "version_id": "discourse--2026-3-0-latest-1", "entity_id": "discourse", @@ -15511,68 +15539,12 @@ "is_latest_snapshot": true }, { - "version_id": "joomla--963-20250401-framework-sql-injection-vulnerability-in-quotenamestr-method-of-database-package-html", + "version_id": "joomla--1027-20260301-core-acl-hardening-in-com-ajax-html", "entity_id": "joomla", "root_system_id": "joomla", - "version": "963-20250401-framework-sql-injection-vulnerability-in-quotenamestr-method-of-database-package.html", + "version": "1027-20260301-core-acl-hardening-in-com-ajax.html", "released_at": null, - "release_url": "https://developer.joomla.org/security-centre/963-20250401-framework-sql-injection-vulnerability-in-quotenamestr-method-of-database-package.html", - "source_name": "Joomla Security Centre", - "source_confidence": "official", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "joomla--1010-20250901-core-inadequate-content-filtering-within-the-checkattribute-filter-code-html", - "entity_id": "joomla", - "root_system_id": "joomla", - "version": "1010-20250901-core-inadequate-content-filtering-within-the-checkattribute-filter-code.html", - "released_at": null, - "release_url": "https://developer.joomla.org/security-centre/1010-20250901-core-inadequate-content-filtering-within-the-checkattribute-filter-code.html", - "source_name": "Joomla Security Centre", - "source_confidence": "official", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "joomla--1011-20250902-core-user-enumeration-in-passkey-authentication-method-html", - "entity_id": "joomla", - "root_system_id": "joomla", - "version": "1011-20250902-core-user-enumeration-in-passkey-authentication-method.html", - "released_at": null, - "release_url": "https://developer.joomla.org/security-centre/1011-20250902-core-user-enumeration-in-passkey-authentication-method.html", - "source_name": "Joomla Security Centre", - "source_confidence": "official", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "joomla--1016-20260101-core-inadequate-content-filtering-for-data-urls-html", - "entity_id": "joomla", - "root_system_id": "joomla", - "version": "1016-20260101-core-inadequate-content-filtering-for-data-urls.html", - "released_at": null, - "release_url": "https://developer.joomla.org/security-centre/1016-20260101-core-inadequate-content-filtering-for-data-urls.html", - "source_name": "Joomla Security Centre", - "source_confidence": "official", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "joomla--1017-20260102-core-xss-vector-in-the-pagebreak-plugin-html", - "entity_id": "joomla", - "root_system_id": "joomla", - "version": "1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html", - "released_at": null, - "release_url": "https://developer.joomla.org/security-centre/1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html", + "release_url": "https://developer.joomla.org/security-centre/1027-20260301-core-acl-hardening-in-com-ajax.html", "source_name": "Joomla Security Centre", "source_confidence": "official", "security_relevant": true, @@ -67634,7 +67606,8 @@ "reason": "affected", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false }, @@ -67875,7 +67848,8 @@ "reason": "fixed", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false }, @@ -70778,7 +70752,8 @@ "reason": "affected", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false }, @@ -71007,7 +70982,8 @@ "reason": "fixed", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false }, @@ -71375,7 +71351,8 @@ "reason": "affected", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false }, @@ -71478,7 +71455,8 @@ "reason": "fixed", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false }, @@ -71566,7 +71544,8 @@ "reason": "affected", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false }, @@ -71641,7 +71620,8 @@ "reason": "fixed", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false }, @@ -71714,7 +71694,8 @@ "reason": "affected", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false }, @@ -71731,7 +71712,8 @@ "reason": "fixed", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false }, @@ -71880,8 +71862,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.39", - "released_at": "Mon, 30 Mar 2026 17:50:26 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FFD4KWZMOVZQJF4PIIVUTCEHDJLMNZEB/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -72734,8 +72716,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.42", - "released_at": "Mon, 30 Mar 2026 17:50:26 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FFD4KWZMOVZQJF4PIIVUTCEHDJLMNZEB/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -73042,8 +73024,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.43", - "released_at": "Mon, 29 Dec 2025 20:36:35 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/3EXWLDDHRGVDQACOHP3Y4ZE5H6BHBJPJ/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -73700,8 +73682,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.43.6", - "released_at": "Fri, 09 Jan 2026 17:54:29 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/J7SY6XVOKSONV7Y6VZ4ZASOMRF2FWMKN/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -73826,8 +73808,120 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.43.7", - "released_at": "Mon, 30 Mar 2026 17:50:26 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FFD4KWZMOVZQJF4PIIVUTCEHDJLMNZEB/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-43-7-patch-gz", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.patch.gz", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-43-7-patch-gz-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.patch.gz.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-43-7-patch-zip", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.patch.zip", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-43-7-patch-zip-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.patch.zip.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-43-7-tar-gz", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.tar.gz", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-43-7-tar-gz-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.tar.gz.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-43-7-zip", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.zip", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-43-7-zip-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.zip.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -73840,8 +73934,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.44", - "released_at": "Mon, 29 Dec 2025 20:36:35 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/3EXWLDDHRGVDQACOHP3Y4ZE5H6BHBJPJ/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -74288,8 +74382,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.44.3", - "released_at": "Fri, 09 Jan 2026 17:54:29 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/J7SY6XVOKSONV7Y6VZ4ZASOMRF2FWMKN/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -74414,8 +74508,120 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.44.4", - "released_at": "Mon, 30 Mar 2026 17:50:26 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FFD4KWZMOVZQJF4PIIVUTCEHDJLMNZEB/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-44-4-patch-gz", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.patch.gz", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-44-4-patch-gz-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.patch.gz.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-44-4-patch-zip", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.patch.zip", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-44-4-patch-zip-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.patch.zip.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-44-4-tar-gz", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.tar.gz", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-44-4-tar-gz-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.tar.gz.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-44-4-zip", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.zip", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-44-4-zip-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.zip.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -74428,8 +74634,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.45", - "released_at": "Mon, 29 Dec 2025 20:36:35 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/3EXWLDDHRGVDQACOHP3Y4ZE5H6BHBJPJ/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -74694,8 +74900,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.45.1", - "released_at": "Fri, 09 Jan 2026 17:54:29 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/J7SY6XVOKSONV7Y6VZ4ZASOMRF2FWMKN/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -74820,8 +75026,120 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.45.2", - "released_at": "Mon, 30 Mar 2026 17:50:26 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FFD4KWZMOVZQJF4PIIVUTCEHDJLMNZEB/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-45-2-patch-gz", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.patch.gz", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-45-2-patch-gz-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.patch.gz.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-45-2-patch-zip", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.patch.zip", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-45-2-patch-zip-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.patch.zip.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-45-2-tar-gz", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.tar.gz", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-45-2-tar-gz-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.tar.gz.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-45-2-zip", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.zip", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-45-2-zip-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.zip.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -74918,8 +75236,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "8.0", - "released_at": "Wed, 10 Dec 2025 22:22:38 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FOY6VXTBCCHIGYGSTQBPN3UFCL6CAX6Y/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -75002,8 +75320,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "8.5", - "released_at": "Wed, 10 Dec 2025 22:22:38 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FOY6VXTBCCHIGYGSTQBPN3UFCL6CAX6Y/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -86558,7 +86876,7 @@ "advisory_refs": [ "traefik--CVE-2026-32305" ], - "is_latest_snapshot": false + "is_latest_snapshot": true }, { "version_id": "traefik--repo--github-com-traefik-traefik-v3--introduced-0", @@ -90823,6 +91141,34 @@ "advisory_refs": [], "is_latest_snapshot": false }, + { + "version_id": "woocommerce--10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "entity_id": "woocommerce", + "root_system_id": "woocommerce", + "version": "10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "woocommerce--10-5-1", + "entity_id": "woocommerce", + "root_system_id": "woocommerce", + "version": "10.5.1", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, { "version_id": "woocommerce--repo--woocommerce-woocommerce--5-4", "entity_id": "woocommerce--repo--woocommerce-woocommerce", @@ -90837,6 +91183,62 @@ "advisory_refs": [], "is_latest_snapshot": false }, + { + "version_id": "woocommerce--repo--woocommerce-woocommerce--10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "entity_id": "woocommerce--repo--woocommerce-woocommerce", + "root_system_id": "woocommerce", + "version": "10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "woocommerce--repo--woocommerce-woocommerce--10-5-1", + "entity_id": "woocommerce--repo--woocommerce-woocommerce", + "root_system_id": "woocommerce", + "version": "10.5.1", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "wordpress--1-0-6-unauthenticated-blind-ssrf-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "1-0-6-unauthenticated-blind-ssrf-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/performance-monitor/vulnerability/wordpress-performance-monitor-plugin-1-0-6-unauthenticated-blind-ssrf-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "wordpress--1-0-6", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "1.0.6", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/performance-monitor/vulnerability/wordpress-performance-monitor-plugin-1-0-6-unauthenticated-blind-ssrf-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, { "version_id": "wordpress--1-1-4-sensitive-information-exposure-via-views-files-vulnerability", "entity_id": "wordpress", @@ -90921,6 +91323,34 @@ "advisory_refs": [], "is_latest_snapshot": false }, + { + "version_id": "wordpress--1-4-9-missing-authorization-to-authenticated-contributor-sensitive-information-exposure-via-shortcode-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "1-4-9-missing-authorization-to-authenticated-contributor-sensitive-information-exposure-via-shortcode-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/contact-form-entries/vulnerability/wordpress-database-for-contact-form-7-wpforms-elementor-forms-plugin-1-4-9-missing-authorization-to-authenticated-contributor-sensitive-information-exposure-via-shortcode-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "wordpress--1-4-9", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "1.4.9", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/contact-form-entries/vulnerability/wordpress-database-for-contact-form-7-wpforms-elementor-forms-plugin-1-4-9-missing-authorization-to-authenticated-contributor-sensitive-information-exposure-via-shortcode-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, { "version_id": "wordpress--1-7-36-unauthenticated-server-side-template-injection-via-prefill-functionality-vulnerability", "entity_id": "wordpress", @@ -90949,34 +91379,6 @@ "advisory_refs": [], "is_latest_snapshot": false }, - { - "version_id": "wordpress--1-7-58-contributor-arbitrary-file-download-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "1-7-58-contributor-arbitrary-file-download-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/shared-files/vulnerability/wordpress-shared-files-plugin-1-7-58-contributor-arbitrary-file-download-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--1-7-58", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "1.7.58", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/shared-files/vulnerability/wordpress-shared-files-plugin-1-7-58-contributor-arbitrary-file-download-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, { "version_id": "wordpress--1-9-12-unauthenticated-remote-code-execution-via-calculation-field-vulnerability", "entity_id": "wordpress", @@ -91005,6 +91407,34 @@ "advisory_refs": [], "is_latest_snapshot": false }, + { + "version_id": "wordpress--1-84-cross-site-request-forgery-to-stored-cross-site-scripting-via-aps-options-page-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "1-84-cross-site-request-forgery-to-stored-cross-site-scripting-via-aps-options-page-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/auto-post-scheduler/vulnerability/wordpress-auto-post-scheduler-plugin-1-84-cross-site-request-forgery-to-stored-cross-site-scripting-via-aps-options-page-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "wordpress--1-84", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "1.84", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/auto-post-scheduler/vulnerability/wordpress-auto-post-scheduler-plugin-1-84-cross-site-request-forgery-to-stored-cross-site-scripting-via-aps-options-page-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, { "version_id": "wordpress--2-0-01-unauthenticated-stored-cross-site-scripting-via-multiple-parameters-vulnerability", "entity_id": "wordpress", @@ -91033,6 +91463,34 @@ "advisory_refs": [], "is_latest_snapshot": false }, + { + "version_id": "wordpress--2-1-2-authenticated-manager-sql-injection-via-sort-parameter-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "2-1-2-authenticated-manager-sql-injection-via-sort-parameter-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/ameliabooking/vulnerability/wordpress-amelia-plugin-2-1-2-authenticated-manager-sql-injection-via-sort-parameter-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "wordpress--2-1-2", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "2.1.2", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/ameliabooking/vulnerability/wordpress-amelia-plugin-2-1-2-authenticated-manager-sql-injection-via-sort-parameter-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, { "version_id": "wordpress--2-1-4-unauthenticated-sensitive-information-exposure-via-rest-api-vulnerability", "entity_id": "wordpress", @@ -91062,12 +91520,12 @@ "is_latest_snapshot": false }, { - "version_id": "wordpress--2-1-6-missing-authorization-to-authenticated-student-privilege-escalation-to-administrator-vulnerability", + "version_id": "wordpress--2-1-12-cross-site-request-forgery-to-plugin-settings-update-vulnerability", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "2-1-6-missing-authorization-to-authenticated-student-privilege-escalation-to-administrator-vulnerability", + "version": "2-1-12-cross-site-request-forgery-to-plugin-settings-update-vulnerability", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/learning-management-system/vulnerability/wordpress-masteriyo-lms-plugin-2-1-6-missing-authorization-to-authenticated-student-privilege-escalation-to-administrator-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/minify-html-markup/vulnerability/wordpress-minify-html-plugin-2-1-12-cross-site-request-forgery-to-plugin-settings-update-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, @@ -91076,12 +91534,12 @@ "is_latest_snapshot": false }, { - "version_id": "wordpress--2-1-6", + "version_id": "wordpress--2-1-12", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "2.1.6", + "version": "2.1.12", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/learning-management-system/vulnerability/wordpress-masteriyo-lms-plugin-2-1-6-missing-authorization-to-authenticated-student-privilege-escalation-to-administrator-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/minify-html-markup/vulnerability/wordpress-minify-html-plugin-2-1-12-cross-site-request-forgery-to-plugin-settings-update-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, @@ -91090,12 +91548,12 @@ "is_latest_snapshot": false }, { - "version_id": "wordpress--2-4-9-authenticated-subscriber-arbitrary-file-deletion-via-resume-custom-file-field-vulnerability", + "version_id": "wordpress--2-7-0-cross-site-scripting-xss-vulnerability", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "2-4-9-authenticated-subscriber-arbitrary-file-deletion-via-resume-custom-file-field-vulnerability", + "version": "2-7-0-cross-site-scripting-xss-vulnerability", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/wp-job-portal/vulnerability/wordpress-wp-job-portal-plugin-2-4-9-authenticated-subscriber-arbitrary-file-deletion-via-resume-custom-file-field-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/kubio/vulnerability/wordpress-kubio-ai-page-builder-plugin-2-7-0-cross-site-scripting-xss-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, @@ -91104,40 +91562,12 @@ "is_latest_snapshot": false }, { - "version_id": "wordpress--2-4-9", + "version_id": "wordpress--2-7-0", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "2.4.9", + "version": "2.7.0", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/wp-job-portal/vulnerability/wordpress-wp-job-portal-plugin-2-4-9-authenticated-subscriber-arbitrary-file-deletion-via-resume-custom-file-field-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--2-5-2-unauthenticated-payment-amount-validation-bypass-via-form-id-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "2-5-2-unauthenticated-payment-amount-validation-bypass-via-form-id-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/sureforms/vulnerability/wordpress-sureforms-plugin-2-5-2-unauthenticated-payment-amount-validation-bypass-via-form-id-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--2-5-2", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "2.5.2", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/sureforms/vulnerability/wordpress-sureforms-plugin-2-5-2-unauthenticated-payment-amount-validation-bypass-via-form-id-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/kubio/vulnerability/wordpress-kubio-ai-page-builder-plugin-2-7-0-cross-site-scripting-xss-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, @@ -91174,12 +91604,12 @@ "is_latest_snapshot": false }, { - "version_id": "wordpress--2-11-2-authenticated-contributor-sensitive-information-exposure-to-account-takeover-via-shortcode-template-tag-vulnerability", + "version_id": "wordpress--3-15-5-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-post-author-reassignment-via-avatar-field-vulnerability", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "2-11-2-authenticated-contributor-sensitive-information-exposure-to-account-takeover-via-shortcode-template-tag-vulnerability", + "version": "3-15-5-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-post-author-reassignment-via-avatar-field-vulnerability", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/ultimate-member/vulnerability/wordpress-ultimate-member-plugin-2-11-2-authenticated-contributor-sensitive-information-exposure-to-account-takeover-via-shortcode-template-tag-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/profile-builder/vulnerability/wordpress-user-profile-builder-beautiful-user-registration-forms-user-profiles-user-role-editor-plugin-3-15-5-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-post-author-reassignment-via-avatar-field-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, @@ -91188,12 +91618,12 @@ "is_latest_snapshot": false }, { - "version_id": "wordpress--2-11-2", + "version_id": "wordpress--3-15-5", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "2.11.2", + "version": "3.15.5", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/ultimate-member/vulnerability/wordpress-ultimate-member-plugin-2-11-2-authenticated-contributor-sensitive-information-exposure-to-account-takeover-via-shortcode-template-tag-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/profile-builder/vulnerability/wordpress-user-profile-builder-beautiful-user-registration-forms-user-profiles-user-role-editor-plugin-3-15-5-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-post-author-reassignment-via-avatar-field-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, @@ -91202,12 +91632,12 @@ "is_latest_snapshot": false }, { - "version_id": "wordpress--3-0-4-unauthenticated-sql-injection-via-multiformid-parameter-vulnerability", + "version_id": "wordpress--3-21-4-cross-site-scripting-xss-vulnerability", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "3-0-4-unauthenticated-sql-injection-via-multiformid-parameter-vulnerability", + "version": "3-21-4-cross-site-scripting-xss-vulnerability", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/js-support-ticket/vulnerability/wordpress-js-help-desk-ai-powered-support-ticketing-system-plugin-3-0-4-unauthenticated-sql-injection-via-multiformid-parameter-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/ultimate_vc_addons/vulnerability/wordpress-ultimate-addons-for-wpbakery-page-builder-plugin-3-21-4-cross-site-scripting-xss-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, @@ -91216,124 +91646,12 @@ "is_latest_snapshot": false }, { - "version_id": "wordpress--3-0-4", + "version_id": "wordpress--3-21-4", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "3.0.4", + "version": "3.21.4", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/js-support-ticket/vulnerability/wordpress-js-help-desk-ai-powered-support-ticketing-system-plugin-3-0-4-unauthenticated-sql-injection-via-multiformid-parameter-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--3-0-22-unauthenticated-rest-call-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3-0-22-unauthenticated-rest-call-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/leadconnector/vulnerability/wordpress-leadconnector-plugin-3-0-22-unauthenticated-rest-call-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--3-0-22", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3.0.22", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/leadconnector/vulnerability/wordpress-leadconnector-plugin-3-0-22-unauthenticated-rest-call-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--3-4-3-unauthenticated-arbitrary-shortcode-execution-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3-4-3-unauthenticated-arbitrary-shortcode-execution-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/responsive-add-ons/vulnerability/wordpress-responsive-plus-plugin-3-4-3-unauthenticated-arbitrary-shortcode-execution-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--3-4-3", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3.4.3", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/responsive-add-ons/vulnerability/wordpress-responsive-plus-plugin-3-4-3-unauthenticated-arbitrary-shortcode-execution-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--3-8-unauthenticated-stored-cross-site-scripting-via-user-agent-http-header-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3-8-unauthenticated-stored-cross-site-scripting-via-user-agent-http-header-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/blackhole-bad-bots/vulnerability/wordpress-blackhole-for-bad-bots-plugin-3-8-unauthenticated-stored-cross-site-scripting-via-user-agent-http-header-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--3-8", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3.8", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/blackhole-bad-bots/vulnerability/wordpress-blackhole-for-bad-bots-plugin-3-8-unauthenticated-stored-cross-site-scripting-via-user-agent-http-header-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--3-28-31-authenticated-editor-php-object-injection-via-post-content-of-admin-form-posts-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3-28-31-authenticated-editor-php-object-injection-via-post-content-of-admin-form-posts-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/acf-frontend-form-element/vulnerability/wordpress-frontend-admin-by-dynamiapps-plugin-3-28-31-authenticated-editor-php-object-injection-via-post-content-of-admin-form-posts-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--3-28-31", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3.28.31", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/acf-frontend-form-element/vulnerability/wordpress-frontend-admin-by-dynamiapps-plugin-3-28-31-authenticated-editor-php-object-injection-via-post-content-of-admin-form-posts-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/ultimate_vc_addons/vulnerability/wordpress-ultimate-addons-for-wpbakery-page-builder-plugin-3-21-4-cross-site-scripting-xss-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, @@ -91566,12 +91884,12 @@ "is_latest_snapshot": false }, { - "version_id": "wordpress--7-8-2-reflected-cross-site-scripting-via-noresults-parameter-vulnerability", + "version_id": "wordpress--7-4-10-authenticated-contributor-stored-cross-site-scripting-via-max-width-shortcode-attribute-vulnerability", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "7-8-2-reflected-cross-site-scripting-via-noresults-parameter-vulnerability", + "version": "7-4-10-authenticated-contributor-stored-cross-site-scripting-via-max-width-shortcode-attribute-vulnerability", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/bakkbone-florist-companion/vulnerability/wordpress-floristpress-for-woo-plugin-7-8-2-reflected-cross-site-scripting-via-noresults-parameter-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/shortcodes-ultimate/vulnerability/wordpress-wp-shortcodes-plugin-shortcodes-ultimate-plugin-7-4-10-authenticated-contributor-stored-cross-site-scripting-via-max-width-shortcode-attribute-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, @@ -91580,12 +91898,12 @@ "is_latest_snapshot": false }, { - "version_id": "wordpress--7-8-2", + "version_id": "wordpress--7-4-10", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "7.8.2", + "version": "7.4.10", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/bakkbone-florist-companion/vulnerability/wordpress-floristpress-for-woo-plugin-7-8-2-reflected-cross-site-scripting-via-noresults-parameter-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/shortcodes-ultimate/vulnerability/wordpress-wp-shortcodes-plugin-shortcodes-ultimate-plugin-7-4-10-authenticated-contributor-stored-cross-site-scripting-via-max-width-shortcode-attribute-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, @@ -91605,6 +91923,62 @@ "security_relevant": true, "reason": "security-release", "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "wordpress--10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "wordpress--10-5-1", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "10.5.1", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "wordpress--51-1-38-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-widgets-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "51-1-38-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-widgets-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/king-addons/vulnerability/wordpress-king-addons-for-elementor-plugin-51-1-38-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-widgets-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "wordpress--51-1-53", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "51.1.53", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/king-addons/vulnerability/wordpress-king-addons-for-elementor-plugin-51-1-38-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-widgets-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], "is_latest_snapshot": true } ] diff --git a/08-threat-intel/generated/dashboard/data/source-catalog-audit.json b/08-threat-intel/generated/dashboard/data/source-catalog-audit.json index 54150b97..180dabed 100644 --- a/08-threat-intel/generated/dashboard/data/source-catalog-audit.json +++ b/08-threat-intel/generated/dashboard/data/source-catalog-audit.json @@ -1,5 +1,5 @@ { - "generated_at": "2026-03-31T09:17:00+00:00", + "generated_at": "2026-04-01T09:17:08+00:00", "system_count": 62, "source_count": 179, "active_source_count": 102, diff --git a/08-threat-intel/generated/dashboard/data/source-health.json b/08-threat-intel/generated/dashboard/data/source-health.json index 9efe993e..4c8e202e 100644 --- a/08-threat-intel/generated/dashboard/data/source-health.json +++ b/08-threat-intel/generated/dashboard/data/source-health.json @@ -1,17 +1,17 @@ { - "generated_at": "2026-03-31T09:18:05+00:00", + "generated_at": "2026-04-01T09:20:10+00:00", "active_source_count": 102, "green_source_count": 102, "failure_count": 0, "all_green": true, - "last_fully_green_run": "2026-03-31T09:18:05+00:00", + "last_fully_green_run": "2026-04-01T09:20:10+00:00", "retries_performed": 0, "probes": [ { "system_id": "adminer", "source_name": "OSV Adminer", "source_kind": "osv-batch", - "elapsed_seconds": 3.959, + "elapsed_seconds": 18.898, "kind": "osv-batch", "items_seen": 1 }, @@ -27,7 +27,7 @@ "system_id": "angular", "source_name": "OSV Angular", "source_kind": "osv-batch", - "elapsed_seconds": 2.141, + "elapsed_seconds": 14.188, "kind": "osv-batch", "items_seen": 1 }, @@ -35,7 +35,7 @@ "system_id": "apache-httpd", "source_name": "Apache HTTPD Security", "source_kind": "html-links", - "elapsed_seconds": 2.563, + "elapsed_seconds": 14.188, "kind": "html-links", "items_seen": 182 }, @@ -43,7 +43,7 @@ "system_id": "apache-httpd", "source_name": "CISA KEV Apache HTTPD", "source_kind": "kev-json", - "elapsed_seconds": 2.563, + "elapsed_seconds": 14.188, "kind": "kev-json", "items_seen": 1555 }, @@ -51,7 +51,7 @@ "system_id": "apache-tomcat", "source_name": "Apache Tomcat Security", "source_kind": "html-links", - "elapsed_seconds": 2.563, + "elapsed_seconds": 14.188, "kind": "html-links", "items_seen": 270 }, @@ -59,7 +59,7 @@ "system_id": "apache-tomcat", "source_name": "CISA KEV Tomcat", "source_kind": "kev-json", - "elapsed_seconds": 2.563, + "elapsed_seconds": 14.188, "kind": "kev-json", "items_seen": 1555 }, @@ -67,7 +67,7 @@ "system_id": "aspnet-core", "source_name": "OSV ASP.NET Core", "source_kind": "osv-batch", - "elapsed_seconds": 3.397, + "elapsed_seconds": 18.898, "kind": "osv-batch", "items_seen": 1 }, @@ -75,7 +75,7 @@ "system_id": "astro", "source_name": "OSV Astro", "source_kind": "osv-batch", - "elapsed_seconds": 2.584, + "elapsed_seconds": 14.203, "kind": "osv-batch", "items_seen": 1 }, @@ -83,7 +83,7 @@ "system_id": "caddy", "source_name": "OSV Caddy", "source_kind": "osv-batch", - "elapsed_seconds": 4.228, + "elapsed_seconds": 18.498, "kind": "osv-batch", "items_seen": 1 }, @@ -91,7 +91,7 @@ "system_id": "directus", "source_name": "Directus GitHub Advisories", "source_kind": "html-links", - "elapsed_seconds": 0.031, + "elapsed_seconds": 0.032, "kind": "html-links", "items_seen": 127 }, @@ -99,7 +99,7 @@ "system_id": "directus", "source_name": "OSV Directus", "source_kind": "osv-batch", - "elapsed_seconds": 1.191, + "elapsed_seconds": 4.369, "kind": "osv-batch", "items_seen": 1 }, @@ -115,7 +115,7 @@ "system_id": "discourse", "source_name": "Discourse Security RSS", "source_kind": "rss-feed", - "elapsed_seconds": 0.028, + "elapsed_seconds": 0.029, "kind": "rss-feed", "items_seen": 3 }, @@ -123,7 +123,7 @@ "system_id": "discourse", "source_name": "OSV Discourse", "source_kind": "osv-batch", - "elapsed_seconds": 1.199, + "elapsed_seconds": 4.214, "kind": "osv-batch", "items_seen": 1 }, @@ -131,7 +131,7 @@ "system_id": "django", "source_name": "Django Security Releases Archive", "source_kind": "vendor-index", - "elapsed_seconds": 2.154, + "elapsed_seconds": 9.929, "kind": "vendor-index", "items_seen": 1276 }, @@ -139,7 +139,7 @@ "system_id": "django", "source_name": "Django Security Weblog", "source_kind": "vendor-index", - "elapsed_seconds": 2.141, + "elapsed_seconds": 9.908, "kind": "vendor-index", "items_seen": 332 }, @@ -147,7 +147,7 @@ "system_id": "django", "source_name": "OSV Django", "source_kind": "osv-batch", - "elapsed_seconds": 4.98, + "elapsed_seconds": 17.428, "kind": "osv-batch", "items_seen": 1 }, @@ -155,7 +155,7 @@ "system_id": "drupal", "source_name": "Drupal Security Advisories RSS", "source_kind": "rss-feed", - "elapsed_seconds": 0.033, + "elapsed_seconds": 0.035, "kind": "rss-feed", "items_seen": 20 }, @@ -163,7 +163,7 @@ "system_id": "drupal", "source_name": "OSV Drupal", "source_kind": "osv-batch", - "elapsed_seconds": 2.139, + "elapsed_seconds": 5.145, "kind": "osv-batch", "items_seen": 1 }, @@ -171,7 +171,7 @@ "system_id": "echo", "source_name": "OSV Echo", "source_kind": "osv-batch", - "elapsed_seconds": 3.808, + "elapsed_seconds": 18.876, "kind": "osv-batch", "items_seen": 1 }, @@ -179,7 +179,7 @@ "system_id": "esbuild", "source_name": "OSV esbuild", "source_kind": "osv-batch", - "elapsed_seconds": 2.903, + "elapsed_seconds": 14.357, "kind": "osv-batch", "items_seen": 1 }, @@ -187,7 +187,7 @@ "system_id": "express", "source_name": "OSV Express", "source_kind": "osv-batch", - "elapsed_seconds": 2.283, + "elapsed_seconds": 14.479, "kind": "osv-batch", "items_seen": 1 }, @@ -195,7 +195,7 @@ "system_id": "fastify", "source_name": "OSV Fastify", "source_kind": "osv-batch", - "elapsed_seconds": 2.631, + "elapsed_seconds": 13.602, "kind": "osv-batch", "items_seen": 1 }, @@ -203,7 +203,7 @@ "system_id": "flask", "source_name": "OSV Flask", "source_kind": "osv-batch", - "elapsed_seconds": 3.393, + "elapsed_seconds": 18.496, "kind": "osv-batch", "items_seen": 1 }, @@ -211,7 +211,7 @@ "system_id": "ghost", "source_name": "Ghost GitHub Advisories", "source_kind": "html-links", - "elapsed_seconds": 0.033, + "elapsed_seconds": 0.034, "kind": "html-links", "items_seen": 119 }, @@ -219,7 +219,7 @@ "system_id": "ghost", "source_name": "OSV Ghost", "source_kind": "osv-batch", - "elapsed_seconds": 1.307, + "elapsed_seconds": 4.608, "kind": "osv-batch", "items_seen": 1 }, @@ -227,7 +227,7 @@ "system_id": "gin", "source_name": "OSV Gin", "source_kind": "osv-batch", - "elapsed_seconds": 3.38, + "elapsed_seconds": 18.918, "kind": "osv-batch", "items_seen": 1 }, @@ -235,7 +235,7 @@ "system_id": "gitea", "source_name": "OSV Gitea", "source_kind": "osv-batch", - "elapsed_seconds": 3.896, + "elapsed_seconds": 19.771, "kind": "osv-batch", "items_seen": 1 }, @@ -243,7 +243,7 @@ "system_id": "gitlab-ce", "source_name": "GitLab Advisory Database", "source_kind": "html-links", - "elapsed_seconds": 2.815, + "elapsed_seconds": 14.357, "kind": "html-links", "items_seen": 5 }, @@ -251,7 +251,7 @@ "system_id": "gitlab-ce", "source_name": "GitLab Security Releases Atom", "source_kind": "atom-feed", - "elapsed_seconds": 2.815, + "elapsed_seconds": 14.357, "kind": "atom-feed", "items_seen": 187 }, @@ -259,7 +259,7 @@ "system_id": "grafana", "source_name": "CISA KEV Grafana", "source_kind": "kev-json", - "elapsed_seconds": 2.815, + "elapsed_seconds": 14.357, "kind": "kev-json", "items_seen": 1555 }, @@ -267,7 +267,7 @@ "system_id": "grafana", "source_name": "Grafana Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 2.815, + "elapsed_seconds": 14.357, "kind": "html-links", "items_seen": 159 }, @@ -275,7 +275,7 @@ "system_id": "hapi", "source_name": "OSV Hapi", "source_kind": "osv-batch", - "elapsed_seconds": 2.815, + "elapsed_seconds": 14.205, "kind": "osv-batch", "items_seen": 1 }, @@ -283,7 +283,7 @@ "system_id": "haproxy", "source_name": "HAProxy Blog Feed", "source_kind": "rss-feed", - "elapsed_seconds": 2.631, + "elapsed_seconds": 14.205, "kind": "rss-feed", "items_seen": 10 }, @@ -291,7 +291,7 @@ "system_id": "jenkins", "source_name": "Jenkins Security Advisories RSS", "source_kind": "rss-feed", - "elapsed_seconds": 2.815, + "elapsed_seconds": 14.357, "kind": "rss-feed", "items_seen": 96 }, @@ -299,15 +299,15 @@ "system_id": "joomla", "source_name": "Joomla Security Centre", "source_kind": "html-links", - "elapsed_seconds": 0.033, + "elapsed_seconds": 0.035, "kind": "html-links", - "items_seen": 139 + "items_seen": 146 }, { "system_id": "joomla", "source_name": "OSV Joomla", "source_kind": "osv-batch", - "elapsed_seconds": 1.342, + "elapsed_seconds": 4.83, "kind": "osv-batch", "items_seen": 1 }, @@ -315,7 +315,7 @@ "system_id": "kibana", "source_name": "Elastic Product Security", "source_kind": "html-links", - "elapsed_seconds": 2.815, + "elapsed_seconds": 14.357, "kind": "html-links", "items_seen": 66 }, @@ -323,7 +323,7 @@ "system_id": "kibana", "source_name": "NVD Kibana", "source_kind": "nvd-search", - "elapsed_seconds": 4.196, + "elapsed_seconds": 18.9, "kind": "nvd-search", "items_seen": 1 }, @@ -331,7 +331,7 @@ "system_id": "koa", "source_name": "OSV Koa", "source_kind": "osv-batch", - "elapsed_seconds": 2.426, + "elapsed_seconds": 13.185, "kind": "osv-batch", "items_seen": 1 }, @@ -339,7 +339,7 @@ "system_id": "laravel", "source_name": "OSV Laravel", "source_kind": "osv-batch", - "elapsed_seconds": 3.686, + "elapsed_seconds": 14.359, "kind": "osv-batch", "items_seen": 1 }, @@ -347,7 +347,7 @@ "system_id": "magento-open-source", "source_name": "Magento GitHub Advisories", "source_kind": "html-links", - "elapsed_seconds": 0.02, + "elapsed_seconds": 0.021, "kind": "html-links", "items_seen": 99 }, @@ -355,7 +355,7 @@ "system_id": "magento-open-source", "source_name": "OSV Magento Open Source", "source_kind": "osv-batch", - "elapsed_seconds": 1.085, + "elapsed_seconds": 4.241, "kind": "osv-batch", "items_seen": 1 }, @@ -363,7 +363,7 @@ "system_id": "magento-open-source", "source_name": "Sansec Research", "source_kind": "html-links", - "elapsed_seconds": 0.02, + "elapsed_seconds": 0.021, "kind": "html-links", "items_seen": 136 }, @@ -371,7 +371,7 @@ "system_id": "mattermost", "source_name": "Mattermost Security Updates JSON", "source_kind": "json-feed", - "elapsed_seconds": 2.815, + "elapsed_seconds": 14.357, "kind": "json-feed", "items_seen": 594 }, @@ -379,7 +379,7 @@ "system_id": "mattermost", "source_name": "OSV Mattermost", "source_kind": "osv-batch", - "elapsed_seconds": 5.583, + "elapsed_seconds": 19.496, "kind": "osv-batch", "items_seen": 1 }, @@ -387,7 +387,7 @@ "system_id": "mediawiki", "source_name": "MediaWiki Announce RSS", "source_kind": "rss-feed", - "elapsed_seconds": 0.03, + "elapsed_seconds": 0.031, "kind": "rss-feed", "items_seen": 30 }, @@ -395,7 +395,7 @@ "system_id": "mediawiki", "source_name": "OSV MediaWiki", "source_kind": "osv-batch", - "elapsed_seconds": 1.383, + "elapsed_seconds": 4.372, "kind": "osv-batch", "items_seen": 1 }, @@ -403,7 +403,7 @@ "system_id": "medusa", "source_name": "OSV Medusa", "source_kind": "osv-batch", - "elapsed_seconds": 1.067, + "elapsed_seconds": 4.19, "kind": "osv-batch", "items_seen": 1 }, @@ -411,7 +411,7 @@ "system_id": "moodle", "source_name": "OSV Moodle", "source_kind": "osv-batch", - "elapsed_seconds": 4.35, + "elapsed_seconds": 7.956, "kind": "osv-batch", "items_seen": 1 }, @@ -419,7 +419,7 @@ "system_id": "nestjs", "source_name": "OSV NestJS", "source_kind": "osv-batch", - "elapsed_seconds": 2.26, + "elapsed_seconds": 13.185, "kind": "osv-batch", "items_seen": 1 }, @@ -427,7 +427,7 @@ "system_id": "nextjs", "source_name": "OSV Next.js", "source_kind": "osv-batch", - "elapsed_seconds": 1.537, + "elapsed_seconds": 4.821, "kind": "osv-batch", "items_seen": 1 }, @@ -435,7 +435,7 @@ "system_id": "nginx", "source_name": "CISA KEV NGINX", "source_kind": "kev-json", - "elapsed_seconds": 2.563, + "elapsed_seconds": 14.188, "kind": "kev-json", "items_seen": 1555 }, @@ -443,7 +443,7 @@ "system_id": "nginx", "source_name": "NGINX Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 2.563, + "elapsed_seconds": 14.188, "kind": "html-links", "items_seen": 150 }, @@ -451,7 +451,7 @@ "system_id": "nodejs", "source_name": "CISA KEV Node.js", "source_kind": "kev-json", - "elapsed_seconds": 2.563, + "elapsed_seconds": 13.176, "kind": "kev-json", "items_seen": 1555 }, @@ -459,7 +459,7 @@ "system_id": "nodejs", "source_name": "Node.js Security Releases", "source_kind": "html-links", - "elapsed_seconds": 1.31, + "elapsed_seconds": 4.575, "kind": "html-links", "items_seen": 73 }, @@ -467,7 +467,7 @@ "system_id": "nuxt", "source_name": "OSV Nuxt", "source_kind": "osv-batch", - "elapsed_seconds": 2.246, + "elapsed_seconds": 9.908, "kind": "osv-batch", "items_seen": 1 }, @@ -475,7 +475,7 @@ "system_id": "opencart", "source_name": "OSV OpenCart", "source_kind": "osv-batch", - "elapsed_seconds": 1.326, + "elapsed_seconds": 6.748, "kind": "osv-batch", "items_seen": 1 }, @@ -483,7 +483,7 @@ "system_id": "opencart", "source_name": "OpenCart Releases", "source_kind": "html-links", - "elapsed_seconds": 0.01, + "elapsed_seconds": 0.011, "kind": "html-links", "items_seen": 1500 }, @@ -491,7 +491,7 @@ "system_id": "openmage", "source_name": "OSV OpenMage", "source_kind": "osv-batch", - "elapsed_seconds": 1.117, + "elapsed_seconds": 4.899, "kind": "osv-batch", "items_seen": 1 }, @@ -499,7 +499,7 @@ "system_id": "openmage", "source_name": "OpenMage GitHub Advisories", "source_kind": "html-links", - "elapsed_seconds": 0.02, + "elapsed_seconds": 0.018, "kind": "html-links", "items_seen": 125 }, @@ -507,7 +507,7 @@ "system_id": "phpmyadmin", "source_name": "OSV phpMyAdmin", "source_kind": "osv-batch", - "elapsed_seconds": 4.196, + "elapsed_seconds": 19.322, "kind": "osv-batch", "items_seen": 1 }, @@ -515,7 +515,7 @@ "system_id": "phpmyadmin", "source_name": "phpMyAdmin Security Page", "source_kind": "html-links", - "elapsed_seconds": 2.631, + "elapsed_seconds": 14.205, "kind": "html-links", "items_seen": 263 }, @@ -523,7 +523,7 @@ "system_id": "prestashop", "source_name": "Friends Of Presta Security", "source_kind": "html-links", - "elapsed_seconds": 0.012, + "elapsed_seconds": 0.013, "kind": "html-links", "items_seen": 38 }, @@ -531,7 +531,7 @@ "system_id": "prestashop", "source_name": "GitHub PrestaShop Advisories", "source_kind": "html-links", - "elapsed_seconds": 0.012, + "elapsed_seconds": 0.014, "kind": "html-links", "items_seen": 127 }, @@ -539,7 +539,7 @@ "system_id": "prestashop", "source_name": "OSV PrestaShop", "source_kind": "osv-batch", - "elapsed_seconds": 1.159, + "elapsed_seconds": 4.35, "kind": "osv-batch", "items_seen": 1 }, @@ -547,7 +547,7 @@ "system_id": "prestashop", "source_name": "PrestaShop Security Page", "source_kind": "html-links", - "elapsed_seconds": 0.012, + "elapsed_seconds": 0.014, "kind": "html-links", "items_seen": 60 }, @@ -555,7 +555,7 @@ "system_id": "rails", "source_name": "OSV Rails", "source_kind": "osv-batch", - "elapsed_seconds": 3.323, + "elapsed_seconds": 18.898, "kind": "osv-batch", "items_seen": 1 }, @@ -563,7 +563,7 @@ "system_id": "react", "source_name": "OSV React", "source_kind": "osv-batch", - "elapsed_seconds": 1.274, + "elapsed_seconds": 4.231, "kind": "osv-batch", "items_seen": 1 }, @@ -571,7 +571,7 @@ "system_id": "redmine", "source_name": "OSV Redmine", "source_kind": "osv-batch", - "elapsed_seconds": 4.913, + "elapsed_seconds": 19.059, "kind": "osv-batch", "items_seen": 1 }, @@ -579,7 +579,7 @@ "system_id": "redmine", "source_name": "Redmine Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 2.885, + "elapsed_seconds": 14.359, "kind": "html-links", "items_seen": 371 }, @@ -587,7 +587,7 @@ "system_id": "saleor", "source_name": "GitHub Saleor Advisories", "source_kind": "html-links", - "elapsed_seconds": 0.006, + "elapsed_seconds": 0.004, "kind": "html-links", "items_seen": 120 }, @@ -595,7 +595,7 @@ "system_id": "saleor", "source_name": "OSV Saleor", "source_kind": "osv-batch", - "elapsed_seconds": 1.453, + "elapsed_seconds": 4.195, "kind": "osv-batch", "items_seen": 1 }, @@ -603,7 +603,7 @@ "system_id": "shopware", "source_name": "OSV Shopware", "source_kind": "osv-batch", - "elapsed_seconds": 1.661, + "elapsed_seconds": 4.388, "kind": "osv-batch", "items_seen": 1 }, @@ -611,7 +611,7 @@ "system_id": "shopware", "source_name": "Shopware Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 0.01, + "elapsed_seconds": 0.013, "kind": "html-links", "items_seen": 129 }, @@ -619,7 +619,7 @@ "system_id": "spring-boot", "source_name": "OSV Spring Boot", "source_kind": "osv-batch", - "elapsed_seconds": 2.815, + "elapsed_seconds": 14.206, "kind": "osv-batch", "items_seen": 1 }, @@ -627,7 +627,7 @@ "system_id": "spring-boot", "source_name": "Spring Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 1.652, + "elapsed_seconds": 5.161, "kind": "html-links", "items_seen": 118 }, @@ -635,7 +635,7 @@ "system_id": "spring-framework", "source_name": "OSV Spring Framework", "source_kind": "osv-batch", - "elapsed_seconds": 2.643, + "elapsed_seconds": 13.224, "kind": "osv-batch", "items_seen": 1 }, @@ -643,7 +643,7 @@ "system_id": "spring-framework", "source_name": "Spring Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 1.447, + "elapsed_seconds": 4.881, "kind": "html-links", "items_seen": 118 }, @@ -651,7 +651,7 @@ "system_id": "spring-security", "source_name": "OSV Spring Security", "source_kind": "osv-batch", - "elapsed_seconds": 2.897, + "elapsed_seconds": 14.359, "kind": "osv-batch", "items_seen": 1 }, @@ -659,7 +659,7 @@ "system_id": "spring-security", "source_name": "Spring Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 1.536, + "elapsed_seconds": 5.11, "kind": "html-links", "items_seen": 118 }, @@ -667,7 +667,7 @@ "system_id": "strapi", "source_name": "OSV Strapi", "source_kind": "osv-batch", - "elapsed_seconds": 1.347, + "elapsed_seconds": 14.412, "kind": "osv-batch", "items_seen": 1 }, @@ -675,7 +675,7 @@ "system_id": "strapi", "source_name": "Strapi GitHub Advisories", "source_kind": "html-links", - "elapsed_seconds": 0.032, + "elapsed_seconds": 0.033, "kind": "html-links", "items_seen": 124 }, @@ -683,7 +683,7 @@ "system_id": "sveltekit", "source_name": "OSV SvelteKit", "source_kind": "osv-batch", - "elapsed_seconds": 2.244, + "elapsed_seconds": 13.966, "kind": "osv-batch", "items_seen": 1 }, @@ -691,7 +691,7 @@ "system_id": "symfony", "source_name": "OSV Symfony", "source_kind": "osv-batch", - "elapsed_seconds": 4.892, + "elapsed_seconds": 14.75, "kind": "osv-batch", "items_seen": 1 }, @@ -699,7 +699,7 @@ "system_id": "traefik", "source_name": "OSV Traefik", "source_kind": "osv-batch", - "elapsed_seconds": 3.748, + "elapsed_seconds": 19.052, "kind": "osv-batch", "items_seen": 1 }, @@ -707,7 +707,7 @@ "system_id": "undici", "source_name": "OSV Undici", "source_kind": "osv-batch", - "elapsed_seconds": 2.886, + "elapsed_seconds": 14.206, "kind": "osv-batch", "items_seen": 1 }, @@ -715,7 +715,7 @@ "system_id": "vite", "source_name": "OSV Vite", "source_kind": "osv-batch", - "elapsed_seconds": 2.174, + "elapsed_seconds": 14.346, "kind": "osv-batch", "items_seen": 1 }, @@ -723,7 +723,7 @@ "system_id": "vue", "source_name": "OSV Vue", "source_kind": "osv-batch", - "elapsed_seconds": 1.059, + "elapsed_seconds": 3.14, "kind": "osv-batch", "items_seen": 1 }, @@ -731,7 +731,7 @@ "system_id": "webpack", "source_name": "OSV webpack", "source_kind": "osv-batch", - "elapsed_seconds": 2.695, + "elapsed_seconds": 14.479, "kind": "osv-batch", "items_seen": 1 }, @@ -739,7 +739,7 @@ "system_id": "werkzeug", "source_name": "OSV Werkzeug", "source_kind": "osv-batch", - "elapsed_seconds": 3.637, + "elapsed_seconds": 18.497, "kind": "osv-batch", "items_seen": 1 }, @@ -755,7 +755,7 @@ "system_id": "woocommerce", "source_name": "OSV WooCommerce", "source_kind": "osv-batch", - "elapsed_seconds": 1.062, + "elapsed_seconds": 4.834, "kind": "osv-batch", "items_seen": 1 }, @@ -763,7 +763,7 @@ "system_id": "woocommerce", "source_name": "Patchstack Database", "source_kind": "html-links", - "elapsed_seconds": 0.014, + "elapsed_seconds": 0.016, "kind": "html-links", "items_seen": 193 }, @@ -771,7 +771,7 @@ "system_id": "woocommerce", "source_name": "Woo Developer Advisories", "source_kind": "html-links", - "elapsed_seconds": 0.017, + "elapsed_seconds": 0.018, "kind": "html-links", "items_seen": 121 }, @@ -787,7 +787,7 @@ "system_id": "wordpress", "source_name": "Patchstack Database", "source_kind": "html-links", - "elapsed_seconds": 0.035, + "elapsed_seconds": 0.036, "kind": "html-links", "items_seen": 193 }, @@ -795,7 +795,7 @@ "system_id": "wordpress", "source_name": "PortSwigger Research", "source_kind": "html-links", - "elapsed_seconds": 1.803, + "elapsed_seconds": 5.197, "kind": "html-links", "items_seen": 99 }, @@ -803,7 +803,7 @@ "system_id": "wordpress", "source_name": "WPScan Vulnerability Database", "source_kind": "html-links", - "elapsed_seconds": 0.035, + "elapsed_seconds": 0.036, "kind": "html-links", "items_seen": 74 }, @@ -811,7 +811,7 @@ "system_id": "wordpress", "source_name": "WordPress Security News RSS", "source_kind": "rss-feed", - "elapsed_seconds": 0.036, + "elapsed_seconds": 0.038, "kind": "rss-feed", "items_seen": 10 }, @@ -819,81 +819,81 @@ "system_id": "wordpress", "source_name": "Wordfence Vulnerability Database", "source_kind": "html-links", - "elapsed_seconds": 0.036, + "elapsed_seconds": 0.038, "kind": "html-links", "items_seen": 0 } ], "failures": [], "slow_sources": [ + { + "system_id": "gitea", + "source_name": "OSV Gitea", + "source_kind": "osv-batch", + "elapsed_seconds": 19.771, + "status": "ok" + }, { "system_id": "mattermost", "source_name": "OSV Mattermost", "source_kind": "osv-batch", - "elapsed_seconds": 5.583, - "status": "ok" - }, - { - "system_id": "django", - "source_name": "OSV Django", - "source_kind": "osv-batch", - "elapsed_seconds": 4.98, - "status": "ok" - }, - { - "system_id": "redmine", - "source_name": "OSV Redmine", - "source_kind": "osv-batch", - "elapsed_seconds": 4.913, - "status": "ok" - }, - { - "system_id": "symfony", - "source_name": "OSV Symfony", - "source_kind": "osv-batch", - "elapsed_seconds": 4.892, - "status": "ok" - }, - { - "system_id": "moodle", - "source_name": "OSV Moodle", - "source_kind": "osv-batch", - "elapsed_seconds": 4.35, - "status": "ok" - }, - { - "system_id": "caddy", - "source_name": "OSV Caddy", - "source_kind": "osv-batch", - "elapsed_seconds": 4.228, - "status": "ok" - }, - { - "system_id": "kibana", - "source_name": "NVD Kibana", - "source_kind": "nvd-search", - "elapsed_seconds": 4.196, + "elapsed_seconds": 19.496, "status": "ok" }, { "system_id": "phpmyadmin", "source_name": "OSV phpMyAdmin", "source_kind": "osv-batch", - "elapsed_seconds": 4.196, + "elapsed_seconds": 19.322, + "status": "ok" + }, + { + "system_id": "redmine", + "source_name": "OSV Redmine", + "source_kind": "osv-batch", + "elapsed_seconds": 19.059, + "status": "ok" + }, + { + "system_id": "traefik", + "source_name": "OSV Traefik", + "source_kind": "osv-batch", + "elapsed_seconds": 19.052, + "status": "ok" + }, + { + "system_id": "gin", + "source_name": "OSV Gin", + "source_kind": "osv-batch", + "elapsed_seconds": 18.918, + "status": "ok" + }, + { + "system_id": "kibana", + "source_name": "NVD Kibana", + "source_kind": "nvd-search", + "elapsed_seconds": 18.9, "status": "ok" }, { "system_id": "adminer", "source_name": "OSV Adminer", "source_kind": "osv-batch", - "elapsed_seconds": 3.959, + "elapsed_seconds": 18.898, "status": "ok" }, { - "system_id": "gitea", - "source_name": "OSV Gitea", + "system_id": "aspnet-core", + "source_name": "OSV ASP.NET Core", "source_kind": "osv-batch", - "elapsed_seconds": 3.896, + "elapsed_seconds": 18.898, + "status": "ok" + }, + { + "system_id": "rails", + "source_name": "OSV Rails", + "source_kind": "osv-batch", + "elapsed_seconds": 18.898, "status": "ok" } ], diff --git a/08-threat-intel/generated/dashboard/data/version-backlog.json b/08-threat-intel/generated/dashboard/data/version-backlog.json index e057e324..47fccf2e 100644 --- a/08-threat-intel/generated/dashboard/data/version-backlog.json +++ b/08-threat-intel/generated/dashboard/data/version-backlog.json @@ -1,5 +1,5 @@ { - "generated_at": "2026-03-31T09:18:20+00:00", + "generated_at": "2026-04-01T09:21:05+00:00", "source_gap_entities": [ { "entity_id": "adminer", @@ -3072,6 +3072,13 @@ "official_source_url": "https://meta.discourse.org/t/release-v2025-11-0-ai-translations-improvements-chat-search-new-review-queue-and-improvements-for-posts-with-images/389615", "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" }, + { + "canonical_id": "discourse--5dce90675e", + "system_id": "discourse", + "title": "March 2026 monthly release", + "official_source_url": "https://meta.discourse.org/t/march-2026-monthly-release/399630", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, { "canonical_id": "discourse--615bee56ae", "system_id": "discourse", @@ -3645,13 +3652,6 @@ "title": "February 2024", "official_source_url": "https://www.djangoproject.com/weblog/2024/feb/", "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" - }, - { - "canonical_id": "django--c1c8aebaa5", - "system_id": "django", - "title": "Recent trends in the work of the Django Security Team", - "official_source_url": "https://www.djangoproject.com/weblog/2026/feb/04/recent-trends-security-team/", - "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" } ], "lab_pending": [], diff --git a/08-threat-intel/generated/dashboard/data/version-completeness.json b/08-threat-intel/generated/dashboard/data/version-completeness.json index 6784114e..031a91cb 100644 --- a/08-threat-intel/generated/dashboard/data/version-completeness.json +++ b/08-threat-intel/generated/dashboard/data/version-completeness.json @@ -1,9 +1,9 @@ { - "generated_at": "2026-03-31T09:18:20+00:00", + "generated_at": "2026-04-01T09:21:05+00:00", "cataloged_entity_total": 110, "latest_version_synced_count": 95, "source_gap_count": 15, - "security_version_total": 6290, + "security_version_total": 6316, "security_version_entity_count": 83, "auto_promoted_entity_count": 10, "lab_enqueued_count": 3, @@ -206,7 +206,7 @@ "cataloged_entity_total": 1, "latest_version_synced_count": 1, "source_gap_count": 0, - "security_version_count": 80, + "security_version_count": 82, "auto_promoted_count": 0, "latest_versions": [ { @@ -278,16 +278,16 @@ "entity_id": "echo", "display_name": "Echo", "entity_type": "system", - "latest_version": "5.0.4", - "latest_release_at": "2026-02-15T15:55:53Z", + "latest_version": "5.1.0", + "latest_release_at": "2026-03-31T20:56:54Z", "version_sync_status": "green" }, { "entity_id": "echo--repo--github-com-labstack-echo-v4", "display_name": "labstack / echo / v4", "entity_type": "repo", - "latest_version": "5.0.4", - "latest_release_at": "2026-02-15T15:55:53Z", + "latest_version": "5.1.0", + "latest_release_at": "2026-03-31T20:56:54Z", "version_sync_status": "green" } ] @@ -538,14 +538,14 @@ "cataloged_entity_total": 1, "latest_version_synced_count": 1, "source_gap_count": 0, - "security_version_count": 5, + "security_version_count": 1, "auto_promoted_count": 0, "latest_versions": [ { "entity_id": "joomla", "display_name": "Joomla", "entity_type": "system", - "latest_version": "1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html", + "latest_version": "1027-20260301-core-acl-hardening-in-com-ajax.html", "latest_release_at": "", "version_sync_status": "green" } @@ -699,7 +699,7 @@ "cataloged_entity_total": 1, "latest_version_synced_count": 1, "source_gap_count": 0, - "security_version_count": 228, + "security_version_count": 252, "auto_promoted_count": 0, "latest_versions": [ { @@ -755,7 +755,7 @@ "entity_id": "nextjs", "display_name": "Next.js", "entity_type": "system", - "latest_version": "16.2.1", + "latest_version": "16.2.2", "latest_release_at": "", "version_sync_status": "green" }, @@ -763,7 +763,7 @@ "entity_id": "nextjs--project--next", "display_name": "next", "entity_type": "project", - "latest_version": "16.2.1", + "latest_version": "16.2.2", "latest_release_at": "", "version_sync_status": "green" } @@ -1136,16 +1136,16 @@ "entity_id": "strapi", "display_name": "Strapi", "entity_type": "system", - "latest_version": "5.40.0", - "latest_release_at": "2026-03-18T13:33:01Z", + "latest_version": "5.41.0", + "latest_release_at": "2026-04-01T09:17:56Z", "version_sync_status": "green" }, { "entity_id": "strapi--repo--strapi-strapi", "display_name": "strapi / strapi", "entity_type": "repo", - "latest_version": "5.40.0", - "latest_release_at": "2026-03-18T13:33:01Z", + "latest_version": "5.41.0", + "latest_release_at": "2026-04-01T09:17:56Z", "version_sync_status": "green" } ] @@ -1190,16 +1190,16 @@ "entity_id": "symfony", "display_name": "Symfony", "entity_type": "system", - "latest_version": "8.0.7", - "latest_release_at": "2026-03-06T16:59:05+00:00", + "latest_version": "8.0.8", + "latest_release_at": "2026-03-31T21:14:58+00:00", "version_sync_status": "green" }, { "entity_id": "symfony--package--symfony-symfony", "display_name": "symfony / symfony", "entity_type": "package", - "latest_version": "8.0.7", - "latest_release_at": "2026-03-06T16:59:05+00:00", + "latest_version": "8.0.8", + "latest_release_at": "2026-03-31T21:14:58+00:00", "version_sync_status": "green" } ] @@ -1217,8 +1217,8 @@ "entity_id": "traefik", "display_name": "Traefik", "entity_type": "system", - "latest_version": "3.7.0-ea.3", - "latest_release_at": "2026-03-26T11:10:20Z", + "latest_version": "3.7.0-ea.2", + "latest_release_at": "2026-03-23T18:56:07.286130Z", "version_sync_status": "green" }, { @@ -1226,15 +1226,15 @@ "display_name": "traefik / traefik / v3", "entity_type": "repo", "latest_version": "3.7.0-ea.3", - "latest_release_at": "2026-03-26T11:10:20Z", + "latest_release_at": "2026-03-27T20:49:46.252668Z", "version_sync_status": "green" }, { "entity_id": "traefik--extension--github-com-traefik-traefik-v3", "display_name": "traefik / traefik / v3", "entity_type": "extension", - "latest_version": "3.7.0-ea.3", - "latest_release_at": "2026-03-26T11:10:20Z", + "latest_version": "3.7.0-ea.2", + "latest_release_at": "2026-03-23T18:56:07.286130Z", "version_sync_status": "green" } ] @@ -1395,14 +1395,14 @@ "cataloged_entity_total": 2, "latest_version_synced_count": 2, "source_gap_count": 0, - "security_version_count": 2, + "security_version_count": 6, "auto_promoted_count": 1, "latest_versions": [ { "entity_id": "woocommerce", "display_name": "WooCommerce", "entity_type": "system", - "latest_version": "10.6.1", + "latest_version": "10.7", "latest_release_at": "2026-03-12T19:14:25Z", "version_sync_status": "green" }, @@ -1410,7 +1410,7 @@ "entity_id": "woocommerce--repo--woocommerce-woocommerce", "display_name": "woocommerce / woocommerce", "entity_type": "repo", - "latest_version": "10.6.1", + "latest_version": "10.7", "latest_release_at": "2026-03-12T19:14:25Z", "version_sync_status": "green" } @@ -1429,7 +1429,7 @@ "entity_id": "wordpress", "display_name": "WordPress", "entity_type": "system", - "latest_version": "7.9", + "latest_version": "51.1.53", "latest_release_at": "", "version_sync_status": "green" } diff --git a/08-threat-intel/generated/dashboard/docs/architecture-library.html b/08-threat-intel/generated/dashboard/docs/architecture-library.html index 9860d7c8..e98c836f 100644 --- a/08-threat-intel/generated/dashboard/docs/architecture-library.html +++ b/08-threat-intel/generated/dashboard/docs/architecture-library.html @@ -87,7 +87,7 @@

当前架构库镜像

工作台内置镜像页:当前架构库结构化数据镜像。
{
-  "generated_at": "2026-03-31T09:18:21+00:00",
+  "generated_at": "2026-04-01T09:21:06+00:00",
   "title": "当前架构库",
   "summary": "工作台、控制面、数据层、授权边界与系统覆盖的当前真值视图。",
   "sections": [
@@ -127,7 +127,7 @@
         },
         {
           "label": "当前漏洞条目",
-          "value": "2428"
+          "value": "2431"
         }
       ],
       "fields": [
@@ -145,7 +145,7 @@
         },
         {
           "label": "生成时间",
-          "value": "2026-03-31T09:18:21+00:00"
+          "value": "2026-04-01T09:21:06+00:00"
         }
       ],
       "links": [
@@ -6061,7 +6061,7 @@
         },
         {
           "label": "Advisory 数",
-          "value": "2428"
+          "value": "2431"
         },
         {
           "label": "状态类型",
@@ -6080,7 +6080,7 @@
           "items": [
             {
               "title": "人工分诊",
-              "summary": "当前累计 2339 条。",
+              "summary": "当前累计 2342 条。",
               "open": false,
               "fields": [
                 {
@@ -6089,7 +6089,7 @@
                 },
                 {
                   "label": "数量",
-                  "value": "2339"
+                  "value": "2342"
                 }
               ]
             },
diff --git a/08-threat-intel/generated/dashboard/docs/coverage-matrix.html b/08-threat-intel/generated/dashboard/docs/coverage-matrix.html
index 132aa287..e5a70342 100644
--- a/08-threat-intel/generated/dashboard/docs/coverage-matrix.html
+++ b/08-threat-intel/generated/dashboard/docs/coverage-matrix.html
@@ -99,7 +99,7 @@
 | Astro | `frameworks` | `rolling-24m` | `-` | `yes` | `15` | `15` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-03-26T19:01:26.420643Z` |
 | Caddy | `servers` | `rolling-24m` | `-` | `yes` | `29` | `0` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-03-23T04:52:47.870034Z` |
 | Directus | `cms` | `rolling-24m` | `-` | `yes` | `29` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
-| Discourse | `cms` | `rolling-24m` | `-` | `yes` | `30` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `30` | `Wed, 28 May 2025 05:22:52 +0000` |
+| Discourse | `cms` | `rolling-24m` | `-` | `yes` | `31` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `31` | `Wed, 28 May 2025 05:22:52 +0000` |
 | Django | `frameworks` | `rolling-24m` | `-` | `yes` | `82` | `5` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-03-13T21:56:20.301637Z` |
 | Drupal | `cms` | `history-full` | `yes` | `yes` | `70` | `0` | `4` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `Wed, 20 Sep 2023 16:23:05 +0000` |
 | Echo | `frameworks` | `rolling-24m` | `-` | `yes` | `2` | `2` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2024-05-20T16:03:47Z` |
@@ -120,8 +120,8 @@
 | Koa | `frameworks` | `rolling-24m` | `-` | `yes` | `1` | `1` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-02-26T23:36:36.294040Z` |
 | Laravel | `frameworks` | `rolling-24m` | `-` | `yes` | `2` | `2` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-03-13T22:15:34.333730Z` |
 | Magento Open Source | `ecommerce` | `history-full` | `yes` | `yes` | `89` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2025-04-20T01:37:25.860` |
-| Mattermost | `platforms` | `rolling-24m` | `-` | `yes` | `35` | `35` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `Fix Release Date` |
-| MediaWiki | `cms` | `rolling-24m` | `-` | `yes` | `71` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `71` | `Wed, 22 Oct 2025 21:44:43 +0000` |
+| Mattermost | `platforms` | `rolling-24m` | `-` | `yes` | `36` | `36` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `Fix Release Date` |
+| MediaWiki | `cms` | `rolling-24m` | `-` | `yes` | `72` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `72` | `Wed, 22 Oct 2025 21:44:43 +0000` |
 | Medusa | `ecommerce` | `rolling-24m` | `-` | `yes` | `15` | `0` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `15` | `` |
 | Moodle | `cms` | `rolling-24m` | `-` | `yes` | `40` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `40` | `2025-04-09T00:30:58.490` |
 | NestJS | `frameworks` | `rolling-24m` | `-` | `yes` | `2` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `2` | `2026-03-02T20:30:10.923` |
diff --git a/08-threat-intel/generated/dashboard/docs/entity-catalog-report.html b/08-threat-intel/generated/dashboard/docs/entity-catalog-report.html
index ea2e37e9..ec3c250a 100644
--- a/08-threat-intel/generated/dashboard/docs/entity-catalog-report.html
+++ b/08-threat-intel/generated/dashboard/docs/entity-catalog-report.html
@@ -88,7 +88,7 @@
       
工作台内置镜像页:分层实体覆盖、history-full 完整度和 workflow 统计。
# 分层实体覆盖与完整度报告
 
-- 生成时间: `2026-03-31T09:18:20+00:00`
+- 生成时间: `2026-04-01T09:21:04+00:00`
 - 已编目实体: `110`
 - 待编目 backlog: `7`
 - history-full 已完成: `41`
diff --git a/08-threat-intel/generated/dashboard/docs/entity-discovery-backlog.html b/08-threat-intel/generated/dashboard/docs/entity-discovery-backlog.html
index 527cdcd5..749828d7 100644
--- a/08-threat-intel/generated/dashboard/docs/entity-discovery-backlog.html
+++ b/08-threat-intel/generated/dashboard/docs/entity-discovery-backlog.html
@@ -88,7 +88,7 @@
       
工作台内置镜像页:待编目 repo / 插件 / 包 backlog 与等待原因。
# 分层实体发现 Backlog
 
-- 生成时间: `2026-03-31T09:18:20+00:00`
+- 生成时间: `2026-04-01T09:21:04+00:00`
 - 待编目数量: `7`
 
 | candidate_id | root_system | entity_type | risk | reason | waiting_for | source |
diff --git a/08-threat-intel/generated/dashboard/docs/source-catalog-audit.html b/08-threat-intel/generated/dashboard/docs/source-catalog-audit.html
index f762030c..5da9fcc0 100644
--- a/08-threat-intel/generated/dashboard/docs/source-catalog-audit.html
+++ b/08-threat-intel/generated/dashboard/docs/source-catalog-audit.html
@@ -88,7 +88,7 @@
       
工作台内置镜像页:active/retired source、replacement map 与覆盖摘要。
# Source Catalog Audit
 
-- generated_at: `2026-03-31T09:17:00+00:00`
+- generated_at: `2026-04-01T09:17:08+00:00`
 - systems: `62`
 - sources: `179`
 - active_sources: `102`
diff --git a/08-threat-intel/generated/dashboard/docs/testing-completeness-report.html b/08-threat-intel/generated/dashboard/docs/testing-completeness-report.html
index b7ac083d..79b9b600 100644
--- a/08-threat-intel/generated/dashboard/docs/testing-completeness-report.html
+++ b/08-threat-intel/generated/dashboard/docs/testing-completeness-report.html
@@ -88,7 +88,7 @@
       
工作台内置镜像页:89 条 advisory 最新完整度、family 矩阵与 ingest 健康度。
# 全库 Advisory 完整度报告
 
-- 生成时间: `2026-03-31T09:18:21+00:00`
+- 生成时间: `2026-04-01T09:21:06+00:00`
 - 最新 advisory 完整度: `89/89` `verified-real`
 - 合成验证数量: `0`
 - 阻塞数量: `0`
@@ -96,7 +96,7 @@
 - 完整度百分比: `100.0%`
 - active source 全绿: `102/102`
 - source open alerts: `0`
-- 最近一次 source 全绿: `2026-03-31T09:18:05+00:00`
+- 最近一次 source 全绿: `2026-04-01T09:20:10+00:00`
 - 已编目实体: `110`
 - 待编目 backlog: `7`
 
diff --git a/08-threat-intel/generated/dashboard/docs/version-sync-report.html b/08-threat-intel/generated/dashboard/docs/version-sync-report.html
index b90f8abb..4fc63335 100644
--- a/08-threat-intel/generated/dashboard/docs/version-sync-report.html
+++ b/08-threat-intel/generated/dashboard/docs/version-sync-report.html
@@ -88,11 +88,11 @@
       
工作台内置镜像页:安全相关版本历史、source-gap 与版本驱动 lab enqueue 摘要。
# 安全相关版本同步报告
 
-- 生成时间: `2026-03-31T09:18:20+00:00`
+- 生成时间: `2026-04-01T09:21:05+00:00`
 - 已编目实体: `110`
 - 最新版本已同步: `95`
 - 版本 source-gap: `15`
-- 安全相关版本记录: `6290`
+- 安全相关版本记录: `6316`
 - 存在安全版本历史的实体: `83`
 - 自动升级实体: `10`
 - 因版本变化触发 lab 入队: `3`
@@ -110,7 +110,7 @@
 | astro | 3 | 3 | 0 | 32 | 0 |
 | caddy | 3 | 3 | 0 | 7 | 0 |
 | directus | 2 | 2 | 0 | 2 | 1 |
-| discourse | 1 | 1 | 0 | 80 | 0 |
+| discourse | 1 | 1 | 0 | 82 | 0 |
 | django | 2 | 2 | 0 | 182 | 0 |
 | drupal | 1 | 1 | 0 | 74 | 0 |
 | echo | 2 | 2 | 0 | 4 | 0 |
@@ -126,13 +126,13 @@
 | hapi | 2 | 2 | 0 | 4 | 0 |
 | haproxy | 1 | 1 | 0 | 2 | 0 |
 | jenkins | 1 | 0 | 1 | 0 | 0 |
-| joomla | 1 | 1 | 0 | 5 | 0 |
+| joomla | 1 | 1 | 0 | 1 | 0 |
 | kibana | 1 | 0 | 1 | 0 | 0 |
 | koa | 2 | 2 | 0 | 4 | 0 |
 | laravel | 2 | 2 | 0 | 103 | 0 |
 | magento-open-source | 2 | 2 | 0 | 6 | 1 |
 | mattermost | 5 | 5 | 0 | 3854 | 0 |
-| mediawiki | 1 | 1 | 0 | 228 | 0 |
+| mediawiki | 1 | 1 | 0 | 252 | 0 |
 | medusa | 1 | 0 | 1 | 0 | 0 |
 | moodle | 1 | 0 | 1 | 0 | 0 |
 | nestjs | 1 | 0 | 1 | 0 | 0 |
@@ -161,7 +161,7 @@
 | vue | 2 | 2 | 0 | 2 | 0 |
 | webpack | 1 | 0 | 1 | 0 | 0 |
 | werkzeug | 2 | 2 | 0 | 22 | 0 |
-| woocommerce | 2 | 2 | 0 | 2 | 1 |
+| woocommerce | 2 | 2 | 0 | 6 | 1 |
 | wordpress | 1 | 1 | 0 | 55 | 0 |
 
diff --git a/08-threat-intel/generated/dashboard/entities.json b/08-threat-intel/generated/dashboard/entities.json index 12ffe3f5..5f0c648a 100644 --- a/08-threat-intel/generated/dashboard/entities.json +++ b/08-threat-intel/generated/dashboard/entities.json @@ -20,7 +20,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -79,7 +79,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -245,7 +245,7 @@ ], "version_sync_status": "green", "security_version_count": 18, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/angular/angular/security/advisories/GHSA-prjf-86w9-mfqv", @@ -292,7 +292,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 18, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -354,7 +354,7 @@ ], "version_sync_status": "green", "security_version_count": 1, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Apache HTTPD Security" ], @@ -560,7 +560,7 @@ ], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Apache Tomcat Security" ], @@ -763,7 +763,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -827,7 +827,7 @@ ], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/withastro/astro/security/advisories/GHSA-wrwg-2hg8-v723", @@ -887,7 +887,7 @@ ], "version_sync_status": "green", "security_version_count": 28, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/withastro/astro/security/advisories/GHSA-c4pw-33h3-35xw", @@ -954,7 +954,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 32, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -1030,7 +1030,7 @@ ], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "GitHub Releases API", "https://github.com/caddyserver/caddy/security/advisories/GHSA-5r3v-vc8m-m96g", @@ -1080,7 +1080,7 @@ ], "version_sync_status": "green", "security_version_count": 5, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "GitHub Releases API", "https://github.com/caddyserver/caddy/security/advisories/GHSA-4xrr-hq4w-6vf4", @@ -1133,7 +1133,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 7, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -1224,7 +1224,7 @@ ], "version_sync_status": "green", "security_version_count": 1, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "GitHub Releases API", "Directus GitHub Advisories" @@ -1277,7 +1277,7 @@ ], "version_sync_status": "green", "security_version_count": 1, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Directus GitHub Advisories" ], @@ -1376,11 +1376,12 @@ "https://meta.discourse.org/t/3-4-4-bug-fix-and-ux-release/367301", "https://meta.discourse.org/t/3-4-5-security-fixes-release/369347", "https://meta.discourse.org/t/3-4-6-security-fix-release/370631", - "https://meta.discourse.org/t/3-4-7-security-and-maintenance-release/375747" + "https://meta.discourse.org/t/3-4-7-security-and-maintenance-release/375747", + "https://meta.discourse.org/t/january-2026-releases/393903" ], "version_sync_status": "green", - "security_version_count": 80, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "security_version_count": 82, + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Discourse Release Notes RSS", "Discourse Security RSS" @@ -1393,11 +1394,11 @@ "history_backfill_status": "seeded", "latest_sync_status": "green", "official_source_covered": true, - "advisory_count": 30, - "workflow_complete_advisory_count": 30, + "advisory_count": 31, + "workflow_complete_advisory_count": 31, "version_mapped_advisory_count": 0, "first_advisory_at": "2024-12-19T16:53:54+00:00", - "latest_advisory_at": "2026-01-28T17:35:34+00:00", + "latest_advisory_at": "2026-03-31T14:35:49+00:00", "advisory_ids": [ "discourse--0a6de28d35", "discourse--111e9b52a2", @@ -1409,6 +1410,7 @@ "discourse--451d4d9871", "discourse--4dbfe76896", "discourse--5d3cafdece", + "discourse--5dce90675e", "discourse--615bee56ae", "discourse--6216e2732b", "discourse--68e2bb93e1", @@ -1497,7 +1499,7 @@ ], "version_sync_status": "green", "security_version_count": 160, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "npm latest", "https://nvd.nist.gov/vuln/detail/CVE-2019-11358" @@ -1564,7 +1566,7 @@ ], "version_sync_status": "green", "security_version_count": 160, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Django Security Weblog", "Django Security Releases Archive" @@ -1730,7 +1732,7 @@ ], "version_sync_status": "green", "security_version_count": 74, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Drupal Security Advisories RSS" ], @@ -1860,18 +1862,19 @@ "repo_url": "https://github.com/labstack/echo", "package_registry": "", "marketplace_url": "", - "latest_version": "5.0.4", + "latest_version": "5.1.0", "version_scheme": "semver-ish", - "latest_release_at": "2026-02-15T15:55:53Z", - "latest_release_url": "https://github.com/labstack/echo/releases/tag/v5.0.4", + "latest_release_at": "2026-03-31T20:56:54Z", + "latest_release_url": "https://github.com/labstack/echo/releases/tag/v5.1.0", "version_source_refs": [ "https://github.com/labstack/echo/releases/tag/v5.0.4", "https://github.com/labstack/echo/pull/1718", - "https://github.com/labstack/echo/issues/2259" + "https://github.com/labstack/echo/issues/2259", + "https://github.com/labstack/echo/releases/tag/v5.1.0" ], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "GitHub Releases API", "https://github.com/labstack/echo/pull/1718", @@ -1911,14 +1914,14 @@ "repo_url": "", "package_registry": "", "marketplace_url": "", - "latest_version": "5.0.4", + "latest_version": "5.1.0", "version_scheme": "vendor", - "latest_release_at": "2026-02-15T15:55:53Z", - "latest_release_url": "https://github.com/labstack/echo/releases/tag/v5.0.4", + "latest_release_at": "2026-03-31T20:56:54Z", + "latest_release_url": "https://github.com/labstack/echo/releases/tag/v5.1.0", "version_source_refs": [], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -1972,7 +1975,7 @@ ], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/evanw/esbuild/security/advisories/GHSA-67mh-4wv8-2f99" @@ -2016,7 +2019,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -2082,7 +2085,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -2152,7 +2155,7 @@ ], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/fastify/fastify/security/advisories/GHSA-573f-x89g-hqp9", @@ -2198,7 +2201,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -2260,7 +2263,7 @@ ], "version_sync_status": "green", "security_version_count": 22, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/pallets/flask/security/advisories/GHSA-68rp-wp8r-4726" @@ -2304,7 +2307,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 22, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -2367,7 +2370,7 @@ ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "GitHub Releases API", "Ghost GitHub Advisories" @@ -2420,7 +2423,7 @@ ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Ghost GitHub Advisories" ], @@ -2513,7 +2516,7 @@ ], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "GitHub Releases API", "https://nvd.nist.gov/vuln/detail/CVE-2020-28483", @@ -2558,7 +2561,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -2608,7 +2611,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -2680,7 +2683,7 @@ ], "version_sync_status": "green", "security_version_count": 627, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "GitLab Security Releases Atom" ], @@ -2811,7 +2814,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -2931,7 +2934,7 @@ ], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "npm latest", "https://www.npmjs.com/advisories/1482" @@ -2975,7 +2978,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -3036,7 +3039,7 @@ ], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "HAProxy Blog Feed" ], @@ -3110,7 +3113,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -3228,20 +3231,21 @@ "repo_url": "", "package_registry": "", "marketplace_url": "", - "latest_version": "1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html", + "latest_version": "1027-20260301-core-acl-hardening-in-com-ajax.html", "version_scheme": "vendor", "latest_release_at": "", - "latest_release_url": "https://developer.joomla.org/security-centre/1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html", + "latest_release_url": "https://developer.joomla.org/security-centre/1027-20260301-core-acl-hardening-in-com-ajax.html", "version_source_refs": [ "https://developer.joomla.org/security-centre/1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html", "https://developer.joomla.org/security-centre/963-20250401-framework-sql-injection-vulnerability-in-quotenamestr-method-of-database-package.html", "https://developer.joomla.org/security-centre/1010-20250901-core-inadequate-content-filtering-within-the-checkattribute-filter-code.html", "https://developer.joomla.org/security-centre/1011-20250902-core-user-enumeration-in-passkey-authentication-method.html", - "https://developer.joomla.org/security-centre/1016-20260101-core-inadequate-content-filtering-for-data-urls.html" + "https://developer.joomla.org/security-centre/1016-20260101-core-inadequate-content-filtering-for-data-urls.html", + "https://developer.joomla.org/security-centre/1027-20260301-core-acl-hardening-in-com-ajax.html" ], "version_sync_status": "green", - "security_version_count": 5, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "security_version_count": 1, + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Joomla Security Centre" ], @@ -3408,7 +3412,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -3531,7 +3535,7 @@ ], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/koajs/koa/security/advisories/GHSA-7gcc-r8m5-44qm" @@ -3575,7 +3579,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -3636,7 +3640,7 @@ ], "version_sync_status": "green", "security_version_count": 103, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Packagist p2", "https://github.com/laravel/framework/security/advisories/GHSA-66hf-2p6w-jqfw" @@ -3681,7 +3685,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 103, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -3746,7 +3750,7 @@ ], "version_sync_status": "green", "security_version_count": 3, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "GitHub Releases API", "Sansec Research" @@ -3802,7 +3806,7 @@ ], "version_sync_status": "green", "security_version_count": 3, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Sansec Research" ], @@ -3968,7 +3972,7 @@ ], "version_sync_status": "green", "security_version_count": 759, - "last_version_synced_at": "2026-03-31T09:18:10+00:00", + "last_version_synced_at": "2026-04-01T09:20:42+00:00", "latest_version_evidence": [ "Mattermost Security Updates JSON", "https://securityupdates.mattermost.com/security_updates.json", @@ -4019,7 +4023,7 @@ ], "version_sync_status": "green", "security_version_count": 756, - "last_version_synced_at": "2026-03-31T09:18:11+00:00", + "last_version_synced_at": "2026-04-01T09:20:44+00:00", "latest_version_evidence": [ "Mattermost Security Updates JSON", "https://securityupdates.mattermost.com/security_updates.json", @@ -4066,7 +4070,7 @@ ], "version_sync_status": "green", "security_version_count": 764, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "Mattermost Security Updates JSON", "advisory-fixed-version", @@ -4140,7 +4144,7 @@ ], "version_sync_status": "green", "security_version_count": 824, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "GitHub Releases API", "https://nvd.nist.gov/vuln/detail/CVE-2026-22545", @@ -4167,11 +4171,11 @@ "history_backfill_status": "seeded", "latest_sync_status": "green", "official_source_covered": true, - "advisory_count": 16, - "workflow_complete_advisory_count": 16, - "version_mapped_advisory_count": 16, + "advisory_count": 17, + "workflow_complete_advisory_count": 17, + "version_mapped_advisory_count": 17, "first_advisory_at": "2026-03-16T15:30:42+00:00", - "latest_advisory_at": "2026-03-31T05:32:49+00:00", + "latest_advisory_at": "2026-03-31T23:19:38+00:00", "advisory_ids": [ "mattermost--CVE-2026-21386", "mattermost--CVE-2026-22545", @@ -4188,6 +4192,7 @@ "mattermost--CVE-2026-26233", "mattermost--CVE-2026-26246", "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113", "mattermost--CVE-2026-4265" ], "source_refs": [] @@ -4215,7 +4220,7 @@ ], "version_sync_status": "green", "security_version_count": 3103, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Mattermost Security Updates JSON" ], @@ -4227,11 +4232,11 @@ "history_backfill_status": "complete", "latest_sync_status": "green", "official_source_covered": true, - "advisory_count": 35, - "workflow_complete_advisory_count": 35, - "version_mapped_advisory_count": 35, + "advisory_count": 36, + "workflow_complete_advisory_count": 36, + "version_mapped_advisory_count": 36, "first_advisory_at": "2026-02-23T00:00:00+00:00", - "latest_advisory_at": "2026-03-31T05:32:49+00:00", + "latest_advisory_at": "2026-03-31T23:19:38+00:00", "advisory_ids": [ "mattermost--CVE-2026-21386", "mattermost--CVE-2026-22545", @@ -4248,6 +4253,7 @@ "mattermost--CVE-2026-26233", "mattermost--CVE-2026-26246", "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113", "mattermost--CVE-2026-4265", "mattermost--Issue Identifier", "mattermost--MMSA-2025-00562", @@ -4332,11 +4338,12 @@ "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/CIXFJVC57OFRBCCEIDRLZCLFGMYGEYTT/", "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/TT45WDZ7MDTXXBEFLBMLAJI532O2PN2U/", "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FFD4KWZMOVZQJF4PIIVUTCEHDJLMNZEB/", - "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/6I6GV6OP27OB7CZS2JUQ5IC6XFXRHLNQ/" + "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/6I6GV6OP27OB7CZS2JUQ5IC6XFXRHLNQ/", + "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/" ], "version_sync_status": "green", - "security_version_count": 230, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "security_version_count": 254, + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "MediaWiki Announce RSS" ], @@ -4348,11 +4355,11 @@ "history_backfill_status": "seeded", "latest_sync_status": "green", "official_source_covered": true, - "advisory_count": 71, - "workflow_complete_advisory_count": 71, + "advisory_count": 72, + "workflow_complete_advisory_count": 72, "version_mapped_advisory_count": 0, "first_advisory_at": "2004-12-31T05:00:00+00:00", - "latest_advisory_at": "2026-03-30T17:50:26+00:00", + "latest_advisory_at": "2026-03-31T23:06:16+00:00", "advisory_ids": [ "mediawiki--0cd3c8cc6d", "mediawiki--0fe51dab1c", @@ -4364,6 +4371,7 @@ "mediawiki--31d957bc6b", "mediawiki--38ad6c5da5", "mediawiki--468e6bcac6", + "mediawiki--469c5db88b", "mediawiki--46bf0dec8b", "mediawiki--4bb7b4f173", "mediawiki--57ad4abb33", @@ -4482,7 +4490,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -4554,7 +4562,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -4659,7 +4667,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -4719,7 +4727,7 @@ "repo_url": "", "package_registry": "https://www.npmjs.com/package/next", "marketplace_url": "", - "latest_version": "16.2.1", + "latest_version": "16.2.2", "version_scheme": "semver-ish", "latest_release_at": "", "latest_release_url": "https://www.npmjs.com/package/next", @@ -4742,7 +4750,7 @@ ], "version_sync_status": "green", "security_version_count": 168, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/vercel/next.js", @@ -4832,14 +4840,14 @@ "repo_url": "", "package_registry": "", "marketplace_url": "", - "latest_version": "16.2.1", + "latest_version": "16.2.2", "version_scheme": "vendor", "latest_release_at": "", "latest_release_url": "https://www.npmjs.com/package/next", "version_source_refs": [], "version_sync_status": "green", "security_version_count": 168, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -4970,7 +4978,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -5145,7 +5153,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -5217,7 +5225,7 @@ ], "version_sync_status": "green", "security_version_count": 11, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/nuxt/nuxt/security/advisories/GHSA-vf6r-87q4-2vjf", @@ -5269,7 +5277,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 11, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -5366,7 +5374,7 @@ ], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "GitHub Releases API", "OpenCart Releases" @@ -5420,7 +5428,7 @@ ], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "OpenCart Releases" ], @@ -5589,7 +5597,7 @@ ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "GitHub Releases API" ], @@ -5639,7 +5647,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -5733,7 +5741,7 @@ ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "phpMyAdmin Security Page" ], @@ -5854,7 +5862,7 @@ ], "version_sync_status": "green", "security_version_count": 41, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "Packagist p2", "https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-35pf-37c6-jxjv", @@ -5909,7 +5917,7 @@ ], "version_sync_status": "green", "security_version_count": 9, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "GitHub Releases API", "Friends Of Presta Security", @@ -5969,7 +5977,7 @@ ], "version_sync_status": "green", "security_version_count": 50, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "GitHub PrestaShop Advisories", "Friends Of Presta Security", @@ -6175,7 +6183,7 @@ ], "version_sync_status": "green", "security_version_count": 102, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "npm latest", "https://nvd.nist.gov/vuln/detail/CVE-2007-5379", @@ -6232,7 +6240,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 102, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -6342,7 +6350,7 @@ ], "version_sync_status": "green", "security_version_count": 12, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "npm latest", "https://nvd.nist.gov/vuln/detail/CVE-2018-6341" @@ -6390,7 +6398,7 @@ ], "version_sync_status": "green", "security_version_count": 6, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/facebook/react", @@ -6436,7 +6444,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 18, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -6524,7 +6532,7 @@ ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "Redmine Security Advisories" ], @@ -6646,7 +6654,7 @@ ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "GitHub Releases API", "GitHub Saleor Advisories" @@ -6699,7 +6707,7 @@ ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "GitHub Saleor Advisories" ], @@ -6793,7 +6801,7 @@ ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "GitHub Releases API", "Shopware Security Advisories" @@ -6846,7 +6854,7 @@ ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "Shopware Security Advisories" ], @@ -6986,7 +6994,7 @@ ], "version_sync_status": "green", "security_version_count": 22, - "last_version_synced_at": "2026-03-31T09:18:13+00:00", + "last_version_synced_at": "2026-04-01T09:20:46+00:00", "latest_version_evidence": [ "advisory-fixed-version", "https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-cm59-pr5q-cw85" @@ -7030,7 +7038,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 22, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -7097,7 +7105,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:13+00:00", + "last_version_synced_at": "2026-04-01T09:20:46+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -7175,7 +7183,7 @@ ], "version_sync_status": "green", "security_version_count": 92, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "latest_version_evidence": [ "advisory-fixed-version", "https://nvd.nist.gov/vuln/detail/CVE-2026-22732" @@ -7219,7 +7227,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 92, - "last_version_synced_at": "2026-03-31T09:18:13+00:00", + "last_version_synced_at": "2026-04-01T09:20:46+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -7281,17 +7289,18 @@ "repo_url": "https://github.com/strapi/strapi", "package_registry": "", "marketplace_url": "", - "latest_version": "5.40.0", + "latest_version": "5.41.0", "version_scheme": "semver-ish", - "latest_release_at": "2026-03-18T13:33:01Z", - "latest_release_url": "https://github.com/strapi/strapi/releases/tag/v5.40.0", + "latest_release_at": "2026-04-01T09:17:56Z", + "latest_release_url": "https://github.com/strapi/strapi/releases/tag/v5.41.0", "version_source_refs": [ "https://github.com/strapi/strapi/releases/tag/v5.40.0", - "https://github.com/login?return_to=%2Fstrapi%2Fstrapi" + "https://github.com/login?return_to=%2Fstrapi%2Fstrapi", + "https://github.com/strapi/strapi/releases/tag/v5.41.0" ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "latest_version_evidence": [ "GitHub Releases API", "Strapi GitHub Advisories" @@ -7335,16 +7344,16 @@ "repo_url": "", "package_registry": "", "marketplace_url": "", - "latest_version": "5.40.0", + "latest_version": "5.41.0", "version_scheme": "vendor", - "latest_release_at": "2026-03-18T13:33:01Z", - "latest_release_url": "https://github.com/strapi/strapi/releases/tag/v5.40.0", + "latest_release_at": "2026-04-01T09:17:56Z", + "latest_release_url": "https://github.com/strapi/strapi/releases/tag/v5.41.0", "version_source_refs": [ "https://github.com/login?return_to=%2Fstrapi%2Fstrapi" ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "latest_version_evidence": [ "Strapi GitHub Advisories" ], @@ -7433,7 +7442,7 @@ ], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/sveltejs/kit/security/advisories/GHSA-88qp-p4qg-rqm6", @@ -7480,7 +7489,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -7533,9 +7542,9 @@ "repo_url": "https://github.com/symfony/symfony", "package_registry": "https://packagist.org/packages/symfony/symfony", "marketplace_url": "", - "latest_version": "8.0.7", + "latest_version": "8.0.8", "version_scheme": "semver-ish", - "latest_release_at": "2026-03-06T16:59:05+00:00", + "latest_release_at": "2026-03-31T21:14:58+00:00", "latest_release_url": "https://packagist.org/packages/symfony/symfony", "version_source_refs": [ "https://packagist.org/packages/symfony/symfony", @@ -7543,7 +7552,7 @@ ], "version_sync_status": "green", "security_version_count": 220, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "latest_version_evidence": [ "Packagist p2", "https://github.com/symfony/symfony/security/advisories/GHSA-5pv8-ppvj-4h68" @@ -7588,14 +7597,14 @@ "repo_url": "", "package_registry": "", "marketplace_url": "", - "latest_version": "8.0.7", + "latest_version": "8.0.8", "version_scheme": "vendor", - "latest_release_at": "2026-03-06T16:59:05+00:00", + "latest_release_at": "2026-03-31T21:14:58+00:00", "latest_release_url": "https://packagist.org/packages/symfony/symfony", "version_source_refs": [], "version_sync_status": "green", "security_version_count": 220, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -7654,10 +7663,10 @@ "repo_url": "https://github.com/traefik/traefik", "package_registry": "", "marketplace_url": "", - "latest_version": "3.7.0-ea.3", + "latest_version": "3.7.0-ea.2", "version_scheme": "semver-ish", - "latest_release_at": "2026-03-26T11:10:20Z", - "latest_release_url": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3", + "latest_release_at": "2026-03-23T18:56:07.286130Z", + "latest_release_url": "https://github.com/traefik/traefik/security/advisories/GHSA-wvvq-wgcr-9q48", "version_source_refs": [ "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.2", "https://github.com/traefik/traefik/security/advisories/GHSA-wvvq-wgcr-9q48", @@ -7666,7 +7675,7 @@ ], "version_sync_status": "green", "security_version_count": 8, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:50+00:00", "latest_version_evidence": [ "GitHub Releases API", "https://github.com/traefik/traefik/security/advisories/GHSA-wvvq-wgcr-9q48", @@ -7706,8 +7715,8 @@ "marketplace_url": "", "latest_version": "3.7.0-ea.3", "version_scheme": "semver-ish", - "latest_release_at": "2026-03-26T11:10:20Z", - "latest_release_url": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3", + "latest_release_at": "2026-03-27T20:49:46.252668Z", + "latest_release_url": "https://github.com/traefik/traefik/security/advisories/GHSA-qr99-7898-vr7c", "version_source_refs": [ "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.2", "https://github.com/traefik/traefik/security/advisories/GHSA-gxrv-wf35-62w9", @@ -7731,7 +7740,7 @@ ], "version_sync_status": "green", "security_version_count": 63, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [ "GitHub Releases API", "https://github.com/traefik/traefik/security/advisories/GHSA-gxrv-wf35-62w9", @@ -7803,14 +7812,14 @@ "repo_url": "", "package_registry": "", "marketplace_url": "", - "latest_version": "3.7.0-ea.3", + "latest_version": "3.7.0-ea.2", "version_scheme": "vendor", - "latest_release_at": "2026-03-26T11:10:20Z", - "latest_release_url": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3", + "latest_release_at": "2026-03-23T18:56:07.286130Z", + "latest_release_url": "https://github.com/traefik/traefik/security/advisories/GHSA-wvvq-wgcr-9q48", "version_source_refs": [], "version_sync_status": "green", "security_version_count": 71, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -7918,7 +7927,7 @@ ], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/nodejs/undici/security/advisories/GHSA-vrm6-8vpv-qv8q" @@ -7976,7 +7985,7 @@ ], "version_sync_status": "green", "security_version_count": 21, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/nodejs/undici/security/advisories/GHSA-3cvr-822r-rqcc", @@ -8042,7 +8051,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 25, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -8126,7 +8135,7 @@ ], "version_sync_status": "green", "security_version_count": 8, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/vitejs/vite/security/advisories/GHSA-jqfw-vq24-v9c3" @@ -8173,7 +8182,7 @@ ], "version_sync_status": "green", "security_version_count": 12, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/vitejs/vite/security/advisories/GHSA-64vr-g452-qvp3" @@ -8222,7 +8231,7 @@ ], "version_sync_status": "green", "security_version_count": 23, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/vitejs/vite/security/advisories/GHSA-vg6x-rcgg-rjx6", @@ -8283,7 +8292,7 @@ ], "version_sync_status": "green", "security_version_count": 107, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [ "npm latest", "https://nvd.nist.gov/vuln/detail/CVE-2022-35204", @@ -8347,7 +8356,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 150, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -8457,7 +8466,7 @@ ], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [ "npm latest", "https://nvd.nist.gov/vuln/detail/CVE-2024-9506" @@ -8501,7 +8510,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -8581,7 +8590,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -8650,7 +8659,7 @@ ], "version_sync_status": "green", "security_version_count": 22, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/pallets/werkzeug/security/advisories/GHSA-29vq-49wr-vm6x" @@ -8694,7 +8703,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 22, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", @@ -8745,10 +8754,10 @@ "repo_url": "https://github.com/woocommerce/woocommerce", "package_registry": "", "marketplace_url": "", - "latest_version": "10.6.1", + "latest_version": "10.7", "version_scheme": "semver-ish", "latest_release_at": "2026-03-12T19:14:25Z", - "latest_release_url": "https://github.com/woocommerce/woocommerce/releases/tag/10.6.1", + "latest_release_url": "https://developer.woocommerce.com/2026/02/16/hpos-sync-on-read-to-be-disabled-by-default-in-woocommerce-10-7/", "version_source_refs": [ "https://github.com/woocommerce/woocommerce/releases/tag/10.6.1", "https://patchstack.com/database/wordpress/plugin/wc-carta-docente/vulnerability/wordpress-ilghera-carta-docente-for-woocommerce-plugin-1-5-0-authenticated-administrator-path-traversal-to-arbitrary-file-deletion-via-cert-parameter-vulnerability", @@ -8759,11 +8768,12 @@ "https://patchstack.com/database/wordpress/plugin/reviewx/vulnerability/wordpress-reviewx-woocommerce-product-reviews-with-multi-criteria-reminder-emails-google-reviews-schema-more-plugin-2-2-12-unauthenticated-sensitive-information-exposure-to-data-export-vulnerability", "https://patchstack.com/database/wordpress/plugin/reviewx/vulnerability/wordpress-reviewx-woocommerce-product-reviews-with-multi-criteria-reminder-emails-google-reviews-schema-more-plugin-2-2-12-unauthenticated-sensitive-information-exposure-vulnerability", "https://patchstack.com/database/wordpress/plugin/woo-product-filter/vulnerability/wordpress-product-filter-for-woocommerce-by-wbw-plugin-3-1-2-missing-authorization-to-unauthenticated-filter-data-deletion-via-truncate-table-vulnerability", - "https://patchstack.com/database/wordpress/plugin/woo-custom-product-addons-pro/vulnerability/wordpress-woocommerce-custom-product-addons-pro-plugin-5-4-1-unauthenticated-remote-code-execution-via-custom-pricing-formula-vulnerability" + "https://patchstack.com/database/wordpress/plugin/woo-custom-product-addons-pro/vulnerability/wordpress-woocommerce-custom-product-addons-pro-plugin-5-4-1-unauthenticated-remote-code-execution-via-custom-pricing-formula-vulnerability", + "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability" ], "version_sync_status": "green", - "security_version_count": 1, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "security_version_count": 3, + "last_version_synced_at": "2026-04-01T09:20:55+00:00", "latest_version_evidence": [ "GitHub Releases API", "Patchstack Database", @@ -8808,10 +8818,10 @@ "repo_url": "", "package_registry": "", "marketplace_url": "", - "latest_version": "10.6.1", + "latest_version": "10.7", "version_scheme": "vendor", "latest_release_at": "2026-03-12T19:14:25Z", - "latest_release_url": "https://github.com/woocommerce/woocommerce/releases/tag/10.6.1", + "latest_release_url": "https://developer.woocommerce.com/2026/02/16/hpos-sync-on-read-to-be-disabled-by-default-in-woocommerce-10-7/", "version_source_refs": [ "https://developer.woocommerce.com/2026/02/16/hpos-sync-on-read-to-be-disabled-by-default-in-woocommerce-10-7/", "https://patchstack.com/database/wordpress/plugin/wc-carta-docente/vulnerability/wordpress-ilghera-carta-docente-for-woocommerce-plugin-1-5-0-authenticated-administrator-path-traversal-to-arbitrary-file-deletion-via-cert-parameter-vulnerability", @@ -8821,11 +8831,12 @@ "https://patchstack.com/database/wordpress/plugin/reviewx/vulnerability/wordpress-reviewx-woocommerce-product-reviews-with-multi-criteria-reminder-emails-google-reviews-schema-more-plugin-2-2-12-unauthenticated-sensitive-information-exposure-to-data-export-vulnerability", "https://patchstack.com/database/wordpress/plugin/reviewx/vulnerability/wordpress-reviewx-woocommerce-product-reviews-with-multi-criteria-reminder-emails-google-reviews-schema-more-plugin-2-2-12-unauthenticated-sensitive-information-exposure-vulnerability", "https://patchstack.com/database/wordpress/plugin/woo-product-filter/vulnerability/wordpress-product-filter-for-woocommerce-by-wbw-plugin-3-1-2-missing-authorization-to-unauthenticated-filter-data-deletion-via-truncate-table-vulnerability", - "https://patchstack.com/database/wordpress/plugin/woo-custom-product-addons-pro/vulnerability/wordpress-woocommerce-custom-product-addons-pro-plugin-5-4-1-unauthenticated-remote-code-execution-via-custom-pricing-formula-vulnerability" + "https://patchstack.com/database/wordpress/plugin/woo-custom-product-addons-pro/vulnerability/wordpress-woocommerce-custom-product-addons-pro-plugin-5-4-1-unauthenticated-remote-code-execution-via-custom-pricing-formula-vulnerability", + "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability" ], "version_sync_status": "green", - "security_version_count": 1, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "security_version_count": 3, + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [ "Woo Developer Advisories", "Patchstack Database" @@ -9021,10 +9032,10 @@ "repo_url": "", "package_registry": "", "marketplace_url": "", - "latest_version": "7.9", + "latest_version": "51.1.53", "version_scheme": "vendor", "latest_release_at": "", - "latest_release_url": "https://wpscan.com/blog/object-injection-vulnerability-fixed-in-seopress-7-9/", + "latest_release_url": "https://patchstack.com/database/wordpress/plugin/king-addons/vulnerability/wordpress-king-addons-for-elementor-plugin-51-1-38-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-widgets-vulnerability", "version_source_refs": [ "https://wpscan.com/blog/object-injection-vulnerability-fixed-in-seopress-7-9/", "https://patchstack.com/database/wordpress/plugin/ft-rockpress/vulnerability/wordpress-rockpress-plugin-1-0-17-missing-authorization-to-authenticated-subscriber-arbitrary-modification-via-ajax-actions-vulnerability", @@ -9091,11 +9102,16 @@ "https://patchstack.com/database/wordpress/plugin/shared-files/vulnerability/wordpress-shared-files-plugin-1-7-58-contributor-arbitrary-file-download-vulnerability", "https://patchstack.com/database/wordpress/plugin/everest-forms-pro/vulnerability/wordpress-everest-forms-pro-plugin-1-9-12-unauthenticated-remote-code-execution-via-calculation-field-vulnerability", "https://patchstack.com/database/wordpress/plugin/fluent-booking/vulnerability/wordpress-fluent-booking-plugin-2-0-01-unauthenticated-stored-cross-site-scripting-via-multiple-parameters-vulnerability", - "https://patchstack.com/database/wordpress/plugin/gravitysmtp/vulnerability/wordpress-gravity-smtp-plugin-2-1-4-unauthenticated-sensitive-information-exposure-via-rest-api-vulnerability" + "https://patchstack.com/database/wordpress/plugin/gravitysmtp/vulnerability/wordpress-gravity-smtp-plugin-2-1-4-unauthenticated-sensitive-information-exposure-via-rest-api-vulnerability", + "https://patchstack.com/database/wordpress/plugin/king-addons/vulnerability/wordpress-king-addons-for-elementor-plugin-51-1-38-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-widgets-vulnerability", + "https://patchstack.com/database/wordpress/plugin/performance-monitor/vulnerability/wordpress-performance-monitor-plugin-1-0-6-unauthenticated-blind-ssrf-vulnerability", + "https://patchstack.com/database/wordpress/plugin/contact-form-entries/vulnerability/wordpress-database-for-contact-form-7-wpforms-elementor-forms-plugin-1-4-9-missing-authorization-to-authenticated-contributor-sensitive-information-exposure-via-shortcode-vulnerability", + "https://patchstack.com/database/wordpress/plugin/auto-post-scheduler/vulnerability/wordpress-auto-post-scheduler-plugin-1-84-cross-site-request-forgery-to-stored-cross-site-scripting-via-aps-options-page-vulnerability", + "https://patchstack.com/database/wordpress/plugin/ameliabooking/vulnerability/wordpress-amelia-plugin-2-1-2-authenticated-manager-sql-injection-via-sort-parameter-vulnerability" ], "version_sync_status": "green", "security_version_count": 56, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:55+00:00", "latest_version_evidence": [ "WPScan Vulnerability Database", "Patchstack Database", diff --git a/08-threat-intel/generated/dashboard/summary.json b/08-threat-intel/generated/dashboard/summary.json index 124bca81..b86f5571 100644 --- a/08-threat-intel/generated/dashboard/summary.json +++ b/08-threat-intel/generated/dashboard/summary.json @@ -1,9 +1,9 @@ { - "generated_at": "2026-03-31T09:18:21+00:00", - "advisory_count": 2428, + "generated_at": "2026-04-01T09:21:06+00:00", + "advisory_count": 2431, "run_count": 140, "statuses": { - "triage-manual": 2339, + "triage-manual": 2342, "verified-real": 89 }, "run_statuses": { @@ -158,10 +158,10 @@ "green_source_count": 102, "source_failure_count": 0, "open_alert_count": 0, - "last_fully_green_run": "2026-03-31T09:18:05+00:00" + "last_fully_green_run": "2026-04-01T09:20:10+00:00" }, "entity_coverage": { - "generated_at": "2026-03-31T09:18:20+00:00", + "generated_at": "2026-04-01T09:21:04+00:00", "cataloged_entity_total": 110, "candidate_entity_total": 7, "history_full_complete_count": 41, @@ -971,7 +971,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "entity_type": "repo", "display_name": "mattermost / mattermost-server", - "advisory_count": 16, + "advisory_count": 17, "history_backfill_status": "seeded", "latest_sync_status": "green" }, @@ -1931,15 +1931,15 @@ "discovery_queue": 7, "history_queue": 27, "latest_queue": 10, - "workflow_queue": 2179 + "workflow_queue": 2181 } }, "version_coverage": { - "generated_at": "2026-03-31T09:18:20+00:00", + "generated_at": "2026-04-01T09:21:05+00:00", "cataloged_entity_total": 110, "latest_version_synced_count": 95, "source_gap_count": 15, - "security_version_total": 6290, + "security_version_total": 6316, "security_version_entity_count": 83, "auto_promoted_entity_count": 10, "lab_enqueued_count": 3, @@ -2142,7 +2142,7 @@ "cataloged_entity_total": 1, "latest_version_synced_count": 1, "source_gap_count": 0, - "security_version_count": 80, + "security_version_count": 82, "auto_promoted_count": 0, "latest_versions": [ { @@ -2214,16 +2214,16 @@ "entity_id": "echo", "display_name": "Echo", "entity_type": "system", - "latest_version": "5.0.4", - "latest_release_at": "2026-02-15T15:55:53Z", + "latest_version": "5.1.0", + "latest_release_at": "2026-03-31T20:56:54Z", "version_sync_status": "green" }, { "entity_id": "echo--repo--github-com-labstack-echo-v4", "display_name": "labstack / echo / v4", "entity_type": "repo", - "latest_version": "5.0.4", - "latest_release_at": "2026-02-15T15:55:53Z", + "latest_version": "5.1.0", + "latest_release_at": "2026-03-31T20:56:54Z", "version_sync_status": "green" } ] @@ -2474,14 +2474,14 @@ "cataloged_entity_total": 1, "latest_version_synced_count": 1, "source_gap_count": 0, - "security_version_count": 5, + "security_version_count": 1, "auto_promoted_count": 0, "latest_versions": [ { "entity_id": "joomla", "display_name": "Joomla", "entity_type": "system", - "latest_version": "1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html", + "latest_version": "1027-20260301-core-acl-hardening-in-com-ajax.html", "latest_release_at": "", "version_sync_status": "green" } @@ -2635,7 +2635,7 @@ "cataloged_entity_total": 1, "latest_version_synced_count": 1, "source_gap_count": 0, - "security_version_count": 228, + "security_version_count": 252, "auto_promoted_count": 0, "latest_versions": [ { @@ -2691,7 +2691,7 @@ "entity_id": "nextjs", "display_name": "Next.js", "entity_type": "system", - "latest_version": "16.2.1", + "latest_version": "16.2.2", "latest_release_at": "", "version_sync_status": "green" }, @@ -2699,7 +2699,7 @@ "entity_id": "nextjs--project--next", "display_name": "next", "entity_type": "project", - "latest_version": "16.2.1", + "latest_version": "16.2.2", "latest_release_at": "", "version_sync_status": "green" } @@ -3072,16 +3072,16 @@ "entity_id": "strapi", "display_name": "Strapi", "entity_type": "system", - "latest_version": "5.40.0", - "latest_release_at": "2026-03-18T13:33:01Z", + "latest_version": "5.41.0", + "latest_release_at": "2026-04-01T09:17:56Z", "version_sync_status": "green" }, { "entity_id": "strapi--repo--strapi-strapi", "display_name": "strapi / strapi", "entity_type": "repo", - "latest_version": "5.40.0", - "latest_release_at": "2026-03-18T13:33:01Z", + "latest_version": "5.41.0", + "latest_release_at": "2026-04-01T09:17:56Z", "version_sync_status": "green" } ] @@ -3126,16 +3126,16 @@ "entity_id": "symfony", "display_name": "Symfony", "entity_type": "system", - "latest_version": "8.0.7", - "latest_release_at": "2026-03-06T16:59:05+00:00", + "latest_version": "8.0.8", + "latest_release_at": "2026-03-31T21:14:58+00:00", "version_sync_status": "green" }, { "entity_id": "symfony--package--symfony-symfony", "display_name": "symfony / symfony", "entity_type": "package", - "latest_version": "8.0.7", - "latest_release_at": "2026-03-06T16:59:05+00:00", + "latest_version": "8.0.8", + "latest_release_at": "2026-03-31T21:14:58+00:00", "version_sync_status": "green" } ] @@ -3153,8 +3153,8 @@ "entity_id": "traefik", "display_name": "Traefik", "entity_type": "system", - "latest_version": "3.7.0-ea.3", - "latest_release_at": "2026-03-26T11:10:20Z", + "latest_version": "3.7.0-ea.2", + "latest_release_at": "2026-03-23T18:56:07.286130Z", "version_sync_status": "green" }, { @@ -3162,15 +3162,15 @@ "display_name": "traefik / traefik / v3", "entity_type": "repo", "latest_version": "3.7.0-ea.3", - "latest_release_at": "2026-03-26T11:10:20Z", + "latest_release_at": "2026-03-27T20:49:46.252668Z", "version_sync_status": "green" }, { "entity_id": "traefik--extension--github-com-traefik-traefik-v3", "display_name": "traefik / traefik / v3", "entity_type": "extension", - "latest_version": "3.7.0-ea.3", - "latest_release_at": "2026-03-26T11:10:20Z", + "latest_version": "3.7.0-ea.2", + "latest_release_at": "2026-03-23T18:56:07.286130Z", "version_sync_status": "green" } ] @@ -3331,14 +3331,14 @@ "cataloged_entity_total": 2, "latest_version_synced_count": 2, "source_gap_count": 0, - "security_version_count": 2, + "security_version_count": 6, "auto_promoted_count": 1, "latest_versions": [ { "entity_id": "woocommerce", "display_name": "WooCommerce", "entity_type": "system", - "latest_version": "10.6.1", + "latest_version": "10.7", "latest_release_at": "2026-03-12T19:14:25Z", "version_sync_status": "green" }, @@ -3346,7 +3346,7 @@ "entity_id": "woocommerce--repo--woocommerce-woocommerce", "display_name": "woocommerce / woocommerce", "entity_type": "repo", - "latest_version": "10.6.1", + "latest_version": "10.7", "latest_release_at": "2026-03-12T19:14:25Z", "version_sync_status": "green" } @@ -3365,7 +3365,7 @@ "entity_id": "wordpress", "display_name": "WordPress", "entity_type": "system", - "latest_version": "7.9", + "latest_version": "51.1.53", "latest_release_at": "", "version_sync_status": "green" } @@ -3429,7 +3429,7 @@ "entity_id": "wordpress", "display_name": "WordPress", "entity_type": "system", - "latest_version": "7.9", + "latest_version": "51.1.53", "latest_release_at": "", "version_sync_status": "green" } @@ -3442,8 +3442,8 @@ "entity_type_counts": { "system": 1 }, - "latest_version": "7.9", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "latest_version": "51.1.53", + "last_version_synced_at": "2026-04-01T09:20:55+00:00", "version_sync_status": "green", "security_version_count": 55 }, @@ -3552,7 +3552,7 @@ "system": 1 }, "latest_version": "11.0-doc", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 2 }, @@ -3649,7 +3649,7 @@ "system": 1 }, "latest_version": "2.4.x", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 1 }, @@ -3794,7 +3794,7 @@ "repo": 1 }, "latest_version": "8.2.5", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 59 }, @@ -3856,14 +3856,14 @@ "cataloged_entity_total": 2, "latest_version_synced_count": 2, "source_gap_count": 0, - "security_version_count": 2, + "security_version_count": 6, "auto_promoted_count": 1, "latest_versions": [ { "entity_id": "woocommerce", "display_name": "WooCommerce", "entity_type": "system", - "latest_version": "10.6.1", + "latest_version": "10.7", "latest_release_at": "2026-03-12T19:14:25Z", "version_sync_status": "green" }, @@ -3871,7 +3871,7 @@ "entity_id": "woocommerce--repo--woocommerce-woocommerce", "display_name": "woocommerce / woocommerce", "entity_type": "repo", - "latest_version": "10.6.1", + "latest_version": "10.7", "latest_release_at": "2026-03-12T19:14:25Z", "version_sync_status": "green" } @@ -3894,10 +3894,10 @@ "system": 1, "repo": 1 }, - "latest_version": "10.6.1", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "latest_version": "10.7", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "version_sync_status": "green", - "security_version_count": 2 + "security_version_count": 6 }, { "system_id": "nginx", @@ -3971,7 +3971,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -4023,14 +4023,14 @@ "cataloged_entity_total": 1, "latest_version_synced_count": 1, "source_gap_count": 0, - "security_version_count": 5, + "security_version_count": 1, "auto_promoted_count": 0, "latest_versions": [ { "entity_id": "joomla", "display_name": "Joomla", "entity_type": "system", - "latest_version": "1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html", + "latest_version": "1027-20260301-core-acl-hardening-in-com-ajax.html", "latest_release_at": "", "version_sync_status": "green" } @@ -4043,10 +4043,10 @@ "entity_type_counts": { "system": 1 }, - "latest_version": "1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "latest_version": "1027-20260301-core-acl-hardening-in-com-ajax.html", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", - "security_version_count": 5 + "security_version_count": 1 }, { "system_id": "opencart", @@ -4175,7 +4175,7 @@ "repo": 1 }, "latest_version": "3.0.5.0", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 4 }, @@ -4300,7 +4300,7 @@ "repo": 1 }, "latest_version": "2.4.9-beta1", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 6 }, @@ -4401,7 +4401,7 @@ "project": 1 }, "latest_version": "1.0.0", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 182 }, @@ -4465,18 +4465,18 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, { "system_id": "mediawiki", "display_name": "MediaWiki", - "total": 71, + "total": 72, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, - "manual": 71, + "manual": 72, "browser_required": 0, "browser_present": 0, "latest_update": "Wed, 22 Oct 2025 21:44:43 +0000", @@ -4486,9 +4486,9 @@ "families": [ { "family": "xss", - "total": 71, + "total": 72, "verified_real": 0, - "manual": 71 + "manual": 72 } ], "entity_summary": { @@ -4517,7 +4517,7 @@ "cataloged_entity_total": 1, "latest_version_synced_count": 1, "source_gap_count": 0, - "security_version_count": 228, + "security_version_count": 252, "auto_promoted_count": 0, "latest_versions": [ { @@ -4538,9 +4538,9 @@ "system": 1 }, "latest_version": "28-10-2025", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", - "security_version_count": 228 + "security_version_count": 252 }, { "system_id": "shopware", @@ -4669,7 +4669,7 @@ "repo": 1 }, "latest_version": "6.7.8.2", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 0 }, @@ -4742,7 +4742,7 @@ "system": 1 }, "latest_version": "11.2.8", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 74 }, @@ -4848,7 +4848,7 @@ "entity_id": "nextjs", "display_name": "Next.js", "entity_type": "system", - "latest_version": "16.2.1", + "latest_version": "16.2.2", "latest_release_at": "", "version_sync_status": "green" }, @@ -4856,7 +4856,7 @@ "entity_id": "nextjs--project--next", "display_name": "next", "entity_type": "project", - "latest_version": "16.2.1", + "latest_version": "16.2.2", "latest_release_at": "", "version_sync_status": "green" } @@ -4886,8 +4886,8 @@ "system": 1, "project": 1 }, - "latest_version": "16.2.1", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "latest_version": "16.2.2", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 168 }, @@ -4951,7 +4951,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -5015,7 +5015,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -5094,7 +5094,7 @@ "system": 1 }, "latest_version": "2026-4363---incorrect-authorization-issue-in-authorization-caching-impacts-gitlab-ee", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 625 }, @@ -5196,7 +5196,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -5269,7 +5269,7 @@ "system": 1 }, "latest_version": "5.2.3-all-languages.zip", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 0 }, @@ -5342,7 +5342,7 @@ "system": 1 }, "latest_version": "6.1.2", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 0 }, @@ -5432,8 +5432,8 @@ "entity_id": "traefik", "display_name": "Traefik", "entity_type": "system", - "latest_version": "3.7.0-ea.3", - "latest_release_at": "2026-03-26T11:10:20Z", + "latest_version": "3.7.0-ea.2", + "latest_release_at": "2026-03-23T18:56:07.286130Z", "version_sync_status": "green" }, { @@ -5441,15 +5441,15 @@ "display_name": "traefik / traefik / v3", "entity_type": "repo", "latest_version": "3.7.0-ea.3", - "latest_release_at": "2026-03-26T11:10:20Z", + "latest_release_at": "2026-03-27T20:49:46.252668Z", "version_sync_status": "green" }, { "entity_id": "traefik--extension--github-com-traefik-traefik-v3", "display_name": "traefik / traefik / v3", "entity_type": "extension", - "latest_version": "3.7.0-ea.3", - "latest_release_at": "2026-03-26T11:10:20Z", + "latest_version": "3.7.0-ea.2", + "latest_release_at": "2026-03-23T18:56:07.286130Z", "version_sync_status": "green" } ] @@ -5480,8 +5480,8 @@ "repo": 1, "extension": 1 }, - "latest_version": "3.7.0-ea.3", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "latest_version": "3.7.0-ea.2", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "version_sync_status": "green", "security_version_count": 71 }, @@ -5545,7 +5545,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -5646,7 +5646,7 @@ "project": 1 }, "latest_version": "4.1.0-beta", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 102 }, @@ -5845,7 +5845,7 @@ "extension": 1 }, "latest_version": "8.0.3", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "version_sync_status": "green", "security_version_count": 150 }, @@ -5909,18 +5909,18 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, { "system_id": "mattermost", "display_name": "Mattermost", - "total": 35, + "total": 36, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, - "manual": 35, + "manual": 36, "browser_required": 0, "browser_present": 0, "latest_update": "Fix Release Date", @@ -5930,9 +5930,9 @@ "families": [ { "family": "xss", - "total": 35, + "total": 36, "verified_real": 0, - "manual": 35 + "manual": 36 } ], "entity_summary": { @@ -5960,7 +5960,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "entity_type": "repo", "display_name": "mattermost / mattermost-server", - "advisory_count": 16, + "advisory_count": 17, "history_backfill_status": "seeded", "latest_sync_status": "green" }, @@ -6047,7 +6047,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "entity_type": "repo", "display_name": "mattermost / mattermost-server", - "advisory_count": 16, + "advisory_count": 17, "history_backfill_status": "seeded", "latest_sync_status": "green" }, @@ -6086,18 +6086,18 @@ "plugin": 1 }, "latest_version": "26.2.1", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 3854 }, { "system_id": "discourse", "display_name": "Discourse", - "total": 30, + "total": 31, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, - "manual": 30, + "manual": 31, "browser_required": 0, "browser_present": 0, "latest_update": "Wed, 28 May 2025 05:22:52 +0000", @@ -6107,9 +6107,9 @@ "families": [ { "family": "xss", - "total": 30, + "total": 31, "verified_real": 0, - "manual": 30 + "manual": 31 } ], "entity_summary": { @@ -6138,7 +6138,7 @@ "cataloged_entity_total": 1, "latest_version_synced_count": 1, "source_gap_count": 0, - "security_version_count": 80, + "security_version_count": 82, "auto_promoted_count": 0, "latest_versions": [ { @@ -6159,9 +6159,9 @@ "system": 1 }, "latest_version": "2502-05-2023-143713-1.zip", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", - "security_version_count": 80 + "security_version_count": 82 }, { "system_id": "caddy", @@ -6298,7 +6298,7 @@ "extension": 1 }, "latest_version": "2.11.2", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 7 }, @@ -6417,7 +6417,7 @@ "repo": 1 }, "latest_version": "11.17.1", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 2 }, @@ -6538,7 +6538,7 @@ "project": 1 }, "latest_version": "4.4.2", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 11 }, @@ -6645,7 +6645,7 @@ "repo": 1 }, "latest_version": "20.16.0", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 0 }, @@ -6720,16 +6720,16 @@ "entity_id": "strapi", "display_name": "Strapi", "entity_type": "system", - "latest_version": "5.40.0", - "latest_release_at": "2026-03-18T13:33:01Z", + "latest_version": "5.41.0", + "latest_release_at": "2026-04-01T09:17:56Z", "version_sync_status": "green" }, { "entity_id": "strapi--repo--strapi-strapi", "display_name": "strapi / strapi", "entity_type": "repo", - "latest_version": "5.40.0", - "latest_release_at": "2026-03-18T13:33:01Z", + "latest_version": "5.41.0", + "latest_release_at": "2026-04-01T09:17:56Z", "version_sync_status": "green" } ] @@ -6751,8 +6751,8 @@ "system": 1, "repo": 1 }, - "latest_version": "5.40.0", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "latest_version": "5.41.0", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "version_sync_status": "green", "security_version_count": 0 }, @@ -6865,7 +6865,7 @@ "repo": 1 }, "latest_version": "3.22.45", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 0 }, @@ -6966,7 +6966,7 @@ "repo": 1 }, "latest_version": "6.24.0", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 0 }, @@ -7099,7 +7099,7 @@ "extension": 1 }, "latest_version": "7.24.6", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "version_sync_status": "green", "security_version_count": 25 }, @@ -7238,7 +7238,7 @@ "project": 2 }, "latest_version": "19.2.4", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 18 }, @@ -7395,7 +7395,7 @@ "project": 1 }, "latest_version": "6.1.2", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 32 }, @@ -7473,7 +7473,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -7588,7 +7588,7 @@ "project": 1 }, "latest_version": "3.5.31", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "version_sync_status": "green", "security_version_count": 2 }, @@ -7664,7 +7664,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:13+00:00", + "last_version_synced_at": "2026-04-01T09:20:46+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -7733,16 +7733,16 @@ "entity_id": "symfony", "display_name": "Symfony", "entity_type": "system", - "latest_version": "8.0.7", - "latest_release_at": "2026-03-06T16:59:05+00:00", + "latest_version": "8.0.8", + "latest_release_at": "2026-03-31T21:14:58+00:00", "version_sync_status": "green" }, { "entity_id": "symfony--package--symfony-symfony", "display_name": "symfony / symfony", "entity_type": "package", - "latest_version": "8.0.7", - "latest_release_at": "2026-03-06T16:59:05+00:00", + "latest_version": "8.0.8", + "latest_release_at": "2026-03-31T21:14:58+00:00", "version_sync_status": "green" } ] @@ -7764,8 +7764,8 @@ "system": 1, "package": 1 }, - "latest_version": "8.0.7", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "latest_version": "8.0.8", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "version_sync_status": "green", "security_version_count": 220 }, @@ -7829,7 +7829,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -7902,7 +7902,7 @@ "system": 1 }, "latest_version": "2.0", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 2 }, @@ -8009,7 +8009,7 @@ "project": 1 }, "latest_version": "7.0.4", - "last_version_synced_at": "2026-03-31T09:18:13+00:00", + "last_version_synced_at": "2026-04-01T09:20:46+00:00", "version_sync_status": "green", "security_version_count": 92 }, @@ -8073,7 +8073,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -8174,7 +8174,7 @@ "package": 1 }, "latest_version": "2.55.0", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "version_sync_status": "green", "security_version_count": 4 }, @@ -8238,7 +8238,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -8339,7 +8339,7 @@ "package": 1 }, "latest_version": "21.2.6", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 18 }, @@ -8414,16 +8414,16 @@ "entity_id": "echo", "display_name": "Echo", "entity_type": "system", - "latest_version": "5.0.4", - "latest_release_at": "2026-02-15T15:55:53Z", + "latest_version": "5.1.0", + "latest_release_at": "2026-03-31T20:56:54Z", "version_sync_status": "green" }, { "entity_id": "echo--repo--github-com-labstack-echo-v4", "display_name": "labstack / echo / v4", "entity_type": "repo", - "latest_version": "5.0.4", - "latest_release_at": "2026-02-15T15:55:53Z", + "latest_version": "5.1.0", + "latest_release_at": "2026-03-31T20:56:54Z", "version_sync_status": "green" } ] @@ -8445,8 +8445,8 @@ "system": 1, "repo": 1 }, - "latest_version": "5.0.4", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "latest_version": "5.1.0", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 4 }, @@ -8547,7 +8547,7 @@ "project": 1 }, "latest_version": "5.8.4", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 4 }, @@ -8648,7 +8648,7 @@ "package": 1 }, "latest_version": "13.2.0", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 103 }, @@ -8712,7 +8712,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -8819,7 +8819,7 @@ "project": 1 }, "latest_version": "2.2.11.RELEASE", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 22 }, @@ -8920,7 +8920,7 @@ "project": 1 }, "latest_version": "0.27.4", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 2 }, @@ -8984,7 +8984,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -9085,7 +9085,7 @@ "project": 1 }, "latest_version": "0.2.10", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 22 }, @@ -9186,7 +9186,7 @@ "repo": 1 }, "latest_version": "1.12.0", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 2 }, @@ -9287,7 +9287,7 @@ "package": 1 }, "latest_version": "21.4.7", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 4 }, @@ -9388,7 +9388,7 @@ "project": 1 }, "latest_version": "3.2.0", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 4 }, @@ -9452,7 +9452,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -9553,7 +9553,7 @@ "project": 1 }, "latest_version": "0.0.15", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "version_sync_status": "green", "security_version_count": 22 } @@ -9575,7 +9575,7 @@ "version_mapped_count": 52, "latest_version_synced_count": 95, "version_source_gap_count": 15, - "security_version_total": 6290, + "security_version_total": 6316, "lab_enqueued_count": 3 } } diff --git a/08-threat-intel/generated/dashboard/systems.json b/08-threat-intel/generated/dashboard/systems.json index 225d897a..45b98235 100644 --- a/08-threat-intel/generated/dashboard/systems.json +++ b/08-threat-intel/generated/dashboard/systems.json @@ -54,7 +54,7 @@ "entity_id": "wordpress", "display_name": "WordPress", "entity_type": "system", - "latest_version": "7.9", + "latest_version": "51.1.53", "latest_release_at": "", "version_sync_status": "green" } @@ -67,8 +67,8 @@ "entity_type_counts": { "system": 1 }, - "latest_version": "7.9", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "latest_version": "51.1.53", + "last_version_synced_at": "2026-04-01T09:20:55+00:00", "version_sync_status": "green", "security_version_count": 55 }, @@ -177,7 +177,7 @@ "system": 1 }, "latest_version": "11.0-doc", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 2 }, @@ -274,7 +274,7 @@ "system": 1 }, "latest_version": "2.4.x", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 1 }, @@ -419,7 +419,7 @@ "repo": 1 }, "latest_version": "8.2.5", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 59 }, @@ -481,14 +481,14 @@ "cataloged_entity_total": 2, "latest_version_synced_count": 2, "source_gap_count": 0, - "security_version_count": 2, + "security_version_count": 6, "auto_promoted_count": 1, "latest_versions": [ { "entity_id": "woocommerce", "display_name": "WooCommerce", "entity_type": "system", - "latest_version": "10.6.1", + "latest_version": "10.7", "latest_release_at": "2026-03-12T19:14:25Z", "version_sync_status": "green" }, @@ -496,7 +496,7 @@ "entity_id": "woocommerce--repo--woocommerce-woocommerce", "display_name": "woocommerce / woocommerce", "entity_type": "repo", - "latest_version": "10.6.1", + "latest_version": "10.7", "latest_release_at": "2026-03-12T19:14:25Z", "version_sync_status": "green" } @@ -519,10 +519,10 @@ "system": 1, "repo": 1 }, - "latest_version": "10.6.1", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "latest_version": "10.7", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "version_sync_status": "green", - "security_version_count": 2 + "security_version_count": 6 }, { "system_id": "nginx", @@ -596,7 +596,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -648,14 +648,14 @@ "cataloged_entity_total": 1, "latest_version_synced_count": 1, "source_gap_count": 0, - "security_version_count": 5, + "security_version_count": 1, "auto_promoted_count": 0, "latest_versions": [ { "entity_id": "joomla", "display_name": "Joomla", "entity_type": "system", - "latest_version": "1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html", + "latest_version": "1027-20260301-core-acl-hardening-in-com-ajax.html", "latest_release_at": "", "version_sync_status": "green" } @@ -668,10 +668,10 @@ "entity_type_counts": { "system": 1 }, - "latest_version": "1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "latest_version": "1027-20260301-core-acl-hardening-in-com-ajax.html", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", - "security_version_count": 5 + "security_version_count": 1 }, { "system_id": "opencart", @@ -800,7 +800,7 @@ "repo": 1 }, "latest_version": "3.0.5.0", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 4 }, @@ -925,7 +925,7 @@ "repo": 1 }, "latest_version": "2.4.9-beta1", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 6 }, @@ -1026,7 +1026,7 @@ "project": 1 }, "latest_version": "1.0.0", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 182 }, @@ -1090,18 +1090,18 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, { "system_id": "mediawiki", "display_name": "MediaWiki", - "total": 71, + "total": 72, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, - "manual": 71, + "manual": 72, "browser_required": 0, "browser_present": 0, "latest_update": "Wed, 22 Oct 2025 21:44:43 +0000", @@ -1111,9 +1111,9 @@ "families": [ { "family": "xss", - "total": 71, + "total": 72, "verified_real": 0, - "manual": 71 + "manual": 72 } ], "entity_summary": { @@ -1142,7 +1142,7 @@ "cataloged_entity_total": 1, "latest_version_synced_count": 1, "source_gap_count": 0, - "security_version_count": 228, + "security_version_count": 252, "auto_promoted_count": 0, "latest_versions": [ { @@ -1163,9 +1163,9 @@ "system": 1 }, "latest_version": "28-10-2025", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", - "security_version_count": 228 + "security_version_count": 252 }, { "system_id": "shopware", @@ -1294,7 +1294,7 @@ "repo": 1 }, "latest_version": "6.7.8.2", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 0 }, @@ -1367,7 +1367,7 @@ "system": 1 }, "latest_version": "11.2.8", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 74 }, @@ -1473,7 +1473,7 @@ "entity_id": "nextjs", "display_name": "Next.js", "entity_type": "system", - "latest_version": "16.2.1", + "latest_version": "16.2.2", "latest_release_at": "", "version_sync_status": "green" }, @@ -1481,7 +1481,7 @@ "entity_id": "nextjs--project--next", "display_name": "next", "entity_type": "project", - "latest_version": "16.2.1", + "latest_version": "16.2.2", "latest_release_at": "", "version_sync_status": "green" } @@ -1511,8 +1511,8 @@ "system": 1, "project": 1 }, - "latest_version": "16.2.1", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "latest_version": "16.2.2", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 168 }, @@ -1576,7 +1576,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -1640,7 +1640,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -1719,7 +1719,7 @@ "system": 1 }, "latest_version": "2026-4363---incorrect-authorization-issue-in-authorization-caching-impacts-gitlab-ee", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 625 }, @@ -1821,7 +1821,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -1894,7 +1894,7 @@ "system": 1 }, "latest_version": "5.2.3-all-languages.zip", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 0 }, @@ -1967,7 +1967,7 @@ "system": 1 }, "latest_version": "6.1.2", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 0 }, @@ -2057,8 +2057,8 @@ "entity_id": "traefik", "display_name": "Traefik", "entity_type": "system", - "latest_version": "3.7.0-ea.3", - "latest_release_at": "2026-03-26T11:10:20Z", + "latest_version": "3.7.0-ea.2", + "latest_release_at": "2026-03-23T18:56:07.286130Z", "version_sync_status": "green" }, { @@ -2066,15 +2066,15 @@ "display_name": "traefik / traefik / v3", "entity_type": "repo", "latest_version": "3.7.0-ea.3", - "latest_release_at": "2026-03-26T11:10:20Z", + "latest_release_at": "2026-03-27T20:49:46.252668Z", "version_sync_status": "green" }, { "entity_id": "traefik--extension--github-com-traefik-traefik-v3", "display_name": "traefik / traefik / v3", "entity_type": "extension", - "latest_version": "3.7.0-ea.3", - "latest_release_at": "2026-03-26T11:10:20Z", + "latest_version": "3.7.0-ea.2", + "latest_release_at": "2026-03-23T18:56:07.286130Z", "version_sync_status": "green" } ] @@ -2105,8 +2105,8 @@ "repo": 1, "extension": 1 }, - "latest_version": "3.7.0-ea.3", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "latest_version": "3.7.0-ea.2", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "version_sync_status": "green", "security_version_count": 71 }, @@ -2170,7 +2170,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -2271,7 +2271,7 @@ "project": 1 }, "latest_version": "4.1.0-beta", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 102 }, @@ -2470,7 +2470,7 @@ "extension": 1 }, "latest_version": "8.0.3", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "version_sync_status": "green", "security_version_count": 150 }, @@ -2534,18 +2534,18 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, { "system_id": "mattermost", "display_name": "Mattermost", - "total": 35, + "total": 36, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, - "manual": 35, + "manual": 36, "browser_required": 0, "browser_present": 0, "latest_update": "Fix Release Date", @@ -2555,9 +2555,9 @@ "families": [ { "family": "xss", - "total": 35, + "total": 36, "verified_real": 0, - "manual": 35 + "manual": 36 } ], "entity_summary": { @@ -2585,7 +2585,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "entity_type": "repo", "display_name": "mattermost / mattermost-server", - "advisory_count": 16, + "advisory_count": 17, "history_backfill_status": "seeded", "latest_sync_status": "green" }, @@ -2672,7 +2672,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "entity_type": "repo", "display_name": "mattermost / mattermost-server", - "advisory_count": 16, + "advisory_count": 17, "history_backfill_status": "seeded", "latest_sync_status": "green" }, @@ -2711,18 +2711,18 @@ "plugin": 1 }, "latest_version": "26.2.1", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 3854 }, { "system_id": "discourse", "display_name": "Discourse", - "total": 30, + "total": 31, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, - "manual": 30, + "manual": 31, "browser_required": 0, "browser_present": 0, "latest_update": "Wed, 28 May 2025 05:22:52 +0000", @@ -2732,9 +2732,9 @@ "families": [ { "family": "xss", - "total": 30, + "total": 31, "verified_real": 0, - "manual": 30 + "manual": 31 } ], "entity_summary": { @@ -2763,7 +2763,7 @@ "cataloged_entity_total": 1, "latest_version_synced_count": 1, "source_gap_count": 0, - "security_version_count": 80, + "security_version_count": 82, "auto_promoted_count": 0, "latest_versions": [ { @@ -2784,9 +2784,9 @@ "system": 1 }, "latest_version": "2502-05-2023-143713-1.zip", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", - "security_version_count": 80 + "security_version_count": 82 }, { "system_id": "caddy", @@ -2923,7 +2923,7 @@ "extension": 1 }, "latest_version": "2.11.2", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 7 }, @@ -3042,7 +3042,7 @@ "repo": 1 }, "latest_version": "11.17.1", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 2 }, @@ -3163,7 +3163,7 @@ "project": 1 }, "latest_version": "4.4.2", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 11 }, @@ -3270,7 +3270,7 @@ "repo": 1 }, "latest_version": "20.16.0", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 0 }, @@ -3345,16 +3345,16 @@ "entity_id": "strapi", "display_name": "Strapi", "entity_type": "system", - "latest_version": "5.40.0", - "latest_release_at": "2026-03-18T13:33:01Z", + "latest_version": "5.41.0", + "latest_release_at": "2026-04-01T09:17:56Z", "version_sync_status": "green" }, { "entity_id": "strapi--repo--strapi-strapi", "display_name": "strapi / strapi", "entity_type": "repo", - "latest_version": "5.40.0", - "latest_release_at": "2026-03-18T13:33:01Z", + "latest_version": "5.41.0", + "latest_release_at": "2026-04-01T09:17:56Z", "version_sync_status": "green" } ] @@ -3376,8 +3376,8 @@ "system": 1, "repo": 1 }, - "latest_version": "5.40.0", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "latest_version": "5.41.0", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "version_sync_status": "green", "security_version_count": 0 }, @@ -3490,7 +3490,7 @@ "repo": 1 }, "latest_version": "3.22.45", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 0 }, @@ -3591,7 +3591,7 @@ "repo": 1 }, "latest_version": "6.24.0", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 0 }, @@ -3724,7 +3724,7 @@ "extension": 1 }, "latest_version": "7.24.6", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "version_sync_status": "green", "security_version_count": 25 }, @@ -3863,7 +3863,7 @@ "project": 2 }, "latest_version": "19.2.4", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 18 }, @@ -4020,7 +4020,7 @@ "project": 1 }, "latest_version": "6.1.2", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 32 }, @@ -4098,7 +4098,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -4213,7 +4213,7 @@ "project": 1 }, "latest_version": "3.5.31", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "version_sync_status": "green", "security_version_count": 2 }, @@ -4289,7 +4289,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:13+00:00", + "last_version_synced_at": "2026-04-01T09:20:46+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -4358,16 +4358,16 @@ "entity_id": "symfony", "display_name": "Symfony", "entity_type": "system", - "latest_version": "8.0.7", - "latest_release_at": "2026-03-06T16:59:05+00:00", + "latest_version": "8.0.8", + "latest_release_at": "2026-03-31T21:14:58+00:00", "version_sync_status": "green" }, { "entity_id": "symfony--package--symfony-symfony", "display_name": "symfony / symfony", "entity_type": "package", - "latest_version": "8.0.7", - "latest_release_at": "2026-03-06T16:59:05+00:00", + "latest_version": "8.0.8", + "latest_release_at": "2026-03-31T21:14:58+00:00", "version_sync_status": "green" } ] @@ -4389,8 +4389,8 @@ "system": 1, "package": 1 }, - "latest_version": "8.0.7", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "latest_version": "8.0.8", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "version_sync_status": "green", "security_version_count": 220 }, @@ -4454,7 +4454,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -4527,7 +4527,7 @@ "system": 1 }, "latest_version": "2.0", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 2 }, @@ -4634,7 +4634,7 @@ "project": 1 }, "latest_version": "7.0.4", - "last_version_synced_at": "2026-03-31T09:18:13+00:00", + "last_version_synced_at": "2026-04-01T09:20:46+00:00", "version_sync_status": "green", "security_version_count": 92 }, @@ -4698,7 +4698,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -4799,7 +4799,7 @@ "package": 1 }, "latest_version": "2.55.0", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "version_sync_status": "green", "security_version_count": 4 }, @@ -4863,7 +4863,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -4964,7 +4964,7 @@ "package": 1 }, "latest_version": "21.2.6", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 18 }, @@ -5039,16 +5039,16 @@ "entity_id": "echo", "display_name": "Echo", "entity_type": "system", - "latest_version": "5.0.4", - "latest_release_at": "2026-02-15T15:55:53Z", + "latest_version": "5.1.0", + "latest_release_at": "2026-03-31T20:56:54Z", "version_sync_status": "green" }, { "entity_id": "echo--repo--github-com-labstack-echo-v4", "display_name": "labstack / echo / v4", "entity_type": "repo", - "latest_version": "5.0.4", - "latest_release_at": "2026-02-15T15:55:53Z", + "latest_version": "5.1.0", + "latest_release_at": "2026-03-31T20:56:54Z", "version_sync_status": "green" } ] @@ -5070,8 +5070,8 @@ "system": 1, "repo": 1 }, - "latest_version": "5.0.4", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "latest_version": "5.1.0", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 4 }, @@ -5172,7 +5172,7 @@ "project": 1 }, "latest_version": "5.8.4", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 4 }, @@ -5273,7 +5273,7 @@ "package": 1 }, "latest_version": "13.2.0", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 103 }, @@ -5337,7 +5337,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -5444,7 +5444,7 @@ "project": 1 }, "latest_version": "2.2.11.RELEASE", - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "version_sync_status": "green", "security_version_count": 22 }, @@ -5545,7 +5545,7 @@ "project": 1 }, "latest_version": "0.27.4", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 2 }, @@ -5609,7 +5609,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -5710,7 +5710,7 @@ "project": 1 }, "latest_version": "0.2.10", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 22 }, @@ -5811,7 +5811,7 @@ "repo": 1 }, "latest_version": "1.12.0", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 2 }, @@ -5912,7 +5912,7 @@ "package": 1 }, "latest_version": "21.4.7", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 4 }, @@ -6013,7 +6013,7 @@ "project": 1 }, "latest_version": "3.2.0", - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "version_sync_status": "green", "security_version_count": 4 }, @@ -6077,7 +6077,7 @@ "system": 1 }, "latest_version": "", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "version_sync_status": "source-gap", "security_version_count": 0 }, @@ -6178,7 +6178,7 @@ "project": 1 }, "latest_version": "0.0.15", - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "version_sync_status": "green", "security_version_count": 22 } diff --git a/08-threat-intel/generated/entity-catalog-report.md b/08-threat-intel/generated/entity-catalog-report.md index 14eb3ff4..694435b4 100644 --- a/08-threat-intel/generated/entity-catalog-report.md +++ b/08-threat-intel/generated/entity-catalog-report.md @@ -1,6 +1,6 @@ # 分层实体覆盖与完整度报告 -- 生成时间: `2026-03-31T09:18:20+00:00` +- 生成时间: `2026-04-01T09:21:04+00:00` - 已编目实体: `110` - 待编目 backlog: `7` - history-full 已完成: `41` diff --git a/08-threat-intel/generated/entity-completeness.json b/08-threat-intel/generated/entity-completeness.json index 3cca9d7e..6e7dfd5d 100644 --- a/08-threat-intel/generated/entity-completeness.json +++ b/08-threat-intel/generated/entity-completeness.json @@ -1,5 +1,5 @@ { - "generated_at": "2026-03-31T09:18:20+00:00", + "generated_at": "2026-04-01T09:21:04+00:00", "cataloged_entity_total": 110, "candidate_entity_total": 7, "history_full_complete_count": 41, @@ -809,7 +809,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "entity_type": "repo", "display_name": "mattermost / mattermost-server", - "advisory_count": 16, + "advisory_count": 17, "history_backfill_status": "seeded", "latest_sync_status": "green" }, @@ -1769,6 +1769,6 @@ "discovery_queue": 7, "history_queue": 27, "latest_queue": 10, - "workflow_queue": 2179 + "workflow_queue": 2181 } } diff --git a/08-threat-intel/generated/entity-discovery-backlog.md b/08-threat-intel/generated/entity-discovery-backlog.md index 4b96b7ce..6556186a 100644 --- a/08-threat-intel/generated/entity-discovery-backlog.md +++ b/08-threat-intel/generated/entity-discovery-backlog.md @@ -1,6 +1,6 @@ # 分层实体发现 Backlog -- 生成时间: `2026-03-31T09:18:20+00:00` +- 生成时间: `2026-04-01T09:21:04+00:00` - 待编目数量: `7` | candidate_id | root_system | entity_type | risk | reason | waiting_for | source | diff --git a/08-threat-intel/generated/entity-queues.json b/08-threat-intel/generated/entity-queues.json index e4c72e94..2c9a19dd 100644 --- a/08-threat-intel/generated/entity-queues.json +++ b/08-threat-intel/generated/entity-queues.json @@ -1,5 +1,5 @@ { - "generated_at": "2026-03-31T09:18:20+00:00", + "generated_at": "2026-04-01T09:21:04+00:00", "discovery_queue": { "count": 7, "items": [ @@ -408,7 +408,7 @@ ] }, "workflow_queue": { - "count": 2179, + "count": 2181, "items": [ { "canonical_id": "adminer--CVE-2026-25878", diff --git a/08-threat-intel/generated/lab-enqueue-summary.json b/08-threat-intel/generated/lab-enqueue-summary.json index 4c329fc3..e0e62a98 100644 --- a/08-threat-intel/generated/lab-enqueue-summary.json +++ b/08-threat-intel/generated/lab-enqueue-summary.json @@ -1,7 +1,7 @@ { - "generated_at": "2026-03-31T09:18:14+00:00", + "generated_at": "2026-04-01T09:20:55+00:00", "enqueued": 3, - "queue_total": 2384, + "queue_total": 2387, "items": [ { "advisory_id": "directus--05a97ef95a", @@ -148,6 +148,11 @@ "system_id": "directus", "priority": "version-sync" }, + { + "advisory_id": "discourse--5dce90675e", + "system_id": "discourse", + "priority": "version-sync" + }, { "advisory_id": "django--039dc7ddc9", "system_id": "django", @@ -1094,17 +1099,12 @@ "priority": "version-sync" }, { - "advisory_id": "mattermost--CVE-2026-26233", + "advisory_id": "mattermost--CVE-2026-3113", "system_id": "mattermost", "priority": "version-sync" }, { - "advisory_id": "mattermost--CVE-2026-27656", - "system_id": "mattermost", - "priority": "version-sync" - }, - { - "advisory_id": "mediawiki--7a3e57910a", + "advisory_id": "mediawiki--469c5db88b", "system_id": "mediawiki", "priority": "version-sync" }, @@ -2772,561 +2772,6 @@ "advisory_id": "strapi--ea5ecc42f3", "system_id": "strapi", "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--05da41121f", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--06e151b334", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--08ab0e40fd", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--08ff88b89e", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--1129617837", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--18f94418c3", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--1b2a89ca9c", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--2646cca050", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--2acb79d818", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--30c7084831", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--313be91ecc", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--35d1bcc8fd", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--38e031b62a", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--3b3ee22bdd", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--3d4415cd8c", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--3f7bcf6460", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--40fad2352c", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--46dfa1debb", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--4703641b3e", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--4b8901521b", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--4e5d64d078", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--509829ee63", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--5431e35cb9", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--583e91c778", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--5ea81bed02", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--5ebeb363ab", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--5f95d49feb", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--608614d706", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--61bcf00c63", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--6398a77e67", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--669aeb4ed9", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--69fa3cd79b", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--6a9eb36c09", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--6c455c6050", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--6f6549cea3", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--6ff424270d", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--7f9ac413c1", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--8197f55ac4", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--81f7400465", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--82db1502da", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--8aa1dccc64", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--94b883541e", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--9848665054", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--9b9e3ff8e5", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--9c50136dd9", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2014-4549", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2014-4558", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2014-6313", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2015-2069", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2015-2329", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2015-5065", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2016-10112", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2016-10922", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2016-10923", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2016-10935", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2017-17058", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2017-18356", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2017-18506", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2017-18592", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2018-11485", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2018-11486", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2018-11525", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2018-11579", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2018-20714", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2018-20782", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2018-20966", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2018-5316", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2018-8710", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2018-8711", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-1010124", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-11807", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-14774", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-14796", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-14948", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-14978", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-14979", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-15092", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-18668", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-18834", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-20891", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-5979", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-7441", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2019-9168", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2020-11727", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--CVE-2020-8819", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--a130ac93bb", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--a72c466a05", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--a89ba1be4d", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--aa9bdbc2ce", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--aabb0dbc7f", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--ab923ae740", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--ac4a14e633", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--ac8969a095", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--b0bcd8ad54", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--b19dfd0a1c", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--b213245e4b", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--bc8055b458", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--c4c5c5cb89", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--d01b27ef60", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--d3da259278", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--d717626a6f", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--dd8265593a", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--e0fa01b204", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--e2b8d0d0e4", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--e8abb34bbb", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--eb8448be50", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--ec096f5867", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--ef0c884c7a", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--ef9e14861f", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--f0e42669e3", - "system_id": "woocommerce", - "priority": "version-sync" - }, - { - "advisory_id": "woocommerce--fe6541027e", - "system_id": "woocommerce", - "priority": "version-sync" } ], "pending": [] diff --git a/08-threat-intel/generated/latest-ingest.md b/08-threat-intel/generated/latest-ingest.md index 75448eff..ccbb4dd8 100644 --- a/08-threat-intel/generated/latest-ingest.md +++ b/08-threat-intel/generated/latest-ingest.md @@ -1,13 +1,13 @@ # 最新同步摘要 -- 渲染时间: `2026-03-31T09:18:20+00:00` +- 渲染时间: `2026-04-01T09:21:05+00:00` - 系统数量: `62` -- Advisory 数量: `2384` +- Advisory 数量: `2387` - 已编目实体数量: `110` - 待编目 backlog 数量: `7` -- 重点 Markdown 数量: `176` +- 重点 Markdown 数量: `177` - Run Bundle 数量: `89` - 新增记录: `3` -- 更新记录: `2` -- Triage 数量: `1178` +- 更新记录: `0` +- Triage 数量: `1180` - 失败的 source adapter: `0` diff --git a/08-threat-intel/generated/monitor-summary.json b/08-threat-intel/generated/monitor-summary.json index 92c5a24e..b17c7dd7 100644 --- a/08-threat-intel/generated/monitor-summary.json +++ b/08-threat-intel/generated/monitor-summary.json @@ -1,11 +1,11 @@ { - "generated_at": "2026-03-31T09:18:05+00:00", + "generated_at": "2026-04-01T09:20:10+00:00", "active_source_count": 102, "green_source_count": 102, "source_failure_count": 0, "open_alert_count": 0, "resolved_alert_count": 101, - "last_fully_green_run": "2026-03-31T09:18:05+00:00", + "last_fully_green_run": "2026-04-01T09:20:10+00:00", "source_catalog": { "system_count": 62, "source_count": 179, @@ -13,12 +13,12 @@ }, "ingest": { "new_count": 3, - "updated_count": 2, + "updated_count": 0, "failure_count": 0, "systems_touched": [ + "discourse", "mattermost", - "mediawiki", - "prestashop" + "mediawiki" ] }, "validation": { @@ -38,14 +38,14 @@ "cataloged_entity_total": 110, "latest_version_synced_count": 95, "source_gap_count": 15, - "security_version_total": 6290, + "security_version_total": 6316, "security_version_entity_count": 83, "auto_promoted_entity_count": 10, "lab_enqueued_count": 3 }, "lab_enqueue": { "enqueued": 3, - "queue_total": 2384, + "queue_total": 2387, "pending_count": 0 } } diff --git a/08-threat-intel/generated/release-index.json b/08-threat-intel/generated/release-index.json index 0c71b79b..d47b827f 100644 --- a/08-threat-intel/generated/release-index.json +++ b/08-threat-intel/generated/release-index.json @@ -1,6 +1,6 @@ { - "generated_at": "2026-03-31T09:18:20+00:00", - "version_count": 6290, + "generated_at": "2026-04-01T09:21:05+00:00", + "version_count": 6316, "versions": [ { "version_id": "angular--package--angular-core--introduced-0-last-affected-18-2-14", @@ -1039,34 +1039,6 @@ "advisory_refs": [], "is_latest_snapshot": false }, - { - "version_id": "discourse--3-3-4-security-and-maintenance-release", - "entity_id": "discourse", - "root_system_id": "discourse", - "version": "3-3-4-security-and-maintenance-release", - "released_at": "Wed, 05 Feb 2025 14:26:22 +0000", - "release_url": "https://meta.discourse.org/t/3-3-4-security-and-maintenance-release/349301", - "source_name": "Discourse Release Notes RSS", - "source_confidence": "official", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "discourse--3-3-4", - "entity_id": "discourse", - "root_system_id": "discourse", - "version": "3.3.4", - "released_at": "Wed, 05 Feb 2025 14:26:22 +0000", - "release_url": "https://meta.discourse.org/t/3-3-4-security-and-maintenance-release/349301", - "source_name": "Discourse Release Notes RSS", - "source_confidence": "official", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, { "version_id": "discourse--3-4-0-beta4-redesigned-emojis-exporting-user-data-flagging-illegal-content-and-more", "entity_id": "discourse", @@ -2033,6 +2005,20 @@ "advisory_refs": [], "is_latest_snapshot": false }, + { + "version_id": "discourse--2026-1-3", + "entity_id": "discourse", + "root_system_id": "discourse", + "version": "2026.1.3", + "released_at": "Tue, 31 Mar 2026 14:35:49 +0000", + "release_url": "https://meta.discourse.org/t/march-2026-monthly-release/399630", + "source_name": "Discourse Release Notes RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, { "version_id": "discourse--2026-2", "entity_id": "discourse", @@ -2075,6 +2061,48 @@ "advisory_refs": [], "is_latest_snapshot": false }, + { + "version_id": "discourse--2026-2-2", + "entity_id": "discourse", + "root_system_id": "discourse", + "version": "2026.2.2", + "released_at": "Tue, 31 Mar 2026 14:35:49 +0000", + "release_url": "https://meta.discourse.org/t/march-2026-monthly-release/399630", + "source_name": "Discourse Release Notes RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "discourse--2026-3", + "entity_id": "discourse", + "root_system_id": "discourse", + "version": "2026.3", + "released_at": "Tue, 31 Mar 2026 14:35:49 +0000", + "release_url": "https://meta.discourse.org/t/march-2026-monthly-release/399630", + "source_name": "Discourse Release Notes RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "discourse--2026-3-0", + "entity_id": "discourse", + "root_system_id": "discourse", + "version": "2026.3.0", + "released_at": "Tue, 31 Mar 2026 14:35:49 +0000", + "release_url": "https://meta.discourse.org/t/march-2026-monthly-release/399630", + "source_name": "Discourse Release Notes RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, { "version_id": "discourse--2026-3-0-latest-1", "entity_id": "discourse", @@ -15511,68 +15539,12 @@ "is_latest_snapshot": true }, { - "version_id": "joomla--963-20250401-framework-sql-injection-vulnerability-in-quotenamestr-method-of-database-package-html", + "version_id": "joomla--1027-20260301-core-acl-hardening-in-com-ajax-html", "entity_id": "joomla", "root_system_id": "joomla", - "version": "963-20250401-framework-sql-injection-vulnerability-in-quotenamestr-method-of-database-package.html", + "version": "1027-20260301-core-acl-hardening-in-com-ajax.html", "released_at": null, - "release_url": "https://developer.joomla.org/security-centre/963-20250401-framework-sql-injection-vulnerability-in-quotenamestr-method-of-database-package.html", - "source_name": "Joomla Security Centre", - "source_confidence": "official", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "joomla--1010-20250901-core-inadequate-content-filtering-within-the-checkattribute-filter-code-html", - "entity_id": "joomla", - "root_system_id": "joomla", - "version": "1010-20250901-core-inadequate-content-filtering-within-the-checkattribute-filter-code.html", - "released_at": null, - "release_url": "https://developer.joomla.org/security-centre/1010-20250901-core-inadequate-content-filtering-within-the-checkattribute-filter-code.html", - "source_name": "Joomla Security Centre", - "source_confidence": "official", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "joomla--1011-20250902-core-user-enumeration-in-passkey-authentication-method-html", - "entity_id": "joomla", - "root_system_id": "joomla", - "version": "1011-20250902-core-user-enumeration-in-passkey-authentication-method.html", - "released_at": null, - "release_url": "https://developer.joomla.org/security-centre/1011-20250902-core-user-enumeration-in-passkey-authentication-method.html", - "source_name": "Joomla Security Centre", - "source_confidence": "official", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "joomla--1016-20260101-core-inadequate-content-filtering-for-data-urls-html", - "entity_id": "joomla", - "root_system_id": "joomla", - "version": "1016-20260101-core-inadequate-content-filtering-for-data-urls.html", - "released_at": null, - "release_url": "https://developer.joomla.org/security-centre/1016-20260101-core-inadequate-content-filtering-for-data-urls.html", - "source_name": "Joomla Security Centre", - "source_confidence": "official", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "joomla--1017-20260102-core-xss-vector-in-the-pagebreak-plugin-html", - "entity_id": "joomla", - "root_system_id": "joomla", - "version": "1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html", - "released_at": null, - "release_url": "https://developer.joomla.org/security-centre/1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html", + "release_url": "https://developer.joomla.org/security-centre/1027-20260301-core-acl-hardening-in-com-ajax.html", "source_name": "Joomla Security Centre", "source_confidence": "official", "security_relevant": true, @@ -67634,7 +67606,8 @@ "reason": "affected", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false }, @@ -67875,7 +67848,8 @@ "reason": "fixed", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false }, @@ -70778,7 +70752,8 @@ "reason": "affected", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false }, @@ -71007,7 +70982,8 @@ "reason": "fixed", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false }, @@ -71375,7 +71351,8 @@ "reason": "affected", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false }, @@ -71478,7 +71455,8 @@ "reason": "fixed", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false }, @@ -71566,7 +71544,8 @@ "reason": "affected", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false }, @@ -71641,7 +71620,8 @@ "reason": "fixed", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false }, @@ -71714,7 +71694,8 @@ "reason": "affected", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false }, @@ -71731,7 +71712,8 @@ "reason": "fixed", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false }, @@ -71880,8 +71862,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.39", - "released_at": "Mon, 30 Mar 2026 17:50:26 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FFD4KWZMOVZQJF4PIIVUTCEHDJLMNZEB/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -72734,8 +72716,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.42", - "released_at": "Mon, 30 Mar 2026 17:50:26 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FFD4KWZMOVZQJF4PIIVUTCEHDJLMNZEB/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -73042,8 +73024,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.43", - "released_at": "Mon, 29 Dec 2025 20:36:35 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/3EXWLDDHRGVDQACOHP3Y4ZE5H6BHBJPJ/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -73700,8 +73682,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.43.6", - "released_at": "Fri, 09 Jan 2026 17:54:29 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/J7SY6XVOKSONV7Y6VZ4ZASOMRF2FWMKN/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -73826,8 +73808,120 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.43.7", - "released_at": "Mon, 30 Mar 2026 17:50:26 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FFD4KWZMOVZQJF4PIIVUTCEHDJLMNZEB/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-43-7-patch-gz", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.patch.gz", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-43-7-patch-gz-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.patch.gz.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-43-7-patch-zip", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.patch.zip", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-43-7-patch-zip-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.patch.zip.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-43-7-tar-gz", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.tar.gz", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-43-7-tar-gz-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.tar.gz.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-43-7-zip", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.zip", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-43-7-zip-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.zip.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -73840,8 +73934,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.44", - "released_at": "Mon, 29 Dec 2025 20:36:35 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/3EXWLDDHRGVDQACOHP3Y4ZE5H6BHBJPJ/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -74288,8 +74382,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.44.3", - "released_at": "Fri, 09 Jan 2026 17:54:29 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/J7SY6XVOKSONV7Y6VZ4ZASOMRF2FWMKN/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -74414,8 +74508,120 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.44.4", - "released_at": "Mon, 30 Mar 2026 17:50:26 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FFD4KWZMOVZQJF4PIIVUTCEHDJLMNZEB/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-44-4-patch-gz", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.patch.gz", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-44-4-patch-gz-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.patch.gz.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-44-4-patch-zip", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.patch.zip", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-44-4-patch-zip-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.patch.zip.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-44-4-tar-gz", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.tar.gz", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-44-4-tar-gz-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.tar.gz.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-44-4-zip", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.zip", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-44-4-zip-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.zip.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -74428,8 +74634,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.45", - "released_at": "Mon, 29 Dec 2025 20:36:35 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/3EXWLDDHRGVDQACOHP3Y4ZE5H6BHBJPJ/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -74694,8 +74900,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.45.1", - "released_at": "Fri, 09 Jan 2026 17:54:29 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/J7SY6XVOKSONV7Y6VZ4ZASOMRF2FWMKN/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -74820,8 +75026,120 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.45.2", - "released_at": "Mon, 30 Mar 2026 17:50:26 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FFD4KWZMOVZQJF4PIIVUTCEHDJLMNZEB/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-45-2-patch-gz", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.patch.gz", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-45-2-patch-gz-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.patch.gz.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-45-2-patch-zip", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.patch.zip", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-45-2-patch-zip-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.patch.zip.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-45-2-tar-gz", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.tar.gz", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-45-2-tar-gz-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.tar.gz.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-45-2-zip", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.zip", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "mediawiki--1-45-2-zip-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.zip.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -74918,8 +75236,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "8.0", - "released_at": "Wed, 10 Dec 2025 22:22:38 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FOY6VXTBCCHIGYGSTQBPN3UFCL6CAX6Y/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -75002,8 +75320,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "8.5", - "released_at": "Wed, 10 Dec 2025 22:22:38 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FOY6VXTBCCHIGYGSTQBPN3UFCL6CAX6Y/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, @@ -86558,7 +86876,7 @@ "advisory_refs": [ "traefik--CVE-2026-32305" ], - "is_latest_snapshot": false + "is_latest_snapshot": true }, { "version_id": "traefik--repo--github-com-traefik-traefik-v3--introduced-0", @@ -90823,6 +91141,34 @@ "advisory_refs": [], "is_latest_snapshot": false }, + { + "version_id": "woocommerce--10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "entity_id": "woocommerce", + "root_system_id": "woocommerce", + "version": "10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "woocommerce--10-5-1", + "entity_id": "woocommerce", + "root_system_id": "woocommerce", + "version": "10.5.1", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, { "version_id": "woocommerce--repo--woocommerce-woocommerce--5-4", "entity_id": "woocommerce--repo--woocommerce-woocommerce", @@ -90837,6 +91183,62 @@ "advisory_refs": [], "is_latest_snapshot": false }, + { + "version_id": "woocommerce--repo--woocommerce-woocommerce--10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "entity_id": "woocommerce--repo--woocommerce-woocommerce", + "root_system_id": "woocommerce", + "version": "10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "woocommerce--repo--woocommerce-woocommerce--10-5-1", + "entity_id": "woocommerce--repo--woocommerce-woocommerce", + "root_system_id": "woocommerce", + "version": "10.5.1", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "wordpress--1-0-6-unauthenticated-blind-ssrf-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "1-0-6-unauthenticated-blind-ssrf-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/performance-monitor/vulnerability/wordpress-performance-monitor-plugin-1-0-6-unauthenticated-blind-ssrf-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "wordpress--1-0-6", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "1.0.6", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/performance-monitor/vulnerability/wordpress-performance-monitor-plugin-1-0-6-unauthenticated-blind-ssrf-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, { "version_id": "wordpress--1-1-4-sensitive-information-exposure-via-views-files-vulnerability", "entity_id": "wordpress", @@ -90921,6 +91323,34 @@ "advisory_refs": [], "is_latest_snapshot": false }, + { + "version_id": "wordpress--1-4-9-missing-authorization-to-authenticated-contributor-sensitive-information-exposure-via-shortcode-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "1-4-9-missing-authorization-to-authenticated-contributor-sensitive-information-exposure-via-shortcode-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/contact-form-entries/vulnerability/wordpress-database-for-contact-form-7-wpforms-elementor-forms-plugin-1-4-9-missing-authorization-to-authenticated-contributor-sensitive-information-exposure-via-shortcode-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "wordpress--1-4-9", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "1.4.9", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/contact-form-entries/vulnerability/wordpress-database-for-contact-form-7-wpforms-elementor-forms-plugin-1-4-9-missing-authorization-to-authenticated-contributor-sensitive-information-exposure-via-shortcode-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, { "version_id": "wordpress--1-7-36-unauthenticated-server-side-template-injection-via-prefill-functionality-vulnerability", "entity_id": "wordpress", @@ -90949,34 +91379,6 @@ "advisory_refs": [], "is_latest_snapshot": false }, - { - "version_id": "wordpress--1-7-58-contributor-arbitrary-file-download-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "1-7-58-contributor-arbitrary-file-download-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/shared-files/vulnerability/wordpress-shared-files-plugin-1-7-58-contributor-arbitrary-file-download-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--1-7-58", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "1.7.58", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/shared-files/vulnerability/wordpress-shared-files-plugin-1-7-58-contributor-arbitrary-file-download-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, { "version_id": "wordpress--1-9-12-unauthenticated-remote-code-execution-via-calculation-field-vulnerability", "entity_id": "wordpress", @@ -91005,6 +91407,34 @@ "advisory_refs": [], "is_latest_snapshot": false }, + { + "version_id": "wordpress--1-84-cross-site-request-forgery-to-stored-cross-site-scripting-via-aps-options-page-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "1-84-cross-site-request-forgery-to-stored-cross-site-scripting-via-aps-options-page-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/auto-post-scheduler/vulnerability/wordpress-auto-post-scheduler-plugin-1-84-cross-site-request-forgery-to-stored-cross-site-scripting-via-aps-options-page-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "wordpress--1-84", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "1.84", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/auto-post-scheduler/vulnerability/wordpress-auto-post-scheduler-plugin-1-84-cross-site-request-forgery-to-stored-cross-site-scripting-via-aps-options-page-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, { "version_id": "wordpress--2-0-01-unauthenticated-stored-cross-site-scripting-via-multiple-parameters-vulnerability", "entity_id": "wordpress", @@ -91033,6 +91463,34 @@ "advisory_refs": [], "is_latest_snapshot": false }, + { + "version_id": "wordpress--2-1-2-authenticated-manager-sql-injection-via-sort-parameter-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "2-1-2-authenticated-manager-sql-injection-via-sort-parameter-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/ameliabooking/vulnerability/wordpress-amelia-plugin-2-1-2-authenticated-manager-sql-injection-via-sort-parameter-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "wordpress--2-1-2", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "2.1.2", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/ameliabooking/vulnerability/wordpress-amelia-plugin-2-1-2-authenticated-manager-sql-injection-via-sort-parameter-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, { "version_id": "wordpress--2-1-4-unauthenticated-sensitive-information-exposure-via-rest-api-vulnerability", "entity_id": "wordpress", @@ -91062,12 +91520,12 @@ "is_latest_snapshot": false }, { - "version_id": "wordpress--2-1-6-missing-authorization-to-authenticated-student-privilege-escalation-to-administrator-vulnerability", + "version_id": "wordpress--2-1-12-cross-site-request-forgery-to-plugin-settings-update-vulnerability", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "2-1-6-missing-authorization-to-authenticated-student-privilege-escalation-to-administrator-vulnerability", + "version": "2-1-12-cross-site-request-forgery-to-plugin-settings-update-vulnerability", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/learning-management-system/vulnerability/wordpress-masteriyo-lms-plugin-2-1-6-missing-authorization-to-authenticated-student-privilege-escalation-to-administrator-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/minify-html-markup/vulnerability/wordpress-minify-html-plugin-2-1-12-cross-site-request-forgery-to-plugin-settings-update-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, @@ -91076,12 +91534,12 @@ "is_latest_snapshot": false }, { - "version_id": "wordpress--2-1-6", + "version_id": "wordpress--2-1-12", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "2.1.6", + "version": "2.1.12", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/learning-management-system/vulnerability/wordpress-masteriyo-lms-plugin-2-1-6-missing-authorization-to-authenticated-student-privilege-escalation-to-administrator-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/minify-html-markup/vulnerability/wordpress-minify-html-plugin-2-1-12-cross-site-request-forgery-to-plugin-settings-update-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, @@ -91090,12 +91548,12 @@ "is_latest_snapshot": false }, { - "version_id": "wordpress--2-4-9-authenticated-subscriber-arbitrary-file-deletion-via-resume-custom-file-field-vulnerability", + "version_id": "wordpress--2-7-0-cross-site-scripting-xss-vulnerability", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "2-4-9-authenticated-subscriber-arbitrary-file-deletion-via-resume-custom-file-field-vulnerability", + "version": "2-7-0-cross-site-scripting-xss-vulnerability", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/wp-job-portal/vulnerability/wordpress-wp-job-portal-plugin-2-4-9-authenticated-subscriber-arbitrary-file-deletion-via-resume-custom-file-field-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/kubio/vulnerability/wordpress-kubio-ai-page-builder-plugin-2-7-0-cross-site-scripting-xss-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, @@ -91104,40 +91562,12 @@ "is_latest_snapshot": false }, { - "version_id": "wordpress--2-4-9", + "version_id": "wordpress--2-7-0", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "2.4.9", + "version": "2.7.0", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/wp-job-portal/vulnerability/wordpress-wp-job-portal-plugin-2-4-9-authenticated-subscriber-arbitrary-file-deletion-via-resume-custom-file-field-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--2-5-2-unauthenticated-payment-amount-validation-bypass-via-form-id-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "2-5-2-unauthenticated-payment-amount-validation-bypass-via-form-id-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/sureforms/vulnerability/wordpress-sureforms-plugin-2-5-2-unauthenticated-payment-amount-validation-bypass-via-form-id-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--2-5-2", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "2.5.2", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/sureforms/vulnerability/wordpress-sureforms-plugin-2-5-2-unauthenticated-payment-amount-validation-bypass-via-form-id-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/kubio/vulnerability/wordpress-kubio-ai-page-builder-plugin-2-7-0-cross-site-scripting-xss-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, @@ -91174,12 +91604,12 @@ "is_latest_snapshot": false }, { - "version_id": "wordpress--2-11-2-authenticated-contributor-sensitive-information-exposure-to-account-takeover-via-shortcode-template-tag-vulnerability", + "version_id": "wordpress--3-15-5-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-post-author-reassignment-via-avatar-field-vulnerability", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "2-11-2-authenticated-contributor-sensitive-information-exposure-to-account-takeover-via-shortcode-template-tag-vulnerability", + "version": "3-15-5-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-post-author-reassignment-via-avatar-field-vulnerability", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/ultimate-member/vulnerability/wordpress-ultimate-member-plugin-2-11-2-authenticated-contributor-sensitive-information-exposure-to-account-takeover-via-shortcode-template-tag-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/profile-builder/vulnerability/wordpress-user-profile-builder-beautiful-user-registration-forms-user-profiles-user-role-editor-plugin-3-15-5-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-post-author-reassignment-via-avatar-field-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, @@ -91188,12 +91618,12 @@ "is_latest_snapshot": false }, { - "version_id": "wordpress--2-11-2", + "version_id": "wordpress--3-15-5", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "2.11.2", + "version": "3.15.5", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/ultimate-member/vulnerability/wordpress-ultimate-member-plugin-2-11-2-authenticated-contributor-sensitive-information-exposure-to-account-takeover-via-shortcode-template-tag-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/profile-builder/vulnerability/wordpress-user-profile-builder-beautiful-user-registration-forms-user-profiles-user-role-editor-plugin-3-15-5-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-post-author-reassignment-via-avatar-field-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, @@ -91202,12 +91632,12 @@ "is_latest_snapshot": false }, { - "version_id": "wordpress--3-0-4-unauthenticated-sql-injection-via-multiformid-parameter-vulnerability", + "version_id": "wordpress--3-21-4-cross-site-scripting-xss-vulnerability", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "3-0-4-unauthenticated-sql-injection-via-multiformid-parameter-vulnerability", + "version": "3-21-4-cross-site-scripting-xss-vulnerability", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/js-support-ticket/vulnerability/wordpress-js-help-desk-ai-powered-support-ticketing-system-plugin-3-0-4-unauthenticated-sql-injection-via-multiformid-parameter-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/ultimate_vc_addons/vulnerability/wordpress-ultimate-addons-for-wpbakery-page-builder-plugin-3-21-4-cross-site-scripting-xss-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, @@ -91216,124 +91646,12 @@ "is_latest_snapshot": false }, { - "version_id": "wordpress--3-0-4", + "version_id": "wordpress--3-21-4", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "3.0.4", + "version": "3.21.4", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/js-support-ticket/vulnerability/wordpress-js-help-desk-ai-powered-support-ticketing-system-plugin-3-0-4-unauthenticated-sql-injection-via-multiformid-parameter-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--3-0-22-unauthenticated-rest-call-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3-0-22-unauthenticated-rest-call-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/leadconnector/vulnerability/wordpress-leadconnector-plugin-3-0-22-unauthenticated-rest-call-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--3-0-22", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3.0.22", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/leadconnector/vulnerability/wordpress-leadconnector-plugin-3-0-22-unauthenticated-rest-call-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--3-4-3-unauthenticated-arbitrary-shortcode-execution-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3-4-3-unauthenticated-arbitrary-shortcode-execution-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/responsive-add-ons/vulnerability/wordpress-responsive-plus-plugin-3-4-3-unauthenticated-arbitrary-shortcode-execution-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--3-4-3", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3.4.3", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/responsive-add-ons/vulnerability/wordpress-responsive-plus-plugin-3-4-3-unauthenticated-arbitrary-shortcode-execution-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--3-8-unauthenticated-stored-cross-site-scripting-via-user-agent-http-header-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3-8-unauthenticated-stored-cross-site-scripting-via-user-agent-http-header-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/blackhole-bad-bots/vulnerability/wordpress-blackhole-for-bad-bots-plugin-3-8-unauthenticated-stored-cross-site-scripting-via-user-agent-http-header-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--3-8", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3.8", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/blackhole-bad-bots/vulnerability/wordpress-blackhole-for-bad-bots-plugin-3-8-unauthenticated-stored-cross-site-scripting-via-user-agent-http-header-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--3-28-31-authenticated-editor-php-object-injection-via-post-content-of-admin-form-posts-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3-28-31-authenticated-editor-php-object-injection-via-post-content-of-admin-form-posts-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/acf-frontend-form-element/vulnerability/wordpress-frontend-admin-by-dynamiapps-plugin-3-28-31-authenticated-editor-php-object-injection-via-post-content-of-admin-form-posts-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--3-28-31", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3.28.31", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/acf-frontend-form-element/vulnerability/wordpress-frontend-admin-by-dynamiapps-plugin-3-28-31-authenticated-editor-php-object-injection-via-post-content-of-admin-form-posts-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/ultimate_vc_addons/vulnerability/wordpress-ultimate-addons-for-wpbakery-page-builder-plugin-3-21-4-cross-site-scripting-xss-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, @@ -91566,12 +91884,12 @@ "is_latest_snapshot": false }, { - "version_id": "wordpress--7-8-2-reflected-cross-site-scripting-via-noresults-parameter-vulnerability", + "version_id": "wordpress--7-4-10-authenticated-contributor-stored-cross-site-scripting-via-max-width-shortcode-attribute-vulnerability", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "7-8-2-reflected-cross-site-scripting-via-noresults-parameter-vulnerability", + "version": "7-4-10-authenticated-contributor-stored-cross-site-scripting-via-max-width-shortcode-attribute-vulnerability", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/bakkbone-florist-companion/vulnerability/wordpress-floristpress-for-woo-plugin-7-8-2-reflected-cross-site-scripting-via-noresults-parameter-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/shortcodes-ultimate/vulnerability/wordpress-wp-shortcodes-plugin-shortcodes-ultimate-plugin-7-4-10-authenticated-contributor-stored-cross-site-scripting-via-max-width-shortcode-attribute-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, @@ -91580,12 +91898,12 @@ "is_latest_snapshot": false }, { - "version_id": "wordpress--7-8-2", + "version_id": "wordpress--7-4-10", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "7.8.2", + "version": "7.4.10", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/bakkbone-florist-companion/vulnerability/wordpress-floristpress-for-woo-plugin-7-8-2-reflected-cross-site-scripting-via-noresults-parameter-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/shortcodes-ultimate/vulnerability/wordpress-wp-shortcodes-plugin-shortcodes-ultimate-plugin-7-4-10-authenticated-contributor-stored-cross-site-scripting-via-max-width-shortcode-attribute-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, @@ -91605,6 +91923,62 @@ "security_relevant": true, "reason": "security-release", "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "wordpress--10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "wordpress--10-5-1", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "10.5.1", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "wordpress--51-1-38-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-widgets-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "51-1-38-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-widgets-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/king-addons/vulnerability/wordpress-king-addons-for-elementor-plugin-51-1-38-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-widgets-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "wordpress--51-1-53", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "51.1.53", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/king-addons/vulnerability/wordpress-king-addons-for-elementor-plugin-51-1-38-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-widgets-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], "is_latest_snapshot": true } ] diff --git a/08-threat-intel/generated/run-summary.json b/08-threat-intel/generated/run-summary.json index 19d46ef7..17a6da56 100644 --- a/08-threat-intel/generated/run-summary.json +++ b/08-threat-intel/generated/run-summary.json @@ -1,18 +1,18 @@ { - "generated_at": "2026-03-31T09:18:20+00:00", + "generated_at": "2026-04-01T09:21:05+00:00", "system_count": 62, - "advisory_count": 2384, + "advisory_count": 2387, "cataloged_entity_total": 110, "candidate_entity_total": 7, - "markdown_count": 176, + "markdown_count": 177, "new_count": 3, - "updated_count": 2, + "updated_count": 0, "systems_touched": [ + "discourse", "mattermost", - "mediawiki", - "prestashop" + "mediawiki" ], - "triage_count": 1178, + "triage_count": 1180, "run_bundle_count": 89, "failures": [] } diff --git a/08-threat-intel/generated/source-catalog-audit.json b/08-threat-intel/generated/source-catalog-audit.json index 54150b97..180dabed 100644 --- a/08-threat-intel/generated/source-catalog-audit.json +++ b/08-threat-intel/generated/source-catalog-audit.json @@ -1,5 +1,5 @@ { - "generated_at": "2026-03-31T09:17:00+00:00", + "generated_at": "2026-04-01T09:17:08+00:00", "system_count": 62, "source_count": 179, "active_source_count": 102, diff --git a/08-threat-intel/generated/source-catalog-audit.md b/08-threat-intel/generated/source-catalog-audit.md index 132e4ce9..4128d3a0 100644 --- a/08-threat-intel/generated/source-catalog-audit.md +++ b/08-threat-intel/generated/source-catalog-audit.md @@ -1,6 +1,6 @@ # Source Catalog Audit -- generated_at: `2026-03-31T09:17:00+00:00` +- generated_at: `2026-04-01T09:17:08+00:00` - systems: `62` - sources: `179` - active_sources: `102` diff --git a/08-threat-intel/generated/source-health.json b/08-threat-intel/generated/source-health.json index 9efe993e..4c8e202e 100644 --- a/08-threat-intel/generated/source-health.json +++ b/08-threat-intel/generated/source-health.json @@ -1,17 +1,17 @@ { - "generated_at": "2026-03-31T09:18:05+00:00", + "generated_at": "2026-04-01T09:20:10+00:00", "active_source_count": 102, "green_source_count": 102, "failure_count": 0, "all_green": true, - "last_fully_green_run": "2026-03-31T09:18:05+00:00", + "last_fully_green_run": "2026-04-01T09:20:10+00:00", "retries_performed": 0, "probes": [ { "system_id": "adminer", "source_name": "OSV Adminer", "source_kind": "osv-batch", - "elapsed_seconds": 3.959, + "elapsed_seconds": 18.898, "kind": "osv-batch", "items_seen": 1 }, @@ -27,7 +27,7 @@ "system_id": "angular", "source_name": "OSV Angular", "source_kind": "osv-batch", - "elapsed_seconds": 2.141, + "elapsed_seconds": 14.188, "kind": "osv-batch", "items_seen": 1 }, @@ -35,7 +35,7 @@ "system_id": "apache-httpd", "source_name": "Apache HTTPD Security", "source_kind": "html-links", - "elapsed_seconds": 2.563, + "elapsed_seconds": 14.188, "kind": "html-links", "items_seen": 182 }, @@ -43,7 +43,7 @@ "system_id": "apache-httpd", "source_name": "CISA KEV Apache HTTPD", "source_kind": "kev-json", - "elapsed_seconds": 2.563, + "elapsed_seconds": 14.188, "kind": "kev-json", "items_seen": 1555 }, @@ -51,7 +51,7 @@ "system_id": "apache-tomcat", "source_name": "Apache Tomcat Security", "source_kind": "html-links", - "elapsed_seconds": 2.563, + "elapsed_seconds": 14.188, "kind": "html-links", "items_seen": 270 }, @@ -59,7 +59,7 @@ "system_id": "apache-tomcat", "source_name": "CISA KEV Tomcat", "source_kind": "kev-json", - "elapsed_seconds": 2.563, + "elapsed_seconds": 14.188, "kind": "kev-json", "items_seen": 1555 }, @@ -67,7 +67,7 @@ "system_id": "aspnet-core", "source_name": "OSV ASP.NET Core", "source_kind": "osv-batch", - "elapsed_seconds": 3.397, + "elapsed_seconds": 18.898, "kind": "osv-batch", "items_seen": 1 }, @@ -75,7 +75,7 @@ "system_id": "astro", "source_name": "OSV Astro", "source_kind": "osv-batch", - "elapsed_seconds": 2.584, + "elapsed_seconds": 14.203, "kind": "osv-batch", "items_seen": 1 }, @@ -83,7 +83,7 @@ "system_id": "caddy", "source_name": "OSV Caddy", "source_kind": "osv-batch", - "elapsed_seconds": 4.228, + "elapsed_seconds": 18.498, "kind": "osv-batch", "items_seen": 1 }, @@ -91,7 +91,7 @@ "system_id": "directus", "source_name": "Directus GitHub Advisories", "source_kind": "html-links", - "elapsed_seconds": 0.031, + "elapsed_seconds": 0.032, "kind": "html-links", "items_seen": 127 }, @@ -99,7 +99,7 @@ "system_id": "directus", "source_name": "OSV Directus", "source_kind": "osv-batch", - "elapsed_seconds": 1.191, + "elapsed_seconds": 4.369, "kind": "osv-batch", "items_seen": 1 }, @@ -115,7 +115,7 @@ "system_id": "discourse", "source_name": "Discourse Security RSS", "source_kind": "rss-feed", - "elapsed_seconds": 0.028, + "elapsed_seconds": 0.029, "kind": "rss-feed", "items_seen": 3 }, @@ -123,7 +123,7 @@ "system_id": "discourse", "source_name": "OSV Discourse", "source_kind": "osv-batch", - "elapsed_seconds": 1.199, + "elapsed_seconds": 4.214, "kind": "osv-batch", "items_seen": 1 }, @@ -131,7 +131,7 @@ "system_id": "django", "source_name": "Django Security Releases Archive", "source_kind": "vendor-index", - "elapsed_seconds": 2.154, + "elapsed_seconds": 9.929, "kind": "vendor-index", "items_seen": 1276 }, @@ -139,7 +139,7 @@ "system_id": "django", "source_name": "Django Security Weblog", "source_kind": "vendor-index", - "elapsed_seconds": 2.141, + "elapsed_seconds": 9.908, "kind": "vendor-index", "items_seen": 332 }, @@ -147,7 +147,7 @@ "system_id": "django", "source_name": "OSV Django", "source_kind": "osv-batch", - "elapsed_seconds": 4.98, + "elapsed_seconds": 17.428, "kind": "osv-batch", "items_seen": 1 }, @@ -155,7 +155,7 @@ "system_id": "drupal", "source_name": "Drupal Security Advisories RSS", "source_kind": "rss-feed", - "elapsed_seconds": 0.033, + "elapsed_seconds": 0.035, "kind": "rss-feed", "items_seen": 20 }, @@ -163,7 +163,7 @@ "system_id": "drupal", "source_name": "OSV Drupal", "source_kind": "osv-batch", - "elapsed_seconds": 2.139, + "elapsed_seconds": 5.145, "kind": "osv-batch", "items_seen": 1 }, @@ -171,7 +171,7 @@ "system_id": "echo", "source_name": "OSV Echo", "source_kind": "osv-batch", - "elapsed_seconds": 3.808, + "elapsed_seconds": 18.876, "kind": "osv-batch", "items_seen": 1 }, @@ -179,7 +179,7 @@ "system_id": "esbuild", "source_name": "OSV esbuild", "source_kind": "osv-batch", - "elapsed_seconds": 2.903, + "elapsed_seconds": 14.357, "kind": "osv-batch", "items_seen": 1 }, @@ -187,7 +187,7 @@ "system_id": "express", "source_name": "OSV Express", "source_kind": "osv-batch", - "elapsed_seconds": 2.283, + "elapsed_seconds": 14.479, "kind": "osv-batch", "items_seen": 1 }, @@ -195,7 +195,7 @@ "system_id": "fastify", "source_name": "OSV Fastify", "source_kind": "osv-batch", - "elapsed_seconds": 2.631, + "elapsed_seconds": 13.602, "kind": "osv-batch", "items_seen": 1 }, @@ -203,7 +203,7 @@ "system_id": "flask", "source_name": "OSV Flask", "source_kind": "osv-batch", - "elapsed_seconds": 3.393, + "elapsed_seconds": 18.496, "kind": "osv-batch", "items_seen": 1 }, @@ -211,7 +211,7 @@ "system_id": "ghost", "source_name": "Ghost GitHub Advisories", "source_kind": "html-links", - "elapsed_seconds": 0.033, + "elapsed_seconds": 0.034, "kind": "html-links", "items_seen": 119 }, @@ -219,7 +219,7 @@ "system_id": "ghost", "source_name": "OSV Ghost", "source_kind": "osv-batch", - "elapsed_seconds": 1.307, + "elapsed_seconds": 4.608, "kind": "osv-batch", "items_seen": 1 }, @@ -227,7 +227,7 @@ "system_id": "gin", "source_name": "OSV Gin", "source_kind": "osv-batch", - "elapsed_seconds": 3.38, + "elapsed_seconds": 18.918, "kind": "osv-batch", "items_seen": 1 }, @@ -235,7 +235,7 @@ "system_id": "gitea", "source_name": "OSV Gitea", "source_kind": "osv-batch", - "elapsed_seconds": 3.896, + "elapsed_seconds": 19.771, "kind": "osv-batch", "items_seen": 1 }, @@ -243,7 +243,7 @@ "system_id": "gitlab-ce", "source_name": "GitLab Advisory Database", "source_kind": "html-links", - "elapsed_seconds": 2.815, + "elapsed_seconds": 14.357, "kind": "html-links", "items_seen": 5 }, @@ -251,7 +251,7 @@ "system_id": "gitlab-ce", "source_name": "GitLab Security Releases Atom", "source_kind": "atom-feed", - "elapsed_seconds": 2.815, + "elapsed_seconds": 14.357, "kind": "atom-feed", "items_seen": 187 }, @@ -259,7 +259,7 @@ "system_id": "grafana", "source_name": "CISA KEV Grafana", "source_kind": "kev-json", - "elapsed_seconds": 2.815, + "elapsed_seconds": 14.357, "kind": "kev-json", "items_seen": 1555 }, @@ -267,7 +267,7 @@ "system_id": "grafana", "source_name": "Grafana Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 2.815, + "elapsed_seconds": 14.357, "kind": "html-links", "items_seen": 159 }, @@ -275,7 +275,7 @@ "system_id": "hapi", "source_name": "OSV Hapi", "source_kind": "osv-batch", - "elapsed_seconds": 2.815, + "elapsed_seconds": 14.205, "kind": "osv-batch", "items_seen": 1 }, @@ -283,7 +283,7 @@ "system_id": "haproxy", "source_name": "HAProxy Blog Feed", "source_kind": "rss-feed", - "elapsed_seconds": 2.631, + "elapsed_seconds": 14.205, "kind": "rss-feed", "items_seen": 10 }, @@ -291,7 +291,7 @@ "system_id": "jenkins", "source_name": "Jenkins Security Advisories RSS", "source_kind": "rss-feed", - "elapsed_seconds": 2.815, + "elapsed_seconds": 14.357, "kind": "rss-feed", "items_seen": 96 }, @@ -299,15 +299,15 @@ "system_id": "joomla", "source_name": "Joomla Security Centre", "source_kind": "html-links", - "elapsed_seconds": 0.033, + "elapsed_seconds": 0.035, "kind": "html-links", - "items_seen": 139 + "items_seen": 146 }, { "system_id": "joomla", "source_name": "OSV Joomla", "source_kind": "osv-batch", - "elapsed_seconds": 1.342, + "elapsed_seconds": 4.83, "kind": "osv-batch", "items_seen": 1 }, @@ -315,7 +315,7 @@ "system_id": "kibana", "source_name": "Elastic Product Security", "source_kind": "html-links", - "elapsed_seconds": 2.815, + "elapsed_seconds": 14.357, "kind": "html-links", "items_seen": 66 }, @@ -323,7 +323,7 @@ "system_id": "kibana", "source_name": "NVD Kibana", "source_kind": "nvd-search", - "elapsed_seconds": 4.196, + "elapsed_seconds": 18.9, "kind": "nvd-search", "items_seen": 1 }, @@ -331,7 +331,7 @@ "system_id": "koa", "source_name": "OSV Koa", "source_kind": "osv-batch", - "elapsed_seconds": 2.426, + "elapsed_seconds": 13.185, "kind": "osv-batch", "items_seen": 1 }, @@ -339,7 +339,7 @@ "system_id": "laravel", "source_name": "OSV Laravel", "source_kind": "osv-batch", - "elapsed_seconds": 3.686, + "elapsed_seconds": 14.359, "kind": "osv-batch", "items_seen": 1 }, @@ -347,7 +347,7 @@ "system_id": "magento-open-source", "source_name": "Magento GitHub Advisories", "source_kind": "html-links", - "elapsed_seconds": 0.02, + "elapsed_seconds": 0.021, "kind": "html-links", "items_seen": 99 }, @@ -355,7 +355,7 @@ "system_id": "magento-open-source", "source_name": "OSV Magento Open Source", "source_kind": "osv-batch", - "elapsed_seconds": 1.085, + "elapsed_seconds": 4.241, "kind": "osv-batch", "items_seen": 1 }, @@ -363,7 +363,7 @@ "system_id": "magento-open-source", "source_name": "Sansec Research", "source_kind": "html-links", - "elapsed_seconds": 0.02, + "elapsed_seconds": 0.021, "kind": "html-links", "items_seen": 136 }, @@ -371,7 +371,7 @@ "system_id": "mattermost", "source_name": "Mattermost Security Updates JSON", "source_kind": "json-feed", - "elapsed_seconds": 2.815, + "elapsed_seconds": 14.357, "kind": "json-feed", "items_seen": 594 }, @@ -379,7 +379,7 @@ "system_id": "mattermost", "source_name": "OSV Mattermost", "source_kind": "osv-batch", - "elapsed_seconds": 5.583, + "elapsed_seconds": 19.496, "kind": "osv-batch", "items_seen": 1 }, @@ -387,7 +387,7 @@ "system_id": "mediawiki", "source_name": "MediaWiki Announce RSS", "source_kind": "rss-feed", - "elapsed_seconds": 0.03, + "elapsed_seconds": 0.031, "kind": "rss-feed", "items_seen": 30 }, @@ -395,7 +395,7 @@ "system_id": "mediawiki", "source_name": "OSV MediaWiki", "source_kind": "osv-batch", - "elapsed_seconds": 1.383, + "elapsed_seconds": 4.372, "kind": "osv-batch", "items_seen": 1 }, @@ -403,7 +403,7 @@ "system_id": "medusa", "source_name": "OSV Medusa", "source_kind": "osv-batch", - "elapsed_seconds": 1.067, + "elapsed_seconds": 4.19, "kind": "osv-batch", "items_seen": 1 }, @@ -411,7 +411,7 @@ "system_id": "moodle", "source_name": "OSV Moodle", "source_kind": "osv-batch", - "elapsed_seconds": 4.35, + "elapsed_seconds": 7.956, "kind": "osv-batch", "items_seen": 1 }, @@ -419,7 +419,7 @@ "system_id": "nestjs", "source_name": "OSV NestJS", "source_kind": "osv-batch", - "elapsed_seconds": 2.26, + "elapsed_seconds": 13.185, "kind": "osv-batch", "items_seen": 1 }, @@ -427,7 +427,7 @@ "system_id": "nextjs", "source_name": "OSV Next.js", "source_kind": "osv-batch", - "elapsed_seconds": 1.537, + "elapsed_seconds": 4.821, "kind": "osv-batch", "items_seen": 1 }, @@ -435,7 +435,7 @@ "system_id": "nginx", "source_name": "CISA KEV NGINX", "source_kind": "kev-json", - "elapsed_seconds": 2.563, + "elapsed_seconds": 14.188, "kind": "kev-json", "items_seen": 1555 }, @@ -443,7 +443,7 @@ "system_id": "nginx", "source_name": "NGINX Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 2.563, + "elapsed_seconds": 14.188, "kind": "html-links", "items_seen": 150 }, @@ -451,7 +451,7 @@ "system_id": "nodejs", "source_name": "CISA KEV Node.js", "source_kind": "kev-json", - "elapsed_seconds": 2.563, + "elapsed_seconds": 13.176, "kind": "kev-json", "items_seen": 1555 }, @@ -459,7 +459,7 @@ "system_id": "nodejs", "source_name": "Node.js Security Releases", "source_kind": "html-links", - "elapsed_seconds": 1.31, + "elapsed_seconds": 4.575, "kind": "html-links", "items_seen": 73 }, @@ -467,7 +467,7 @@ "system_id": "nuxt", "source_name": "OSV Nuxt", "source_kind": "osv-batch", - "elapsed_seconds": 2.246, + "elapsed_seconds": 9.908, "kind": "osv-batch", "items_seen": 1 }, @@ -475,7 +475,7 @@ "system_id": "opencart", "source_name": "OSV OpenCart", "source_kind": "osv-batch", - "elapsed_seconds": 1.326, + "elapsed_seconds": 6.748, "kind": "osv-batch", "items_seen": 1 }, @@ -483,7 +483,7 @@ "system_id": "opencart", "source_name": "OpenCart Releases", "source_kind": "html-links", - "elapsed_seconds": 0.01, + "elapsed_seconds": 0.011, "kind": "html-links", "items_seen": 1500 }, @@ -491,7 +491,7 @@ "system_id": "openmage", "source_name": "OSV OpenMage", "source_kind": "osv-batch", - "elapsed_seconds": 1.117, + "elapsed_seconds": 4.899, "kind": "osv-batch", "items_seen": 1 }, @@ -499,7 +499,7 @@ "system_id": "openmage", "source_name": "OpenMage GitHub Advisories", "source_kind": "html-links", - "elapsed_seconds": 0.02, + "elapsed_seconds": 0.018, "kind": "html-links", "items_seen": 125 }, @@ -507,7 +507,7 @@ "system_id": "phpmyadmin", "source_name": "OSV phpMyAdmin", "source_kind": "osv-batch", - "elapsed_seconds": 4.196, + "elapsed_seconds": 19.322, "kind": "osv-batch", "items_seen": 1 }, @@ -515,7 +515,7 @@ "system_id": "phpmyadmin", "source_name": "phpMyAdmin Security Page", "source_kind": "html-links", - "elapsed_seconds": 2.631, + "elapsed_seconds": 14.205, "kind": "html-links", "items_seen": 263 }, @@ -523,7 +523,7 @@ "system_id": "prestashop", "source_name": "Friends Of Presta Security", "source_kind": "html-links", - "elapsed_seconds": 0.012, + "elapsed_seconds": 0.013, "kind": "html-links", "items_seen": 38 }, @@ -531,7 +531,7 @@ "system_id": "prestashop", "source_name": "GitHub PrestaShop Advisories", "source_kind": "html-links", - "elapsed_seconds": 0.012, + "elapsed_seconds": 0.014, "kind": "html-links", "items_seen": 127 }, @@ -539,7 +539,7 @@ "system_id": "prestashop", "source_name": "OSV PrestaShop", "source_kind": "osv-batch", - "elapsed_seconds": 1.159, + "elapsed_seconds": 4.35, "kind": "osv-batch", "items_seen": 1 }, @@ -547,7 +547,7 @@ "system_id": "prestashop", "source_name": "PrestaShop Security Page", "source_kind": "html-links", - "elapsed_seconds": 0.012, + "elapsed_seconds": 0.014, "kind": "html-links", "items_seen": 60 }, @@ -555,7 +555,7 @@ "system_id": "rails", "source_name": "OSV Rails", "source_kind": "osv-batch", - "elapsed_seconds": 3.323, + "elapsed_seconds": 18.898, "kind": "osv-batch", "items_seen": 1 }, @@ -563,7 +563,7 @@ "system_id": "react", "source_name": "OSV React", "source_kind": "osv-batch", - "elapsed_seconds": 1.274, + "elapsed_seconds": 4.231, "kind": "osv-batch", "items_seen": 1 }, @@ -571,7 +571,7 @@ "system_id": "redmine", "source_name": "OSV Redmine", "source_kind": "osv-batch", - "elapsed_seconds": 4.913, + "elapsed_seconds": 19.059, "kind": "osv-batch", "items_seen": 1 }, @@ -579,7 +579,7 @@ "system_id": "redmine", "source_name": "Redmine Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 2.885, + "elapsed_seconds": 14.359, "kind": "html-links", "items_seen": 371 }, @@ -587,7 +587,7 @@ "system_id": "saleor", "source_name": "GitHub Saleor Advisories", "source_kind": "html-links", - "elapsed_seconds": 0.006, + "elapsed_seconds": 0.004, "kind": "html-links", "items_seen": 120 }, @@ -595,7 +595,7 @@ "system_id": "saleor", "source_name": "OSV Saleor", "source_kind": "osv-batch", - "elapsed_seconds": 1.453, + "elapsed_seconds": 4.195, "kind": "osv-batch", "items_seen": 1 }, @@ -603,7 +603,7 @@ "system_id": "shopware", "source_name": "OSV Shopware", "source_kind": "osv-batch", - "elapsed_seconds": 1.661, + "elapsed_seconds": 4.388, "kind": "osv-batch", "items_seen": 1 }, @@ -611,7 +611,7 @@ "system_id": "shopware", "source_name": "Shopware Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 0.01, + "elapsed_seconds": 0.013, "kind": "html-links", "items_seen": 129 }, @@ -619,7 +619,7 @@ "system_id": "spring-boot", "source_name": "OSV Spring Boot", "source_kind": "osv-batch", - "elapsed_seconds": 2.815, + "elapsed_seconds": 14.206, "kind": "osv-batch", "items_seen": 1 }, @@ -627,7 +627,7 @@ "system_id": "spring-boot", "source_name": "Spring Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 1.652, + "elapsed_seconds": 5.161, "kind": "html-links", "items_seen": 118 }, @@ -635,7 +635,7 @@ "system_id": "spring-framework", "source_name": "OSV Spring Framework", "source_kind": "osv-batch", - "elapsed_seconds": 2.643, + "elapsed_seconds": 13.224, "kind": "osv-batch", "items_seen": 1 }, @@ -643,7 +643,7 @@ "system_id": "spring-framework", "source_name": "Spring Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 1.447, + "elapsed_seconds": 4.881, "kind": "html-links", "items_seen": 118 }, @@ -651,7 +651,7 @@ "system_id": "spring-security", "source_name": "OSV Spring Security", "source_kind": "osv-batch", - "elapsed_seconds": 2.897, + "elapsed_seconds": 14.359, "kind": "osv-batch", "items_seen": 1 }, @@ -659,7 +659,7 @@ "system_id": "spring-security", "source_name": "Spring Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 1.536, + "elapsed_seconds": 5.11, "kind": "html-links", "items_seen": 118 }, @@ -667,7 +667,7 @@ "system_id": "strapi", "source_name": "OSV Strapi", "source_kind": "osv-batch", - "elapsed_seconds": 1.347, + "elapsed_seconds": 14.412, "kind": "osv-batch", "items_seen": 1 }, @@ -675,7 +675,7 @@ "system_id": "strapi", "source_name": "Strapi GitHub Advisories", "source_kind": "html-links", - "elapsed_seconds": 0.032, + "elapsed_seconds": 0.033, "kind": "html-links", "items_seen": 124 }, @@ -683,7 +683,7 @@ "system_id": "sveltekit", "source_name": "OSV SvelteKit", "source_kind": "osv-batch", - "elapsed_seconds": 2.244, + "elapsed_seconds": 13.966, "kind": "osv-batch", "items_seen": 1 }, @@ -691,7 +691,7 @@ "system_id": "symfony", "source_name": "OSV Symfony", "source_kind": "osv-batch", - "elapsed_seconds": 4.892, + "elapsed_seconds": 14.75, "kind": "osv-batch", "items_seen": 1 }, @@ -699,7 +699,7 @@ "system_id": "traefik", "source_name": "OSV Traefik", "source_kind": "osv-batch", - "elapsed_seconds": 3.748, + "elapsed_seconds": 19.052, "kind": "osv-batch", "items_seen": 1 }, @@ -707,7 +707,7 @@ "system_id": "undici", "source_name": "OSV Undici", "source_kind": "osv-batch", - "elapsed_seconds": 2.886, + "elapsed_seconds": 14.206, "kind": "osv-batch", "items_seen": 1 }, @@ -715,7 +715,7 @@ "system_id": "vite", "source_name": "OSV Vite", "source_kind": "osv-batch", - "elapsed_seconds": 2.174, + "elapsed_seconds": 14.346, "kind": "osv-batch", "items_seen": 1 }, @@ -723,7 +723,7 @@ "system_id": "vue", "source_name": "OSV Vue", "source_kind": "osv-batch", - "elapsed_seconds": 1.059, + "elapsed_seconds": 3.14, "kind": "osv-batch", "items_seen": 1 }, @@ -731,7 +731,7 @@ "system_id": "webpack", "source_name": "OSV webpack", "source_kind": "osv-batch", - "elapsed_seconds": 2.695, + "elapsed_seconds": 14.479, "kind": "osv-batch", "items_seen": 1 }, @@ -739,7 +739,7 @@ "system_id": "werkzeug", "source_name": "OSV Werkzeug", "source_kind": "osv-batch", - "elapsed_seconds": 3.637, + "elapsed_seconds": 18.497, "kind": "osv-batch", "items_seen": 1 }, @@ -755,7 +755,7 @@ "system_id": "woocommerce", "source_name": "OSV WooCommerce", "source_kind": "osv-batch", - "elapsed_seconds": 1.062, + "elapsed_seconds": 4.834, "kind": "osv-batch", "items_seen": 1 }, @@ -763,7 +763,7 @@ "system_id": "woocommerce", "source_name": "Patchstack Database", "source_kind": "html-links", - "elapsed_seconds": 0.014, + "elapsed_seconds": 0.016, "kind": "html-links", "items_seen": 193 }, @@ -771,7 +771,7 @@ "system_id": "woocommerce", "source_name": "Woo Developer Advisories", "source_kind": "html-links", - "elapsed_seconds": 0.017, + "elapsed_seconds": 0.018, "kind": "html-links", "items_seen": 121 }, @@ -787,7 +787,7 @@ "system_id": "wordpress", "source_name": "Patchstack Database", "source_kind": "html-links", - "elapsed_seconds": 0.035, + "elapsed_seconds": 0.036, "kind": "html-links", "items_seen": 193 }, @@ -795,7 +795,7 @@ "system_id": "wordpress", "source_name": "PortSwigger Research", "source_kind": "html-links", - "elapsed_seconds": 1.803, + "elapsed_seconds": 5.197, "kind": "html-links", "items_seen": 99 }, @@ -803,7 +803,7 @@ "system_id": "wordpress", "source_name": "WPScan Vulnerability Database", "source_kind": "html-links", - "elapsed_seconds": 0.035, + "elapsed_seconds": 0.036, "kind": "html-links", "items_seen": 74 }, @@ -811,7 +811,7 @@ "system_id": "wordpress", "source_name": "WordPress Security News RSS", "source_kind": "rss-feed", - "elapsed_seconds": 0.036, + "elapsed_seconds": 0.038, "kind": "rss-feed", "items_seen": 10 }, @@ -819,81 +819,81 @@ "system_id": "wordpress", "source_name": "Wordfence Vulnerability Database", "source_kind": "html-links", - "elapsed_seconds": 0.036, + "elapsed_seconds": 0.038, "kind": "html-links", "items_seen": 0 } ], "failures": [], "slow_sources": [ + { + "system_id": "gitea", + "source_name": "OSV Gitea", + "source_kind": "osv-batch", + "elapsed_seconds": 19.771, + "status": "ok" + }, { "system_id": "mattermost", "source_name": "OSV Mattermost", "source_kind": "osv-batch", - "elapsed_seconds": 5.583, - "status": "ok" - }, - { - "system_id": "django", - "source_name": "OSV Django", - "source_kind": "osv-batch", - "elapsed_seconds": 4.98, - "status": "ok" - }, - { - "system_id": "redmine", - "source_name": "OSV Redmine", - "source_kind": "osv-batch", - "elapsed_seconds": 4.913, - "status": "ok" - }, - { - "system_id": "symfony", - "source_name": "OSV Symfony", - "source_kind": "osv-batch", - "elapsed_seconds": 4.892, - "status": "ok" - }, - { - "system_id": "moodle", - "source_name": "OSV Moodle", - "source_kind": "osv-batch", - "elapsed_seconds": 4.35, - "status": "ok" - }, - { - "system_id": "caddy", - "source_name": "OSV Caddy", - "source_kind": "osv-batch", - "elapsed_seconds": 4.228, - "status": "ok" - }, - { - "system_id": "kibana", - "source_name": "NVD Kibana", - "source_kind": "nvd-search", - "elapsed_seconds": 4.196, + "elapsed_seconds": 19.496, "status": "ok" }, { "system_id": "phpmyadmin", "source_name": "OSV phpMyAdmin", "source_kind": "osv-batch", - "elapsed_seconds": 4.196, + "elapsed_seconds": 19.322, + "status": "ok" + }, + { + "system_id": "redmine", + "source_name": "OSV Redmine", + "source_kind": "osv-batch", + "elapsed_seconds": 19.059, + "status": "ok" + }, + { + "system_id": "traefik", + "source_name": "OSV Traefik", + "source_kind": "osv-batch", + "elapsed_seconds": 19.052, + "status": "ok" + }, + { + "system_id": "gin", + "source_name": "OSV Gin", + "source_kind": "osv-batch", + "elapsed_seconds": 18.918, + "status": "ok" + }, + { + "system_id": "kibana", + "source_name": "NVD Kibana", + "source_kind": "nvd-search", + "elapsed_seconds": 18.9, "status": "ok" }, { "system_id": "adminer", "source_name": "OSV Adminer", "source_kind": "osv-batch", - "elapsed_seconds": 3.959, + "elapsed_seconds": 18.898, "status": "ok" }, { - "system_id": "gitea", - "source_name": "OSV Gitea", + "system_id": "aspnet-core", + "source_name": "OSV ASP.NET Core", "source_kind": "osv-batch", - "elapsed_seconds": 3.896, + "elapsed_seconds": 18.898, + "status": "ok" + }, + { + "system_id": "rails", + "source_name": "OSV Rails", + "source_kind": "osv-batch", + "elapsed_seconds": 18.898, "status": "ok" } ], diff --git a/08-threat-intel/generated/version-backlog.json b/08-threat-intel/generated/version-backlog.json index e057e324..47fccf2e 100644 --- a/08-threat-intel/generated/version-backlog.json +++ b/08-threat-intel/generated/version-backlog.json @@ -1,5 +1,5 @@ { - "generated_at": "2026-03-31T09:18:20+00:00", + "generated_at": "2026-04-01T09:21:05+00:00", "source_gap_entities": [ { "entity_id": "adminer", @@ -3072,6 +3072,13 @@ "official_source_url": "https://meta.discourse.org/t/release-v2025-11-0-ai-translations-improvements-chat-search-new-review-queue-and-improvements-for-posts-with-images/389615", "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" }, + { + "canonical_id": "discourse--5dce90675e", + "system_id": "discourse", + "title": "March 2026 monthly release", + "official_source_url": "https://meta.discourse.org/t/march-2026-monthly-release/399630", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, { "canonical_id": "discourse--615bee56ae", "system_id": "discourse", @@ -3645,13 +3652,6 @@ "title": "February 2024", "official_source_url": "https://www.djangoproject.com/weblog/2024/feb/", "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" - }, - { - "canonical_id": "django--c1c8aebaa5", - "system_id": "django", - "title": "Recent trends in the work of the Django Security Team", - "official_source_url": "https://www.djangoproject.com/weblog/2026/feb/04/recent-trends-security-team/", - "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" } ], "lab_pending": [], diff --git a/08-threat-intel/generated/version-completeness.json b/08-threat-intel/generated/version-completeness.json index 6784114e..031a91cb 100644 --- a/08-threat-intel/generated/version-completeness.json +++ b/08-threat-intel/generated/version-completeness.json @@ -1,9 +1,9 @@ { - "generated_at": "2026-03-31T09:18:20+00:00", + "generated_at": "2026-04-01T09:21:05+00:00", "cataloged_entity_total": 110, "latest_version_synced_count": 95, "source_gap_count": 15, - "security_version_total": 6290, + "security_version_total": 6316, "security_version_entity_count": 83, "auto_promoted_entity_count": 10, "lab_enqueued_count": 3, @@ -206,7 +206,7 @@ "cataloged_entity_total": 1, "latest_version_synced_count": 1, "source_gap_count": 0, - "security_version_count": 80, + "security_version_count": 82, "auto_promoted_count": 0, "latest_versions": [ { @@ -278,16 +278,16 @@ "entity_id": "echo", "display_name": "Echo", "entity_type": "system", - "latest_version": "5.0.4", - "latest_release_at": "2026-02-15T15:55:53Z", + "latest_version": "5.1.0", + "latest_release_at": "2026-03-31T20:56:54Z", "version_sync_status": "green" }, { "entity_id": "echo--repo--github-com-labstack-echo-v4", "display_name": "labstack / echo / v4", "entity_type": "repo", - "latest_version": "5.0.4", - "latest_release_at": "2026-02-15T15:55:53Z", + "latest_version": "5.1.0", + "latest_release_at": "2026-03-31T20:56:54Z", "version_sync_status": "green" } ] @@ -538,14 +538,14 @@ "cataloged_entity_total": 1, "latest_version_synced_count": 1, "source_gap_count": 0, - "security_version_count": 5, + "security_version_count": 1, "auto_promoted_count": 0, "latest_versions": [ { "entity_id": "joomla", "display_name": "Joomla", "entity_type": "system", - "latest_version": "1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html", + "latest_version": "1027-20260301-core-acl-hardening-in-com-ajax.html", "latest_release_at": "", "version_sync_status": "green" } @@ -699,7 +699,7 @@ "cataloged_entity_total": 1, "latest_version_synced_count": 1, "source_gap_count": 0, - "security_version_count": 228, + "security_version_count": 252, "auto_promoted_count": 0, "latest_versions": [ { @@ -755,7 +755,7 @@ "entity_id": "nextjs", "display_name": "Next.js", "entity_type": "system", - "latest_version": "16.2.1", + "latest_version": "16.2.2", "latest_release_at": "", "version_sync_status": "green" }, @@ -763,7 +763,7 @@ "entity_id": "nextjs--project--next", "display_name": "next", "entity_type": "project", - "latest_version": "16.2.1", + "latest_version": "16.2.2", "latest_release_at": "", "version_sync_status": "green" } @@ -1136,16 +1136,16 @@ "entity_id": "strapi", "display_name": "Strapi", "entity_type": "system", - "latest_version": "5.40.0", - "latest_release_at": "2026-03-18T13:33:01Z", + "latest_version": "5.41.0", + "latest_release_at": "2026-04-01T09:17:56Z", "version_sync_status": "green" }, { "entity_id": "strapi--repo--strapi-strapi", "display_name": "strapi / strapi", "entity_type": "repo", - "latest_version": "5.40.0", - "latest_release_at": "2026-03-18T13:33:01Z", + "latest_version": "5.41.0", + "latest_release_at": "2026-04-01T09:17:56Z", "version_sync_status": "green" } ] @@ -1190,16 +1190,16 @@ "entity_id": "symfony", "display_name": "Symfony", "entity_type": "system", - "latest_version": "8.0.7", - "latest_release_at": "2026-03-06T16:59:05+00:00", + "latest_version": "8.0.8", + "latest_release_at": "2026-03-31T21:14:58+00:00", "version_sync_status": "green" }, { "entity_id": "symfony--package--symfony-symfony", "display_name": "symfony / symfony", "entity_type": "package", - "latest_version": "8.0.7", - "latest_release_at": "2026-03-06T16:59:05+00:00", + "latest_version": "8.0.8", + "latest_release_at": "2026-03-31T21:14:58+00:00", "version_sync_status": "green" } ] @@ -1217,8 +1217,8 @@ "entity_id": "traefik", "display_name": "Traefik", "entity_type": "system", - "latest_version": "3.7.0-ea.3", - "latest_release_at": "2026-03-26T11:10:20Z", + "latest_version": "3.7.0-ea.2", + "latest_release_at": "2026-03-23T18:56:07.286130Z", "version_sync_status": "green" }, { @@ -1226,15 +1226,15 @@ "display_name": "traefik / traefik / v3", "entity_type": "repo", "latest_version": "3.7.0-ea.3", - "latest_release_at": "2026-03-26T11:10:20Z", + "latest_release_at": "2026-03-27T20:49:46.252668Z", "version_sync_status": "green" }, { "entity_id": "traefik--extension--github-com-traefik-traefik-v3", "display_name": "traefik / traefik / v3", "entity_type": "extension", - "latest_version": "3.7.0-ea.3", - "latest_release_at": "2026-03-26T11:10:20Z", + "latest_version": "3.7.0-ea.2", + "latest_release_at": "2026-03-23T18:56:07.286130Z", "version_sync_status": "green" } ] @@ -1395,14 +1395,14 @@ "cataloged_entity_total": 2, "latest_version_synced_count": 2, "source_gap_count": 0, - "security_version_count": 2, + "security_version_count": 6, "auto_promoted_count": 1, "latest_versions": [ { "entity_id": "woocommerce", "display_name": "WooCommerce", "entity_type": "system", - "latest_version": "10.6.1", + "latest_version": "10.7", "latest_release_at": "2026-03-12T19:14:25Z", "version_sync_status": "green" }, @@ -1410,7 +1410,7 @@ "entity_id": "woocommerce--repo--woocommerce-woocommerce", "display_name": "woocommerce / woocommerce", "entity_type": "repo", - "latest_version": "10.6.1", + "latest_version": "10.7", "latest_release_at": "2026-03-12T19:14:25Z", "version_sync_status": "green" } @@ -1429,7 +1429,7 @@ "entity_id": "wordpress", "display_name": "WordPress", "entity_type": "system", - "latest_version": "7.9", + "latest_version": "51.1.53", "latest_release_at": "", "version_sync_status": "green" } diff --git a/08-threat-intel/generated/version-sync-report.md b/08-threat-intel/generated/version-sync-report.md index f43136f1..ae0f454b 100644 --- a/08-threat-intel/generated/version-sync-report.md +++ b/08-threat-intel/generated/version-sync-report.md @@ -1,10 +1,10 @@ # 安全相关版本同步报告 -- 生成时间: `2026-03-31T09:18:20+00:00` +- 生成时间: `2026-04-01T09:21:05+00:00` - 已编目实体: `110` - 最新版本已同步: `95` - 版本 source-gap: `15` -- 安全相关版本记录: `6290` +- 安全相关版本记录: `6316` - 存在安全版本历史的实体: `83` - 自动升级实体: `10` - 因版本变化触发 lab 入队: `3` @@ -22,7 +22,7 @@ | astro | 3 | 3 | 0 | 32 | 0 | | caddy | 3 | 3 | 0 | 7 | 0 | | directus | 2 | 2 | 0 | 2 | 1 | -| discourse | 1 | 1 | 0 | 80 | 0 | +| discourse | 1 | 1 | 0 | 82 | 0 | | django | 2 | 2 | 0 | 182 | 0 | | drupal | 1 | 1 | 0 | 74 | 0 | | echo | 2 | 2 | 0 | 4 | 0 | @@ -38,13 +38,13 @@ | hapi | 2 | 2 | 0 | 4 | 0 | | haproxy | 1 | 1 | 0 | 2 | 0 | | jenkins | 1 | 0 | 1 | 0 | 0 | -| joomla | 1 | 1 | 0 | 5 | 0 | +| joomla | 1 | 1 | 0 | 1 | 0 | | kibana | 1 | 0 | 1 | 0 | 0 | | koa | 2 | 2 | 0 | 4 | 0 | | laravel | 2 | 2 | 0 | 103 | 0 | | magento-open-source | 2 | 2 | 0 | 6 | 1 | | mattermost | 5 | 5 | 0 | 3854 | 0 | -| mediawiki | 1 | 1 | 0 | 228 | 0 | +| mediawiki | 1 | 1 | 0 | 252 | 0 | | medusa | 1 | 0 | 1 | 0 | 0 | | moodle | 1 | 0 | 1 | 0 | 0 | | nestjs | 1 | 0 | 1 | 0 | 0 | @@ -73,5 +73,5 @@ | vue | 2 | 2 | 0 | 2 | 0 | | webpack | 1 | 0 | 1 | 0 | 0 | | werkzeug | 2 | 2 | 0 | 22 | 0 | -| woocommerce | 2 | 2 | 0 | 2 | 1 | +| woocommerce | 2 | 2 | 0 | 6 | 1 | | wordpress | 1 | 1 | 0 | 55 | 0 | diff --git a/08-threat-intel/queue/repro-queue.json b/08-threat-intel/queue/repro-queue.json index 4a572c37..b4674616 100644 --- a/08-threat-intel/queue/repro-queue.json +++ b/08-threat-intel/queue/repro-queue.json @@ -11919,6 +11919,21 @@ "advisory_id": "mediawiki--7a3e57910a", "system_id": "mediawiki", "priority": "version-sync" + }, + { + "advisory_id": "discourse--5dce90675e", + "system_id": "discourse", + "priority": "version-sync" + }, + { + "advisory_id": "mattermost--CVE-2026-3113", + "system_id": "mattermost", + "priority": "version-sync" + }, + { + "advisory_id": "mediawiki--469c5db88b", + "system_id": "mediawiki", + "priority": "version-sync" } ] } diff --git a/08-threat-intel/registry/.DS_Store b/08-threat-intel/registry/.DS_Store new file mode 100644 index 00000000..696fe9e1 Binary files /dev/null and b/08-threat-intel/registry/.DS_Store differ diff --git a/08-threat-intel/registry/advisories/discourse--5dce90675e.json b/08-threat-intel/registry/advisories/discourse--5dce90675e.json new file mode 100644 index 00000000..36acd6a7 --- /dev/null +++ b/08-threat-intel/registry/advisories/discourse--5dce90675e.json @@ -0,0 +1,145 @@ +{ + "canonical_id": "discourse--5dce90675e", + "system_id": "discourse", + "display_name": "Discourse", + "category": "cms", + "advisory_mode": "core", + "title": "March 2026 monthly release", + "summary": "

For more information on all the changes released in 2026.3, check out:

\n\n\n

Patch releases for other supported versions have also been released:

\n\n

2 posts - 2 participants

\n

Read full topic

", + "published_at": "Tue, 31 Mar 2026 14:35:49 +0000", + "updated_at": "Tue, 31 Mar 2026 14:35:49 +0000", + "severity": "unknown", + "cvss_score": null, + "exploit_status": "unknown", + "source_confidence": "official", + "official_source_url": "https://meta.discourse.org/t/march-2026-monthly-release/399630", + "secondary_source_urls": [], + "aliases": [], + "cve_ids": [], + "ghsa_ids": [], + "osv_ids": [], + "affected_versions": [], + "fixed_versions": [], + "package_name": null, + "render_markdown": false, + "case_path": null, + "secure_code_topics": [ + "authz-server-side-recheck", + "xss-output-encoding", + "plugin-extension-trust-policy" + ], + "status": "triage", + "triage_reasons": [ + "missing affected/fixed version details" + ], + "entity_refs": [ + { + "entity_id": "discourse", + "entity_type": "system", + "relation": "root-system", + "root_system_id": "discourse", + "official": true + } + ], + "affected_components": [ + { + "name": "Discourse", + "entity_id": "discourse", + "scope": "core", + "package_name": null, + "official": true + } + ], + "affected_version_ranges": [], + "fixed_version_ranges": [], + "introduced_version": null, + "patched_version": null, + "version_evidence_sources": [ + "https://meta.discourse.org/t/march-2026-monthly-release/399630" + ], + "affected_version_refs": [], + "fixed_version_refs": [], + "patched_version_refs": [], + "version_sync_confidence": "low", + "advisory_scope": "core", + "version_confidence": "low", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions", + "version_resolution_needed": true, + "workflow": { + "workflow_id": "discourse--5dce90675e--workflow", + "vuln_family": "unknown", + "entry_surface": "core-surface", + "preconditions": [ + "\u4ec5\u5728 lab-local\u3001lab-public \u6216\u660e\u786e\u6388\u6743\u76ee\u6807\u4e2d\u6267\u884c\u3002", + "\u786e\u8ba4\u76ee\u6807\u547d\u4e2d\u7248\u672c\u65ad\u8a00: \u9700\u8981\u4ece\u516c\u544a\u3001\u9501\u6587\u4ef6\u3001\u7248\u672c\u9875\u6216\u5173\u4e8e\u9875\u9762\u4eba\u5de5\u786e\u8ba4\u7248\u672c\u547d\u4e2d", + "\u82e5\u5bf9\u8c61\u5c5e\u4e8e `core`\uff0c\u5148\u786e\u8ba4\u6269\u5c55/\u4ed3\u5e93/\u5305\u5df2\u542f\u7528\u5e76\u5904\u4e8e\u53d7\u5f71\u54cd\u7248\u672c\u3002" + ], + "required_role": "unknown", + "affected_version_assertion": [ + "\u9700\u8981\u4ece\u516c\u544a\u3001\u9501\u6587\u4ef6\u3001\u7248\u672c\u9875\u6216\u5173\u4e8e\u9875\u9762\u4eba\u5de5\u786e\u8ba4\u7248\u672c\u547d\u4e2d" + ], + "trigger_vector": "\u5bf9 `unknown` \u5bb6\u65cf\u5165\u53e3\u6295\u9012\u6700\u5c0f\u5316\u3001\u53ef\u5ba1\u8ba1\u3001\u53ef\u56de\u6eda\u7684\u53d7\u63a7\u8f93\u5165\uff0c\u6bd4\u8f83\u4fee\u590d\u524d\u540e\u5dee\u5f02\u3002", + "request_or_ui_path": [ + "/core" + ], + "input_shape": "\u63d0\u4ea4\u6700\u5c0f\u5316\u3001\u53ef\u5ba1\u8ba1\u3001\u53ef\u56de\u6eda\u7684\u53d7\u63a7\u8f93\u5165\u3002", + "expected_unsafe_behavior": "\u76ee\u6807\u8868\u73b0\u51fa\u8d85\u51fa\u8bbe\u8ba1\u8fb9\u754c\u7684\u884c\u4e3a\u3002", + "server_evidence_points": [ + "\u5e94\u7528\u65e5\u5fd7\u4e2d\u7684\u547d\u4e2d\u8def\u5f84\u3001\u9274\u6743\u51b3\u7b56\u548c\u5f02\u5e38\u6808", + "\u53cd\u5411\u4ee3\u7406\u6216\u8fb9\u754c\u5c42\u65e5\u5fd7\u4e2d\u7684\u8bf7\u6c42\u5934\u3001\u6765\u6e90 IP \u4e0e\u8def\u7531\u51b3\u7b56" + ], + "browser_evidence_points": [ + "\u57fa\u7ebf\u622a\u56fe\u4e0e\u653b\u51fb\u540e\u622a\u56fe\u7684 DOM/\u89c6\u89c9\u5dee\u5f02", + "console\u3001network \u4e0e response metadata \u4e2d\u7684\u5f02\u5e38\u4fe1\u53f7" + ], + "db_or_fs_evidence_points": [ + "\u6570\u636e\u5e93\u4e2d\u65b0\u589e/\u8d8a\u6743\u8bfb\u53d6\u7684\u6d4b\u8bd5\u6570\u636e", + "\u6587\u4ef6\u7cfb\u7edf\u4e2d\u65b0\u589e\u4e0a\u4f20\u6837\u672c\u3001\u7f13\u5b58\u6761\u76ee\u6216\u8d8a\u6743\u8bfb\u53d6\u75d5\u8ff9" + ], + "detection_signals": [ + "WAF / reverse proxy \u5f02\u5e38\u65e5\u5fd7\u3001\u8bbf\u95ee\u65e5\u5fd7\u548c\u544a\u8b66", + "\u5e94\u7528\u5ba1\u8ba1\u65e5\u5fd7\u4e2d\u7684\u6743\u9650\u9519\u8bef\u3001\u91cd\u5b9a\u5411\u5f02\u5e38\u3001\u6a21\u677f\u6e32\u67d3\u6216\u4e0a\u4f20\u843d\u76d8\u4e8b\u4ef6" + ], + "mitigation_summary": "\u4f18\u5148\u5347\u7ea7\u5230\u4fee\u590d\u7248\u672c\uff0c\u5e76\u540c\u65f6\u6536\u7d27\u8f93\u5165\u6821\u9a8c\u3001\u670d\u52a1\u7aef\u9274\u6743\u3001\u4ee3\u7406\u4fe1\u4efb\u8fb9\u754c\u3001\u6269\u5c55\u5b89\u88c5\u4fe1\u4efb\u548c\u5ba1\u8ba1\u65e5\u5fd7\u3002", + "patch_validation_steps": [ + "\u786e\u8ba4\u76ee\u6807\u7248\u672c\u4ece `\u53d7\u5f71\u54cd\u7248\u672c\u533a\u95f4` \u5347\u7ea7\u6216\u56de\u79fb\u5230 `\u4fee\u590d\u7248\u672c`\u3002", + "\u4fdd\u7559\u540c\u4e00\u7ec4\u53d7\u63a7\u8f93\u5165\uff0c\u5728\u4fee\u590d\u524d\u540e\u5206\u522b\u6267\u884c\u5e76\u6bd4\u5bf9\u54cd\u5e94\u3001\u65e5\u5fd7\u4e0e\u6d4f\u89c8\u5668\u8bc1\u636e\u3002", + "\u786e\u8ba4\u4fee\u590d\u540e\u4ec5\u4fdd\u7559\u9884\u671f\u4e1a\u52a1\u884c\u4e3a\uff0c\u4e0d\u518d\u89e6\u53d1\u8d8a\u6743\u3001\u56de\u663e\u3001\u5f02\u5e38\u6e32\u67d3\u6216\u9519\u8bef\u8bf7\u6c42\u3002", + "\u8865\u5145 `unknown` \u65cf\u81ea\u52a8\u5316\u56de\u5f52\uff0c\u907f\u514d\u540c\u7c7b\u8def\u5f84\u5728\u63d2\u4ef6\u3001\u4e3b\u9898\u6216\u4ee3\u7406\u94fe\u4e2d\u56de\u5f52\u3002" + ], + "lab_safety_notes": [ + "\u53ea\u4f7f\u7528\u56de\u73af\u5730\u5740\u3001\u54e8\u5175\u76ee\u6807\u3001\u65e0\u5bb3\u6837\u672c\u6216\u53ef\u56de\u6eda\u6d4b\u8bd5\u6570\u636e\u3002", + "\u7981\u6b62\u9020\u6210\u6301\u4e45\u7834\u574f\u3001\u8d8a\u6743\u4e0b\u8f7d\u771f\u5b9e\u6570\u636e\u6216\u4e0d\u53ef\u56de\u6eda side effect\u3002", + "\u5982\u9700\u6d4f\u89c8\u5668\u8bc1\u636e\uff0c\u4fdd\u7559 baseline / proof \u4e24\u4efd\u5feb\u7167\u4ee5\u53ca console / network \u8bb0\u5f55\u3002" + ], + "review_state": "needs-version-gap-review" + }, + "verification_status": "triage-manual", + "verification_mode": "synthetic", + "last_verified_at": null, + "last_run_id": null, + "evidence_bundle": null, + "historical_status": null, + "latest_status": null, + "browser_evidence": { + "required": false, + "present": false, + "refs": [] + }, + "repro_profile_id": "xss-generic", + "artifact_mode": "synthetic", + "blocked_reason": null, + "metadata": { + "source_names": [ + "Discourse Release Notes RSS" + ], + "source_kinds": [ + "rss-feed" + ], + "candidate_count": 1, + "entity_ref_count": 1, + "advisory_scope": "core", + "version_confidence": "low", + "workflow_id": "discourse--5dce90675e--workflow" + } +} diff --git a/08-threat-intel/registry/advisories/mattermost--CVE-2026-3113.json b/08-threat-intel/registry/advisories/mattermost--CVE-2026-3113.json new file mode 100644 index 00000000..4734c7a4 --- /dev/null +++ b/08-threat-intel/registry/advisories/mattermost--CVE-2026-3113.json @@ -0,0 +1,207 @@ +{ + "canonical_id": "mattermost--CVE-2026-3113", + "system_id": "mattermost", + "display_name": "Mattermost", + "category": "platforms", + "advisory_mode": "core", + "title": "Mattermost doesn't set permissions on downloaded bulk export", + "summary": "Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to set permissions on downloaded bulk export which allows other local users on the server to be able to read contents of the bulk export. Mattermost Advisory ID: MMSA-2026-00593.", + "published_at": "2026-03-26T18:31:42Z", + "updated_at": "2026-03-31T23:19:38.844657Z", + "severity": "low", + "cvss_score": 3.1, + "exploit_status": "unknown", + "source_confidence": "ecosystem-authority", + "official_source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3113", + "secondary_source_urls": [ + "https://github.com/mattermost/mattermost", + "https://mattermost.com/security-updates" + ], + "aliases": [ + "CVE-2026-3113", + "GHSA-4765-v66x-rqx7" + ], + "cve_ids": [ + "CVE-2026-3113" + ], + "ghsa_ids": [ + "GHSA-4765-v66x-rqx7" + ], + "osv_ids": [ + "GHSA-4765-v66x-rqx7" + ], + "affected_versions": [ + "introduced=11.4.0-rc1, fixed<11.4.1", + "introduced=11.3.0-rc1, fixed<11.3.2", + "introduced=11.2.0-rc1, fixed<11.2.4", + "introduced=10.11.0-rc1, fixed<10.11.12", + "introduced=8.0.0-20260105080200-d27a2195068d, fixed<8.0.0-20260217110922-b7d4a1f1f59b" + ], + "fixed_versions": [ + "11.4.1", + "11.3.2", + "11.2.4", + "10.11.12", + "8.0.0-20260217110922-b7d4a1f1f59b" + ], + "package_name": "github.com/mattermost/mattermost-server", + "render_markdown": true, + "case_path": "07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-3113.md", + "secure_code_topics": [ + "authz-server-side-recheck", + "xss-output-encoding", + "token-cookie-storage", + "dependency-upgrade-policy" + ], + "status": "generated", + "triage_reasons": [], + "entity_refs": [ + { + "entity_id": "mattermost", + "entity_type": "system", + "relation": "root-system", + "root_system_id": "mattermost", + "official": true + }, + { + "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", + "entity_type": "repo", + "relation": "affected-component", + "root_system_id": "mattermost", + "official": false + } + ], + "affected_components": [ + { + "name": "mattermost / mattermost-server", + "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", + "scope": "repo", + "package_name": "github.com/mattermost/mattermost-server", + "official": false + } + ], + "affected_version_ranges": [ + "introduced=11.4.0-rc1, fixed<11.4.1", + "introduced=11.3.0-rc1, fixed<11.3.2", + "introduced=11.2.0-rc1, fixed<11.2.4", + "introduced=10.11.0-rc1, fixed<10.11.12", + "introduced=8.0.0-20260105080200-d27a2195068d, fixed<8.0.0-20260217110922-b7d4a1f1f59b" + ], + "fixed_version_ranges": [ + "11.4.1", + "11.3.2", + "11.2.4", + "10.11.12", + "8.0.0-20260217110922-b7d4a1f1f59b" + ], + "introduced_version": "introduced=8.0.0-20260105080200-d27a2195068d, fixed<8.0.0-20260217110922-b7d4a1f1f59b", + "patched_version": "11.4.1", + "version_evidence_sources": [ + "https://nvd.nist.gov/vuln/detail/CVE-2026-3113", + "https://github.com/mattermost/mattermost", + "https://mattermost.com/security-updates" + ], + "affected_version_refs": [ + "mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-4-0-rc1-fixed-11-4-1", + "mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-3-0-rc1-fixed-11-3-2", + "mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-2-0-rc1-fixed-11-2-4", + "mattermost--repo--github-com-mattermost-mattermost-server--introduced-10-11-0-rc1-fixed-10-11-12", + "mattermost--repo--github-com-mattermost-mattermost-server--introduced-8-0-0-20260105080200-d27a2195068d-fixed-8-0-0-20260217110922-b7d4a1f1f59b" + ], + "fixed_version_refs": [ + "mattermost--repo--github-com-mattermost-mattermost-server--11-4-1", + "mattermost--repo--github-com-mattermost-mattermost-server--11-3-2", + "mattermost--repo--github-com-mattermost-mattermost-server--11-2-4", + "mattermost--repo--github-com-mattermost-mattermost-server--10-11-12", + "mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260217110922-b7d4a1f1f59b" + ], + "patched_version_refs": [ + "mattermost--repo--github-com-mattermost-mattermost-server--11-4-1" + ], + "version_sync_confidence": "high", + "advisory_scope": "repo", + "version_confidence": "high", + "version_gap_reason": "", + "version_resolution_needed": false, + "workflow": { + "workflow_id": "mattermost--CVE-2026-3113--workflow", + "vuln_family": "unknown", + "entry_surface": "repo-surface", + "preconditions": [ + "\u4ec5\u5728 lab-local\u3001lab-public \u6216\u660e\u786e\u6388\u6743\u76ee\u6807\u4e2d\u6267\u884c\u3002", + "\u786e\u8ba4\u76ee\u6807\u547d\u4e2d\u7248\u672c\u65ad\u8a00: introduced=11.4.0-rc1, fixed<11.4.1, introduced=11.3.0-rc1, fixed<11.3.2, introduced=11.2.0-rc1, fixed<11.2.4", + "\u82e5\u5bf9\u8c61\u5c5e\u4e8e `repo`\uff0c\u5148\u786e\u8ba4\u6269\u5c55/\u4ed3\u5e93/\u5305\u5df2\u542f\u7528\u5e76\u5904\u4e8e\u53d7\u5f71\u54cd\u7248\u672c\u3002" + ], + "required_role": "unknown", + "affected_version_assertion": [ + "introduced=11.4.0-rc1, fixed<11.4.1", + "introduced=11.3.0-rc1, fixed<11.3.2", + "introduced=11.2.0-rc1, fixed<11.2.4", + "introduced=10.11.0-rc1, fixed<10.11.12", + "introduced=8.0.0-20260105080200-d27a2195068d, fixed<8.0.0-20260217110922-b7d4a1f1f59b" + ], + "trigger_vector": "\u5bf9 `unknown` \u5bb6\u65cf\u5165\u53e3\u6295\u9012\u6700\u5c0f\u5316\u3001\u53ef\u5ba1\u8ba1\u3001\u53ef\u56de\u6eda\u7684\u53d7\u63a7\u8f93\u5165\uff0c\u6bd4\u8f83\u4fee\u590d\u524d\u540e\u5dee\u5f02\u3002", + "request_or_ui_path": [ + "/repo" + ], + "input_shape": "\u63d0\u4ea4\u6700\u5c0f\u5316\u3001\u53ef\u5ba1\u8ba1\u3001\u53ef\u56de\u6eda\u7684\u53d7\u63a7\u8f93\u5165\u3002", + "expected_unsafe_behavior": "\u76ee\u6807\u8868\u73b0\u51fa\u8d85\u51fa\u8bbe\u8ba1\u8fb9\u754c\u7684\u884c\u4e3a\u3002", + "server_evidence_points": [ + "\u5e94\u7528\u65e5\u5fd7\u4e2d\u7684\u547d\u4e2d\u8def\u5f84\u3001\u9274\u6743\u51b3\u7b56\u548c\u5f02\u5e38\u6808", + "\u53cd\u5411\u4ee3\u7406\u6216\u8fb9\u754c\u5c42\u65e5\u5fd7\u4e2d\u7684\u8bf7\u6c42\u5934\u3001\u6765\u6e90 IP \u4e0e\u8def\u7531\u51b3\u7b56" + ], + "browser_evidence_points": [ + "\u57fa\u7ebf\u622a\u56fe\u4e0e\u653b\u51fb\u540e\u622a\u56fe\u7684 DOM/\u89c6\u89c9\u5dee\u5f02", + "console\u3001network \u4e0e response metadata \u4e2d\u7684\u5f02\u5e38\u4fe1\u53f7" + ], + "db_or_fs_evidence_points": [ + "\u6570\u636e\u5e93\u4e2d\u65b0\u589e/\u8d8a\u6743\u8bfb\u53d6\u7684\u6d4b\u8bd5\u6570\u636e", + "\u6587\u4ef6\u7cfb\u7edf\u4e2d\u65b0\u589e\u4e0a\u4f20\u6837\u672c\u3001\u7f13\u5b58\u6761\u76ee\u6216\u8d8a\u6743\u8bfb\u53d6\u75d5\u8ff9" + ], + "detection_signals": [ + "WAF / reverse proxy \u5f02\u5e38\u65e5\u5fd7\u3001\u8bbf\u95ee\u65e5\u5fd7\u548c\u544a\u8b66", + "\u5e94\u7528\u5ba1\u8ba1\u65e5\u5fd7\u4e2d\u7684\u6743\u9650\u9519\u8bef\u3001\u91cd\u5b9a\u5411\u5f02\u5e38\u3001\u6a21\u677f\u6e32\u67d3\u6216\u4e0a\u4f20\u843d\u76d8\u4e8b\u4ef6" + ], + "mitigation_summary": "\u4f18\u5148\u5347\u7ea7\u5230\u4fee\u590d\u7248\u672c\uff0c\u5e76\u540c\u65f6\u6536\u7d27\u8f93\u5165\u6821\u9a8c\u3001\u670d\u52a1\u7aef\u9274\u6743\u3001\u4ee3\u7406\u4fe1\u4efb\u8fb9\u754c\u3001\u6269\u5c55\u5b89\u88c5\u4fe1\u4efb\u548c\u5ba1\u8ba1\u65e5\u5fd7\u3002", + "patch_validation_steps": [ + "\u786e\u8ba4\u76ee\u6807\u7248\u672c\u4ece `introduced=11.4.0-rc1, fixed<11.4.1, introduced=11.3.0-rc1, fixed<11.3.2, introduced=11.2.0-rc1, fixed<11.2.4` \u5347\u7ea7\u6216\u56de\u79fb\u5230 `11.4.1`\u3002", + "\u4fdd\u7559\u540c\u4e00\u7ec4\u53d7\u63a7\u8f93\u5165\uff0c\u5728\u4fee\u590d\u524d\u540e\u5206\u522b\u6267\u884c\u5e76\u6bd4\u5bf9\u54cd\u5e94\u3001\u65e5\u5fd7\u4e0e\u6d4f\u89c8\u5668\u8bc1\u636e\u3002", + "\u786e\u8ba4\u4fee\u590d\u540e\u4ec5\u4fdd\u7559\u9884\u671f\u4e1a\u52a1\u884c\u4e3a\uff0c\u4e0d\u518d\u89e6\u53d1\u8d8a\u6743\u3001\u56de\u663e\u3001\u5f02\u5e38\u6e32\u67d3\u6216\u9519\u8bef\u8bf7\u6c42\u3002", + "\u8865\u5145 `unknown` \u65cf\u81ea\u52a8\u5316\u56de\u5f52\uff0c\u907f\u514d\u540c\u7c7b\u8def\u5f84\u5728\u63d2\u4ef6\u3001\u4e3b\u9898\u6216\u4ee3\u7406\u94fe\u4e2d\u56de\u5f52\u3002" + ], + "lab_safety_notes": [ + "\u53ea\u4f7f\u7528\u56de\u73af\u5730\u5740\u3001\u54e8\u5175\u76ee\u6807\u3001\u65e0\u5bb3\u6837\u672c\u6216\u53ef\u56de\u6eda\u6d4b\u8bd5\u6570\u636e\u3002", + "\u7981\u6b62\u9020\u6210\u6301\u4e45\u7834\u574f\u3001\u8d8a\u6743\u4e0b\u8f7d\u771f\u5b9e\u6570\u636e\u6216\u4e0d\u53ef\u56de\u6eda side effect\u3002", + "\u5982\u9700\u6d4f\u89c8\u5668\u8bc1\u636e\uff0c\u4fdd\u7559 baseline / proof \u4e24\u4efd\u5feb\u7167\u4ee5\u53ca console / network \u8bb0\u5f55\u3002" + ], + "review_state": "ready" + }, + "verification_status": "triage-manual", + "verification_mode": "synthetic", + "last_verified_at": null, + "last_run_id": null, + "evidence_bundle": null, + "historical_status": null, + "latest_status": null, + "browser_evidence": { + "required": false, + "present": false, + "refs": [] + }, + "repro_profile_id": "xss-generic", + "artifact_mode": "synthetic", + "blocked_reason": null, + "metadata": { + "source_names": [ + "OSV Mattermost" + ], + "source_kinds": [ + "osv-batch" + ], + "candidate_count": 1, + "entity_ref_count": 2, + "advisory_scope": "repo", + "version_confidence": "high", + "workflow_id": "mattermost--CVE-2026-3113--workflow" + } +} diff --git a/08-threat-intel/registry/advisories/mediawiki--469c5db88b.json b/08-threat-intel/registry/advisories/mediawiki--469c5db88b.json new file mode 100644 index 00000000..745b6435 --- /dev/null +++ b/08-threat-intel/registry/advisories/mediawiki--469c5db88b.json @@ -0,0 +1,148 @@ +{ + "canonical_id": "mediawiki--469c5db88b", + "system_id": "mediawiki", + "display_name": "MediaWiki", + "category": "cms", + "advisory_mode": "core", + "title": "[MediaWiki-announce] Security and maintenance release: 1.43.7 / 1.44.4 / 1.45.2", + "summary": "I would like to announce the release of MediaWiki 1.43.7, 1.44.4 and 1.45.2!\n\nThese releases serve as security and maintenance releases for these\nbranches.\n\nThey ended up a little later than expected in the day, due a last minute\naddition of the fix to Echo in T420154.\n\nThe tarballs have already been uploaded as of this email, and the git tags\nwill be pushed shortly.\n\nA \"MediaWiki Extensions Security Release Supplement\" e-mail will follow\nthis one, covering security updates for non-bundled extensions.\n\nReports of bugs with PHP 8.0 to 8.5 support are particularly welcome, and\nfixes will be back-ported when possible. If you find issues that haven't\nbeen backported, please report these too, referring to the relevant\nsupported release.\n\nPHP 8.x workboards:\n* https://phabricator.wikimedia.org/tag/php_8.0_support/\n* https://phabricator.wikimedia.org/tag/php_8.1_support/\n* https://phabricator.wikimedia.org/tag/php_8.2_support/\n* https://phabricator.wikimedia.org/tag/php_8.3_support/\n* https://phabricator.wikimedia.org/tag/php_8.4_support/\n* https://phabricator.wikimedia.org/tag/php_8.5_support/\n\nAs a reminder, MediaWiki 1.39 became EOL in December 2025 and MediaWiki\n1.42 became EOL in June 2025.\n\n== Security fixes ==\n\n* (T384147, CVE-2026-34092) SECURITY: Block UI elements in 'tools'-sidebar\nshows presence of an autoblocked IP.\n* (T410429, CVE-2026-34088) SECURITY: RecentChanges entries expose\nsuppressed content via generated log page html.\n* (T411305, CVE-2026-34091) SECURITY: User localization leaked by\nAbuseFilter + EventStream.\n* (T411366, CVE-2026-34090) SECURITY: Suggested investigations: Handle\nsuppressed usernames.\n* (T412061, CVE-2026-34087) SECURITY: Users API leaks whether privileged\nusers have their user groups disabled for lack of 2FA.\n* (T414547, CVE-2026-34093) SECURITY: Special:UserRights allows viewing\nuser rights from private wiki.\n* (T415584, CVE-2026-34086) SECURITY: AbuseFilter misuses\n::userCanBitfield, exposing access-controlled information.\n* (T416090, CVE-2026-34094) SECURITY: Customized help link for page\nprotection indicator is relative to subpage name, because the link target\nis missing the \"/wiki/\" prefix.\n* (T419168, CVE-2026-34089) SECURITY: Memory leak in Scribunto causes\nrunJobs.php to run out of memory.\n* (T419192, CVE-2026-34095) SECURITY: action=raw with Special:Mypage\nsubpage title responds with \"Content-Type) SECURITY: text/html\" on\nctype=text/javascript request.\n* (T420154, CVE-2026-5266) SECURITY: Notifications (Echo) API can be used\nby any OAuth tool.\n\n== Links to all mentioned tasks ==\n\n* https://phabricator.wikimedia.org/T384147\n* https://phabricator.wikimedia.org/T410429\n* https://phabricator.wikimedia.org/T411305\n* https://phabricator.wikimedia.org/T411366\n* https://phabricator.wikimedia.org/T412061\n* https://phabricator.wikimedia.org/T414547\n* https://phabricator.wikimedia.org/T415584\n* https://phabricator.wikimedia.org/T416090\n* https://phabricator.wikimedia.org/T419168\n* https://phabricator.wikimedia.org/T419192\n* https://phabricator.wikimedia.org/T420154\n\n== Release notes ==\n\nFull release notes for 1.43.7:\nhttps://phabricator.wikimedia.org/diffusion/MW/browse/REL1_43/RELEASE-NOTES-1.43\nhttps://www.mediawiki.org/wiki/Release_notes/1.43\n\nFull release notes for 1.44.4:\nhttps://phabricator.wikimedia.org/diffusion/MW/browse/REL1_44/RELEASE-NOTES-1.44\nhttps://www.mediawiki.org/wiki/Release_notes/1.44\n\nFull release notes for 1.45.2:\nhttps://phabricator.wikimedia.org/diffusion/MW/browse/REL1_45/RELEASE-NOTES-1.45\nhttps://www.mediawiki.org/wiki/Release_notes/1.45\n\nFor information about how to upgrade, see\n\n\n**********************************************************************\nDownload:\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.7.tar.gz\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.7.zip\n\nDownload without bundled extensions:\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-core-1.43.7.tar.gz\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-core-1.43.7.zip\n\nPatch to previous version (1.43.6):\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.7.patch.gz\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.7.patch.zip\n\nGPG signatures:\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-core-1.43.7.tar.gz.sig\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-core-1.43.7.zip.sig\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.7.tar.gz.sig\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.7.zip.sig\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.7.patch.gz.sig\nhttps://releases.wikimedia.org/mediawiki/1.43/mediawiki-1.43.7.patch.zip.sig\n\nPublic keys:\nhttps://www.mediawiki.org/keys/keys.html\n\n**********************************************************************\nDownload:\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.4.tar.gz\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.4.zip\n\nDownload without bundled extensions:\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-core-1.44.4.tar.gz\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-core-1.44.4.zip\n\nPatch to previous version (1.44.3):\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.4.patch.gz\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.4.patch.zip\n\nGPG signatures:\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-core-1.44.4.tar.gz.sig\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-core-1.44.4.zip.sig\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.4.tar.gz.sig\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.4.zip.sig\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.4.patch.gz.sig\nhttps://releases.wikimedia.org/mediawiki/1.44/mediawiki-1.44.4.patch.zip.sig\n\nPublic keys:\nhttps://www.mediawiki.org/keys/keys.html\n\n**********************************************************************\nDownload:\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.2.tar.gz\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.2.zip\n\nDownload without bundled extensions:\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-core-1.45.2.tar.gz\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-core-1.45.2.zip\n\nPatch to previous version (1.45.1):\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.2.patch.gz\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.2.patch.zip\n\nGPG signatures:\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-core-1.45.2.tar.gz.sig\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-core-1.45.2.zip.sig\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.2.tar.gz.sig\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.2.zip.sig\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.2.patch.gz.sig\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.2.patch.zip.sig\n\nPublic keys:\nhttps://www.mediawiki.org/keys/keys.html", + "published_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "updated_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "severity": "unknown", + "cvss_score": null, + "exploit_status": "unknown", + "source_confidence": "official", + "official_source_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "secondary_source_urls": [], + "aliases": [], + "cve_ids": [], + "ghsa_ids": [], + "osv_ids": [], + "affected_versions": [], + "fixed_versions": [], + "package_name": null, + "render_markdown": false, + "case_path": null, + "secure_code_topics": [ + "xss-output-encoding", + "authz-server-side-recheck", + "file-upload-validation", + "plugin-extension-trust-policy" + ], + "status": "triage", + "triage_reasons": [ + "missing affected/fixed version details" + ], + "entity_refs": [ + { + "entity_id": "mediawiki", + "entity_type": "system", + "relation": "root-system", + "root_system_id": "mediawiki", + "official": true + } + ], + "affected_components": [ + { + "name": "MediaWiki", + "entity_id": "mediawiki", + "scope": "core", + "package_name": null, + "official": true + } + ], + "affected_version_ranges": [], + "fixed_version_ranges": [], + "introduced_version": null, + "patched_version": null, + "version_evidence_sources": [ + "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/" + ], + "affected_version_refs": [], + "fixed_version_refs": [], + "patched_version_refs": [], + "version_sync_confidence": "low", + "advisory_scope": "core", + "version_confidence": "low", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions", + "version_resolution_needed": true, + "workflow": { + "workflow_id": "mediawiki--469c5db88b--workflow", + "vuln_family": "plugin-extension", + "entry_surface": "extension-management-surface", + "preconditions": [ + "\u4ec5\u5728 lab-local\u3001lab-public \u6216\u660e\u786e\u6388\u6743\u76ee\u6807\u4e2d\u6267\u884c\u3002", + "\u786e\u8ba4\u76ee\u6807\u547d\u4e2d\u7248\u672c\u65ad\u8a00: \u9700\u8981\u4ece\u516c\u544a\u3001\u9501\u6587\u4ef6\u3001\u7248\u672c\u9875\u6216\u5173\u4e8e\u9875\u9762\u4eba\u5de5\u786e\u8ba4\u7248\u672c\u547d\u4e2d", + "\u82e5\u5bf9\u8c61\u5c5e\u4e8e `core`\uff0c\u5148\u786e\u8ba4\u6269\u5c55/\u4ed3\u5e93/\u5305\u5df2\u542f\u7528\u5e76\u5904\u4e8e\u53d7\u5f71\u54cd\u7248\u672c\u3002" + ], + "required_role": "plugin-manager-or-admin", + "affected_version_assertion": [ + "\u9700\u8981\u4ece\u516c\u544a\u3001\u9501\u6587\u4ef6\u3001\u7248\u672c\u9875\u6216\u5173\u4e8e\u9875\u9762\u4eba\u5de5\u786e\u8ba4\u7248\u672c\u547d\u4e2d" + ], + "trigger_vector": "\u5bf9 `plugin-extension` \u5bb6\u65cf\u5165\u53e3\u6295\u9012\u6700\u5c0f\u5316\u3001\u53ef\u5ba1\u8ba1\u3001\u53ef\u56de\u6eda\u7684\u53d7\u63a7\u8f93\u5165\uff0c\u6bd4\u8f83\u4fee\u590d\u524d\u540e\u5dee\u5f02\u3002", + "request_or_ui_path": [ + "/plugins", + "/extensions", + "/themes" + ], + "input_shape": "\u5728\u6269\u5c55\u7ba1\u7406\u6216\u6269\u5c55\u529f\u80fd\u5165\u53e3\u4e2d\u63d0\u4ea4\u53d7\u63a7\u914d\u7f6e/\u5185\u5bb9\u3002", + "expected_unsafe_behavior": "\u6269\u5c55\u5b89\u88c5\u3001\u914d\u7f6e\u6216\u8fd0\u884c\u7a81\u7834\u4e86\u4fe1\u4efb\u8fb9\u754c\u3002", + "server_evidence_points": [ + "\u5e94\u7528\u65e5\u5fd7\u4e2d\u7684\u547d\u4e2d\u8def\u5f84\u3001\u9274\u6743\u51b3\u7b56\u548c\u5f02\u5e38\u6808", + "\u53cd\u5411\u4ee3\u7406\u6216\u8fb9\u754c\u5c42\u65e5\u5fd7\u4e2d\u7684\u8bf7\u6c42\u5934\u3001\u6765\u6e90 IP \u4e0e\u8def\u7531\u51b3\u7b56" + ], + "browser_evidence_points": [ + "\u57fa\u7ebf\u622a\u56fe\u4e0e\u653b\u51fb\u540e\u622a\u56fe\u7684 DOM/\u89c6\u89c9\u5dee\u5f02", + "console\u3001network \u4e0e response metadata \u4e2d\u7684\u5f02\u5e38\u4fe1\u53f7" + ], + "db_or_fs_evidence_points": [ + "\u6570\u636e\u5e93\u4e2d\u65b0\u589e/\u8d8a\u6743\u8bfb\u53d6\u7684\u6d4b\u8bd5\u6570\u636e", + "\u6587\u4ef6\u7cfb\u7edf\u4e2d\u65b0\u589e\u4e0a\u4f20\u6837\u672c\u3001\u7f13\u5b58\u6761\u76ee\u6216\u8d8a\u6743\u8bfb\u53d6\u75d5\u8ff9" + ], + "detection_signals": [ + "WAF / reverse proxy \u5f02\u5e38\u65e5\u5fd7\u3001\u8bbf\u95ee\u65e5\u5fd7\u548c\u544a\u8b66", + "\u5e94\u7528\u5ba1\u8ba1\u65e5\u5fd7\u4e2d\u7684\u6743\u9650\u9519\u8bef\u3001\u91cd\u5b9a\u5411\u5f02\u5e38\u3001\u6a21\u677f\u6e32\u67d3\u6216\u4e0a\u4f20\u843d\u76d8\u4e8b\u4ef6" + ], + "mitigation_summary": "\u4f18\u5148\u5347\u7ea7\u5230\u4fee\u590d\u7248\u672c\uff0c\u5e76\u540c\u65f6\u6536\u7d27\u8f93\u5165\u6821\u9a8c\u3001\u670d\u52a1\u7aef\u9274\u6743\u3001\u4ee3\u7406\u4fe1\u4efb\u8fb9\u754c\u3001\u6269\u5c55\u5b89\u88c5\u4fe1\u4efb\u548c\u5ba1\u8ba1\u65e5\u5fd7\u3002", + "patch_validation_steps": [ + "\u786e\u8ba4\u76ee\u6807\u7248\u672c\u4ece `\u53d7\u5f71\u54cd\u7248\u672c\u533a\u95f4` \u5347\u7ea7\u6216\u56de\u79fb\u5230 `\u4fee\u590d\u7248\u672c`\u3002", + "\u4fdd\u7559\u540c\u4e00\u7ec4\u53d7\u63a7\u8f93\u5165\uff0c\u5728\u4fee\u590d\u524d\u540e\u5206\u522b\u6267\u884c\u5e76\u6bd4\u5bf9\u54cd\u5e94\u3001\u65e5\u5fd7\u4e0e\u6d4f\u89c8\u5668\u8bc1\u636e\u3002", + "\u786e\u8ba4\u4fee\u590d\u540e\u4ec5\u4fdd\u7559\u9884\u671f\u4e1a\u52a1\u884c\u4e3a\uff0c\u4e0d\u518d\u89e6\u53d1\u8d8a\u6743\u3001\u56de\u663e\u3001\u5f02\u5e38\u6e32\u67d3\u6216\u9519\u8bef\u8bf7\u6c42\u3002", + "\u8865\u5145 `plugin-extension` \u65cf\u81ea\u52a8\u5316\u56de\u5f52\uff0c\u907f\u514d\u540c\u7c7b\u8def\u5f84\u5728\u63d2\u4ef6\u3001\u4e3b\u9898\u6216\u4ee3\u7406\u94fe\u4e2d\u56de\u5f52\u3002" + ], + "lab_safety_notes": [ + "\u53ea\u4f7f\u7528\u56de\u73af\u5730\u5740\u3001\u54e8\u5175\u76ee\u6807\u3001\u65e0\u5bb3\u6837\u672c\u6216\u53ef\u56de\u6eda\u6d4b\u8bd5\u6570\u636e\u3002", + "\u7981\u6b62\u9020\u6210\u6301\u4e45\u7834\u574f\u3001\u8d8a\u6743\u4e0b\u8f7d\u771f\u5b9e\u6570\u636e\u6216\u4e0d\u53ef\u56de\u6eda side effect\u3002", + "\u5982\u9700\u6d4f\u89c8\u5668\u8bc1\u636e\uff0c\u4fdd\u7559 baseline / proof \u4e24\u4efd\u5feb\u7167\u4ee5\u53ca console / network \u8bb0\u5f55\u3002" + ], + "review_state": "needs-version-gap-review" + }, + "verification_status": "triage-manual", + "verification_mode": "synthetic", + "last_verified_at": null, + "last_run_id": null, + "evidence_bundle": null, + "historical_status": null, + "latest_status": null, + "browser_evidence": { + "required": false, + "present": false, + "refs": [] + }, + "repro_profile_id": "xss-generic", + "artifact_mode": "synthetic", + "blocked_reason": null, + "metadata": { + "source_names": [ + "MediaWiki Announce RSS" + ], + "source_kinds": [ + "rss-feed" + ], + "candidate_count": 1, + "entity_ref_count": 1, + "advisory_scope": "core", + "version_confidence": "low", + "workflow_id": "mediawiki--469c5db88b--workflow" + } +} diff --git a/08-threat-intel/registry/entities/adminer.json b/08-threat-intel/registry/entities/adminer.json index 66a85b26..b7792ff2 100644 --- a/08-threat-intel/registry/entities/adminer.json +++ b/08-threat-intel/registry/entities/adminer.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/adobe-commerce.json b/08-threat-intel/registry/entities/adobe-commerce.json index 9e8a4867..83933f31 100644 --- a/08-threat-intel/registry/entities/adobe-commerce.json +++ b/08-threat-intel/registry/entities/adobe-commerce.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/angular--package--angular-core.json b/08-threat-intel/registry/entities/angular--package--angular-core.json index d289c1fd..e6f3bb18 100644 --- a/08-threat-intel/registry/entities/angular--package--angular-core.json +++ b/08-threat-intel/registry/entities/angular--package--angular-core.json @@ -23,7 +23,7 @@ ], "version_sync_status": "green", "security_version_count": 18, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/angular/angular/security/advisories/GHSA-prjf-86w9-mfqv", diff --git a/08-threat-intel/registry/entities/angular.json b/08-threat-intel/registry/entities/angular.json index 1cc121dc..8a481150 100644 --- a/08-threat-intel/registry/entities/angular.json +++ b/08-threat-intel/registry/entities/angular.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 18, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/apache-httpd.json b/08-threat-intel/registry/entities/apache-httpd.json index ce4631c6..dc209cdf 100644 --- a/08-threat-intel/registry/entities/apache-httpd.json +++ b/08-threat-intel/registry/entities/apache-httpd.json @@ -22,7 +22,7 @@ ], "version_sync_status": "green", "security_version_count": 1, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Apache HTTPD Security" ], diff --git a/08-threat-intel/registry/entities/apache-tomcat.json b/08-threat-intel/registry/entities/apache-tomcat.json index f1270aec..66ed5c02 100644 --- a/08-threat-intel/registry/entities/apache-tomcat.json +++ b/08-threat-intel/registry/entities/apache-tomcat.json @@ -23,7 +23,7 @@ ], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Apache Tomcat Security" ], diff --git a/08-threat-intel/registry/entities/aspnet-core.json b/08-threat-intel/registry/entities/aspnet-core.json index a9ebef1c..5861c65e 100644 --- a/08-threat-intel/registry/entities/aspnet-core.json +++ b/08-threat-intel/registry/entities/aspnet-core.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/astro--module--astro.json b/08-threat-intel/registry/entities/astro--module--astro.json index d1969871..9e5d3b29 100644 --- a/08-threat-intel/registry/entities/astro--module--astro.json +++ b/08-threat-intel/registry/entities/astro--module--astro.json @@ -23,7 +23,7 @@ ], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/withastro/astro/security/advisories/GHSA-wrwg-2hg8-v723", diff --git a/08-threat-intel/registry/entities/astro--project--astro.json b/08-threat-intel/registry/entities/astro--project--astro.json index d685291a..8a127845 100644 --- a/08-threat-intel/registry/entities/astro--project--astro.json +++ b/08-threat-intel/registry/entities/astro--project--astro.json @@ -32,7 +32,7 @@ ], "version_sync_status": "green", "security_version_count": 28, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/withastro/astro/security/advisories/GHSA-c4pw-33h3-35xw", diff --git a/08-threat-intel/registry/entities/astro.json b/08-threat-intel/registry/entities/astro.json index df1c4e56..bb7ee2a4 100644 --- a/08-threat-intel/registry/entities/astro.json +++ b/08-threat-intel/registry/entities/astro.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 32, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/caddy--extension--github-com-caddyserver-caddy-v2.json b/08-threat-intel/registry/entities/caddy--extension--github-com-caddyserver-caddy-v2.json index 09e193b0..8b77430b 100644 --- a/08-threat-intel/registry/entities/caddy--extension--github-com-caddyserver-caddy-v2.json +++ b/08-threat-intel/registry/entities/caddy--extension--github-com-caddyserver-caddy-v2.json @@ -23,7 +23,7 @@ ], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "GitHub Releases API", "https://github.com/caddyserver/caddy/security/advisories/GHSA-5r3v-vc8m-m96g", diff --git a/08-threat-intel/registry/entities/caddy--repo--github-com-caddyserver-caddy-v2.json b/08-threat-intel/registry/entities/caddy--repo--github-com-caddyserver-caddy-v2.json index d68fd8ee..3a920fe4 100644 --- a/08-threat-intel/registry/entities/caddy--repo--github-com-caddyserver-caddy-v2.json +++ b/08-threat-intel/registry/entities/caddy--repo--github-com-caddyserver-caddy-v2.json @@ -24,7 +24,7 @@ ], "version_sync_status": "green", "security_version_count": 5, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "GitHub Releases API", "https://github.com/caddyserver/caddy/security/advisories/GHSA-4xrr-hq4w-6vf4", diff --git a/08-threat-intel/registry/entities/caddy.json b/08-threat-intel/registry/entities/caddy.json index 406b3e36..7d5c8881 100644 --- a/08-threat-intel/registry/entities/caddy.json +++ b/08-threat-intel/registry/entities/caddy.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 7, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/directus--repo--directus-directus.json b/08-threat-intel/registry/entities/directus--repo--directus-directus.json index 16e39b43..5d6847bc 100644 --- a/08-threat-intel/registry/entities/directus--repo--directus-directus.json +++ b/08-threat-intel/registry/entities/directus--repo--directus-directus.json @@ -24,7 +24,7 @@ ], "version_sync_status": "green", "security_version_count": 1, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "GitHub Releases API", "Directus GitHub Advisories" diff --git a/08-threat-intel/registry/entities/directus.json b/08-threat-intel/registry/entities/directus.json index cfa1e664..66cfa1a6 100644 --- a/08-threat-intel/registry/entities/directus.json +++ b/08-threat-intel/registry/entities/directus.json @@ -21,7 +21,7 @@ ], "version_sync_status": "green", "security_version_count": 1, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Directus GitHub Advisories" ], diff --git a/08-threat-intel/registry/entities/discourse.json b/08-threat-intel/registry/entities/discourse.json index 76955b34..317ba4c4 100644 --- a/08-threat-intel/registry/entities/discourse.json +++ b/08-threat-intel/registry/entities/discourse.json @@ -30,11 +30,12 @@ "https://meta.discourse.org/t/3-4-4-bug-fix-and-ux-release/367301", "https://meta.discourse.org/t/3-4-5-security-fixes-release/369347", "https://meta.discourse.org/t/3-4-6-security-fix-release/370631", - "https://meta.discourse.org/t/3-4-7-security-and-maintenance-release/375747" + "https://meta.discourse.org/t/3-4-7-security-and-maintenance-release/375747", + "https://meta.discourse.org/t/january-2026-releases/393903" ], "version_sync_status": "green", - "security_version_count": 80, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "security_version_count": 82, + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Discourse Release Notes RSS", "Discourse Security RSS" @@ -47,11 +48,11 @@ "history_backfill_status": "seeded", "latest_sync_status": "green", "official_source_covered": true, - "advisory_count": 30, - "workflow_complete_advisory_count": 30, + "advisory_count": 31, + "workflow_complete_advisory_count": 31, "version_mapped_advisory_count": 0, "first_advisory_at": "2024-12-19T16:53:54+00:00", - "latest_advisory_at": "2026-01-28T17:35:34+00:00", + "latest_advisory_at": "2026-03-31T14:35:49+00:00", "advisory_ids": [ "discourse--0a6de28d35", "discourse--111e9b52a2", @@ -63,6 +64,7 @@ "discourse--451d4d9871", "discourse--4dbfe76896", "discourse--5d3cafdece", + "discourse--5dce90675e", "discourse--615bee56ae", "discourse--6216e2732b", "discourse--68e2bb93e1", diff --git a/08-threat-intel/registry/entities/django--project--django.json b/08-threat-intel/registry/entities/django--project--django.json index 1b64c084..dbc29163 100644 --- a/08-threat-intel/registry/entities/django--project--django.json +++ b/08-threat-intel/registry/entities/django--project--django.json @@ -22,7 +22,7 @@ ], "version_sync_status": "green", "security_version_count": 160, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "npm latest", "https://nvd.nist.gov/vuln/detail/CVE-2019-11358" diff --git a/08-threat-intel/registry/entities/django.json b/08-threat-intel/registry/entities/django.json index c5545dac..a127931f 100644 --- a/08-threat-intel/registry/entities/django.json +++ b/08-threat-intel/registry/entities/django.json @@ -38,7 +38,7 @@ ], "version_sync_status": "green", "security_version_count": 160, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Django Security Weblog", "Django Security Releases Archive" diff --git a/08-threat-intel/registry/entities/drupal.json b/08-threat-intel/registry/entities/drupal.json index 0827d822..5954c033 100644 --- a/08-threat-intel/registry/entities/drupal.json +++ b/08-threat-intel/registry/entities/drupal.json @@ -27,7 +27,7 @@ ], "version_sync_status": "green", "security_version_count": 74, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Drupal Security Advisories RSS" ], diff --git a/08-threat-intel/registry/entities/echo--repo--github-com-labstack-echo-v4.json b/08-threat-intel/registry/entities/echo--repo--github-com-labstack-echo-v4.json index a8fd3e84..69345c15 100644 --- a/08-threat-intel/registry/entities/echo--repo--github-com-labstack-echo-v4.json +++ b/08-threat-intel/registry/entities/echo--repo--github-com-labstack-echo-v4.json @@ -12,18 +12,19 @@ "repo_url": "https://github.com/labstack/echo", "package_registry": "", "marketplace_url": "", - "latest_version": "5.0.4", + "latest_version": "5.1.0", "version_scheme": "semver-ish", - "latest_release_at": "2026-02-15T15:55:53Z", - "latest_release_url": "https://github.com/labstack/echo/releases/tag/v5.0.4", + "latest_release_at": "2026-03-31T20:56:54Z", + "latest_release_url": "https://github.com/labstack/echo/releases/tag/v5.1.0", "version_source_refs": [ "https://github.com/labstack/echo/releases/tag/v5.0.4", "https://github.com/labstack/echo/pull/1718", - "https://github.com/labstack/echo/issues/2259" + "https://github.com/labstack/echo/issues/2259", + "https://github.com/labstack/echo/releases/tag/v5.1.0" ], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "GitHub Releases API", "https://github.com/labstack/echo/pull/1718", diff --git a/08-threat-intel/registry/entities/echo.json b/08-threat-intel/registry/entities/echo.json index c3217ea4..b365fecc 100644 --- a/08-threat-intel/registry/entities/echo.json +++ b/08-threat-intel/registry/entities/echo.json @@ -12,14 +12,14 @@ "repo_url": "", "package_registry": "", "marketplace_url": "", - "latest_version": "5.0.4", + "latest_version": "5.1.0", "version_scheme": "vendor", - "latest_release_at": "2026-02-15T15:55:53Z", - "latest_release_url": "https://github.com/labstack/echo/releases/tag/v5.0.4", + "latest_release_at": "2026-03-31T20:56:54Z", + "latest_release_url": "https://github.com/labstack/echo/releases/tag/v5.1.0", "version_source_refs": [], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/esbuild--project--esbuild.json b/08-threat-intel/registry/entities/esbuild--project--esbuild.json index 88e184a0..d669bd20 100644 --- a/08-threat-intel/registry/entities/esbuild--project--esbuild.json +++ b/08-threat-intel/registry/entities/esbuild--project--esbuild.json @@ -22,7 +22,7 @@ ], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/evanw/esbuild/security/advisories/GHSA-67mh-4wv8-2f99" diff --git a/08-threat-intel/registry/entities/esbuild.json b/08-threat-intel/registry/entities/esbuild.json index 6069d70e..1f1be6eb 100644 --- a/08-threat-intel/registry/entities/esbuild.json +++ b/08-threat-intel/registry/entities/esbuild.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/express.json b/08-threat-intel/registry/entities/express.json index b0c5f0e9..1033f75f 100644 --- a/08-threat-intel/registry/entities/express.json +++ b/08-threat-intel/registry/entities/express.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/fastify--project--fastify.json b/08-threat-intel/registry/entities/fastify--project--fastify.json index eff678f4..b18f36ec 100644 --- a/08-threat-intel/registry/entities/fastify--project--fastify.json +++ b/08-threat-intel/registry/entities/fastify--project--fastify.json @@ -23,7 +23,7 @@ ], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/fastify/fastify/security/advisories/GHSA-573f-x89g-hqp9", diff --git a/08-threat-intel/registry/entities/fastify.json b/08-threat-intel/registry/entities/fastify.json index b3393b42..2f377a87 100644 --- a/08-threat-intel/registry/entities/fastify.json +++ b/08-threat-intel/registry/entities/fastify.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/flask--project--flask.json b/08-threat-intel/registry/entities/flask--project--flask.json index e07c60ef..caf1ca94 100644 --- a/08-threat-intel/registry/entities/flask--project--flask.json +++ b/08-threat-intel/registry/entities/flask--project--flask.json @@ -22,7 +22,7 @@ ], "version_sync_status": "green", "security_version_count": 22, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/pallets/flask/security/advisories/GHSA-68rp-wp8r-4726" diff --git a/08-threat-intel/registry/entities/flask.json b/08-threat-intel/registry/entities/flask.json index 68843d07..dc67faa2 100644 --- a/08-threat-intel/registry/entities/flask.json +++ b/08-threat-intel/registry/entities/flask.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 22, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/ghost--repo--tryghost-ghost.json b/08-threat-intel/registry/entities/ghost--repo--tryghost-ghost.json index 7c9f84a5..e3efeb3f 100644 --- a/08-threat-intel/registry/entities/ghost--repo--tryghost-ghost.json +++ b/08-threat-intel/registry/entities/ghost--repo--tryghost-ghost.json @@ -24,7 +24,7 @@ ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "GitHub Releases API", "Ghost GitHub Advisories" diff --git a/08-threat-intel/registry/entities/ghost.json b/08-threat-intel/registry/entities/ghost.json index 68572fdc..e3d7bec5 100644 --- a/08-threat-intel/registry/entities/ghost.json +++ b/08-threat-intel/registry/entities/ghost.json @@ -21,7 +21,7 @@ ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Ghost GitHub Advisories" ], diff --git a/08-threat-intel/registry/entities/gin--repo--github-com-gin-gonic-gin.json b/08-threat-intel/registry/entities/gin--repo--github-com-gin-gonic-gin.json index 404d7c18..c2647105 100644 --- a/08-threat-intel/registry/entities/gin--repo--github-com-gin-gonic-gin.json +++ b/08-threat-intel/registry/entities/gin--repo--github-com-gin-gonic-gin.json @@ -22,7 +22,7 @@ ], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "GitHub Releases API", "https://nvd.nist.gov/vuln/detail/CVE-2020-28483", diff --git a/08-threat-intel/registry/entities/gin.json b/08-threat-intel/registry/entities/gin.json index 5bd0910a..632a8eee 100644 --- a/08-threat-intel/registry/entities/gin.json +++ b/08-threat-intel/registry/entities/gin.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/gitea.json b/08-threat-intel/registry/entities/gitea.json index 43e2eec4..b489039b 100644 --- a/08-threat-intel/registry/entities/gitea.json +++ b/08-threat-intel/registry/entities/gitea.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/gitlab-ce.json b/08-threat-intel/registry/entities/gitlab-ce.json index 96d83675..3b717388 100644 --- a/08-threat-intel/registry/entities/gitlab-ce.json +++ b/08-threat-intel/registry/entities/gitlab-ce.json @@ -21,7 +21,7 @@ ], "version_sync_status": "green", "security_version_count": 627, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "GitLab Security Releases Atom" ], diff --git a/08-threat-intel/registry/entities/grafana.json b/08-threat-intel/registry/entities/grafana.json index 0e858377..7108469c 100644 --- a/08-threat-intel/registry/entities/grafana.json +++ b/08-threat-intel/registry/entities/grafana.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/hapi--package--hapi-hapi.json b/08-threat-intel/registry/entities/hapi--package--hapi-hapi.json index 98f65919..a030f922 100644 --- a/08-threat-intel/registry/entities/hapi--package--hapi-hapi.json +++ b/08-threat-intel/registry/entities/hapi--package--hapi-hapi.json @@ -22,7 +22,7 @@ ], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "npm latest", "https://www.npmjs.com/advisories/1482" diff --git a/08-threat-intel/registry/entities/hapi.json b/08-threat-intel/registry/entities/hapi.json index 614cddb7..9b4cb20a 100644 --- a/08-threat-intel/registry/entities/hapi.json +++ b/08-threat-intel/registry/entities/hapi.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/haproxy.json b/08-threat-intel/registry/entities/haproxy.json index 78040c6f..8aaa8010 100644 --- a/08-threat-intel/registry/entities/haproxy.json +++ b/08-threat-intel/registry/entities/haproxy.json @@ -22,7 +22,7 @@ ], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "HAProxy Blog Feed" ], diff --git a/08-threat-intel/registry/entities/jenkins.json b/08-threat-intel/registry/entities/jenkins.json index 74c7ecce..242dffdf 100644 --- a/08-threat-intel/registry/entities/jenkins.json +++ b/08-threat-intel/registry/entities/jenkins.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/joomla.json b/08-threat-intel/registry/entities/joomla.json index 4874d3af..593ea4a0 100644 --- a/08-threat-intel/registry/entities/joomla.json +++ b/08-threat-intel/registry/entities/joomla.json @@ -12,20 +12,21 @@ "repo_url": "", "package_registry": "", "marketplace_url": "", - "latest_version": "1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html", + "latest_version": "1027-20260301-core-acl-hardening-in-com-ajax.html", "version_scheme": "vendor", "latest_release_at": "", - "latest_release_url": "https://developer.joomla.org/security-centre/1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html", + "latest_release_url": "https://developer.joomla.org/security-centre/1027-20260301-core-acl-hardening-in-com-ajax.html", "version_source_refs": [ "https://developer.joomla.org/security-centre/1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html", "https://developer.joomla.org/security-centre/963-20250401-framework-sql-injection-vulnerability-in-quotenamestr-method-of-database-package.html", "https://developer.joomla.org/security-centre/1010-20250901-core-inadequate-content-filtering-within-the-checkattribute-filter-code.html", "https://developer.joomla.org/security-centre/1011-20250902-core-user-enumeration-in-passkey-authentication-method.html", - "https://developer.joomla.org/security-centre/1016-20260101-core-inadequate-content-filtering-for-data-urls.html" + "https://developer.joomla.org/security-centre/1016-20260101-core-inadequate-content-filtering-for-data-urls.html", + "https://developer.joomla.org/security-centre/1027-20260301-core-acl-hardening-in-com-ajax.html" ], "version_sync_status": "green", - "security_version_count": 5, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "security_version_count": 1, + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Joomla Security Centre" ], diff --git a/08-threat-intel/registry/entities/kibana.json b/08-threat-intel/registry/entities/kibana.json index 129c5dfb..34638255 100644 --- a/08-threat-intel/registry/entities/kibana.json +++ b/08-threat-intel/registry/entities/kibana.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/koa--project--koa.json b/08-threat-intel/registry/entities/koa--project--koa.json index deffa04a..02067337 100644 --- a/08-threat-intel/registry/entities/koa--project--koa.json +++ b/08-threat-intel/registry/entities/koa--project--koa.json @@ -22,7 +22,7 @@ ], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/koajs/koa/security/advisories/GHSA-7gcc-r8m5-44qm" diff --git a/08-threat-intel/registry/entities/koa.json b/08-threat-intel/registry/entities/koa.json index 50135a70..b59f9920 100644 --- a/08-threat-intel/registry/entities/koa.json +++ b/08-threat-intel/registry/entities/koa.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/laravel--package--laravel-framework.json b/08-threat-intel/registry/entities/laravel--package--laravel-framework.json index fa0e109a..4632da8e 100644 --- a/08-threat-intel/registry/entities/laravel--package--laravel-framework.json +++ b/08-threat-intel/registry/entities/laravel--package--laravel-framework.json @@ -22,7 +22,7 @@ ], "version_sync_status": "green", "security_version_count": 103, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Packagist p2", "https://github.com/laravel/framework/security/advisories/GHSA-66hf-2p6w-jqfw" diff --git a/08-threat-intel/registry/entities/laravel.json b/08-threat-intel/registry/entities/laravel.json index 642af791..882cc693 100644 --- a/08-threat-intel/registry/entities/laravel.json +++ b/08-threat-intel/registry/entities/laravel.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 103, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/magento-open-source--repo--magento-magento2.json b/08-threat-intel/registry/entities/magento-open-source--repo--magento-magento2.json index 6b8666e5..9626a63b 100644 --- a/08-threat-intel/registry/entities/magento-open-source--repo--magento-magento2.json +++ b/08-threat-intel/registry/entities/magento-open-source--repo--magento-magento2.json @@ -25,7 +25,7 @@ ], "version_sync_status": "green", "security_version_count": 3, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "GitHub Releases API", "Sansec Research" diff --git a/08-threat-intel/registry/entities/magento-open-source.json b/08-threat-intel/registry/entities/magento-open-source.json index 12ef47b5..39f0bcb8 100644 --- a/08-threat-intel/registry/entities/magento-open-source.json +++ b/08-threat-intel/registry/entities/magento-open-source.json @@ -24,7 +24,7 @@ ], "version_sync_status": "green", "security_version_count": 3, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Sansec Research" ], diff --git a/08-threat-intel/registry/entities/mattermost--plugin--mattermost-plugins.json b/08-threat-intel/registry/entities/mattermost--plugin--mattermost-plugins.json index 3cf3c2d6..1e8ff777 100644 --- a/08-threat-intel/registry/entities/mattermost--plugin--mattermost-plugins.json +++ b/08-threat-intel/registry/entities/mattermost--plugin--mattermost-plugins.json @@ -21,7 +21,7 @@ ], "version_sync_status": "green", "security_version_count": 759, - "last_version_synced_at": "2026-03-31T09:18:10+00:00", + "last_version_synced_at": "2026-04-01T09:20:42+00:00", "latest_version_evidence": [ "Mattermost Security Updates JSON", "https://securityupdates.mattermost.com/security_updates.json", diff --git a/08-threat-intel/registry/entities/mattermost--project--issue-platform.json b/08-threat-intel/registry/entities/mattermost--project--issue-platform.json index c708ecb3..e2af75fb 100644 --- a/08-threat-intel/registry/entities/mattermost--project--issue-platform.json +++ b/08-threat-intel/registry/entities/mattermost--project--issue-platform.json @@ -21,7 +21,7 @@ ], "version_sync_status": "green", "security_version_count": 756, - "last_version_synced_at": "2026-03-31T09:18:11+00:00", + "last_version_synced_at": "2026-04-01T09:20:44+00:00", "latest_version_evidence": [ "Mattermost Security Updates JSON", "https://securityupdates.mattermost.com/security_updates.json", diff --git a/08-threat-intel/registry/entities/mattermost--project--mattermost-server.json b/08-threat-intel/registry/entities/mattermost--project--mattermost-server.json index 1af15f2c..acb1f1f8 100644 --- a/08-threat-intel/registry/entities/mattermost--project--mattermost-server.json +++ b/08-threat-intel/registry/entities/mattermost--project--mattermost-server.json @@ -21,7 +21,7 @@ ], "version_sync_status": "green", "security_version_count": 764, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "Mattermost Security Updates JSON", "advisory-fixed-version", diff --git a/08-threat-intel/registry/entities/mattermost--repo--github-com-mattermost-mattermost-server.json b/08-threat-intel/registry/entities/mattermost--repo--github-com-mattermost-mattermost-server.json index b845789e..a6d02fa8 100644 --- a/08-threat-intel/registry/entities/mattermost--repo--github-com-mattermost-mattermost-server.json +++ b/08-threat-intel/registry/entities/mattermost--repo--github-com-mattermost-mattermost-server.json @@ -36,7 +36,7 @@ ], "version_sync_status": "green", "security_version_count": 824, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "GitHub Releases API", "https://nvd.nist.gov/vuln/detail/CVE-2026-22545", @@ -63,11 +63,11 @@ "history_backfill_status": "seeded", "latest_sync_status": "green", "official_source_covered": true, - "advisory_count": 16, - "workflow_complete_advisory_count": 16, - "version_mapped_advisory_count": 16, + "advisory_count": 17, + "workflow_complete_advisory_count": 17, + "version_mapped_advisory_count": 17, "first_advisory_at": "2026-03-16T15:30:42+00:00", - "latest_advisory_at": "2026-03-31T05:32:49+00:00", + "latest_advisory_at": "2026-03-31T23:19:38+00:00", "advisory_ids": [ "mattermost--CVE-2026-21386", "mattermost--CVE-2026-22545", @@ -84,6 +84,7 @@ "mattermost--CVE-2026-26233", "mattermost--CVE-2026-26246", "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113", "mattermost--CVE-2026-4265" ], "source_refs": [] diff --git a/08-threat-intel/registry/entities/mattermost.json b/08-threat-intel/registry/entities/mattermost.json index f69af70f..f3def9c5 100644 --- a/08-threat-intel/registry/entities/mattermost.json +++ b/08-threat-intel/registry/entities/mattermost.json @@ -21,7 +21,7 @@ ], "version_sync_status": "green", "security_version_count": 3103, - "last_version_synced_at": "2026-03-31T09:18:09+00:00", + "last_version_synced_at": "2026-04-01T09:20:41+00:00", "latest_version_evidence": [ "Mattermost Security Updates JSON" ], @@ -33,11 +33,11 @@ "history_backfill_status": "complete", "latest_sync_status": "green", "official_source_covered": true, - "advisory_count": 35, - "workflow_complete_advisory_count": 35, - "version_mapped_advisory_count": 35, + "advisory_count": 36, + "workflow_complete_advisory_count": 36, + "version_mapped_advisory_count": 36, "first_advisory_at": "2026-02-23T00:00:00+00:00", - "latest_advisory_at": "2026-03-31T05:32:49+00:00", + "latest_advisory_at": "2026-03-31T23:19:38+00:00", "advisory_ids": [ "mattermost--CVE-2026-21386", "mattermost--CVE-2026-22545", @@ -54,6 +54,7 @@ "mattermost--CVE-2026-26233", "mattermost--CVE-2026-26246", "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113", "mattermost--CVE-2026-4265", "mattermost--Issue Identifier", "mattermost--MMSA-2025-00562", diff --git a/08-threat-intel/registry/entities/mediawiki.json b/08-threat-intel/registry/entities/mediawiki.json index 9086ab01..39c521c6 100644 --- a/08-threat-intel/registry/entities/mediawiki.json +++ b/08-threat-intel/registry/entities/mediawiki.json @@ -26,11 +26,12 @@ "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/CIXFJVC57OFRBCCEIDRLZCLFGMYGEYTT/", "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/TT45WDZ7MDTXXBEFLBMLAJI532O2PN2U/", "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FFD4KWZMOVZQJF4PIIVUTCEHDJLMNZEB/", - "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/6I6GV6OP27OB7CZS2JUQ5IC6XFXRHLNQ/" + "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/6I6GV6OP27OB7CZS2JUQ5IC6XFXRHLNQ/", + "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/" ], "version_sync_status": "green", - "security_version_count": 230, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "security_version_count": 254, + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "MediaWiki Announce RSS" ], @@ -42,11 +43,11 @@ "history_backfill_status": "seeded", "latest_sync_status": "green", "official_source_covered": true, - "advisory_count": 71, - "workflow_complete_advisory_count": 71, + "advisory_count": 72, + "workflow_complete_advisory_count": 72, "version_mapped_advisory_count": 0, "first_advisory_at": "2004-12-31T05:00:00+00:00", - "latest_advisory_at": "2026-03-30T17:50:26+00:00", + "latest_advisory_at": "2026-03-31T23:06:16+00:00", "advisory_ids": [ "mediawiki--0cd3c8cc6d", "mediawiki--0fe51dab1c", @@ -58,6 +59,7 @@ "mediawiki--31d957bc6b", "mediawiki--38ad6c5da5", "mediawiki--468e6bcac6", + "mediawiki--469c5db88b", "mediawiki--46bf0dec8b", "mediawiki--4bb7b4f173", "mediawiki--57ad4abb33", diff --git a/08-threat-intel/registry/entities/medusa.json b/08-threat-intel/registry/entities/medusa.json index ec62fb74..96f5bf4b 100644 --- a/08-threat-intel/registry/entities/medusa.json +++ b/08-threat-intel/registry/entities/medusa.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/moodle.json b/08-threat-intel/registry/entities/moodle.json index 287dd38a..f1954000 100644 --- a/08-threat-intel/registry/entities/moodle.json +++ b/08-threat-intel/registry/entities/moodle.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/nestjs.json b/08-threat-intel/registry/entities/nestjs.json index bfb3e133..dee5a4b1 100644 --- a/08-threat-intel/registry/entities/nestjs.json +++ b/08-threat-intel/registry/entities/nestjs.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/nextjs--project--next.json b/08-threat-intel/registry/entities/nextjs--project--next.json index ca0c9d63..f2a3dd73 100644 --- a/08-threat-intel/registry/entities/nextjs--project--next.json +++ b/08-threat-intel/registry/entities/nextjs--project--next.json @@ -12,7 +12,7 @@ "repo_url": "", "package_registry": "https://www.npmjs.com/package/next", "marketplace_url": "", - "latest_version": "16.2.1", + "latest_version": "16.2.2", "version_scheme": "semver-ish", "latest_release_at": "", "latest_release_url": "https://www.npmjs.com/package/next", @@ -35,7 +35,7 @@ ], "version_sync_status": "green", "security_version_count": 168, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/vercel/next.js", diff --git a/08-threat-intel/registry/entities/nextjs.json b/08-threat-intel/registry/entities/nextjs.json index b255e059..ddc8b04b 100644 --- a/08-threat-intel/registry/entities/nextjs.json +++ b/08-threat-intel/registry/entities/nextjs.json @@ -12,14 +12,14 @@ "repo_url": "", "package_registry": "", "marketplace_url": "", - "latest_version": "16.2.1", + "latest_version": "16.2.2", "version_scheme": "vendor", "latest_release_at": "", "latest_release_url": "https://www.npmjs.com/package/next", "version_source_refs": [], "version_sync_status": "green", "security_version_count": 168, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/nginx.json b/08-threat-intel/registry/entities/nginx.json index 379afaaf..64eaa618 100644 --- a/08-threat-intel/registry/entities/nginx.json +++ b/08-threat-intel/registry/entities/nginx.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/nodejs.json b/08-threat-intel/registry/entities/nodejs.json index 39099b67..255db07d 100644 --- a/08-threat-intel/registry/entities/nodejs.json +++ b/08-threat-intel/registry/entities/nodejs.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/nuxt--project--nuxt.json b/08-threat-intel/registry/entities/nuxt--project--nuxt.json index f22854d3..4f80fbc0 100644 --- a/08-threat-intel/registry/entities/nuxt--project--nuxt.json +++ b/08-threat-intel/registry/entities/nuxt--project--nuxt.json @@ -26,7 +26,7 @@ ], "version_sync_status": "green", "security_version_count": 11, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/nuxt/nuxt/security/advisories/GHSA-vf6r-87q4-2vjf", diff --git a/08-threat-intel/registry/entities/nuxt.json b/08-threat-intel/registry/entities/nuxt.json index e49ba7d0..028ff19c 100644 --- a/08-threat-intel/registry/entities/nuxt.json +++ b/08-threat-intel/registry/entities/nuxt.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 11, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/opencart--repo--opencart-opencart.json b/08-threat-intel/registry/entities/opencart--repo--opencart-opencart.json index 327f165d..8c5dbb82 100644 --- a/08-threat-intel/registry/entities/opencart--repo--opencart-opencart.json +++ b/08-threat-intel/registry/entities/opencart--repo--opencart-opencart.json @@ -23,7 +23,7 @@ ], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "GitHub Releases API", "OpenCart Releases" diff --git a/08-threat-intel/registry/entities/opencart.json b/08-threat-intel/registry/entities/opencart.json index a44d8108..ab7f0cd9 100644 --- a/08-threat-intel/registry/entities/opencart.json +++ b/08-threat-intel/registry/entities/opencart.json @@ -22,7 +22,7 @@ ], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "OpenCart Releases" ], diff --git a/08-threat-intel/registry/entities/openmage--repo--openmage-magento-lts.json b/08-threat-intel/registry/entities/openmage--repo--openmage-magento-lts.json index 637718f0..0a71fc66 100644 --- a/08-threat-intel/registry/entities/openmage--repo--openmage-magento-lts.json +++ b/08-threat-intel/registry/entities/openmage--repo--openmage-magento-lts.json @@ -21,7 +21,7 @@ ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "GitHub Releases API" ], diff --git a/08-threat-intel/registry/entities/openmage.json b/08-threat-intel/registry/entities/openmage.json index a31078ac..ae4e6d79 100644 --- a/08-threat-intel/registry/entities/openmage.json +++ b/08-threat-intel/registry/entities/openmage.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/phpmyadmin.json b/08-threat-intel/registry/entities/phpmyadmin.json index 30a9d839..41c38e51 100644 --- a/08-threat-intel/registry/entities/phpmyadmin.json +++ b/08-threat-intel/registry/entities/phpmyadmin.json @@ -21,7 +21,7 @@ ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "phpMyAdmin Security Page" ], diff --git a/08-threat-intel/registry/entities/prestashop--package--prestashop-prestashop.json b/08-threat-intel/registry/entities/prestashop--package--prestashop-prestashop.json index 1fbdcfdf..4093b420 100644 --- a/08-threat-intel/registry/entities/prestashop--package--prestashop-prestashop.json +++ b/08-threat-intel/registry/entities/prestashop--package--prestashop-prestashop.json @@ -23,7 +23,7 @@ ], "version_sync_status": "green", "security_version_count": 41, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "Packagist p2", "https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-35pf-37c6-jxjv", diff --git a/08-threat-intel/registry/entities/prestashop--repo--prestashop-prestashop.json b/08-threat-intel/registry/entities/prestashop--repo--prestashop-prestashop.json index cc88508f..4c9cb955 100644 --- a/08-threat-intel/registry/entities/prestashop--repo--prestashop-prestashop.json +++ b/08-threat-intel/registry/entities/prestashop--repo--prestashop-prestashop.json @@ -28,7 +28,7 @@ ], "version_sync_status": "green", "security_version_count": 9, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "GitHub Releases API", "Friends Of Presta Security", diff --git a/08-threat-intel/registry/entities/prestashop.json b/08-threat-intel/registry/entities/prestashop.json index 97b1592a..22c5b93b 100644 --- a/08-threat-intel/registry/entities/prestashop.json +++ b/08-threat-intel/registry/entities/prestashop.json @@ -26,7 +26,7 @@ ], "version_sync_status": "green", "security_version_count": 50, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "GitHub PrestaShop Advisories", "Friends Of Presta Security", diff --git a/08-threat-intel/registry/entities/rails--project--rails.json b/08-threat-intel/registry/entities/rails--project--rails.json index edc4081d..fe9cc05a 100644 --- a/08-threat-intel/registry/entities/rails--project--rails.json +++ b/08-threat-intel/registry/entities/rails--project--rails.json @@ -26,7 +26,7 @@ ], "version_sync_status": "green", "security_version_count": 102, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "npm latest", "https://nvd.nist.gov/vuln/detail/CVE-2007-5379", diff --git a/08-threat-intel/registry/entities/rails.json b/08-threat-intel/registry/entities/rails.json index 19783924..231de990 100644 --- a/08-threat-intel/registry/entities/rails.json +++ b/08-threat-intel/registry/entities/rails.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 102, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/react--project--react-dom.json b/08-threat-intel/registry/entities/react--project--react-dom.json index c4642f46..29b0592f 100644 --- a/08-threat-intel/registry/entities/react--project--react-dom.json +++ b/08-threat-intel/registry/entities/react--project--react-dom.json @@ -22,7 +22,7 @@ ], "version_sync_status": "green", "security_version_count": 12, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "npm latest", "https://nvd.nist.gov/vuln/detail/CVE-2018-6341" diff --git a/08-threat-intel/registry/entities/react--project--react.json b/08-threat-intel/registry/entities/react--project--react.json index b17f24d9..6910824b 100644 --- a/08-threat-intel/registry/entities/react--project--react.json +++ b/08-threat-intel/registry/entities/react--project--react.json @@ -23,7 +23,7 @@ ], "version_sync_status": "green", "security_version_count": 6, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/facebook/react", diff --git a/08-threat-intel/registry/entities/react.json b/08-threat-intel/registry/entities/react.json index cc1881b2..cd7f9007 100644 --- a/08-threat-intel/registry/entities/react.json +++ b/08-threat-intel/registry/entities/react.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 18, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/redmine.json b/08-threat-intel/registry/entities/redmine.json index a48e86d3..493d3585 100644 --- a/08-threat-intel/registry/entities/redmine.json +++ b/08-threat-intel/registry/entities/redmine.json @@ -21,7 +21,7 @@ ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "Redmine Security Advisories" ], diff --git a/08-threat-intel/registry/entities/saleor--repo--saleor-saleor.json b/08-threat-intel/registry/entities/saleor--repo--saleor-saleor.json index afac83f7..53016f4a 100644 --- a/08-threat-intel/registry/entities/saleor--repo--saleor-saleor.json +++ b/08-threat-intel/registry/entities/saleor--repo--saleor-saleor.json @@ -24,7 +24,7 @@ ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "GitHub Releases API", "GitHub Saleor Advisories" diff --git a/08-threat-intel/registry/entities/saleor.json b/08-threat-intel/registry/entities/saleor.json index e071a775..0426f571 100644 --- a/08-threat-intel/registry/entities/saleor.json +++ b/08-threat-intel/registry/entities/saleor.json @@ -21,7 +21,7 @@ ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "GitHub Saleor Advisories" ], diff --git a/08-threat-intel/registry/entities/shopware--repo--shopware-shopware.json b/08-threat-intel/registry/entities/shopware--repo--shopware-shopware.json index e3d57432..025b30a0 100644 --- a/08-threat-intel/registry/entities/shopware--repo--shopware-shopware.json +++ b/08-threat-intel/registry/entities/shopware--repo--shopware-shopware.json @@ -22,7 +22,7 @@ ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "GitHub Releases API", "Shopware Security Advisories" diff --git a/08-threat-intel/registry/entities/shopware.json b/08-threat-intel/registry/entities/shopware.json index 8b25473a..f6b80518 100644 --- a/08-threat-intel/registry/entities/shopware.json +++ b/08-threat-intel/registry/entities/shopware.json @@ -21,7 +21,7 @@ ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [ "Shopware Security Advisories" ], diff --git a/08-threat-intel/registry/entities/spring-boot--project--org-springframework-boot-spring-boot.json b/08-threat-intel/registry/entities/spring-boot--project--org-springframework-boot-spring-boot.json index e0e75181..036fa6e3 100644 --- a/08-threat-intel/registry/entities/spring-boot--project--org-springframework-boot-spring-boot.json +++ b/08-threat-intel/registry/entities/spring-boot--project--org-springframework-boot-spring-boot.json @@ -21,7 +21,7 @@ ], "version_sync_status": "green", "security_version_count": 22, - "last_version_synced_at": "2026-03-31T09:18:13+00:00", + "last_version_synced_at": "2026-04-01T09:20:46+00:00", "latest_version_evidence": [ "advisory-fixed-version", "https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-cm59-pr5q-cw85" diff --git a/08-threat-intel/registry/entities/spring-boot.json b/08-threat-intel/registry/entities/spring-boot.json index a6ca263f..71ea67c3 100644 --- a/08-threat-intel/registry/entities/spring-boot.json +++ b/08-threat-intel/registry/entities/spring-boot.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 22, - "last_version_synced_at": "2026-03-31T09:18:12+00:00", + "last_version_synced_at": "2026-04-01T09:20:45+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/spring-framework.json b/08-threat-intel/registry/entities/spring-framework.json index a77524a9..247b2c7c 100644 --- a/08-threat-intel/registry/entities/spring-framework.json +++ b/08-threat-intel/registry/entities/spring-framework.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:13+00:00", + "last_version_synced_at": "2026-04-01T09:20:46+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/spring-security--project--org-springframework-security-spring-security-web.json b/08-threat-intel/registry/entities/spring-security--project--org-springframework-security-spring-security-web.json index cb87c982..0881cd18 100644 --- a/08-threat-intel/registry/entities/spring-security--project--org-springframework-security-spring-security-web.json +++ b/08-threat-intel/registry/entities/spring-security--project--org-springframework-security-spring-security-web.json @@ -21,7 +21,7 @@ ], "version_sync_status": "green", "security_version_count": 92, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "latest_version_evidence": [ "advisory-fixed-version", "https://nvd.nist.gov/vuln/detail/CVE-2026-22732" diff --git a/08-threat-intel/registry/entities/spring-security.json b/08-threat-intel/registry/entities/spring-security.json index 46faec5d..1a35ad7d 100644 --- a/08-threat-intel/registry/entities/spring-security.json +++ b/08-threat-intel/registry/entities/spring-security.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 92, - "last_version_synced_at": "2026-03-31T09:18:13+00:00", + "last_version_synced_at": "2026-04-01T09:20:46+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/strapi--repo--strapi-strapi.json b/08-threat-intel/registry/entities/strapi--repo--strapi-strapi.json index 4a894aad..7f22b898 100644 --- a/08-threat-intel/registry/entities/strapi--repo--strapi-strapi.json +++ b/08-threat-intel/registry/entities/strapi--repo--strapi-strapi.json @@ -12,17 +12,18 @@ "repo_url": "https://github.com/strapi/strapi", "package_registry": "", "marketplace_url": "", - "latest_version": "5.40.0", + "latest_version": "5.41.0", "version_scheme": "semver-ish", - "latest_release_at": "2026-03-18T13:33:01Z", - "latest_release_url": "https://github.com/strapi/strapi/releases/tag/v5.40.0", + "latest_release_at": "2026-04-01T09:17:56Z", + "latest_release_url": "https://github.com/strapi/strapi/releases/tag/v5.41.0", "version_source_refs": [ "https://github.com/strapi/strapi/releases/tag/v5.40.0", - "https://github.com/login?return_to=%2Fstrapi%2Fstrapi" + "https://github.com/login?return_to=%2Fstrapi%2Fstrapi", + "https://github.com/strapi/strapi/releases/tag/v5.41.0" ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "latest_version_evidence": [ "GitHub Releases API", "Strapi GitHub Advisories" diff --git a/08-threat-intel/registry/entities/strapi.json b/08-threat-intel/registry/entities/strapi.json index e2e9093a..ea014bee 100644 --- a/08-threat-intel/registry/entities/strapi.json +++ b/08-threat-intel/registry/entities/strapi.json @@ -12,16 +12,16 @@ "repo_url": "", "package_registry": "", "marketplace_url": "", - "latest_version": "5.40.0", + "latest_version": "5.41.0", "version_scheme": "vendor", - "latest_release_at": "2026-03-18T13:33:01Z", - "latest_release_url": "https://github.com/strapi/strapi/releases/tag/v5.40.0", + "latest_release_at": "2026-04-01T09:17:56Z", + "latest_release_url": "https://github.com/strapi/strapi/releases/tag/v5.41.0", "version_source_refs": [ "https://github.com/login?return_to=%2Fstrapi%2Fstrapi" ], "version_sync_status": "green", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "latest_version_evidence": [ "Strapi GitHub Advisories" ], diff --git a/08-threat-intel/registry/entities/sveltekit--package--sveltejs-kit.json b/08-threat-intel/registry/entities/sveltekit--package--sveltejs-kit.json index 7a545c55..db5842b6 100644 --- a/08-threat-intel/registry/entities/sveltekit--package--sveltejs-kit.json +++ b/08-threat-intel/registry/entities/sveltekit--package--sveltejs-kit.json @@ -23,7 +23,7 @@ ], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/sveltejs/kit/security/advisories/GHSA-88qp-p4qg-rqm6", diff --git a/08-threat-intel/registry/entities/sveltekit.json b/08-threat-intel/registry/entities/sveltekit.json index 65dcb35b..01864907 100644 --- a/08-threat-intel/registry/entities/sveltekit.json +++ b/08-threat-intel/registry/entities/sveltekit.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/symfony--package--symfony-symfony.json b/08-threat-intel/registry/entities/symfony--package--symfony-symfony.json index 481c1620..edea8e81 100644 --- a/08-threat-intel/registry/entities/symfony--package--symfony-symfony.json +++ b/08-threat-intel/registry/entities/symfony--package--symfony-symfony.json @@ -12,9 +12,9 @@ "repo_url": "https://github.com/symfony/symfony", "package_registry": "https://packagist.org/packages/symfony/symfony", "marketplace_url": "", - "latest_version": "8.0.7", + "latest_version": "8.0.8", "version_scheme": "semver-ish", - "latest_release_at": "2026-03-06T16:59:05+00:00", + "latest_release_at": "2026-03-31T21:14:58+00:00", "latest_release_url": "https://packagist.org/packages/symfony/symfony", "version_source_refs": [ "https://packagist.org/packages/symfony/symfony", @@ -22,7 +22,7 @@ ], "version_sync_status": "green", "security_version_count": 220, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "latest_version_evidence": [ "Packagist p2", "https://github.com/symfony/symfony/security/advisories/GHSA-5pv8-ppvj-4h68" diff --git a/08-threat-intel/registry/entities/symfony.json b/08-threat-intel/registry/entities/symfony.json index e103a7dc..5deaddb9 100644 --- a/08-threat-intel/registry/entities/symfony.json +++ b/08-threat-intel/registry/entities/symfony.json @@ -12,14 +12,14 @@ "repo_url": "", "package_registry": "", "marketplace_url": "", - "latest_version": "8.0.7", + "latest_version": "8.0.8", "version_scheme": "vendor", - "latest_release_at": "2026-03-06T16:59:05+00:00", + "latest_release_at": "2026-03-31T21:14:58+00:00", "latest_release_url": "https://packagist.org/packages/symfony/symfony", "version_source_refs": [], "version_sync_status": "green", "security_version_count": 220, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/traefik--extension--github-com-traefik-traefik-v3.json b/08-threat-intel/registry/entities/traefik--extension--github-com-traefik-traefik-v3.json index 5b60d4f1..7bf4d07c 100644 --- a/08-threat-intel/registry/entities/traefik--extension--github-com-traefik-traefik-v3.json +++ b/08-threat-intel/registry/entities/traefik--extension--github-com-traefik-traefik-v3.json @@ -12,10 +12,10 @@ "repo_url": "https://github.com/traefik/traefik", "package_registry": "", "marketplace_url": "", - "latest_version": "3.7.0-ea.3", + "latest_version": "3.7.0-ea.2", "version_scheme": "semver-ish", - "latest_release_at": "2026-03-26T11:10:20Z", - "latest_release_url": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3", + "latest_release_at": "2026-03-23T18:56:07.286130Z", + "latest_release_url": "https://github.com/traefik/traefik/security/advisories/GHSA-wvvq-wgcr-9q48", "version_source_refs": [ "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.2", "https://github.com/traefik/traefik/security/advisories/GHSA-wvvq-wgcr-9q48", @@ -24,7 +24,7 @@ ], "version_sync_status": "green", "security_version_count": 8, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:50+00:00", "latest_version_evidence": [ "GitHub Releases API", "https://github.com/traefik/traefik/security/advisories/GHSA-wvvq-wgcr-9q48", diff --git a/08-threat-intel/registry/entities/traefik--repo--github-com-traefik-traefik-v3.json b/08-threat-intel/registry/entities/traefik--repo--github-com-traefik-traefik-v3.json index 45d52116..c21f2c1a 100644 --- a/08-threat-intel/registry/entities/traefik--repo--github-com-traefik-traefik-v3.json +++ b/08-threat-intel/registry/entities/traefik--repo--github-com-traefik-traefik-v3.json @@ -14,8 +14,8 @@ "marketplace_url": "", "latest_version": "3.7.0-ea.3", "version_scheme": "semver-ish", - "latest_release_at": "2026-03-26T11:10:20Z", - "latest_release_url": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3", + "latest_release_at": "2026-03-27T20:49:46.252668Z", + "latest_release_url": "https://github.com/traefik/traefik/security/advisories/GHSA-qr99-7898-vr7c", "version_source_refs": [ "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.2", "https://github.com/traefik/traefik/security/advisories/GHSA-gxrv-wf35-62w9", @@ -39,7 +39,7 @@ ], "version_sync_status": "green", "security_version_count": 63, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [ "GitHub Releases API", "https://github.com/traefik/traefik/security/advisories/GHSA-gxrv-wf35-62w9", diff --git a/08-threat-intel/registry/entities/traefik.json b/08-threat-intel/registry/entities/traefik.json index 51822e58..8c1960fd 100644 --- a/08-threat-intel/registry/entities/traefik.json +++ b/08-threat-intel/registry/entities/traefik.json @@ -12,14 +12,14 @@ "repo_url": "", "package_registry": "", "marketplace_url": "", - "latest_version": "3.7.0-ea.3", + "latest_version": "3.7.0-ea.2", "version_scheme": "vendor", - "latest_release_at": "2026-03-26T11:10:20Z", - "latest_release_url": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3", + "latest_release_at": "2026-03-23T18:56:07.286130Z", + "latest_release_url": "https://github.com/traefik/traefik/security/advisories/GHSA-wvvq-wgcr-9q48", "version_source_refs": [], "version_sync_status": "green", "security_version_count": 71, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:48+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/undici--extension--undici.json b/08-threat-intel/registry/entities/undici--extension--undici.json index 7f8c838b..942d0121 100644 --- a/08-threat-intel/registry/entities/undici--extension--undici.json +++ b/08-threat-intel/registry/entities/undici--extension--undici.json @@ -22,7 +22,7 @@ ], "version_sync_status": "green", "security_version_count": 4, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/nodejs/undici/security/advisories/GHSA-vrm6-8vpv-qv8q" diff --git a/08-threat-intel/registry/entities/undici--project--undici.json b/08-threat-intel/registry/entities/undici--project--undici.json index c3ba1cbf..0615d066 100644 --- a/08-threat-intel/registry/entities/undici--project--undici.json +++ b/08-threat-intel/registry/entities/undici--project--undici.json @@ -32,7 +32,7 @@ ], "version_sync_status": "green", "security_version_count": 21, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/nodejs/undici/security/advisories/GHSA-3cvr-822r-rqcc", diff --git a/08-threat-intel/registry/entities/undici.json b/08-threat-intel/registry/entities/undici.json index 4767c7e7..3677747f 100644 --- a/08-threat-intel/registry/entities/undici.json +++ b/08-threat-intel/registry/entities/undici.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 25, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/vite--extension--vite.json b/08-threat-intel/registry/entities/vite--extension--vite.json index c651c5dd..81941923 100644 --- a/08-threat-intel/registry/entities/vite--extension--vite.json +++ b/08-threat-intel/registry/entities/vite--extension--vite.json @@ -22,7 +22,7 @@ ], "version_sync_status": "green", "security_version_count": 8, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/vitejs/vite/security/advisories/GHSA-jqfw-vq24-v9c3" diff --git a/08-threat-intel/registry/entities/vite--module--vite.json b/08-threat-intel/registry/entities/vite--module--vite.json index 34e6e4af..0c78bdc1 100644 --- a/08-threat-intel/registry/entities/vite--module--vite.json +++ b/08-threat-intel/registry/entities/vite--module--vite.json @@ -22,7 +22,7 @@ ], "version_sync_status": "green", "security_version_count": 12, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/vitejs/vite/security/advisories/GHSA-64vr-g452-qvp3" diff --git a/08-threat-intel/registry/entities/vite--plugin--vite.json b/08-threat-intel/registry/entities/vite--plugin--vite.json index 8cb861f7..0dc954ae 100644 --- a/08-threat-intel/registry/entities/vite--plugin--vite.json +++ b/08-threat-intel/registry/entities/vite--plugin--vite.json @@ -24,7 +24,7 @@ ], "version_sync_status": "green", "security_version_count": 23, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/vitejs/vite/security/advisories/GHSA-vg6x-rcgg-rjx6", diff --git a/08-threat-intel/registry/entities/vite--project--vite.json b/08-threat-intel/registry/entities/vite--project--vite.json index 2ec7c18e..ba3875bb 100644 --- a/08-threat-intel/registry/entities/vite--project--vite.json +++ b/08-threat-intel/registry/entities/vite--project--vite.json @@ -32,7 +32,7 @@ ], "version_sync_status": "green", "security_version_count": 107, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [ "npm latest", "https://nvd.nist.gov/vuln/detail/CVE-2022-35204", diff --git a/08-threat-intel/registry/entities/vite.json b/08-threat-intel/registry/entities/vite.json index d8e657ff..e3db4005 100644 --- a/08-threat-intel/registry/entities/vite.json +++ b/08-threat-intel/registry/entities/vite.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 150, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/vue--project--vue.json b/08-threat-intel/registry/entities/vue--project--vue.json index f0dacdad..5567d8d0 100644 --- a/08-threat-intel/registry/entities/vue--project--vue.json +++ b/08-threat-intel/registry/entities/vue--project--vue.json @@ -22,7 +22,7 @@ ], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [ "npm latest", "https://nvd.nist.gov/vuln/detail/CVE-2024-9506" diff --git a/08-threat-intel/registry/entities/vue.json b/08-threat-intel/registry/entities/vue.json index 05dc649c..9df766d8 100644 --- a/08-threat-intel/registry/entities/vue.json +++ b/08-threat-intel/registry/entities/vue.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 2, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/webpack.json b/08-threat-intel/registry/entities/webpack.json index f5e8b366..1d8afe79 100644 --- a/08-threat-intel/registry/entities/webpack.json +++ b/08-threat-intel/registry/entities/webpack.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "source-gap", "security_version_count": 0, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/werkzeug--project--werkzeug.json b/08-threat-intel/registry/entities/werkzeug--project--werkzeug.json index d461b3dc..8d808cec 100644 --- a/08-threat-intel/registry/entities/werkzeug--project--werkzeug.json +++ b/08-threat-intel/registry/entities/werkzeug--project--werkzeug.json @@ -22,7 +22,7 @@ ], "version_sync_status": "green", "security_version_count": 22, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [ "npm latest", "https://github.com/pallets/werkzeug/security/advisories/GHSA-29vq-49wr-vm6x" diff --git a/08-threat-intel/registry/entities/werkzeug.json b/08-threat-intel/registry/entities/werkzeug.json index 15a784d7..e19a17a0 100644 --- a/08-threat-intel/registry/entities/werkzeug.json +++ b/08-threat-intel/registry/entities/werkzeug.json @@ -19,7 +19,7 @@ "version_source_refs": [], "version_sync_status": "green", "security_version_count": 22, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [], "catalog_source": "", "catalog_reason": "", diff --git a/08-threat-intel/registry/entities/woocommerce--repo--woocommerce-woocommerce.json b/08-threat-intel/registry/entities/woocommerce--repo--woocommerce-woocommerce.json index 0e9f6f48..848341c5 100644 --- a/08-threat-intel/registry/entities/woocommerce--repo--woocommerce-woocommerce.json +++ b/08-threat-intel/registry/entities/woocommerce--repo--woocommerce-woocommerce.json @@ -12,10 +12,10 @@ "repo_url": "https://github.com/woocommerce/woocommerce", "package_registry": "", "marketplace_url": "", - "latest_version": "10.6.1", + "latest_version": "10.7", "version_scheme": "semver-ish", "latest_release_at": "2026-03-12T19:14:25Z", - "latest_release_url": "https://github.com/woocommerce/woocommerce/releases/tag/10.6.1", + "latest_release_url": "https://developer.woocommerce.com/2026/02/16/hpos-sync-on-read-to-be-disabled-by-default-in-woocommerce-10-7/", "version_source_refs": [ "https://github.com/woocommerce/woocommerce/releases/tag/10.6.1", "https://patchstack.com/database/wordpress/plugin/wc-carta-docente/vulnerability/wordpress-ilghera-carta-docente-for-woocommerce-plugin-1-5-0-authenticated-administrator-path-traversal-to-arbitrary-file-deletion-via-cert-parameter-vulnerability", @@ -26,11 +26,12 @@ "https://patchstack.com/database/wordpress/plugin/reviewx/vulnerability/wordpress-reviewx-woocommerce-product-reviews-with-multi-criteria-reminder-emails-google-reviews-schema-more-plugin-2-2-12-unauthenticated-sensitive-information-exposure-to-data-export-vulnerability", "https://patchstack.com/database/wordpress/plugin/reviewx/vulnerability/wordpress-reviewx-woocommerce-product-reviews-with-multi-criteria-reminder-emails-google-reviews-schema-more-plugin-2-2-12-unauthenticated-sensitive-information-exposure-vulnerability", "https://patchstack.com/database/wordpress/plugin/woo-product-filter/vulnerability/wordpress-product-filter-for-woocommerce-by-wbw-plugin-3-1-2-missing-authorization-to-unauthenticated-filter-data-deletion-via-truncate-table-vulnerability", - "https://patchstack.com/database/wordpress/plugin/woo-custom-product-addons-pro/vulnerability/wordpress-woocommerce-custom-product-addons-pro-plugin-5-4-1-unauthenticated-remote-code-execution-via-custom-pricing-formula-vulnerability" + "https://patchstack.com/database/wordpress/plugin/woo-custom-product-addons-pro/vulnerability/wordpress-woocommerce-custom-product-addons-pro-plugin-5-4-1-unauthenticated-remote-code-execution-via-custom-pricing-formula-vulnerability", + "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability" ], "version_sync_status": "green", - "security_version_count": 1, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "security_version_count": 3, + "last_version_synced_at": "2026-04-01T09:20:55+00:00", "latest_version_evidence": [ "GitHub Releases API", "Patchstack Database", diff --git a/08-threat-intel/registry/entities/woocommerce.json b/08-threat-intel/registry/entities/woocommerce.json index 422c1cfc..9ede75ce 100644 --- a/08-threat-intel/registry/entities/woocommerce.json +++ b/08-threat-intel/registry/entities/woocommerce.json @@ -12,10 +12,10 @@ "repo_url": "", "package_registry": "", "marketplace_url": "", - "latest_version": "10.6.1", + "latest_version": "10.7", "version_scheme": "vendor", "latest_release_at": "2026-03-12T19:14:25Z", - "latest_release_url": "https://github.com/woocommerce/woocommerce/releases/tag/10.6.1", + "latest_release_url": "https://developer.woocommerce.com/2026/02/16/hpos-sync-on-read-to-be-disabled-by-default-in-woocommerce-10-7/", "version_source_refs": [ "https://developer.woocommerce.com/2026/02/16/hpos-sync-on-read-to-be-disabled-by-default-in-woocommerce-10-7/", "https://patchstack.com/database/wordpress/plugin/wc-carta-docente/vulnerability/wordpress-ilghera-carta-docente-for-woocommerce-plugin-1-5-0-authenticated-administrator-path-traversal-to-arbitrary-file-deletion-via-cert-parameter-vulnerability", @@ -25,11 +25,12 @@ "https://patchstack.com/database/wordpress/plugin/reviewx/vulnerability/wordpress-reviewx-woocommerce-product-reviews-with-multi-criteria-reminder-emails-google-reviews-schema-more-plugin-2-2-12-unauthenticated-sensitive-information-exposure-to-data-export-vulnerability", "https://patchstack.com/database/wordpress/plugin/reviewx/vulnerability/wordpress-reviewx-woocommerce-product-reviews-with-multi-criteria-reminder-emails-google-reviews-schema-more-plugin-2-2-12-unauthenticated-sensitive-information-exposure-vulnerability", "https://patchstack.com/database/wordpress/plugin/woo-product-filter/vulnerability/wordpress-product-filter-for-woocommerce-by-wbw-plugin-3-1-2-missing-authorization-to-unauthenticated-filter-data-deletion-via-truncate-table-vulnerability", - "https://patchstack.com/database/wordpress/plugin/woo-custom-product-addons-pro/vulnerability/wordpress-woocommerce-custom-product-addons-pro-plugin-5-4-1-unauthenticated-remote-code-execution-via-custom-pricing-formula-vulnerability" + "https://patchstack.com/database/wordpress/plugin/woo-custom-product-addons-pro/vulnerability/wordpress-woocommerce-custom-product-addons-pro-plugin-5-4-1-unauthenticated-remote-code-execution-via-custom-pricing-formula-vulnerability", + "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability" ], "version_sync_status": "green", - "security_version_count": 1, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "security_version_count": 3, + "last_version_synced_at": "2026-04-01T09:20:53+00:00", "latest_version_evidence": [ "Woo Developer Advisories", "Patchstack Database" diff --git a/08-threat-intel/registry/entities/wordpress.json b/08-threat-intel/registry/entities/wordpress.json index 3c28ed87..7e0d7f7e 100644 --- a/08-threat-intel/registry/entities/wordpress.json +++ b/08-threat-intel/registry/entities/wordpress.json @@ -12,10 +12,10 @@ "repo_url": "", "package_registry": "", "marketplace_url": "", - "latest_version": "7.9", + "latest_version": "51.1.53", "version_scheme": "vendor", "latest_release_at": "", - "latest_release_url": "https://wpscan.com/blog/object-injection-vulnerability-fixed-in-seopress-7-9/", + "latest_release_url": "https://patchstack.com/database/wordpress/plugin/king-addons/vulnerability/wordpress-king-addons-for-elementor-plugin-51-1-38-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-widgets-vulnerability", "version_source_refs": [ "https://wpscan.com/blog/object-injection-vulnerability-fixed-in-seopress-7-9/", "https://patchstack.com/database/wordpress/plugin/ft-rockpress/vulnerability/wordpress-rockpress-plugin-1-0-17-missing-authorization-to-authenticated-subscriber-arbitrary-modification-via-ajax-actions-vulnerability", @@ -82,11 +82,16 @@ "https://patchstack.com/database/wordpress/plugin/shared-files/vulnerability/wordpress-shared-files-plugin-1-7-58-contributor-arbitrary-file-download-vulnerability", "https://patchstack.com/database/wordpress/plugin/everest-forms-pro/vulnerability/wordpress-everest-forms-pro-plugin-1-9-12-unauthenticated-remote-code-execution-via-calculation-field-vulnerability", "https://patchstack.com/database/wordpress/plugin/fluent-booking/vulnerability/wordpress-fluent-booking-plugin-2-0-01-unauthenticated-stored-cross-site-scripting-via-multiple-parameters-vulnerability", - "https://patchstack.com/database/wordpress/plugin/gravitysmtp/vulnerability/wordpress-gravity-smtp-plugin-2-1-4-unauthenticated-sensitive-information-exposure-via-rest-api-vulnerability" + "https://patchstack.com/database/wordpress/plugin/gravitysmtp/vulnerability/wordpress-gravity-smtp-plugin-2-1-4-unauthenticated-sensitive-information-exposure-via-rest-api-vulnerability", + "https://patchstack.com/database/wordpress/plugin/king-addons/vulnerability/wordpress-king-addons-for-elementor-plugin-51-1-38-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-widgets-vulnerability", + "https://patchstack.com/database/wordpress/plugin/performance-monitor/vulnerability/wordpress-performance-monitor-plugin-1-0-6-unauthenticated-blind-ssrf-vulnerability", + "https://patchstack.com/database/wordpress/plugin/contact-form-entries/vulnerability/wordpress-database-for-contact-form-7-wpforms-elementor-forms-plugin-1-4-9-missing-authorization-to-authenticated-contributor-sensitive-information-exposure-via-shortcode-vulnerability", + "https://patchstack.com/database/wordpress/plugin/auto-post-scheduler/vulnerability/wordpress-auto-post-scheduler-plugin-1-84-cross-site-request-forgery-to-stored-cross-site-scripting-via-aps-options-page-vulnerability", + "https://patchstack.com/database/wordpress/plugin/ameliabooking/vulnerability/wordpress-amelia-plugin-2-1-2-authenticated-manager-sql-injection-via-sort-parameter-vulnerability" ], "version_sync_status": "green", "security_version_count": 56, - "last_version_synced_at": "2026-03-31T09:18:14+00:00", + "last_version_synced_at": "2026-04-01T09:20:55+00:00", "latest_version_evidence": [ "WPScan Vulnerability Database", "Patchstack Database", diff --git a/08-threat-intel/registry/monitoring/2026-04-01T09-20-10+00-00.json b/08-threat-intel/registry/monitoring/2026-04-01T09-20-10+00-00.json new file mode 100644 index 00000000..c9297e95 --- /dev/null +++ b/08-threat-intel/registry/monitoring/2026-04-01T09-20-10+00-00.json @@ -0,0 +1,10261 @@ +{ + "generated_at": "2026-04-01T09:20:10+00:00", + "source_catalog_audit": { + "generated_at": "2026-04-01T09:17:08+00:00", + "system_count": 62, + "source_count": 179, + "active_source_count": 102, + "retired_source_count": 77, + "systems_with_active_official": 61, + "systems_with_machine_readable_source": 61, + "systems": [ + { + "system_id": "adminer", + "display_name": "Adminer", + "category": "platforms", + "tier": "rolling-24m", + "source_total": 2, + "active_source_total": 1, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "adobe-commerce", + "display_name": "Adobe Commerce", + "category": "ecommerce", + "tier": "history-full", + "source_total": 5, + "active_source_total": 1, + "retired_source_total": 4, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 0, + "has_active_official": true, + "has_machine_readable_source": false + }, + { + "system_id": "angular", + "display_name": "Angular", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 2, + "active_source_total": 1, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "apache-httpd", + "display_name": "Apache HTTP Server", + "category": "servers", + "tier": "history-full", + "source_total": 3, + "active_source_total": 2, + "retired_source_total": 1, + "official_active": 2, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "apache-tomcat", + "display_name": "Apache Tomcat", + "category": "servers", + "tier": "history-full", + "source_total": 3, + "active_source_total": 2, + "retired_source_total": 1, + "official_active": 2, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "aspnet-core", + "display_name": "ASP.NET Core", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 2, + "active_source_total": 1, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "astro", + "display_name": "Astro", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 2, + "active_source_total": 1, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "caddy", + "display_name": "Caddy", + "category": "servers", + "tier": "rolling-24m", + "source_total": 2, + "active_source_total": 1, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "directus", + "display_name": "Directus", + "category": "cms", + "tier": "rolling-24m", + "source_total": 2, + "active_source_total": 2, + "retired_source_total": 0, + "official_active": 2, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "discourse", + "display_name": "Discourse", + "category": "cms", + "tier": "rolling-24m", + "source_total": 5, + "active_source_total": 3, + "retired_source_total": 2, + "official_active": 2, + "ecosystem_active": 1, + "research_active": 0, + "machine_readable_active": 3, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "django", + "display_name": "Django", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 4, + "active_source_total": 3, + "retired_source_total": 1, + "official_active": 3, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "drupal", + "display_name": "Drupal", + "category": "cms", + "tier": "history-full", + "source_total": 3, + "active_source_total": 2, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 1, + "research_active": 0, + "machine_readable_active": 2, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "echo", + "display_name": "Echo", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 1, + "active_source_total": 1, + "retired_source_total": 0, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "esbuild", + "display_name": "esbuild", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 3, + "active_source_total": 1, + "retired_source_total": 2, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "express", + "display_name": "Express", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 3, + "active_source_total": 1, + "retired_source_total": 2, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "fastify", + "display_name": "Fastify", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 2, + "active_source_total": 1, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "flask", + "display_name": "Flask", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 2, + "active_source_total": 1, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "ghost", + "display_name": "Ghost", + "category": "cms", + "tier": "history-full", + "source_total": 3, + "active_source_total": 2, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 1, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "gin", + "display_name": "Gin", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 1, + "active_source_total": 1, + "retired_source_total": 0, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "gitea", + "display_name": "Gitea", + "category": "platforms", + "tier": "rolling-24m", + "source_total": 2, + "active_source_total": 1, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "gitlab-ce", + "display_name": "GitLab CE", + "category": "platforms", + "tier": "rolling-24m", + "source_total": 4, + "active_source_total": 2, + "retired_source_total": 2, + "official_active": 1, + "ecosystem_active": 1, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "grafana", + "display_name": "Grafana", + "category": "platforms", + "tier": "rolling-24m", + "source_total": 2, + "active_source_total": 2, + "retired_source_total": 0, + "official_active": 2, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "hapi", + "display_name": "Hapi", + "category": "frameworks", + "tier": "history-full", + "source_total": 2, + "active_source_total": 1, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "haproxy", + "display_name": "HAProxy", + "category": "servers", + "tier": "rolling-24m", + "source_total": 3, + "active_source_total": 1, + "retired_source_total": 2, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "jenkins", + "display_name": "Jenkins", + "category": "platforms", + "tier": "rolling-24m", + "source_total": 3, + "active_source_total": 1, + "retired_source_total": 2, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "joomla", + "display_name": "Joomla", + "category": "cms", + "tier": "history-full", + "source_total": 3, + "active_source_total": 2, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 1, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "kibana", + "display_name": "Kibana", + "category": "platforms", + "tier": "rolling-24m", + "source_total": 3, + "active_source_total": 2, + "retired_source_total": 1, + "official_active": 2, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "koa", + "display_name": "Koa", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 2, + "active_source_total": 1, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "laravel", + "display_name": "Laravel", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 2, + "active_source_total": 1, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "magento-open-source", + "display_name": "Magento Open Source", + "category": "ecommerce", + "tier": "history-full", + "source_total": 4, + "active_source_total": 3, + "retired_source_total": 1, + "official_active": 2, + "ecosystem_active": 1, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "mattermost", + "display_name": "Mattermost", + "category": "platforms", + "tier": "rolling-24m", + "source_total": 4, + "active_source_total": 2, + "retired_source_total": 2, + "official_active": 1, + "ecosystem_active": 1, + "research_active": 0, + "machine_readable_active": 2, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "mediawiki", + "display_name": "MediaWiki", + "category": "cms", + "tier": "rolling-24m", + "source_total": 4, + "active_source_total": 2, + "retired_source_total": 2, + "official_active": 1, + "ecosystem_active": 1, + "research_active": 0, + "machine_readable_active": 2, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "medusa", + "display_name": "Medusa", + "category": "ecommerce", + "tier": "rolling-24m", + "source_total": 2, + "active_source_total": 1, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "moodle", + "display_name": "Moodle", + "category": "cms", + "tier": "rolling-24m", + "source_total": 3, + "active_source_total": 1, + "retired_source_total": 2, + "official_active": 0, + "ecosystem_active": 1, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": false, + "has_machine_readable_source": true + }, + { + "system_id": "nestjs", + "display_name": "NestJS", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 3, + "active_source_total": 1, + "retired_source_total": 2, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "nextjs", + "display_name": "Next.js", + "category": "frameworks", + "tier": "history-full", + "source_total": 3, + "active_source_total": 1, + "retired_source_total": 2, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "nginx", + "display_name": "Nginx", + "category": "servers", + "tier": "history-full", + "source_total": 3, + "active_source_total": 2, + "retired_source_total": 1, + "official_active": 2, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "nodejs", + "display_name": "Node.js", + "category": "frameworks", + "tier": "history-full", + "source_total": 2, + "active_source_total": 2, + "retired_source_total": 0, + "official_active": 2, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "nuxt", + "display_name": "Nuxt", + "category": "frameworks", + "tier": "history-full", + "source_total": 3, + "active_source_total": 1, + "retired_source_total": 2, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "opencart", + "display_name": "OpenCart", + "category": "ecommerce", + "tier": "history-full", + "source_total": 3, + "active_source_total": 2, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 1, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "openmage", + "display_name": "OpenMage / Mage-OS", + "category": "ecommerce", + "tier": "rolling-24m", + "source_total": 3, + "active_source_total": 2, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 1, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "phpmyadmin", + "display_name": "phpMyAdmin", + "category": "platforms", + "tier": "rolling-24m", + "source_total": 3, + "active_source_total": 2, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 1, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "prestashop", + "display_name": "PrestaShop", + "category": "ecommerce", + "tier": "history-full", + "source_total": 5, + "active_source_total": 4, + "retired_source_total": 1, + "official_active": 2, + "ecosystem_active": 2, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "rails", + "display_name": "Ruby on Rails", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 3, + "active_source_total": 1, + "retired_source_total": 2, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "react", + "display_name": "React", + "category": "frameworks", + "tier": "history-full", + "source_total": 3, + "active_source_total": 1, + "retired_source_total": 2, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "redmine", + "display_name": "Redmine", + "category": "platforms", + "tier": "rolling-24m", + "source_total": 3, + "active_source_total": 2, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 1, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "saleor", + "display_name": "Saleor", + "category": "ecommerce", + "tier": "rolling-24m", + "source_total": 3, + "active_source_total": 2, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 1, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "shopware", + "display_name": "Shopware", + "category": "ecommerce", + "tier": "history-full", + "source_total": 3, + "active_source_total": 2, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 1, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "spring-boot", + "display_name": "Spring Boot", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 3, + "active_source_total": 2, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 1, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "spring-framework", + "display_name": "Spring Framework", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 3, + "active_source_total": 2, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 1, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "spring-security", + "display_name": "Spring Security", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 3, + "active_source_total": 2, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 1, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "strapi", + "display_name": "Strapi", + "category": "cms", + "tier": "rolling-24m", + "source_total": 2, + "active_source_total": 2, + "retired_source_total": 0, + "official_active": 2, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "sveltekit", + "display_name": "SvelteKit", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 2, + "active_source_total": 1, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "symfony", + "display_name": "Symfony", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 2, + "active_source_total": 1, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "traefik", + "display_name": "Traefik", + "category": "servers", + "tier": "rolling-24m", + "source_total": 2, + "active_source_total": 1, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "undici", + "display_name": "Undici", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 3, + "active_source_total": 1, + "retired_source_total": 2, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "vite", + "display_name": "Vite", + "category": "frameworks", + "tier": "history-full", + "source_total": 3, + "active_source_total": 1, + "retired_source_total": 2, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "vue", + "display_name": "Vue", + "category": "frameworks", + "tier": "history-full", + "source_total": 3, + "active_source_total": 1, + "retired_source_total": 2, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "webpack", + "display_name": "webpack", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 3, + "active_source_total": 1, + "retired_source_total": 2, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "werkzeug", + "display_name": "Werkzeug", + "category": "frameworks", + "tier": "rolling-24m", + "source_total": 2, + "active_source_total": 1, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 0, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "woocommerce", + "display_name": "WooCommerce", + "category": "ecommerce", + "tier": "history-full", + "source_total": 6, + "active_source_total": 5, + "retired_source_total": 1, + "official_active": 2, + "ecosystem_active": 3, + "research_active": 0, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + }, + { + "system_id": "wordpress", + "display_name": "WordPress", + "category": "cms", + "tier": "history-full", + "source_total": 6, + "active_source_total": 5, + "retired_source_total": 1, + "official_active": 1, + "ecosystem_active": 3, + "research_active": 1, + "machine_readable_active": 1, + "has_active_official": true, + "has_machine_readable_source": true + } + ], + "retired_sources": [ + { + "system_id": "adminer", + "display_name": "Adminer", + "source_name": "NVD Adminer", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "OSV Adminer provides a machine-readable Packagist-aligned source, removing the need for NVD public search.", + "replacement_sources": [ + "OSV Adminer" + ], + "url": "" + }, + { + "system_id": "adobe-commerce", + "display_name": "Adobe Commerce", + "source_name": "Adobe Security Bulletins", + "bucket": "official_sources", + "kind": "html-links", + "retired_reason": "Original bulletin index probe was unstable under the old transport path; vendor index replacement uses explicit request policy and parser hints.", + "replacement_sources": [ + "Adobe Magento Security Index", + "NVD Adobe Commerce", + "GHSA Adobe Commerce" + ], + "url": "https://helpx.adobe.com/security/products/magento.html" + }, + { + "system_id": "adobe-commerce", + "display_name": "Adobe Commerce", + "source_name": "GHSA Adobe Commerce", + "bucket": "ecosystem_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; Adobe index and NVD remain active replacements.", + "replacement_sources": [ + "Adobe Magento Security Index", + "NVD Adobe Commerce" + ], + "url": "" + }, + { + "system_id": "adobe-commerce", + "display_name": "Adobe Commerce", + "source_name": "NVD Adobe Commerce", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "Adobe Magento Security Index is now the active official machine-readable source, so NVD public search is no longer needed for daily collection.", + "replacement_sources": [ + "Adobe Magento Security Index" + ], + "url": "" + }, + { + "system_id": "adobe-commerce", + "display_name": "Adobe Commerce", + "source_name": "Sansec Research", + "bucket": "ecosystem_sources", + "kind": "vendor-index", + "retired_reason": "Research index is too slow for daily active monitoring; GHSA Adobe Commerce provides a stable machine-readable replacement.", + "replacement_sources": [ + "GHSA Adobe Commerce", + "Adobe Magento Security Index" + ], + "url": "https://sansec.io/research" + }, + { + "system_id": "angular", + "display_name": "Angular", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Angular remains the active replacement source.", + "replacement_sources": [ + "OSV Angular" + ], + "url": "" + }, + { + "system_id": "apache-httpd", + "display_name": "Apache HTTP Server", + "source_name": "NVD Apache HTTP Server", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "Official Apache HTTPD advisories page plus CISA KEV are sufficient active sources for daily monitoring.", + "replacement_sources": [ + "Apache HTTPD Security", + "CISA KEV Apache HTTPD" + ], + "url": "" + }, + { + "system_id": "apache-tomcat", + "display_name": "Apache Tomcat", + "source_name": "NVD Tomcat", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "Official Tomcat advisories page plus CISA KEV are sufficient active sources for daily monitoring.", + "replacement_sources": [ + "Apache Tomcat Security", + "CISA KEV Tomcat" + ], + "url": "" + }, + { + "system_id": "aspnet-core", + "display_name": "ASP.NET Core", + "source_name": "NVD ASP.NET Core", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "OSV ASP.NET Core provides machine-readable NuGet-aligned coverage with lower latency than NVD public search.", + "replacement_sources": [ + "OSV ASP.NET Core" + ], + "url": "" + }, + { + "system_id": "astro", + "display_name": "Astro", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Astro remains the active replacement source.", + "replacement_sources": [ + "OSV Astro" + ], + "url": "" + }, + { + "system_id": "caddy", + "display_name": "Caddy", + "source_name": "GitHub Caddy Advisories", + "bucket": "official_sources", + "kind": "html-links", + "retired_reason": "OSV Caddy is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.", + "replacement_sources": [ + "OSV Caddy" + ], + "url": "https://github.com/caddyserver/caddy/security/advisories" + }, + { + "system_id": "discourse", + "display_name": "Discourse", + "source_name": "Discourse Meta Security", + "bucket": "official_sources", + "kind": "html-links", + "retired_reason": "Meta security category HTML changed and no longer provides stable scrape semantics for health checks.", + "replacement_sources": [ + "Discourse Release Notes RSS", + "GitHub Discourse Advisories" + ], + "url": "https://meta.discourse.org/c/bug/security/40" + }, + { + "system_id": "discourse", + "display_name": "Discourse", + "source_name": "GitHub Discourse Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; Discourse release feed remains the active official source.", + "replacement_sources": [ + "Discourse Release Notes RSS", + "Discourse Security RSS" + ], + "url": "" + }, + { + "system_id": "django", + "display_name": "Django", + "source_name": "Django Security RSS", + "bucket": "official_sources", + "kind": "rss-feed", + "retired_reason": "Official security tag feed became unstable; use official weblog index and release archive instead.", + "replacement_sources": [ + "Django Security Weblog", + "Django Security Releases Archive" + ], + "url": "https://www.djangoproject.com/weblog/feeds/tags/security/" + }, + { + "system_id": "drupal", + "display_name": "Drupal", + "source_name": "NVD Drupal", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "OSV Drupal + Drupal official RSS now cover machine-readable collection with lower cold-start latency than NVD public search.", + "replacement_sources": [ + "Drupal Security Advisories RSS", + "OSV Drupal" + ], + "url": "" + }, + { + "system_id": "esbuild", + "display_name": "esbuild", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV esbuild remains the active replacement source.", + "replacement_sources": [ + "OSV esbuild" + ], + "url": "" + }, + { + "system_id": "esbuild", + "display_name": "esbuild", + "source_name": "NVD esbuild", + "bucket": "ecosystem_sources", + "kind": "nvd-search", + "retired_reason": "OSV esbuild replaces NVD public search for lower-latency machine-readable collection.", + "replacement_sources": [ + "OSV esbuild" + ], + "url": "" + }, + { + "system_id": "express", + "display_name": "Express", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Express remains the active replacement source.", + "replacement_sources": [ + "OSV Express" + ], + "url": "" + }, + { + "system_id": "express", + "display_name": "Express", + "source_name": "NVD Express.js", + "bucket": "ecosystem_sources", + "kind": "nvd-search", + "retired_reason": "OSV Express replaces NVD public search for lower-latency machine-readable collection.", + "replacement_sources": [ + "OSV Express" + ], + "url": "" + }, + { + "system_id": "fastify", + "display_name": "Fastify", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Fastify remains the active replacement source.", + "replacement_sources": [ + "OSV Fastify" + ], + "url": "" + }, + { + "system_id": "flask", + "display_name": "Flask", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GitHub advisory API is quota-limited; OSV Flask remains the active machine-readable source.", + "replacement_sources": [ + "OSV Flask" + ], + "url": "" + }, + { + "system_id": "ghost", + "display_name": "Ghost", + "source_name": "NVD Ghost", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "OSV Ghost replaces NVD for machine-readable collection and keeps npm package alignment.", + "replacement_sources": [ + "Ghost GitHub Advisories", + "OSV Ghost" + ], + "url": "" + }, + { + "system_id": "gitea", + "display_name": "Gitea", + "source_name": "GitHub Gitea Advisories", + "bucket": "official_sources", + "kind": "html-links", + "retired_reason": "OSV Gitea is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.", + "replacement_sources": [ + "OSV Gitea" + ], + "url": "https://github.com/go-gitea/gitea/security/advisories" + }, + { + "system_id": "gitlab-ce", + "display_name": "GitLab CE", + "source_name": "GitLab Security Releases", + "bucket": "official_sources", + "kind": "html-links", + "retired_reason": "GitLab Security Releases Atom is the official machine-readable replacement; keeping both active adds duplicate cold-start cost without added coverage.", + "replacement_sources": [ + "GitLab Security Releases Atom" + ], + "url": "https://about.gitlab.com/releases/categories/releases/" + }, + { + "system_id": "gitlab-ce", + "display_name": "GitLab CE", + "source_name": "NVD GitLab", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "GitLab Security Releases Atom provides an official machine-readable feed, so NVD public search is no longer required.", + "replacement_sources": [ + "GitLab Security Releases", + "GitLab Security Releases Atom" + ], + "url": "" + }, + { + "system_id": "hapi", + "display_name": "Hapi", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Hapi remains the active replacement source.", + "replacement_sources": [ + "OSV Hapi" + ], + "url": "" + }, + { + "system_id": "haproxy", + "display_name": "HAProxy", + "source_name": "HAProxy Security Advisories", + "bucket": "official_sources", + "kind": "html-links", + "retired_reason": "Legacy haproxy.org security page no longer yields stable scrape results for monitoring.", + "replacement_sources": [ + "HAProxy Blog Feed" + ], + "url": "https://www.haproxy.org/security/" + }, + { + "system_id": "haproxy", + "display_name": "HAProxy", + "source_name": "NVD HAProxy", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "HAProxy Blog Feed is an active official RSS source, so NVD public search is no longer required.", + "replacement_sources": [ + "HAProxy Blog Feed" + ], + "url": "" + }, + { + "system_id": "jenkins", + "display_name": "Jenkins", + "source_name": "Jenkins Security Advisories", + "bucket": "official_sources", + "kind": "html-links", + "retired_reason": "Jenkins Security Advisories RSS is the official machine-readable replacement; keeping both active adds duplicate cold-start cost without added coverage.", + "replacement_sources": [ + "Jenkins Security Advisories RSS" + ], + "url": "https://www.jenkins.io/security/advisories/" + }, + { + "system_id": "jenkins", + "display_name": "Jenkins", + "source_name": "NVD Jenkins", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "Jenkins Security Advisories RSS provides an official machine-readable feed, replacing NVD public search.", + "replacement_sources": [ + "Jenkins Security Advisories", + "Jenkins Security Advisories RSS" + ], + "url": "" + }, + { + "system_id": "joomla", + "display_name": "Joomla", + "source_name": "NVD Joomla", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "OSV Joomla CMS replaces NVD for machine-readable collection without public NVD throttling.", + "replacement_sources": [ + "Joomla Security Centre", + "OSV Joomla" + ], + "url": "" + }, + { + "system_id": "kibana", + "display_name": "Kibana", + "source_name": "Elastic Security Announcements RSS", + "bucket": "official_sources", + "kind": "rss-feed", + "retired_reason": "Elastic Discuss RSS is frequently rate-limited by cloud_10_secs_limit during monitor/source-health bursts; use Elastic Product Security plus NVD Kibana for stable active coverage.", + "replacement_sources": [ + "Elastic Product Security", + "NVD Kibana" + ], + "url": "https://discuss.elastic.co/c/announcements/security-announcements/31.rss" + }, + { + "system_id": "koa", + "display_name": "Koa", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Koa remains the active replacement source.", + "replacement_sources": [ + "OSV Koa" + ], + "url": "" + }, + { + "system_id": "laravel", + "display_name": "Laravel", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GitHub advisory API is quota-limited; OSV Laravel remains the active machine-readable source.", + "replacement_sources": [ + "OSV Laravel" + ], + "url": "" + }, + { + "system_id": "magento-open-source", + "display_name": "Magento Open Source", + "source_name": "NVD Magento", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "OSV Magento Open Source plus Magento GitHub advisories replace NVD public search for machine-readable collection.", + "replacement_sources": [ + "Magento GitHub Advisories", + "OSV Magento Open Source" + ], + "url": "" + }, + { + "system_id": "mattermost", + "display_name": "Mattermost", + "source_name": "Mattermost Security Updates", + "bucket": "official_sources", + "kind": "html-links", + "retired_reason": "Mattermost security updates page returned repeated 403 responses from the collector path; NVD replacement remains active.", + "replacement_sources": [ + "NVD Mattermost" + ], + "url": "https://mattermost.com/security-updates/" + }, + { + "system_id": "mattermost", + "display_name": "Mattermost", + "source_name": "NVD Mattermost", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "Mattermost official JSON feed plus OSV Mattermost replace NVD for lower-latency machine-readable collection.", + "replacement_sources": [ + "Mattermost Security Updates JSON", + "OSV Mattermost" + ], + "url": "" + }, + { + "system_id": "mediawiki", + "display_name": "MediaWiki", + "source_name": "MediaWiki Security Releases", + "bucket": "official_sources", + "kind": "html-links", + "retired_reason": "MediaWiki security page is no longer reachable reliably from the collector path; NVD replacement remains active.", + "replacement_sources": [ + "MediaWiki Announce RSS", + "NVD MediaWiki" + ], + "url": "https://www.mediawiki.org/wiki/Security" + }, + { + "system_id": "mediawiki", + "display_name": "MediaWiki", + "source_name": "NVD MediaWiki", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "MediaWiki announce RSS plus OSV MediaWiki now replace NVD for lower-latency machine-readable collection.", + "replacement_sources": [ + "MediaWiki Announce RSS", + "OSV MediaWiki" + ], + "url": "" + }, + { + "system_id": "medusa", + "display_name": "Medusa", + "source_name": "GitHub Medusa Advisories", + "bucket": "official_sources", + "kind": "html-links", + "retired_reason": "OSV Medusa is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.", + "replacement_sources": [ + "OSV Medusa" + ], + "url": "https://github.com/medusajs/medusa/security/advisories" + }, + { + "system_id": "moodle", + "display_name": "Moodle", + "source_name": "Moodle Security News", + "bucket": "official_sources", + "kind": "html-links", + "retired_reason": "Security page is reachable with a browser-style UA, but the current markup only exposes generic \"Discuss this topic\" anchors to the collector; NVD Moodle remains the active replacement source until a richer parser is added.", + "replacement_sources": [ + "NVD Moodle" + ], + "url": "https://moodle.org/security/" + }, + { + "system_id": "moodle", + "display_name": "Moodle", + "source_name": "NVD Moodle", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "OSV Moodle replaces NVD for machine-readable collection while official Moodle sources remain for cross-checking.", + "replacement_sources": [ + "OSV Moodle" + ], + "url": "" + }, + { + "system_id": "nestjs", + "display_name": "NestJS", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV NestJS remains the active replacement source.", + "replacement_sources": [ + "OSV NestJS" + ], + "url": "" + }, + { + "system_id": "nestjs", + "display_name": "NestJS", + "source_name": "NVD NestJS", + "bucket": "ecosystem_sources", + "kind": "nvd-search", + "retired_reason": "OSV NestJS replaces NVD public search for lower-latency machine-readable collection.", + "replacement_sources": [ + "OSV NestJS" + ], + "url": "" + }, + { + "system_id": "nextjs", + "display_name": "Next.js", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; GitHub Next.js Advisories and OSV Next.js remain active replacements.", + "replacement_sources": [ + "GitHub Next.js Advisories", + "OSV Next.js" + ], + "url": "" + }, + { + "system_id": "nextjs", + "display_name": "Next.js", + "source_name": "GitHub Next.js Advisories", + "bucket": "official_sources", + "kind": "html-links", + "retired_reason": "OSV Next.js is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.", + "replacement_sources": [ + "OSV Next.js" + ], + "url": "https://github.com/vercel/next.js/security/advisories" + }, + { + "system_id": "nginx", + "display_name": "Nginx", + "source_name": "NVD NGINX", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "Official NGINX advisories page and CISA KEV together provide the needed daily signal without NVD public-search latency.", + "replacement_sources": [ + "NGINX Security Advisories", + "CISA KEV NGINX" + ], + "url": "" + }, + { + "system_id": "nuxt", + "display_name": "Nuxt", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; Nuxt Security and OSV Nuxt remain active replacements.", + "replacement_sources": [ + "Nuxt Security", + "OSV Nuxt" + ], + "url": "" + }, + { + "system_id": "nuxt", + "display_name": "Nuxt", + "source_name": "Nuxt Security", + "bucket": "official_sources", + "kind": "html-links", + "retired_reason": "OSV Nuxt is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.", + "replacement_sources": [ + "OSV Nuxt" + ], + "url": "https://github.com/nuxt/nuxt/security/advisories" + }, + { + "system_id": "opencart", + "display_name": "OpenCart", + "source_name": "NVD OpenCart", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "OSV OpenCart replaces NVD for machine-readable collection while official release source remains active.", + "replacement_sources": [ + "OpenCart Releases", + "OSV OpenCart" + ], + "url": "" + }, + { + "system_id": "openmage", + "display_name": "OpenMage / Mage-OS", + "source_name": "NVD OpenMage", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "OSV OpenMage replaces NVD for machine-readable composer-aligned collection.", + "replacement_sources": [ + "OpenMage GitHub Advisories", + "OSV OpenMage" + ], + "url": "" + }, + { + "system_id": "phpmyadmin", + "display_name": "phpMyAdmin", + "source_name": "NVD phpMyAdmin", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "OSV phpMyAdmin replaces NVD for machine-readable collection while the official security page remains active.", + "replacement_sources": [ + "phpMyAdmin Security Page", + "OSV phpMyAdmin" + ], + "url": "" + }, + { + "system_id": "prestashop", + "display_name": "PrestaShop", + "source_name": "NVD PrestaShop", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "OSV PrestaShop replaces NVD for machine-readable collection while official and ecosystem advisories remain active.", + "replacement_sources": [ + "PrestaShop Security Page", + "GitHub PrestaShop Advisories", + "OSV PrestaShop" + ], + "url": "" + }, + { + "system_id": "rails", + "display_name": "Ruby on Rails", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GitHub advisory API is quota-limited; OSV Rails remains the active machine-readable source.", + "replacement_sources": [ + "OSV Rails" + ], + "url": "" + }, + { + "system_id": "rails", + "display_name": "Ruby on Rails", + "source_name": "NVD Ruby on Rails", + "bucket": "ecosystem_sources", + "kind": "nvd-search", + "retired_reason": "OSV Rails replaces NVD public search for lower-latency machine-readable collection.", + "replacement_sources": [ + "OSV Rails" + ], + "url": "" + }, + { + "system_id": "react", + "display_name": "React", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; GitHub React Advisories and OSV React remain active replacements.", + "replacement_sources": [ + "GitHub React Advisories", + "OSV React" + ], + "url": "" + }, + { + "system_id": "react", + "display_name": "React", + "source_name": "GitHub React Advisories", + "bucket": "official_sources", + "kind": "html-links", + "retired_reason": "OSV React is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.", + "replacement_sources": [ + "OSV React" + ], + "url": "https://github.com/facebook/react/security/advisories" + }, + { + "system_id": "redmine", + "display_name": "Redmine", + "source_name": "NVD Redmine", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "Official Redmine advisories page remains active and NVD public search is retired to reduce cold-start latency.", + "replacement_sources": [ + "Redmine Security Advisories" + ], + "url": "" + }, + { + "system_id": "saleor", + "display_name": "Saleor", + "source_name": "NVD Saleor", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "OSV Saleor replaces NVD for machine-readable collection and aligns with the published PyPI package.", + "replacement_sources": [ + "GitHub Saleor Advisories", + "OSV Saleor" + ], + "url": "" + }, + { + "system_id": "shopware", + "display_name": "Shopware", + "source_name": "NVD Shopware", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "OSV Shopware replaces NVD for machine-readable collection with lower cold-start overhead.", + "replacement_sources": [ + "Shopware Security Advisories", + "OSV Shopware" + ], + "url": "" + }, + { + "system_id": "spring-boot", + "display_name": "Spring Boot", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GitHub advisory API is quota-limited; Spring official page and OSV remain the active replacements.", + "replacement_sources": [ + "Spring Security Advisories", + "OSV Spring Boot" + ], + "url": "" + }, + { + "system_id": "spring-framework", + "display_name": "Spring Framework", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; Spring official page and OSV remain the active replacements.", + "replacement_sources": [ + "Spring Security Advisories", + "OSV Spring Framework" + ], + "url": "" + }, + { + "system_id": "spring-security", + "display_name": "Spring Security", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GitHub advisory API is quota-limited; Spring official page and OSV remain the active replacements.", + "replacement_sources": [ + "Spring Security Advisories", + "OSV Spring Security" + ], + "url": "" + }, + { + "system_id": "sveltekit", + "display_name": "SvelteKit", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV SvelteKit remains the active replacement source.", + "replacement_sources": [ + "OSV SvelteKit" + ], + "url": "" + }, + { + "system_id": "symfony", + "display_name": "Symfony", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GitHub advisory API is quota-limited; OSV Symfony remains the active machine-readable source.", + "replacement_sources": [ + "OSV Symfony" + ], + "url": "" + }, + { + "system_id": "traefik", + "display_name": "Traefik", + "source_name": "GitHub Traefik Advisories", + "bucket": "official_sources", + "kind": "html-links", + "retired_reason": "OSV Traefik is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.", + "replacement_sources": [ + "OSV Traefik" + ], + "url": "https://github.com/traefik/traefik/security/advisories" + }, + { + "system_id": "undici", + "display_name": "Undici", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Undici remains the active replacement source.", + "replacement_sources": [ + "OSV Undici" + ], + "url": "" + }, + { + "system_id": "undici", + "display_name": "Undici", + "source_name": "NVD Undici", + "bucket": "ecosystem_sources", + "kind": "nvd-search", + "retired_reason": "OSV Undici replaces NVD public search for lower-latency machine-readable collection.", + "replacement_sources": [ + "OSV Undici" + ], + "url": "" + }, + { + "system_id": "vite", + "display_name": "Vite", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; Vite Security and OSV Vite remain active replacements.", + "replacement_sources": [ + "Vite Security", + "OSV Vite" + ], + "url": "" + }, + { + "system_id": "vite", + "display_name": "Vite", + "source_name": "Vite Security", + "bucket": "official_sources", + "kind": "html-links", + "retired_reason": "OSV Vite is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.", + "replacement_sources": [ + "OSV Vite" + ], + "url": "https://github.com/vitejs/vite/security/advisories" + }, + { + "system_id": "vue", + "display_name": "Vue", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; Vue Security and OSV Vue remain active replacements.", + "replacement_sources": [ + "Vue Security", + "OSV Vue" + ], + "url": "" + }, + { + "system_id": "vue", + "display_name": "Vue", + "source_name": "Vue Security", + "bucket": "official_sources", + "kind": "html-links", + "retired_reason": "OSV Vue is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.", + "replacement_sources": [ + "OSV Vue" + ], + "url": "https://github.com/vuejs/core/security" + }, + { + "system_id": "webpack", + "display_name": "webpack", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV webpack remains the active replacement source.", + "replacement_sources": [ + "OSV webpack" + ], + "url": "" + }, + { + "system_id": "webpack", + "display_name": "webpack", + "source_name": "NVD webpack", + "bucket": "ecosystem_sources", + "kind": "nvd-search", + "retired_reason": "OSV webpack replaces NVD public search for lower-latency machine-readable collection.", + "replacement_sources": [ + "OSV webpack" + ], + "url": "" + }, + { + "system_id": "werkzeug", + "display_name": "Werkzeug", + "source_name": "GitHub Global Advisories", + "bucket": "official_sources", + "kind": "ghsa-global", + "retired_reason": "Unauthenticated GitHub advisory API is quota-limited; OSV Werkzeug remains the active machine-readable source.", + "replacement_sources": [ + "OSV Werkzeug" + ], + "url": "" + }, + { + "system_id": "woocommerce", + "display_name": "WooCommerce", + "source_name": "NVD WooCommerce", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "OSV WooCommerce replaces NVD for machine-readable collection while official and ecosystem advisory pages remain active.", + "replacement_sources": [ + "Woo Developer Advisories", + "GitHub WooCommerce Advisories", + "OSV WooCommerce" + ], + "url": "" + }, + { + "system_id": "wordpress", + "display_name": "WordPress", + "source_name": "NVD WordPress", + "bucket": "official_sources", + "kind": "nvd-search", + "retired_reason": "WordPress official RSS plus ecosystem plugin intelligence cover active collection with lower cold-start latency and lower public-search dependence than NVD.", + "replacement_sources": [ + "WordPress Security News RSS", + "Wordfence Vulnerability Database", + "WPScan Vulnerability Database" + ], + "url": "" + } + ], + "replacement_map": [ + { + "system_id": "adminer", + "retired_source": "NVD Adminer", + "replacement_sources": [ + "OSV Adminer" + ] + }, + { + "system_id": "adobe-commerce", + "retired_source": "Adobe Security Bulletins", + "replacement_sources": [ + "Adobe Magento Security Index", + "NVD Adobe Commerce", + "GHSA Adobe Commerce" + ] + }, + { + "system_id": "adobe-commerce", + "retired_source": "GHSA Adobe Commerce", + "replacement_sources": [ + "Adobe Magento Security Index", + "NVD Adobe Commerce" + ] + }, + { + "system_id": "adobe-commerce", + "retired_source": "NVD Adobe Commerce", + "replacement_sources": [ + "Adobe Magento Security Index" + ] + }, + { + "system_id": "adobe-commerce", + "retired_source": "Sansec Research", + "replacement_sources": [ + "GHSA Adobe Commerce", + "Adobe Magento Security Index" + ] + }, + { + "system_id": "angular", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "OSV Angular" + ] + }, + { + "system_id": "apache-httpd", + "retired_source": "NVD Apache HTTP Server", + "replacement_sources": [ + "Apache HTTPD Security", + "CISA KEV Apache HTTPD" + ] + }, + { + "system_id": "apache-tomcat", + "retired_source": "NVD Tomcat", + "replacement_sources": [ + "Apache Tomcat Security", + "CISA KEV Tomcat" + ] + }, + { + "system_id": "aspnet-core", + "retired_source": "NVD ASP.NET Core", + "replacement_sources": [ + "OSV ASP.NET Core" + ] + }, + { + "system_id": "astro", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "OSV Astro" + ] + }, + { + "system_id": "caddy", + "retired_source": "GitHub Caddy Advisories", + "replacement_sources": [ + "OSV Caddy" + ] + }, + { + "system_id": "discourse", + "retired_source": "Discourse Meta Security", + "replacement_sources": [ + "Discourse Release Notes RSS", + "GitHub Discourse Advisories" + ] + }, + { + "system_id": "discourse", + "retired_source": "GitHub Discourse Advisories", + "replacement_sources": [ + "Discourse Release Notes RSS", + "Discourse Security RSS" + ] + }, + { + "system_id": "django", + "retired_source": "Django Security RSS", + "replacement_sources": [ + "Django Security Weblog", + "Django Security Releases Archive" + ] + }, + { + "system_id": "drupal", + "retired_source": "NVD Drupal", + "replacement_sources": [ + "Drupal Security Advisories RSS", + "OSV Drupal" + ] + }, + { + "system_id": "esbuild", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "OSV esbuild" + ] + }, + { + "system_id": "esbuild", + "retired_source": "NVD esbuild", + "replacement_sources": [ + "OSV esbuild" + ] + }, + { + "system_id": "express", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "OSV Express" + ] + }, + { + "system_id": "express", + "retired_source": "NVD Express.js", + "replacement_sources": [ + "OSV Express" + ] + }, + { + "system_id": "fastify", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "OSV Fastify" + ] + }, + { + "system_id": "flask", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "OSV Flask" + ] + }, + { + "system_id": "ghost", + "retired_source": "NVD Ghost", + "replacement_sources": [ + "Ghost GitHub Advisories", + "OSV Ghost" + ] + }, + { + "system_id": "gitea", + "retired_source": "GitHub Gitea Advisories", + "replacement_sources": [ + "OSV Gitea" + ] + }, + { + "system_id": "gitlab-ce", + "retired_source": "GitLab Security Releases", + "replacement_sources": [ + "GitLab Security Releases Atom" + ] + }, + { + "system_id": "gitlab-ce", + "retired_source": "NVD GitLab", + "replacement_sources": [ + "GitLab Security Releases", + "GitLab Security Releases Atom" + ] + }, + { + "system_id": "hapi", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "OSV Hapi" + ] + }, + { + "system_id": "haproxy", + "retired_source": "HAProxy Security Advisories", + "replacement_sources": [ + "HAProxy Blog Feed" + ] + }, + { + "system_id": "haproxy", + "retired_source": "NVD HAProxy", + "replacement_sources": [ + "HAProxy Blog Feed" + ] + }, + { + "system_id": "jenkins", + "retired_source": "Jenkins Security Advisories", + "replacement_sources": [ + "Jenkins Security Advisories RSS" + ] + }, + { + "system_id": "jenkins", + "retired_source": "NVD Jenkins", + "replacement_sources": [ + "Jenkins Security Advisories", + "Jenkins Security Advisories RSS" + ] + }, + { + "system_id": "joomla", + "retired_source": "NVD Joomla", + "replacement_sources": [ + "Joomla Security Centre", + "OSV Joomla" + ] + }, + { + "system_id": "kibana", + "retired_source": "Elastic Security Announcements RSS", + "replacement_sources": [ + "Elastic Product Security", + "NVD Kibana" + ] + }, + { + "system_id": "koa", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "OSV Koa" + ] + }, + { + "system_id": "laravel", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "OSV Laravel" + ] + }, + { + "system_id": "magento-open-source", + "retired_source": "NVD Magento", + "replacement_sources": [ + "Magento GitHub Advisories", + "OSV Magento Open Source" + ] + }, + { + "system_id": "mattermost", + "retired_source": "Mattermost Security Updates", + "replacement_sources": [ + "NVD Mattermost" + ] + }, + { + "system_id": "mattermost", + "retired_source": "NVD Mattermost", + "replacement_sources": [ + "Mattermost Security Updates JSON", + "OSV Mattermost" + ] + }, + { + "system_id": "mediawiki", + "retired_source": "MediaWiki Security Releases", + "replacement_sources": [ + "MediaWiki Announce RSS", + "NVD MediaWiki" + ] + }, + { + "system_id": "mediawiki", + "retired_source": "NVD MediaWiki", + "replacement_sources": [ + "MediaWiki Announce RSS", + "OSV MediaWiki" + ] + }, + { + "system_id": "medusa", + "retired_source": "GitHub Medusa Advisories", + "replacement_sources": [ + "OSV Medusa" + ] + }, + { + "system_id": "moodle", + "retired_source": "Moodle Security News", + "replacement_sources": [ + "NVD Moodle" + ] + }, + { + "system_id": "moodle", + "retired_source": "NVD Moodle", + "replacement_sources": [ + "OSV Moodle" + ] + }, + { + "system_id": "nestjs", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "OSV NestJS" + ] + }, + { + "system_id": "nestjs", + "retired_source": "NVD NestJS", + "replacement_sources": [ + "OSV NestJS" + ] + }, + { + "system_id": "nextjs", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "GitHub Next.js Advisories", + "OSV Next.js" + ] + }, + { + "system_id": "nextjs", + "retired_source": "GitHub Next.js Advisories", + "replacement_sources": [ + "OSV Next.js" + ] + }, + { + "system_id": "nginx", + "retired_source": "NVD NGINX", + "replacement_sources": [ + "NGINX Security Advisories", + "CISA KEV NGINX" + ] + }, + { + "system_id": "nuxt", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "Nuxt Security", + "OSV Nuxt" + ] + }, + { + "system_id": "nuxt", + "retired_source": "Nuxt Security", + "replacement_sources": [ + "OSV Nuxt" + ] + }, + { + "system_id": "opencart", + "retired_source": "NVD OpenCart", + "replacement_sources": [ + "OpenCart Releases", + "OSV OpenCart" + ] + }, + { + "system_id": "openmage", + "retired_source": "NVD OpenMage", + "replacement_sources": [ + "OpenMage GitHub Advisories", + "OSV OpenMage" + ] + }, + { + "system_id": "phpmyadmin", + "retired_source": "NVD phpMyAdmin", + "replacement_sources": [ + "phpMyAdmin Security Page", + "OSV phpMyAdmin" + ] + }, + { + "system_id": "prestashop", + "retired_source": "NVD PrestaShop", + "replacement_sources": [ + "PrestaShop Security Page", + "GitHub PrestaShop Advisories", + "OSV PrestaShop" + ] + }, + { + "system_id": "rails", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "OSV Rails" + ] + }, + { + "system_id": "rails", + "retired_source": "NVD Ruby on Rails", + "replacement_sources": [ + "OSV Rails" + ] + }, + { + "system_id": "react", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "GitHub React Advisories", + "OSV React" + ] + }, + { + "system_id": "react", + "retired_source": "GitHub React Advisories", + "replacement_sources": [ + "OSV React" + ] + }, + { + "system_id": "redmine", + "retired_source": "NVD Redmine", + "replacement_sources": [ + "Redmine Security Advisories" + ] + }, + { + "system_id": "saleor", + "retired_source": "NVD Saleor", + "replacement_sources": [ + "GitHub Saleor Advisories", + "OSV Saleor" + ] + }, + { + "system_id": "shopware", + "retired_source": "NVD Shopware", + "replacement_sources": [ + "Shopware Security Advisories", + "OSV Shopware" + ] + }, + { + "system_id": "spring-boot", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "Spring Security Advisories", + "OSV Spring Boot" + ] + }, + { + "system_id": "spring-framework", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "Spring Security Advisories", + "OSV Spring Framework" + ] + }, + { + "system_id": "spring-security", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "Spring Security Advisories", + "OSV Spring Security" + ] + }, + { + "system_id": "sveltekit", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "OSV SvelteKit" + ] + }, + { + "system_id": "symfony", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "OSV Symfony" + ] + }, + { + "system_id": "traefik", + "retired_source": "GitHub Traefik Advisories", + "replacement_sources": [ + "OSV Traefik" + ] + }, + { + "system_id": "undici", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "OSV Undici" + ] + }, + { + "system_id": "undici", + "retired_source": "NVD Undici", + "replacement_sources": [ + "OSV Undici" + ] + }, + { + "system_id": "vite", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "Vite Security", + "OSV Vite" + ] + }, + { + "system_id": "vite", + "retired_source": "Vite Security", + "replacement_sources": [ + "OSV Vite" + ] + }, + { + "system_id": "vue", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "Vue Security", + "OSV Vue" + ] + }, + { + "system_id": "vue", + "retired_source": "Vue Security", + "replacement_sources": [ + "OSV Vue" + ] + }, + { + "system_id": "webpack", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "OSV webpack" + ] + }, + { + "system_id": "webpack", + "retired_source": "NVD webpack", + "replacement_sources": [ + "OSV webpack" + ] + }, + { + "system_id": "werkzeug", + "retired_source": "GitHub Global Advisories", + "replacement_sources": [ + "OSV Werkzeug" + ] + }, + { + "system_id": "woocommerce", + "retired_source": "NVD WooCommerce", + "replacement_sources": [ + "Woo Developer Advisories", + "GitHub WooCommerce Advisories", + "OSV WooCommerce" + ] + }, + { + "system_id": "wordpress", + "retired_source": "NVD WordPress", + "replacement_sources": [ + "WordPress Security News RSS", + "Wordfence Vulnerability Database", + "WPScan Vulnerability Database" + ] + } + ] + }, + "source_health": { + "generated_at": "2026-04-01T09:20:10+00:00", + "active_source_count": 102, + "green_source_count": 102, + "failure_count": 0, + "all_green": true, + "last_fully_green_run": "2026-04-01T09:20:10+00:00", + "retries_performed": 0, + "probes": [ + { + "system_id": "adminer", + "source_name": "OSV Adminer", + "source_kind": "osv-batch", + "elapsed_seconds": 18.898, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "adobe-commerce", + "source_name": "Adobe Magento Security Index", + "source_kind": "vendor-index", + "elapsed_seconds": 0.028, + "kind": "vendor-index", + "items_seen": 46 + }, + { + "system_id": "angular", + "source_name": "OSV Angular", + "source_kind": "osv-batch", + "elapsed_seconds": 14.188, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "apache-httpd", + "source_name": "Apache HTTPD Security", + "source_kind": "html-links", + "elapsed_seconds": 14.188, + "kind": "html-links", + "items_seen": 182 + }, + { + "system_id": "apache-httpd", + "source_name": "CISA KEV Apache HTTPD", + "source_kind": "kev-json", + "elapsed_seconds": 14.188, + "kind": "kev-json", + "items_seen": 1555 + }, + { + "system_id": "apache-tomcat", + "source_name": "Apache Tomcat Security", + "source_kind": "html-links", + "elapsed_seconds": 14.188, + "kind": "html-links", + "items_seen": 270 + }, + { + "system_id": "apache-tomcat", + "source_name": "CISA KEV Tomcat", + "source_kind": "kev-json", + "elapsed_seconds": 14.188, + "kind": "kev-json", + "items_seen": 1555 + }, + { + "system_id": "aspnet-core", + "source_name": "OSV ASP.NET Core", + "source_kind": "osv-batch", + "elapsed_seconds": 18.898, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "astro", + "source_name": "OSV Astro", + "source_kind": "osv-batch", + "elapsed_seconds": 14.203, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "caddy", + "source_name": "OSV Caddy", + "source_kind": "osv-batch", + "elapsed_seconds": 18.498, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "directus", + "source_name": "Directus GitHub Advisories", + "source_kind": "html-links", + "elapsed_seconds": 0.032, + "kind": "html-links", + "items_seen": 127 + }, + { + "system_id": "directus", + "source_name": "OSV Directus", + "source_kind": "osv-batch", + "elapsed_seconds": 4.369, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "discourse", + "source_name": "Discourse Release Notes RSS", + "source_kind": "rss-feed", + "elapsed_seconds": 0.029, + "kind": "rss-feed", + "items_seen": 30 + }, + { + "system_id": "discourse", + "source_name": "Discourse Security RSS", + "source_kind": "rss-feed", + "elapsed_seconds": 0.029, + "kind": "rss-feed", + "items_seen": 3 + }, + { + "system_id": "discourse", + "source_name": "OSV Discourse", + "source_kind": "osv-batch", + "elapsed_seconds": 4.214, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "django", + "source_name": "Django Security Releases Archive", + "source_kind": "vendor-index", + "elapsed_seconds": 9.929, + "kind": "vendor-index", + "items_seen": 1276 + }, + { + "system_id": "django", + "source_name": "Django Security Weblog", + "source_kind": "vendor-index", + "elapsed_seconds": 9.908, + "kind": "vendor-index", + "items_seen": 332 + }, + { + "system_id": "django", + "source_name": "OSV Django", + "source_kind": "osv-batch", + "elapsed_seconds": 17.428, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "drupal", + "source_name": "Drupal Security Advisories RSS", + "source_kind": "rss-feed", + "elapsed_seconds": 0.035, + "kind": "rss-feed", + "items_seen": 20 + }, + { + "system_id": "drupal", + "source_name": "OSV Drupal", + "source_kind": "osv-batch", + "elapsed_seconds": 5.145, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "echo", + "source_name": "OSV Echo", + "source_kind": "osv-batch", + "elapsed_seconds": 18.876, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "esbuild", + "source_name": "OSV esbuild", + "source_kind": "osv-batch", + "elapsed_seconds": 14.357, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "express", + "source_name": "OSV Express", + "source_kind": "osv-batch", + "elapsed_seconds": 14.479, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "fastify", + "source_name": "OSV Fastify", + "source_kind": "osv-batch", + "elapsed_seconds": 13.602, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "flask", + "source_name": "OSV Flask", + "source_kind": "osv-batch", + "elapsed_seconds": 18.496, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "ghost", + "source_name": "Ghost GitHub Advisories", + "source_kind": "html-links", + "elapsed_seconds": 0.034, + "kind": "html-links", + "items_seen": 119 + }, + { + "system_id": "ghost", + "source_name": "OSV Ghost", + "source_kind": "osv-batch", + "elapsed_seconds": 4.608, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "gin", + "source_name": "OSV Gin", + "source_kind": "osv-batch", + "elapsed_seconds": 18.918, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "gitea", + "source_name": "OSV Gitea", + "source_kind": "osv-batch", + "elapsed_seconds": 19.771, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "gitlab-ce", + "source_name": "GitLab Advisory Database", + "source_kind": "html-links", + "elapsed_seconds": 14.357, + "kind": "html-links", + "items_seen": 5 + }, + { + "system_id": "gitlab-ce", + "source_name": "GitLab Security Releases Atom", + "source_kind": "atom-feed", + "elapsed_seconds": 14.357, + "kind": "atom-feed", + "items_seen": 187 + }, + { + "system_id": "grafana", + "source_name": "CISA KEV Grafana", + "source_kind": "kev-json", + "elapsed_seconds": 14.357, + "kind": "kev-json", + "items_seen": 1555 + }, + { + "system_id": "grafana", + "source_name": "Grafana Security Advisories", + "source_kind": "html-links", + "elapsed_seconds": 14.357, + "kind": "html-links", + "items_seen": 159 + }, + { + "system_id": "hapi", + "source_name": "OSV Hapi", + "source_kind": "osv-batch", + "elapsed_seconds": 14.205, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "haproxy", + "source_name": "HAProxy Blog Feed", + "source_kind": "rss-feed", + "elapsed_seconds": 14.205, + "kind": "rss-feed", + "items_seen": 10 + }, + { + "system_id": "jenkins", + "source_name": "Jenkins Security Advisories RSS", + "source_kind": "rss-feed", + "elapsed_seconds": 14.357, + "kind": "rss-feed", + "items_seen": 96 + }, + { + "system_id": "joomla", + "source_name": "Joomla Security Centre", + "source_kind": "html-links", + "elapsed_seconds": 0.035, + "kind": "html-links", + "items_seen": 146 + }, + { + "system_id": "joomla", + "source_name": "OSV Joomla", + "source_kind": "osv-batch", + "elapsed_seconds": 4.83, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "kibana", + "source_name": "Elastic Product Security", + "source_kind": "html-links", + "elapsed_seconds": 14.357, + "kind": "html-links", + "items_seen": 66 + }, + { + "system_id": "kibana", + "source_name": "NVD Kibana", + "source_kind": "nvd-search", + "elapsed_seconds": 18.9, + "kind": "nvd-search", + "items_seen": 1 + }, + { + "system_id": "koa", + "source_name": "OSV Koa", + "source_kind": "osv-batch", + "elapsed_seconds": 13.185, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "laravel", + "source_name": "OSV Laravel", + "source_kind": "osv-batch", + "elapsed_seconds": 14.359, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "magento-open-source", + "source_name": "Magento GitHub Advisories", + "source_kind": "html-links", + "elapsed_seconds": 0.021, + "kind": "html-links", + "items_seen": 99 + }, + { + "system_id": "magento-open-source", + "source_name": "OSV Magento Open Source", + "source_kind": "osv-batch", + "elapsed_seconds": 4.241, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "magento-open-source", + "source_name": "Sansec Research", + "source_kind": "html-links", + "elapsed_seconds": 0.021, + "kind": "html-links", + "items_seen": 136 + }, + { + "system_id": "mattermost", + "source_name": "Mattermost Security Updates JSON", + "source_kind": "json-feed", + "elapsed_seconds": 14.357, + "kind": "json-feed", + "items_seen": 594 + }, + { + "system_id": "mattermost", + "source_name": "OSV Mattermost", + "source_kind": "osv-batch", + "elapsed_seconds": 19.496, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "mediawiki", + "source_name": "MediaWiki Announce RSS", + "source_kind": "rss-feed", + "elapsed_seconds": 0.031, + "kind": "rss-feed", + "items_seen": 30 + }, + { + "system_id": "mediawiki", + "source_name": "OSV MediaWiki", + "source_kind": "osv-batch", + "elapsed_seconds": 4.372, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "medusa", + "source_name": "OSV Medusa", + "source_kind": "osv-batch", + "elapsed_seconds": 4.19, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "moodle", + "source_name": "OSV Moodle", + "source_kind": "osv-batch", + "elapsed_seconds": 7.956, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "nestjs", + "source_name": "OSV NestJS", + "source_kind": "osv-batch", + "elapsed_seconds": 13.185, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "nextjs", + "source_name": "OSV Next.js", + "source_kind": "osv-batch", + "elapsed_seconds": 4.821, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "nginx", + "source_name": "CISA KEV NGINX", + "source_kind": "kev-json", + "elapsed_seconds": 14.188, + "kind": "kev-json", + "items_seen": 1555 + }, + { + "system_id": "nginx", + "source_name": "NGINX Security Advisories", + "source_kind": "html-links", + "elapsed_seconds": 14.188, + "kind": "html-links", + "items_seen": 150 + }, + { + "system_id": "nodejs", + "source_name": "CISA KEV Node.js", + "source_kind": "kev-json", + "elapsed_seconds": 13.176, + "kind": "kev-json", + "items_seen": 1555 + }, + { + "system_id": "nodejs", + "source_name": "Node.js Security Releases", + "source_kind": "html-links", + "elapsed_seconds": 4.575, + "kind": "html-links", + "items_seen": 73 + }, + { + "system_id": "nuxt", + "source_name": "OSV Nuxt", + "source_kind": "osv-batch", + "elapsed_seconds": 9.908, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "opencart", + "source_name": "OSV OpenCart", + "source_kind": "osv-batch", + "elapsed_seconds": 6.748, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "opencart", + "source_name": "OpenCart Releases", + "source_kind": "html-links", + "elapsed_seconds": 0.011, + "kind": "html-links", + "items_seen": 1500 + }, + { + "system_id": "openmage", + "source_name": "OSV OpenMage", + "source_kind": "osv-batch", + "elapsed_seconds": 4.899, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "openmage", + "source_name": "OpenMage GitHub Advisories", + "source_kind": "html-links", + "elapsed_seconds": 0.018, + "kind": "html-links", + "items_seen": 125 + }, + { + "system_id": "phpmyadmin", + "source_name": "OSV phpMyAdmin", + "source_kind": "osv-batch", + "elapsed_seconds": 19.322, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "phpmyadmin", + "source_name": "phpMyAdmin Security Page", + "source_kind": "html-links", + "elapsed_seconds": 14.205, + "kind": "html-links", + "items_seen": 263 + }, + { + "system_id": "prestashop", + "source_name": "Friends Of Presta Security", + "source_kind": "html-links", + "elapsed_seconds": 0.013, + "kind": "html-links", + "items_seen": 38 + }, + { + "system_id": "prestashop", + "source_name": "GitHub PrestaShop Advisories", + "source_kind": "html-links", + "elapsed_seconds": 0.014, + "kind": "html-links", + "items_seen": 127 + }, + { + "system_id": "prestashop", + "source_name": "OSV PrestaShop", + "source_kind": "osv-batch", + "elapsed_seconds": 4.35, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "prestashop", + "source_name": "PrestaShop Security Page", + "source_kind": "html-links", + "elapsed_seconds": 0.014, + "kind": "html-links", + "items_seen": 60 + }, + { + "system_id": "rails", + "source_name": "OSV Rails", + "source_kind": "osv-batch", + "elapsed_seconds": 18.898, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "react", + "source_name": "OSV React", + "source_kind": "osv-batch", + "elapsed_seconds": 4.231, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "redmine", + "source_name": "OSV Redmine", + "source_kind": "osv-batch", + "elapsed_seconds": 19.059, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "redmine", + "source_name": "Redmine Security Advisories", + "source_kind": "html-links", + "elapsed_seconds": 14.359, + "kind": "html-links", + "items_seen": 371 + }, + { + "system_id": "saleor", + "source_name": "GitHub Saleor Advisories", + "source_kind": "html-links", + "elapsed_seconds": 0.004, + "kind": "html-links", + "items_seen": 120 + }, + { + "system_id": "saleor", + "source_name": "OSV Saleor", + "source_kind": "osv-batch", + "elapsed_seconds": 4.195, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "shopware", + "source_name": "OSV Shopware", + "source_kind": "osv-batch", + "elapsed_seconds": 4.388, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "shopware", + "source_name": "Shopware Security Advisories", + "source_kind": "html-links", + "elapsed_seconds": 0.013, + "kind": "html-links", + "items_seen": 129 + }, + { + "system_id": "spring-boot", + "source_name": "OSV Spring Boot", + "source_kind": "osv-batch", + "elapsed_seconds": 14.206, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "spring-boot", + "source_name": "Spring Security Advisories", + "source_kind": "html-links", + "elapsed_seconds": 5.161, + "kind": "html-links", + "items_seen": 118 + }, + { + "system_id": "spring-framework", + "source_name": "OSV Spring Framework", + "source_kind": "osv-batch", + "elapsed_seconds": 13.224, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "spring-framework", + "source_name": "Spring Security Advisories", + "source_kind": "html-links", + "elapsed_seconds": 4.881, + "kind": "html-links", + "items_seen": 118 + }, + { + "system_id": "spring-security", + "source_name": "OSV Spring Security", + "source_kind": "osv-batch", + "elapsed_seconds": 14.359, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "spring-security", + "source_name": "Spring Security Advisories", + "source_kind": "html-links", + "elapsed_seconds": 5.11, + "kind": "html-links", + "items_seen": 118 + }, + { + "system_id": "strapi", + "source_name": "OSV Strapi", + "source_kind": "osv-batch", + "elapsed_seconds": 14.412, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "strapi", + "source_name": "Strapi GitHub Advisories", + "source_kind": "html-links", + "elapsed_seconds": 0.033, + "kind": "html-links", + "items_seen": 124 + }, + { + "system_id": "sveltekit", + "source_name": "OSV SvelteKit", + "source_kind": "osv-batch", + "elapsed_seconds": 13.966, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "symfony", + "source_name": "OSV Symfony", + "source_kind": "osv-batch", + "elapsed_seconds": 14.75, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "traefik", + "source_name": "OSV Traefik", + "source_kind": "osv-batch", + "elapsed_seconds": 19.052, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "undici", + "source_name": "OSV Undici", + "source_kind": "osv-batch", + "elapsed_seconds": 14.206, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "vite", + "source_name": "OSV Vite", + "source_kind": "osv-batch", + "elapsed_seconds": 14.346, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "vue", + "source_name": "OSV Vue", + "source_kind": "osv-batch", + "elapsed_seconds": 3.14, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "webpack", + "source_name": "OSV webpack", + "source_kind": "osv-batch", + "elapsed_seconds": 14.479, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "werkzeug", + "source_name": "OSV Werkzeug", + "source_kind": "osv-batch", + "elapsed_seconds": 18.497, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "woocommerce", + "source_name": "GitHub WooCommerce Advisories", + "source_kind": "html-links", + "elapsed_seconds": 0.016, + "kind": "html-links", + "items_seen": 107 + }, + { + "system_id": "woocommerce", + "source_name": "OSV WooCommerce", + "source_kind": "osv-batch", + "elapsed_seconds": 4.834, + "kind": "osv-batch", + "items_seen": 1 + }, + { + "system_id": "woocommerce", + "source_name": "Patchstack Database", + "source_kind": "html-links", + "elapsed_seconds": 0.016, + "kind": "html-links", + "items_seen": 193 + }, + { + "system_id": "woocommerce", + "source_name": "Woo Developer Advisories", + "source_kind": "html-links", + "elapsed_seconds": 0.018, + "kind": "html-links", + "items_seen": 121 + }, + { + "system_id": "woocommerce", + "source_name": "Wordfence Vulnerability Database", + "source_kind": "html-links", + "elapsed_seconds": 0.014, + "kind": "html-links", + "items_seen": 0 + }, + { + "system_id": "wordpress", + "source_name": "Patchstack Database", + "source_kind": "html-links", + "elapsed_seconds": 0.036, + "kind": "html-links", + "items_seen": 193 + }, + { + "system_id": "wordpress", + "source_name": "PortSwigger Research", + "source_kind": "html-links", + "elapsed_seconds": 5.197, + "kind": "html-links", + "items_seen": 99 + }, + { + "system_id": "wordpress", + "source_name": "WPScan Vulnerability Database", + "source_kind": "html-links", + "elapsed_seconds": 0.036, + "kind": "html-links", + "items_seen": 74 + }, + { + "system_id": "wordpress", + "source_name": "WordPress Security News RSS", + "source_kind": "rss-feed", + "elapsed_seconds": 0.038, + "kind": "rss-feed", + "items_seen": 10 + }, + { + "system_id": "wordpress", + "source_name": "Wordfence Vulnerability Database", + "source_kind": "html-links", + "elapsed_seconds": 0.038, + "kind": "html-links", + "items_seen": 0 + } + ], + "failures": [], + "slow_sources": [ + { + "system_id": "gitea", + "source_name": "OSV Gitea", + "source_kind": "osv-batch", + "elapsed_seconds": 19.771, + "status": "ok" + }, + { + "system_id": "mattermost", + "source_name": "OSV Mattermost", + "source_kind": "osv-batch", + "elapsed_seconds": 19.496, + "status": "ok" + }, + { + "system_id": "phpmyadmin", + "source_name": "OSV phpMyAdmin", + "source_kind": "osv-batch", + "elapsed_seconds": 19.322, + "status": "ok" + }, + { + "system_id": "redmine", + "source_name": "OSV Redmine", + "source_kind": "osv-batch", + "elapsed_seconds": 19.059, + "status": "ok" + }, + { + "system_id": "traefik", + "source_name": "OSV Traefik", + "source_kind": "osv-batch", + "elapsed_seconds": 19.052, + "status": "ok" + }, + { + "system_id": "gin", + "source_name": "OSV Gin", + "source_kind": "osv-batch", + "elapsed_seconds": 18.918, + "status": "ok" + }, + { + "system_id": "kibana", + "source_name": "NVD Kibana", + "source_kind": "nvd-search", + "elapsed_seconds": 18.9, + "status": "ok" + }, + { + "system_id": "adminer", + "source_name": "OSV Adminer", + "source_kind": "osv-batch", + "elapsed_seconds": 18.898, + "status": "ok" + }, + { + "system_id": "aspnet-core", + "source_name": "OSV ASP.NET Core", + "source_kind": "osv-batch", + "elapsed_seconds": 18.898, + "status": "ok" + }, + { + "system_id": "rails", + "source_name": "OSV Rails", + "source_kind": "osv-batch", + "elapsed_seconds": 18.898, + "status": "ok" + } + ], + "systems": [ + { + "system_id": "adminer", + "display_name": "Adminer", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "adobe-commerce", + "display_name": "Adobe Commerce", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "angular", + "display_name": "Angular", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "apache-httpd", + "display_name": "Apache HTTP Server", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "apache-tomcat", + "display_name": "Apache Tomcat", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "aspnet-core", + "display_name": "ASP.NET Core", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "astro", + "display_name": "Astro", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "caddy", + "display_name": "Caddy", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "directus", + "display_name": "Directus", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "discourse", + "display_name": "Discourse", + "active_source_total": 3, + "green_source_total": 3, + "failure_count": 0 + }, + { + "system_id": "django", + "display_name": "Django", + "active_source_total": 3, + "green_source_total": 3, + "failure_count": 0 + }, + { + "system_id": "drupal", + "display_name": "Drupal", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "echo", + "display_name": "Echo", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "esbuild", + "display_name": "esbuild", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "express", + "display_name": "Express", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "fastify", + "display_name": "Fastify", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "flask", + "display_name": "Flask", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "ghost", + "display_name": "Ghost", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "gin", + "display_name": "Gin", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "gitea", + "display_name": "Gitea", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "gitlab-ce", + "display_name": "GitLab CE", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "grafana", + "display_name": "Grafana", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "hapi", + "display_name": "Hapi", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "haproxy", + "display_name": "HAProxy", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "jenkins", + "display_name": "Jenkins", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "joomla", + "display_name": "Joomla", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "kibana", + "display_name": "Kibana", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "koa", + "display_name": "Koa", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "laravel", + "display_name": "Laravel", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "magento-open-source", + "display_name": "Magento Open Source", + "active_source_total": 3, + "green_source_total": 3, + "failure_count": 0 + }, + { + "system_id": "mattermost", + "display_name": "Mattermost", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "mediawiki", + "display_name": "MediaWiki", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "medusa", + "display_name": "Medusa", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "moodle", + "display_name": "Moodle", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "nestjs", + "display_name": "NestJS", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "nextjs", + "display_name": "Next.js", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "nginx", + "display_name": "Nginx", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "nodejs", + "display_name": "Node.js", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "nuxt", + "display_name": "Nuxt", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "opencart", + "display_name": "OpenCart", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "openmage", + "display_name": "OpenMage / Mage-OS", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "phpmyadmin", + "display_name": "phpMyAdmin", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "prestashop", + "display_name": "PrestaShop", + "active_source_total": 4, + "green_source_total": 4, + "failure_count": 0 + }, + { + "system_id": "rails", + "display_name": "Ruby on Rails", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "react", + "display_name": "React", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "redmine", + "display_name": "Redmine", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "saleor", + "display_name": "Saleor", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "shopware", + "display_name": "Shopware", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "spring-boot", + "display_name": "Spring Boot", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "spring-framework", + "display_name": "Spring Framework", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "spring-security", + "display_name": "Spring Security", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "strapi", + "display_name": "Strapi", + "active_source_total": 2, + "green_source_total": 2, + "failure_count": 0 + }, + { + "system_id": "sveltekit", + "display_name": "SvelteKit", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "symfony", + "display_name": "Symfony", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "traefik", + "display_name": "Traefik", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "undici", + "display_name": "Undici", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "vite", + "display_name": "Vite", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "vue", + "display_name": "Vue", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "webpack", + "display_name": "webpack", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "werkzeug", + "display_name": "Werkzeug", + "active_source_total": 1, + "green_source_total": 1, + "failure_count": 0 + }, + { + "system_id": "woocommerce", + "display_name": "WooCommerce", + "active_source_total": 5, + "green_source_total": 5, + "failure_count": 0 + }, + { + "system_id": "wordpress", + "display_name": "WordPress", + "active_source_total": 5, + "green_source_total": 5, + "failure_count": 0 + } + ] + }, + "alerts": [ + { + "alert_id": "adminer::OSV Adminer", + "system_id": "adminer", + "display_name": "Adminer", + "source_name": "OSV Adminer", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "adminer", + "display_name": "Adminer", + "source_name": "OSV Adminer", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "adminer::OSV Adminer::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "adobe-commerce::Adobe Magento Security Index", + "system_id": "adobe-commerce", + "display_name": "Adobe Commerce", + "source_name": "Adobe Magento Security Index", + "source_kind": "vendor-index", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "adobe-commerce", + "display_name": "Adobe Commerce", + "source_name": "Adobe Magento Security Index", + "source_kind": "vendor-index", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='helpx.adobe.com', port=443): Max retries exceeded with url: /security/products/magento.html (Caused by NameResolutionError(\"HTTPSConnection(host='helpx.adobe.com', port=443): Failed to resolve 'helpx.adobe.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://helpx.adobe.com/security/products/magento.html", + "summary": "adobe-commerce::Adobe Magento Security Index::network::HTTPSConnectionPool(host='helpx.adobe.com', port=443): Max retries exceeded with url: /security/products/magento.html (Caused by NameResolutionError(\"HTTPSConnection(host='helpx.adobe.com', port=443): Failed to resolve 'helpx.adobe.com' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "angular::OSV Angular", + "system_id": "angular", + "display_name": "Angular", + "source_name": "OSV Angular", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "angular", + "display_name": "Angular", + "source_name": "OSV Angular", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "angular::OSV Angular::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "apache-httpd::Apache HTTPD Security", + "system_id": "apache-httpd", + "display_name": "Apache HTTP Server", + "source_name": "Apache HTTPD Security", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "apache-httpd", + "display_name": "Apache HTTP Server", + "source_name": "Apache HTTPD Security", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='httpd.apache.org', port=443): Max retries exceeded with url: /security/vulnerabilities_24.html (Caused by NameResolutionError(\"HTTPSConnection(host='httpd.apache.org', port=443): Failed to resolve 'httpd.apache.org' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://httpd.apache.org/security/vulnerabilities_24.html", + "summary": "apache-httpd::Apache HTTPD Security::network::HTTPSConnectionPool(host='httpd.apache.org', port=443): Max retries exceeded with url: /security/vulnerabilities_24.html (Caused by NameResolutionError(\"HTTPSConnection(host='httpd.apache.org', port=443): Failed to resolve 'httpd.apache.org' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "apache-httpd::CISA KEV Apache HTTPD", + "system_id": "apache-httpd", + "display_name": "Apache HTTP Server", + "source_name": "CISA KEV Apache HTTPD", + "source_kind": "kev-json", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "apache-httpd", + "display_name": "Apache HTTP Server", + "source_name": "CISA KEV Apache HTTPD", + "source_kind": "kev-json", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='www.cisa.gov', port=443): Max retries exceeded with url: /sites/default/files/feeds/known_exploited_vulnerabilities.json (Caused by NameResolutionError(\"HTTPSConnection(host='www.cisa.gov', port=443): Failed to resolve 'www.cisa.gov' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json", + "summary": "apache-httpd::CISA KEV Apache HTTPD::network::HTTPSConnectionPool(host='www.cisa.gov', port=443): Max retries exceeded with url: /sites/default/files/feeds/known_exploited_vulnerabilities.json (Caused by NameResolutionError(\"HTTPSConnection(host='www.cisa.gov', port=443): Failed to resolve 'www.cisa.gov' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "apache-tomcat::Apache Tomcat Security", + "system_id": "apache-tomcat", + "display_name": "Apache Tomcat", + "source_name": "Apache Tomcat Security", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "apache-tomcat", + "display_name": "Apache Tomcat", + "source_name": "Apache Tomcat Security", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='tomcat.apache.org', port=443): Max retries exceeded with url: /security-10.html (Caused by NameResolutionError(\"HTTPSConnection(host='tomcat.apache.org', port=443): Failed to resolve 'tomcat.apache.org' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://tomcat.apache.org/security-10.html", + "summary": "apache-tomcat::Apache Tomcat Security::network::HTTPSConnectionPool(host='tomcat.apache.org', port=443): Max retries exceeded with url: /security-10.html (Caused by NameResolutionError(\"HTTPSConnection(host='tomcat.apache.org', port=443): Failed to resolve 'tomcat.apache.org' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "apache-tomcat::CISA KEV Tomcat", + "system_id": "apache-tomcat", + "display_name": "Apache Tomcat", + "source_name": "CISA KEV Tomcat", + "source_kind": "kev-json", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "apache-tomcat", + "display_name": "Apache Tomcat", + "source_name": "CISA KEV Tomcat", + "source_kind": "kev-json", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='www.cisa.gov', port=443): Max retries exceeded with url: /sites/default/files/feeds/known_exploited_vulnerabilities.json (Caused by NameResolutionError(\"HTTPSConnection(host='www.cisa.gov', port=443): Failed to resolve 'www.cisa.gov' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json", + "summary": "apache-tomcat::CISA KEV Tomcat::network::HTTPSConnectionPool(host='www.cisa.gov', port=443): Max retries exceeded with url: /sites/default/files/feeds/known_exploited_vulnerabilities.json (Caused by NameResolutionError(\"HTTPSConnection(host='www.cisa.gov', port=443): Failed to resolve 'www.cisa.gov' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "aspnet-core::OSV ASP.NET Core", + "system_id": "aspnet-core", + "display_name": "ASP.NET Core", + "source_name": "OSV ASP.NET Core", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "aspnet-core", + "display_name": "ASP.NET Core", + "source_name": "OSV ASP.NET Core", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "aspnet-core::OSV ASP.NET Core::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "astro::OSV Astro", + "system_id": "astro", + "display_name": "Astro", + "source_name": "OSV Astro", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "astro", + "display_name": "Astro", + "source_name": "OSV Astro", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "astro::OSV Astro::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "caddy::OSV Caddy", + "system_id": "caddy", + "display_name": "Caddy", + "source_name": "OSV Caddy", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "caddy", + "display_name": "Caddy", + "source_name": "OSV Caddy", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "caddy::OSV Caddy::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "directus::Directus GitHub Advisories", + "system_id": "directus", + "display_name": "Directus", + "source_name": "Directus GitHub Advisories", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "directus", + "display_name": "Directus", + "source_name": "Directus GitHub Advisories", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /directus/directus/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://github.com/directus/directus/security/advisories", + "summary": "directus::Directus GitHub Advisories::network::HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /directus/directus/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "directus::OSV Directus", + "system_id": "directus", + "display_name": "Directus", + "source_name": "OSV Directus", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "directus", + "display_name": "Directus", + "source_name": "OSV Directus", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "directus::OSV Directus::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "discourse::Discourse Release Notes RSS", + "system_id": "discourse", + "display_name": "Discourse", + "source_name": "Discourse Release Notes RSS", + "source_kind": "rss-feed", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "discourse", + "display_name": "Discourse", + "source_name": "Discourse Release Notes RSS", + "source_kind": "rss-feed", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='meta.discourse.org', port=443): Max retries exceeded with url: /tag/release-notes.rss (Caused by NameResolutionError(\"HTTPSConnection(host='meta.discourse.org', port=443): Failed to resolve 'meta.discourse.org' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://meta.discourse.org/tag/release-notes.rss", + "summary": "discourse::Discourse Release Notes RSS::network::HTTPSConnectionPool(host='meta.discourse.org', port=443): Max retries exceeded with url: /tag/release-notes.rss (Caused by NameResolutionError(\"HTTPSConnection(host='meta.discourse.org', port=443): Failed to resolve 'meta.discourse.org' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "discourse::Discourse Security RSS", + "system_id": "discourse", + "display_name": "Discourse", + "source_name": "Discourse Security RSS", + "source_kind": "rss-feed", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "discourse", + "display_name": "Discourse", + "source_name": "Discourse Security RSS", + "source_kind": "rss-feed", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='meta.discourse.org', port=443): Max retries exceeded with url: /tag/security.rss (Caused by NameResolutionError(\"HTTPSConnection(host='meta.discourse.org', port=443): Failed to resolve 'meta.discourse.org' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://meta.discourse.org/tag/security.rss", + "summary": "discourse::Discourse Security RSS::network::HTTPSConnectionPool(host='meta.discourse.org', port=443): Max retries exceeded with url: /tag/security.rss (Caused by NameResolutionError(\"HTTPSConnection(host='meta.discourse.org', port=443): Failed to resolve 'meta.discourse.org' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "discourse::OSV Discourse", + "system_id": "discourse", + "display_name": "Discourse", + "source_name": "OSV Discourse", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "discourse", + "display_name": "Discourse", + "source_name": "OSV Discourse", + "source_kind": "osv-batch", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "discourse::OSV Discourse::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "django::Django Security Releases Archive", + "system_id": "django", + "display_name": "Django", + "source_name": "Django Security Releases Archive", + "source_kind": "vendor-index", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "django", + "display_name": "Django", + "source_name": "Django Security Releases Archive", + "source_kind": "vendor-index", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='docs.djangoproject.com', port=443): Max retries exceeded with url: /en/dev/releases/security/ (Caused by NameResolutionError(\"HTTPSConnection(host='docs.djangoproject.com', port=443): Failed to resolve 'docs.djangoproject.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://docs.djangoproject.com/en/dev/releases/security/", + "summary": "django::Django Security Releases Archive::network::HTTPSConnectionPool(host='docs.djangoproject.com', port=443): Max retries exceeded with url: /en/dev/releases/security/ (Caused by NameResolutionError(\"HTTPSConnection(host='docs.djangoproject.com', port=443): Failed to resolve 'docs.djangoproject.com' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "django::Django Security Weblog", + "system_id": "django", + "display_name": "Django", + "source_name": "Django Security Weblog", + "source_kind": "vendor-index", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "django", + "display_name": "Django", + "source_name": "Django Security Weblog", + "source_kind": "vendor-index", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='www.djangoproject.com', port=443): Max retries exceeded with url: /weblog/ (Caused by NameResolutionError(\"HTTPSConnection(host='www.djangoproject.com', port=443): Failed to resolve 'www.djangoproject.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://www.djangoproject.com/weblog/", + "summary": "django::Django Security Weblog::network::HTTPSConnectionPool(host='www.djangoproject.com', port=443): Max retries exceeded with url: /weblog/ (Caused by NameResolutionError(\"HTTPSConnection(host='www.djangoproject.com', port=443): Failed to resolve 'www.djangoproject.com' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "django::OSV Django", + "system_id": "django", + "display_name": "Django", + "source_name": "OSV Django", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "django", + "display_name": "Django", + "source_name": "OSV Django", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "django::OSV Django::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "drupal::Drupal Security Advisories RSS", + "system_id": "drupal", + "display_name": "Drupal", + "source_name": "Drupal Security Advisories RSS", + "source_kind": "rss-feed", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "drupal", + "display_name": "Drupal", + "source_name": "Drupal Security Advisories RSS", + "source_kind": "rss-feed", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='www.drupal.org', port=443): Max retries exceeded with url: /security/rss.xml (Caused by NameResolutionError(\"HTTPSConnection(host='www.drupal.org', port=443): Failed to resolve 'www.drupal.org' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://www.drupal.org/security/rss.xml", + "summary": "drupal::Drupal Security Advisories RSS::network::HTTPSConnectionPool(host='www.drupal.org', port=443): Max retries exceeded with url: /security/rss.xml (Caused by NameResolutionError(\"HTTPSConnection(host='www.drupal.org', port=443): Failed to resolve 'www.drupal.org' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "drupal::OSV Drupal", + "system_id": "drupal", + "display_name": "Drupal", + "source_name": "OSV Drupal", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "drupal", + "display_name": "Drupal", + "source_name": "OSV Drupal", + "source_kind": "osv-batch", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "drupal::OSV Drupal::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "echo::OSV Echo", + "system_id": "echo", + "display_name": "Echo", + "source_name": "OSV Echo", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "echo", + "display_name": "Echo", + "source_name": "OSV Echo", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "echo::OSV Echo::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "esbuild::OSV esbuild", + "system_id": "esbuild", + "display_name": "esbuild", + "source_name": "OSV esbuild", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "esbuild", + "display_name": "esbuild", + "source_name": "OSV esbuild", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "esbuild::OSV esbuild::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "express::OSV Express", + "system_id": "express", + "display_name": "Express", + "source_name": "OSV Express", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "express", + "display_name": "Express", + "source_name": "OSV Express", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "express::OSV Express::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "fastify::OSV Fastify", + "system_id": "fastify", + "display_name": "Fastify", + "source_name": "OSV Fastify", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "fastify", + "display_name": "Fastify", + "source_name": "OSV Fastify", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "fastify::OSV Fastify::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "flask::OSV Flask", + "system_id": "flask", + "display_name": "Flask", + "source_name": "OSV Flask", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "flask", + "display_name": "Flask", + "source_name": "OSV Flask", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "flask::OSV Flask::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "ghost::Ghost GitHub Advisories", + "system_id": "ghost", + "display_name": "Ghost", + "source_name": "Ghost GitHub Advisories", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "ghost", + "display_name": "Ghost", + "source_name": "Ghost GitHub Advisories", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /TryGhost/Ghost/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://github.com/TryGhost/Ghost/security/advisories", + "summary": "ghost::Ghost GitHub Advisories::network::HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /TryGhost/Ghost/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "ghost::OSV Ghost", + "system_id": "ghost", + "display_name": "Ghost", + "source_name": "OSV Ghost", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "ghost", + "display_name": "Ghost", + "source_name": "OSV Ghost", + "source_kind": "osv-batch", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "ghost::OSV Ghost::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "gin::OSV Gin", + "system_id": "gin", + "display_name": "Gin", + "source_name": "OSV Gin", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "gin", + "display_name": "Gin", + "source_name": "OSV Gin", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "gin::OSV Gin::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "gitea::OSV Gitea", + "system_id": "gitea", + "display_name": "Gitea", + "source_name": "OSV Gitea", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "gitea", + "display_name": "Gitea", + "source_name": "OSV Gitea", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "gitea::OSV Gitea::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "gitlab-ce::GitLab Advisory Database", + "system_id": "gitlab-ce", + "display_name": "GitLab CE", + "source_name": "GitLab Advisory Database", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "gitlab-ce", + "display_name": "GitLab CE", + "source_name": "GitLab Advisory Database", + "source_kind": "html-links", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='gitlab.com', port=443): Max retries exceeded with url: /gitlab-org/advisories-community (Caused by NameResolutionError(\"HTTPSConnection(host='gitlab.com', port=443): Failed to resolve 'gitlab.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://gitlab.com/gitlab-org/advisories-community", + "summary": "gitlab-ce::GitLab Advisory Database::network::HTTPSConnectionPool(host='gitlab.com', port=443): Max retries exceeded with url: /gitlab-org/advisories-community (Caused by NameResolutionError(\"HTTPSConnection(host='gitlab.com', port=443): Failed to resolve 'gitlab.com' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "gitlab-ce::GitLab Security Releases Atom", + "system_id": "gitlab-ce", + "display_name": "GitLab CE", + "source_name": "GitLab Security Releases Atom", + "source_kind": "atom-feed", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "gitlab-ce", + "display_name": "GitLab CE", + "source_name": "GitLab Security Releases Atom", + "source_kind": "atom-feed", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='about.gitlab.com', port=443): Max retries exceeded with url: /security-releases.xml (Caused by NameResolutionError(\"HTTPSConnection(host='about.gitlab.com', port=443): Failed to resolve 'about.gitlab.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://about.gitlab.com/security-releases.xml", + "summary": "gitlab-ce::GitLab Security Releases Atom::network::HTTPSConnectionPool(host='about.gitlab.com', port=443): Max retries exceeded with url: /security-releases.xml (Caused by NameResolutionError(\"HTTPSConnection(host='about.gitlab.com', port=443): Failed to resolve 'about.gitlab.com' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "grafana::CISA KEV Grafana", + "system_id": "grafana", + "display_name": "Grafana", + "source_name": "CISA KEV Grafana", + "source_kind": "kev-json", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "grafana", + "display_name": "Grafana", + "source_name": "CISA KEV Grafana", + "source_kind": "kev-json", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='www.cisa.gov', port=443): Max retries exceeded with url: /sites/default/files/feeds/known_exploited_vulnerabilities.json (Caused by NameResolutionError(\"HTTPSConnection(host='www.cisa.gov', port=443): Failed to resolve 'www.cisa.gov' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json", + "summary": "grafana::CISA KEV Grafana::network::HTTPSConnectionPool(host='www.cisa.gov', port=443): Max retries exceeded with url: /sites/default/files/feeds/known_exploited_vulnerabilities.json (Caused by NameResolutionError(\"HTTPSConnection(host='www.cisa.gov', port=443): Failed to resolve 'www.cisa.gov' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "grafana::Grafana Security Advisories", + "system_id": "grafana", + "display_name": "Grafana", + "source_name": "Grafana Security Advisories", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "grafana", + "display_name": "Grafana", + "source_name": "Grafana Security Advisories", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='grafana.com', port=443): Max retries exceeded with url: /security/security-advisories/ (Caused by NameResolutionError(\"HTTPSConnection(host='grafana.com', port=443): Failed to resolve 'grafana.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://grafana.com/security/security-advisories/", + "summary": "grafana::Grafana Security Advisories::network::HTTPSConnectionPool(host='grafana.com', port=443): Max retries exceeded with url: /security/security-advisories/ (Caused by NameResolutionError(\"HTTPSConnection(host='grafana.com', port=443): Failed to resolve 'grafana.com' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "hapi::OSV Hapi", + "system_id": "hapi", + "display_name": "Hapi", + "source_name": "OSV Hapi", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "hapi", + "display_name": "Hapi", + "source_name": "OSV Hapi", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "hapi::OSV Hapi::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "haproxy::HAProxy Blog Feed", + "system_id": "haproxy", + "display_name": "HAProxy", + "source_name": "HAProxy Blog Feed", + "source_kind": "rss-feed", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "haproxy", + "display_name": "HAProxy", + "source_name": "HAProxy Blog Feed", + "source_kind": "rss-feed", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='www.haproxy.com', port=443): Max retries exceeded with url: /feed/ (Caused by NameResolutionError(\"HTTPSConnection(host='www.haproxy.com', port=443): Failed to resolve 'www.haproxy.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://www.haproxy.com/feed/", + "summary": "haproxy::HAProxy Blog Feed::network::HTTPSConnectionPool(host='www.haproxy.com', port=443): Max retries exceeded with url: /feed/ (Caused by NameResolutionError(\"HTTPSConnection(host='www.haproxy.com', port=443): Failed to resolve 'www.haproxy.com' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "jenkins::Jenkins Security Advisories RSS", + "system_id": "jenkins", + "display_name": "Jenkins", + "source_name": "Jenkins Security Advisories RSS", + "source_kind": "rss-feed", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "jenkins", + "display_name": "Jenkins", + "source_name": "Jenkins Security Advisories RSS", + "source_kind": "rss-feed", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='www.jenkins.io', port=443): Max retries exceeded with url: /security/advisories/rss.xml (Caused by NameResolutionError(\"HTTPSConnection(host='www.jenkins.io', port=443): Failed to resolve 'www.jenkins.io' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://www.jenkins.io/security/advisories/rss.xml", + "summary": "jenkins::Jenkins Security Advisories RSS::network::HTTPSConnectionPool(host='www.jenkins.io', port=443): Max retries exceeded with url: /security/advisories/rss.xml (Caused by NameResolutionError(\"HTTPSConnection(host='www.jenkins.io', port=443): Failed to resolve 'www.jenkins.io' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "joomla::Joomla Security Centre", + "system_id": "joomla", + "display_name": "Joomla", + "source_name": "Joomla Security Centre", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "joomla", + "display_name": "Joomla", + "source_name": "Joomla Security Centre", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='developer.joomla.org', port=443): Max retries exceeded with url: /security-centre.html (Caused by NameResolutionError(\"HTTPSConnection(host='developer.joomla.org', port=443): Failed to resolve 'developer.joomla.org' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://developer.joomla.org/security-centre.html", + "summary": "joomla::Joomla Security Centre::network::HTTPSConnectionPool(host='developer.joomla.org', port=443): Max retries exceeded with url: /security-centre.html (Caused by NameResolutionError(\"HTTPSConnection(host='developer.joomla.org', port=443): Failed to resolve 'developer.joomla.org' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "joomla::OSV Joomla", + "system_id": "joomla", + "display_name": "Joomla", + "source_name": "OSV Joomla", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "joomla", + "display_name": "Joomla", + "source_name": "OSV Joomla", + "source_kind": "osv-batch", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "joomla::OSV Joomla::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "kibana::Elastic Security Announcements RSS", + "system_id": "kibana", + "display_name": "Kibana", + "source_name": "Elastic Security Announcements RSS", + "source_kind": "rss-feed", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:14:27+00:00", + "resolved_at": "2026-03-22T01:14:27+00:00", + "failure_streak": 2, + "last_category": "rate_limit", + "last_failure": { + "system_id": "kibana", + "display_name": "Kibana", + "source_name": "Elastic Security Announcements RSS", + "source_kind": "rss-feed", + "source_bucket": "official_sources", + "category": "rate_limit", + "exception": "HTTPError", + "message": "429 Client Error: Too Many Requests for url: https://discuss.elastic.co/c/announcements/security-announcements/31.rss", + "status_code": 429, + "url": "https://discuss.elastic.co/c/announcements/security-announcements/31.rss", + "summary": "kibana::Elastic Security Announcements RSS::rate_limit::429 Client Error: Too Many Requests for url: https://discuss.elastic.co/c/announcements/security-announcements/31.rss", + "elapsed_seconds": 5.209 + } + }, + { + "alert_id": "koa::OSV Koa", + "system_id": "koa", + "display_name": "Koa", + "source_name": "OSV Koa", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "koa", + "display_name": "Koa", + "source_name": "OSV Koa", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "koa::OSV Koa::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "laravel::OSV Laravel", + "system_id": "laravel", + "display_name": "Laravel", + "source_name": "OSV Laravel", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "laravel", + "display_name": "Laravel", + "source_name": "OSV Laravel", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "laravel::OSV Laravel::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "magento-open-source::Magento GitHub Advisories", + "system_id": "magento-open-source", + "display_name": "Magento Open Source", + "source_name": "Magento GitHub Advisories", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "magento-open-source", + "display_name": "Magento Open Source", + "source_name": "Magento GitHub Advisories", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /magento/magento2/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://github.com/magento/magento2/security/advisories", + "summary": "magento-open-source::Magento GitHub Advisories::network::HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /magento/magento2/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "magento-open-source::OSV Magento Open Source", + "system_id": "magento-open-source", + "display_name": "Magento Open Source", + "source_name": "OSV Magento Open Source", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "magento-open-source", + "display_name": "Magento Open Source", + "source_name": "OSV Magento Open Source", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "magento-open-source::OSV Magento Open Source::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "magento-open-source::Sansec Research", + "system_id": "magento-open-source", + "display_name": "Magento Open Source", + "source_name": "Sansec Research", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "magento-open-source", + "display_name": "Magento Open Source", + "source_name": "Sansec Research", + "source_kind": "html-links", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='sansec.io', port=443): Max retries exceeded with url: /research (Caused by NameResolutionError(\"HTTPSConnection(host='sansec.io', port=443): Failed to resolve 'sansec.io' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://sansec.io/research", + "summary": "magento-open-source::Sansec Research::network::HTTPSConnectionPool(host='sansec.io', port=443): Max retries exceeded with url: /research (Caused by NameResolutionError(\"HTTPSConnection(host='sansec.io', port=443): Failed to resolve 'sansec.io' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "mattermost::Mattermost Security Updates JSON", + "system_id": "mattermost", + "display_name": "Mattermost", + "source_name": "Mattermost Security Updates JSON", + "source_kind": "json-feed", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "mattermost", + "display_name": "Mattermost", + "source_name": "Mattermost Security Updates JSON", + "source_kind": "json-feed", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='securityupdates.mattermost.com', port=443): Max retries exceeded with url: /security_updates.json (Caused by NameResolutionError(\"HTTPSConnection(host='securityupdates.mattermost.com', port=443): Failed to resolve 'securityupdates.mattermost.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://securityupdates.mattermost.com/security_updates.json", + "summary": "mattermost::Mattermost Security Updates JSON::network::HTTPSConnectionPool(host='securityupdates.mattermost.com', port=443): Max retries exceeded with url: /security_updates.json (Caused by NameResolutionError(\"HTTPSConnection(host='securityupdates.mattermost.com', port=443): Failed to resolve 'securityupdates.mattermost.com' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "mattermost::OSV Mattermost", + "system_id": "mattermost", + "display_name": "Mattermost", + "source_name": "OSV Mattermost", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "mattermost", + "display_name": "Mattermost", + "source_name": "OSV Mattermost", + "source_kind": "osv-batch", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "mattermost::OSV Mattermost::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "mediawiki::MediaWiki Announce RSS", + "system_id": "mediawiki", + "display_name": "MediaWiki", + "source_name": "MediaWiki Announce RSS", + "source_kind": "rss-feed", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "mediawiki", + "display_name": "MediaWiki", + "source_name": "MediaWiki Announce RSS", + "source_kind": "rss-feed", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='lists.wikimedia.org', port=443): Max retries exceeded with url: /hyperkitty/list/mediawiki-announce@lists.wikimedia.org/feed/ (Caused by NameResolutionError(\"HTTPSConnection(host='lists.wikimedia.org', port=443): Failed to resolve 'lists.wikimedia.org' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/feed/", + "summary": "mediawiki::MediaWiki Announce RSS::network::HTTPSConnectionPool(host='lists.wikimedia.org', port=443): Max retries exceeded with url: /hyperkitty/list/mediawiki-announce@lists.wikimedia.org/feed/ (Caused by NameResolutionError(\"HTTPSConnection(host='lists.wikimedia.org', port=443): Failed to resolve 'lists.wikimedia.org' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "mediawiki::OSV MediaWiki", + "system_id": "mediawiki", + "display_name": "MediaWiki", + "source_name": "OSV MediaWiki", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "mediawiki", + "display_name": "MediaWiki", + "source_name": "OSV MediaWiki", + "source_kind": "osv-batch", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "mediawiki::OSV MediaWiki::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "medusa::OSV Medusa", + "system_id": "medusa", + "display_name": "Medusa", + "source_name": "OSV Medusa", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "medusa", + "display_name": "Medusa", + "source_name": "OSV Medusa", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "medusa::OSV Medusa::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "moodle::OSV Moodle", + "system_id": "moodle", + "display_name": "Moodle", + "source_name": "OSV Moodle", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "moodle", + "display_name": "Moodle", + "source_name": "OSV Moodle", + "source_kind": "osv-batch", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "moodle::OSV Moodle::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "nestjs::OSV NestJS", + "system_id": "nestjs", + "display_name": "NestJS", + "source_name": "OSV NestJS", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "nestjs", + "display_name": "NestJS", + "source_name": "OSV NestJS", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "nestjs::OSV NestJS::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "nextjs::OSV Next.js", + "system_id": "nextjs", + "display_name": "Next.js", + "source_name": "OSV Next.js", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "nextjs", + "display_name": "Next.js", + "source_name": "OSV Next.js", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "nextjs::OSV Next.js::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "nginx::CISA KEV NGINX", + "system_id": "nginx", + "display_name": "Nginx", + "source_name": "CISA KEV NGINX", + "source_kind": "kev-json", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "nginx", + "display_name": "Nginx", + "source_name": "CISA KEV NGINX", + "source_kind": "kev-json", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='www.cisa.gov', port=443): Max retries exceeded with url: /sites/default/files/feeds/known_exploited_vulnerabilities.json (Caused by NameResolutionError(\"HTTPSConnection(host='www.cisa.gov', port=443): Failed to resolve 'www.cisa.gov' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json", + "summary": "nginx::CISA KEV NGINX::network::HTTPSConnectionPool(host='www.cisa.gov', port=443): Max retries exceeded with url: /sites/default/files/feeds/known_exploited_vulnerabilities.json (Caused by NameResolutionError(\"HTTPSConnection(host='www.cisa.gov', port=443): Failed to resolve 'www.cisa.gov' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "nginx::NGINX Security Advisories", + "system_id": "nginx", + "display_name": "Nginx", + "source_name": "NGINX Security Advisories", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "nginx", + "display_name": "Nginx", + "source_name": "NGINX Security Advisories", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='nginx.org', port=443): Max retries exceeded with url: /en/security_advisories.html (Caused by NameResolutionError(\"HTTPSConnection(host='nginx.org', port=443): Failed to resolve 'nginx.org' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://nginx.org/en/security_advisories.html", + "summary": "nginx::NGINX Security Advisories::network::HTTPSConnectionPool(host='nginx.org', port=443): Max retries exceeded with url: /en/security_advisories.html (Caused by NameResolutionError(\"HTTPSConnection(host='nginx.org', port=443): Failed to resolve 'nginx.org' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "nodejs::CISA KEV Node.js", + "system_id": "nodejs", + "display_name": "Node.js", + "source_name": "CISA KEV Node.js", + "source_kind": "kev-json", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "nodejs", + "display_name": "Node.js", + "source_name": "CISA KEV Node.js", + "source_kind": "kev-json", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='www.cisa.gov', port=443): Max retries exceeded with url: /sites/default/files/feeds/known_exploited_vulnerabilities.json (Caused by NameResolutionError(\"HTTPSConnection(host='www.cisa.gov', port=443): Failed to resolve 'www.cisa.gov' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json", + "summary": "nodejs::CISA KEV Node.js::network::HTTPSConnectionPool(host='www.cisa.gov', port=443): Max retries exceeded with url: /sites/default/files/feeds/known_exploited_vulnerabilities.json (Caused by NameResolutionError(\"HTTPSConnection(host='www.cisa.gov', port=443): Failed to resolve 'www.cisa.gov' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "nodejs::Node.js Security Releases", + "system_id": "nodejs", + "display_name": "Node.js", + "source_name": "Node.js Security Releases", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "nodejs", + "display_name": "Node.js", + "source_name": "Node.js Security Releases", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='nodejs.org', port=443): Max retries exceeded with url: /en/blog/vulnerability (Caused by NameResolutionError(\"HTTPSConnection(host='nodejs.org', port=443): Failed to resolve 'nodejs.org' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://nodejs.org/en/blog/vulnerability", + "summary": "nodejs::Node.js Security Releases::network::HTTPSConnectionPool(host='nodejs.org', port=443): Max retries exceeded with url: /en/blog/vulnerability (Caused by NameResolutionError(\"HTTPSConnection(host='nodejs.org', port=443): Failed to resolve 'nodejs.org' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "nuxt::OSV Nuxt", + "system_id": "nuxt", + "display_name": "Nuxt", + "source_name": "OSV Nuxt", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "nuxt", + "display_name": "Nuxt", + "source_name": "OSV Nuxt", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "nuxt::OSV Nuxt::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "opencart::OSV OpenCart", + "system_id": "opencart", + "display_name": "OpenCart", + "source_name": "OSV OpenCart", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "opencart", + "display_name": "OpenCart", + "source_name": "OSV OpenCart", + "source_kind": "osv-batch", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "opencart::OSV OpenCart::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "opencart::OpenCart Releases", + "system_id": "opencart", + "display_name": "OpenCart", + "source_name": "OpenCart Releases", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "opencart", + "display_name": "OpenCart", + "source_name": "OpenCart Releases", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /opencart/opencart/releases (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://github.com/opencart/opencart/releases", + "summary": "opencart::OpenCart Releases::network::HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /opencart/opencart/releases (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "openmage::OSV OpenMage", + "system_id": "openmage", + "display_name": "OpenMage / Mage-OS", + "source_name": "OSV OpenMage", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "openmage", + "display_name": "OpenMage / Mage-OS", + "source_name": "OSV OpenMage", + "source_kind": "osv-batch", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "openmage::OSV OpenMage::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "openmage::OpenMage GitHub Advisories", + "system_id": "openmage", + "display_name": "OpenMage / Mage-OS", + "source_name": "OpenMage GitHub Advisories", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "openmage", + "display_name": "OpenMage / Mage-OS", + "source_name": "OpenMage GitHub Advisories", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /OpenMage/magento-lts/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://github.com/OpenMage/magento-lts/security/advisories", + "summary": "openmage::OpenMage GitHub Advisories::network::HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /OpenMage/magento-lts/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "phpmyadmin::OSV phpMyAdmin", + "system_id": "phpmyadmin", + "display_name": "phpMyAdmin", + "source_name": "OSV phpMyAdmin", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "phpmyadmin", + "display_name": "phpMyAdmin", + "source_name": "OSV phpMyAdmin", + "source_kind": "osv-batch", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "phpmyadmin::OSV phpMyAdmin::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "phpmyadmin::phpMyAdmin Security Page", + "system_id": "phpmyadmin", + "display_name": "phpMyAdmin", + "source_name": "phpMyAdmin Security Page", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "phpmyadmin", + "display_name": "phpMyAdmin", + "source_name": "phpMyAdmin Security Page", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='www.phpmyadmin.net', port=443): Max retries exceeded with url: /security/ (Caused by NameResolutionError(\"HTTPSConnection(host='www.phpmyadmin.net', port=443): Failed to resolve 'www.phpmyadmin.net' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://www.phpmyadmin.net/security/", + "summary": "phpmyadmin::phpMyAdmin Security Page::network::HTTPSConnectionPool(host='www.phpmyadmin.net', port=443): Max retries exceeded with url: /security/ (Caused by NameResolutionError(\"HTTPSConnection(host='www.phpmyadmin.net', port=443): Failed to resolve 'www.phpmyadmin.net' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "prestashop::Friends Of Presta Security", + "system_id": "prestashop", + "display_name": "PrestaShop", + "source_name": "Friends Of Presta Security", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "prestashop", + "display_name": "PrestaShop", + "source_name": "Friends Of Presta Security", + "source_kind": "html-links", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='security.friendsofpresta.org', port=443): Max retries exceeded with url: / (Caused by NameResolutionError(\"HTTPSConnection(host='security.friendsofpresta.org', port=443): Failed to resolve 'security.friendsofpresta.org' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://security.friendsofpresta.org/", + "summary": "prestashop::Friends Of Presta Security::network::HTTPSConnectionPool(host='security.friendsofpresta.org', port=443): Max retries exceeded with url: / (Caused by NameResolutionError(\"HTTPSConnection(host='security.friendsofpresta.org', port=443): Failed to resolve 'security.friendsofpresta.org' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "prestashop::GitHub PrestaShop Advisories", + "system_id": "prestashop", + "display_name": "PrestaShop", + "source_name": "GitHub PrestaShop Advisories", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "prestashop", + "display_name": "PrestaShop", + "source_name": "GitHub PrestaShop Advisories", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /PrestaShop/PrestaShop/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://github.com/PrestaShop/PrestaShop/security/advisories", + "summary": "prestashop::GitHub PrestaShop Advisories::network::HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /PrestaShop/PrestaShop/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "prestashop::OSV PrestaShop", + "system_id": "prestashop", + "display_name": "PrestaShop", + "source_name": "OSV PrestaShop", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "prestashop", + "display_name": "PrestaShop", + "source_name": "OSV PrestaShop", + "source_kind": "osv-batch", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "prestashop::OSV PrestaShop::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "prestashop::PrestaShop Security Page", + "system_id": "prestashop", + "display_name": "PrestaShop", + "source_name": "PrestaShop Security Page", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "prestashop", + "display_name": "PrestaShop", + "source_name": "PrestaShop Security Page", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='build.prestashop-project.org', port=443): Max retries exceeded with url: /news/ (Caused by NameResolutionError(\"HTTPSConnection(host='build.prestashop-project.org', port=443): Failed to resolve 'build.prestashop-project.org' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://build.prestashop-project.org/news/", + "summary": "prestashop::PrestaShop Security Page::network::HTTPSConnectionPool(host='build.prestashop-project.org', port=443): Max retries exceeded with url: /news/ (Caused by NameResolutionError(\"HTTPSConnection(host='build.prestashop-project.org', port=443): Failed to resolve 'build.prestashop-project.org' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "rails::OSV Rails", + "system_id": "rails", + "display_name": "Ruby on Rails", + "source_name": "OSV Rails", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "rails", + "display_name": "Ruby on Rails", + "source_name": "OSV Rails", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "rails::OSV Rails::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "react::OSV React", + "system_id": "react", + "display_name": "React", + "source_name": "OSV React", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "react", + "display_name": "React", + "source_name": "OSV React", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "react::OSV React::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "redmine::OSV Redmine", + "system_id": "redmine", + "display_name": "Redmine", + "source_name": "OSV Redmine", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "redmine", + "display_name": "Redmine", + "source_name": "OSV Redmine", + "source_kind": "osv-batch", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "redmine::OSV Redmine::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "redmine::Redmine Security Advisories", + "system_id": "redmine", + "display_name": "Redmine", + "source_name": "Redmine Security Advisories", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "redmine", + "display_name": "Redmine", + "source_name": "Redmine Security Advisories", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='www.redmine.org', port=443): Max retries exceeded with url: /projects/redmine/wiki/Security_Advisories (Caused by NameResolutionError(\"HTTPSConnection(host='www.redmine.org', port=443): Failed to resolve 'www.redmine.org' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://www.redmine.org/projects/redmine/wiki/Security_Advisories", + "summary": "redmine::Redmine Security Advisories::network::HTTPSConnectionPool(host='www.redmine.org', port=443): Max retries exceeded with url: /projects/redmine/wiki/Security_Advisories (Caused by NameResolutionError(\"HTTPSConnection(host='www.redmine.org', port=443): Failed to resolve 'www.redmine.org' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "saleor::GitHub Saleor Advisories", + "system_id": "saleor", + "display_name": "Saleor", + "source_name": "GitHub Saleor Advisories", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "saleor", + "display_name": "Saleor", + "source_name": "GitHub Saleor Advisories", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /saleor/saleor/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://github.com/saleor/saleor/security/advisories", + "summary": "saleor::GitHub Saleor Advisories::network::HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /saleor/saleor/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "saleor::OSV Saleor", + "system_id": "saleor", + "display_name": "Saleor", + "source_name": "OSV Saleor", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "saleor", + "display_name": "Saleor", + "source_name": "OSV Saleor", + "source_kind": "osv-batch", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "saleor::OSV Saleor::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "shopware::OSV Shopware", + "system_id": "shopware", + "display_name": "Shopware", + "source_name": "OSV Shopware", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "shopware", + "display_name": "Shopware", + "source_name": "OSV Shopware", + "source_kind": "osv-batch", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "shopware::OSV Shopware::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "shopware::Shopware Security Advisories", + "system_id": "shopware", + "display_name": "Shopware", + "source_name": "Shopware Security Advisories", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-21T12:51:08+00:00", + "updated_at": "2026-03-22T01:06:45+00:00", + "resolved_at": "2026-03-22T01:06:45+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "shopware", + "display_name": "Shopware", + "source_name": "Shopware Security Advisories", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /shopware/shopware/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://github.com/shopware/shopware/security/advisories", + "summary": "shopware::Shopware Security Advisories::network::HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /shopware/shopware/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))" + } + }, + { + "alert_id": "spring-boot::OSV Spring Boot", + "system_id": "spring-boot", + "display_name": "Spring Boot", + "source_name": "OSV Spring Boot", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "spring-boot", + "display_name": "Spring Boot", + "source_name": "OSV Spring Boot", + "source_kind": "osv-batch", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "spring-boot::OSV Spring Boot::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 6.869 + } + }, + { + "alert_id": "spring-boot::Spring Security Advisories", + "system_id": "spring-boot", + "display_name": "Spring Boot", + "source_name": "Spring Security Advisories", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "spring-boot", + "display_name": "Spring Boot", + "source_name": "Spring Security Advisories", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='spring.io', port=443): Max retries exceeded with url: /security (Caused by NameResolutionError(\"HTTPSConnection(host='spring.io', port=443): Failed to resolve 'spring.io' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://spring.io/security", + "summary": "spring-boot::Spring Security Advisories::network::HTTPSConnectionPool(host='spring.io', port=443): Max retries exceeded with url: /security (Caused by NameResolutionError(\"HTTPSConnection(host='spring.io', port=443): Failed to resolve 'spring.io' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 8.73 + } + }, + { + "alert_id": "spring-framework::OSV Spring Framework", + "system_id": "spring-framework", + "display_name": "Spring Framework", + "source_name": "OSV Spring Framework", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "spring-framework", + "display_name": "Spring Framework", + "source_name": "OSV Spring Framework", + "source_kind": "osv-batch", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "spring-framework::OSV Spring Framework::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 6.926 + } + }, + { + "alert_id": "spring-framework::Spring Security Advisories", + "system_id": "spring-framework", + "display_name": "Spring Framework", + "source_name": "Spring Security Advisories", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "spring-framework", + "display_name": "Spring Framework", + "source_name": "Spring Security Advisories", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='spring.io', port=443): Max retries exceeded with url: /security (Caused by NameResolutionError(\"HTTPSConnection(host='spring.io', port=443): Failed to resolve 'spring.io' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://spring.io/security", + "summary": "spring-framework::Spring Security Advisories::network::HTTPSConnectionPool(host='spring.io', port=443): Max retries exceeded with url: /security (Caused by NameResolutionError(\"HTTPSConnection(host='spring.io', port=443): Failed to resolve 'spring.io' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 6.922 + } + }, + { + "alert_id": "spring-security::OSV Spring Security", + "system_id": "spring-security", + "display_name": "Spring Security", + "source_name": "OSV Spring Security", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "spring-security", + "display_name": "Spring Security", + "source_name": "OSV Spring Security", + "source_kind": "osv-batch", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "spring-security::OSV Spring Security::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 6.934 + } + }, + { + "alert_id": "spring-security::Spring Security Advisories", + "system_id": "spring-security", + "display_name": "Spring Security", + "source_name": "Spring Security Advisories", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "spring-security", + "display_name": "Spring Security", + "source_name": "Spring Security Advisories", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='spring.io', port=443): Max retries exceeded with url: /security (Caused by NameResolutionError(\"HTTPSConnection(host='spring.io', port=443): Failed to resolve 'spring.io' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://spring.io/security", + "summary": "spring-security::Spring Security Advisories::network::HTTPSConnectionPool(host='spring.io', port=443): Max retries exceeded with url: /security (Caused by NameResolutionError(\"HTTPSConnection(host='spring.io', port=443): Failed to resolve 'spring.io' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 8.705 + } + }, + { + "alert_id": "strapi::OSV Strapi", + "system_id": "strapi", + "display_name": "Strapi", + "source_name": "OSV Strapi", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "strapi", + "display_name": "Strapi", + "source_name": "OSV Strapi", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "strapi::OSV Strapi::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 1.724 + } + }, + { + "alert_id": "strapi::Strapi GitHub Advisories", + "system_id": "strapi", + "display_name": "Strapi", + "source_name": "Strapi GitHub Advisories", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "strapi", + "display_name": "Strapi", + "source_name": "Strapi GitHub Advisories", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /strapi/strapi/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://github.com/strapi/strapi/security/advisories", + "summary": "strapi::Strapi GitHub Advisories::network::HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /strapi/strapi/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 1.701 + } + }, + { + "alert_id": "sveltekit::OSV SvelteKit", + "system_id": "sveltekit", + "display_name": "SvelteKit", + "source_name": "OSV SvelteKit", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "sveltekit", + "display_name": "SvelteKit", + "source_name": "OSV SvelteKit", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "sveltekit::OSV SvelteKit::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 5.23 + } + }, + { + "alert_id": "symfony::OSV Symfony", + "system_id": "symfony", + "display_name": "Symfony", + "source_name": "OSV Symfony", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "symfony", + "display_name": "Symfony", + "source_name": "OSV Symfony", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "symfony::OSV Symfony::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 6.981 + } + }, + { + "alert_id": "traefik::OSV Traefik", + "system_id": "traefik", + "display_name": "Traefik", + "source_name": "OSV Traefik", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "traefik", + "display_name": "Traefik", + "source_name": "OSV Traefik", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "traefik::OSV Traefik::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 8.693 + } + }, + { + "alert_id": "undici::OSV Undici", + "system_id": "undici", + "display_name": "Undici", + "source_name": "OSV Undici", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "undici", + "display_name": "Undici", + "source_name": "OSV Undici", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "undici::OSV Undici::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 5.174 + } + }, + { + "alert_id": "vite::OSV Vite", + "system_id": "vite", + "display_name": "Vite", + "source_name": "OSV Vite", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "vite", + "display_name": "Vite", + "source_name": "OSV Vite", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "vite::OSV Vite::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 5.23 + } + }, + { + "alert_id": "vue::OSV Vue", + "system_id": "vue", + "display_name": "Vue", + "source_name": "OSV Vue", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "vue", + "display_name": "Vue", + "source_name": "OSV Vue", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "vue::OSV Vue::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 5.225 + } + }, + { + "alert_id": "webpack::OSV webpack", + "system_id": "webpack", + "display_name": "webpack", + "source_name": "OSV webpack", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "webpack", + "display_name": "webpack", + "source_name": "OSV webpack", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "webpack::OSV webpack::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 5.225 + } + }, + { + "alert_id": "werkzeug::OSV Werkzeug", + "system_id": "werkzeug", + "display_name": "Werkzeug", + "source_name": "OSV Werkzeug", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "werkzeug", + "display_name": "Werkzeug", + "source_name": "OSV Werkzeug", + "source_kind": "osv-batch", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "werkzeug::OSV Werkzeug::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 7.016 + } + }, + { + "alert_id": "woocommerce::GitHub WooCommerce Advisories", + "system_id": "woocommerce", + "display_name": "WooCommerce", + "source_name": "GitHub WooCommerce Advisories", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "woocommerce", + "display_name": "WooCommerce", + "source_name": "GitHub WooCommerce Advisories", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /woocommerce/woocommerce/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://github.com/woocommerce/woocommerce/security/advisories", + "summary": "woocommerce::GitHub WooCommerce Advisories::network::HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /woocommerce/woocommerce/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 3.463 + } + }, + { + "alert_id": "woocommerce::OSV WooCommerce", + "system_id": "woocommerce", + "display_name": "WooCommerce", + "source_name": "OSV WooCommerce", + "source_kind": "osv-batch", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "woocommerce", + "display_name": "WooCommerce", + "source_name": "OSV WooCommerce", + "source_kind": "osv-batch", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "", + "summary": "woocommerce::OSV WooCommerce::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 3.463 + } + }, + { + "alert_id": "woocommerce::Patchstack Database", + "system_id": "woocommerce", + "display_name": "WooCommerce", + "source_name": "Patchstack Database", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "woocommerce", + "display_name": "WooCommerce", + "source_name": "Patchstack Database", + "source_kind": "html-links", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='patchstack.com', port=443): Max retries exceeded with url: /database/ (Caused by NameResolutionError(\"HTTPSConnection(host='patchstack.com', port=443): Failed to resolve 'patchstack.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://patchstack.com/database/", + "summary": "woocommerce::Patchstack Database::network::HTTPSConnectionPool(host='patchstack.com', port=443): Max retries exceeded with url: /database/ (Caused by NameResolutionError(\"HTTPSConnection(host='patchstack.com', port=443): Failed to resolve 'patchstack.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 3.481 + } + }, + { + "alert_id": "woocommerce::Woo Developer Advisories", + "system_id": "woocommerce", + "display_name": "WooCommerce", + "source_name": "Woo Developer Advisories", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "woocommerce", + "display_name": "WooCommerce", + "source_name": "Woo Developer Advisories", + "source_kind": "html-links", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='developer.woocommerce.com', port=443): Max retries exceeded with url: / (Caused by NameResolutionError(\"HTTPSConnection(host='developer.woocommerce.com', port=443): Failed to resolve 'developer.woocommerce.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://developer.woocommerce.com/", + "summary": "woocommerce::Woo Developer Advisories::network::HTTPSConnectionPool(host='developer.woocommerce.com', port=443): Max retries exceeded with url: / (Caused by NameResolutionError(\"HTTPSConnection(host='developer.woocommerce.com', port=443): Failed to resolve 'developer.woocommerce.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 3.481 + } + }, + { + "alert_id": "woocommerce::Wordfence Vulnerability Database", + "system_id": "woocommerce", + "display_name": "WooCommerce", + "source_name": "Wordfence Vulnerability Database", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "woocommerce", + "display_name": "WooCommerce", + "source_name": "Wordfence Vulnerability Database", + "source_kind": "html-links", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='www.wordfence.com', port=443): Max retries exceeded with url: /threat-intel/vulnerabilities/wordpress-plugins/ (Caused by NameResolutionError(\"HTTPSConnection(host='www.wordfence.com', port=443): Failed to resolve 'www.wordfence.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/", + "summary": "woocommerce::Wordfence Vulnerability Database::network::HTTPSConnectionPool(host='www.wordfence.com', port=443): Max retries exceeded with url: /threat-intel/vulnerabilities/wordpress-plugins/ (Caused by NameResolutionError(\"HTTPSConnection(host='www.wordfence.com', port=443): Failed to resolve 'www.wordfence.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 3.411 + } + }, + { + "alert_id": "wordpress::Patchstack Database", + "system_id": "wordpress", + "display_name": "WordPress", + "source_name": "Patchstack Database", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "wordpress", + "display_name": "WordPress", + "source_name": "Patchstack Database", + "source_kind": "html-links", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='patchstack.com', port=443): Max retries exceeded with url: /database/ (Caused by NameResolutionError(\"HTTPSConnection(host='patchstack.com', port=443): Failed to resolve 'patchstack.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://patchstack.com/database/", + "summary": "wordpress::Patchstack Database::network::HTTPSConnectionPool(host='patchstack.com', port=443): Max retries exceeded with url: /database/ (Caused by NameResolutionError(\"HTTPSConnection(host='patchstack.com', port=443): Failed to resolve 'patchstack.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 1.736 + } + }, + { + "alert_id": "wordpress::PortSwigger Research", + "system_id": "wordpress", + "display_name": "WordPress", + "source_name": "PortSwigger Research", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "wordpress", + "display_name": "WordPress", + "source_name": "PortSwigger Research", + "source_kind": "html-links", + "source_bucket": "research_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='portswigger.net', port=443): Max retries exceeded with url: /research (Caused by NameResolutionError(\"HTTPSConnection(host='portswigger.net', port=443): Failed to resolve 'portswigger.net' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://portswigger.net/research", + "summary": "wordpress::PortSwigger Research::network::HTTPSConnectionPool(host='portswigger.net', port=443): Max retries exceeded with url: /research (Caused by NameResolutionError(\"HTTPSConnection(host='portswigger.net', port=443): Failed to resolve 'portswigger.net' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 1.669 + } + }, + { + "alert_id": "wordpress::WPScan Vulnerability Database", + "system_id": "wordpress", + "display_name": "WordPress", + "source_name": "WPScan Vulnerability Database", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "wordpress", + "display_name": "WordPress", + "source_name": "WPScan Vulnerability Database", + "source_kind": "html-links", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='wpscan.com', port=443): Max retries exceeded with url: /blog/ (Caused by NameResolutionError(\"HTTPSConnection(host='wpscan.com', port=443): Failed to resolve 'wpscan.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://wpscan.com/blog/", + "summary": "wordpress::WPScan Vulnerability Database::network::HTTPSConnectionPool(host='wpscan.com', port=443): Max retries exceeded with url: /blog/ (Caused by NameResolutionError(\"HTTPSConnection(host='wpscan.com', port=443): Failed to resolve 'wpscan.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 1.702 + } + }, + { + "alert_id": "wordpress::WordPress Security News RSS", + "system_id": "wordpress", + "display_name": "WordPress", + "source_name": "WordPress Security News RSS", + "source_kind": "rss-feed", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "wordpress", + "display_name": "WordPress", + "source_name": "WordPress Security News RSS", + "source_kind": "rss-feed", + "source_bucket": "official_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='wordpress.org', port=443): Max retries exceeded with url: /news/category/security/feed/ (Caused by NameResolutionError(\"HTTPSConnection(host='wordpress.org', port=443): Failed to resolve 'wordpress.org' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://wordpress.org/news/category/security/feed/", + "summary": "wordpress::WordPress Security News RSS::network::HTTPSConnectionPool(host='wordpress.org', port=443): Max retries exceeded with url: /news/category/security/feed/ (Caused by NameResolutionError(\"HTTPSConnection(host='wordpress.org', port=443): Failed to resolve 'wordpress.org' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 1.728 + } + }, + { + "alert_id": "wordpress::Wordfence Vulnerability Database", + "system_id": "wordpress", + "display_name": "WordPress", + "source_name": "Wordfence Vulnerability Database", + "source_kind": "html-links", + "status": "resolved", + "opened_at": "2026-03-20T13:41:26+00:00", + "updated_at": "2026-03-20T15:45:58+00:00", + "resolved_at": "2026-03-20T15:45:58+00:00", + "failure_streak": 1, + "last_category": "network", + "last_failure": { + "system_id": "wordpress", + "display_name": "WordPress", + "source_name": "Wordfence Vulnerability Database", + "source_kind": "html-links", + "source_bucket": "ecosystem_sources", + "category": "network", + "exception": "ConnectionError", + "message": "HTTPSConnectionPool(host='www.wordfence.com', port=443): Max retries exceeded with url: /threat-intel/vulnerabilities/wordpress-plugins/ (Caused by NameResolutionError(\"HTTPSConnection(host='www.wordfence.com', port=443): Failed to resolve 'www.wordfence.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "status_code": null, + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/", + "summary": "wordpress::Wordfence Vulnerability Database::network::HTTPSConnectionPool(host='www.wordfence.com', port=443): Max retries exceeded with url: /threat-intel/vulnerabilities/wordpress-plugins/ (Caused by NameResolutionError(\"HTTPSConnection(host='www.wordfence.com', port=443): Failed to resolve 'www.wordfence.com' ([Errno 8] nodename nor servname provided, or not known)\"))", + "elapsed_seconds": 1.672 + } + } + ], + "version_backlog": { + "generated_at": "2026-04-01T09:21:05+00:00", + "source_gap_entities": [ + { + "entity_id": "adminer", + "display_name": "Adminer", + "root_system_id": "adminer", + "entity_type": "system", + "latest_version": "", + "repo_url": "", + "package_registry": "", + "marketplace_url": "" + }, + { + "entity_id": "adobe-commerce", + "display_name": "Adobe Commerce", + "root_system_id": "adobe-commerce", + "entity_type": "system", + "latest_version": "", + "repo_url": "", + "package_registry": "", + "marketplace_url": "" + }, + { + "entity_id": "aspnet-core", + "display_name": "ASP.NET Core", + "root_system_id": "aspnet-core", + "entity_type": "system", + "latest_version": "", + "repo_url": "", + "package_registry": "", + "marketplace_url": "" + }, + { + "entity_id": "express", + "display_name": "Express", + "root_system_id": "express", + "entity_type": "system", + "latest_version": "", + "repo_url": "", + "package_registry": "", + "marketplace_url": "" + }, + { + "entity_id": "gitea", + "display_name": "Gitea", + "root_system_id": "gitea", + "entity_type": "system", + "latest_version": "", + "repo_url": "", + "package_registry": "", + "marketplace_url": "" + }, + { + "entity_id": "grafana", + "display_name": "Grafana", + "root_system_id": "grafana", + "entity_type": "system", + "latest_version": "", + "repo_url": "", + "package_registry": "", + "marketplace_url": "" + }, + { + "entity_id": "jenkins", + "display_name": "Jenkins", + "root_system_id": "jenkins", + "entity_type": "system", + "latest_version": "", + "repo_url": "", + "package_registry": "", + "marketplace_url": "" + }, + { + "entity_id": "kibana", + "display_name": "Kibana", + "root_system_id": "kibana", + "entity_type": "system", + "latest_version": "", + "repo_url": "", + "package_registry": "", + "marketplace_url": "" + }, + { + "entity_id": "medusa", + "display_name": "Medusa", + "root_system_id": "medusa", + "entity_type": "system", + "latest_version": "", + "repo_url": "", + "package_registry": "", + "marketplace_url": "" + }, + { + "entity_id": "moodle", + "display_name": "Moodle", + "root_system_id": "moodle", + "entity_type": "system", + "latest_version": "", + "repo_url": "", + "package_registry": "", + "marketplace_url": "" + }, + { + "entity_id": "nestjs", + "display_name": "NestJS", + "root_system_id": "nestjs", + "entity_type": "system", + "latest_version": "", + "repo_url": "", + "package_registry": "", + "marketplace_url": "" + }, + { + "entity_id": "nginx", + "display_name": "Nginx", + "root_system_id": "nginx", + "entity_type": "system", + "latest_version": "", + "repo_url": "", + "package_registry": "", + "marketplace_url": "" + }, + { + "entity_id": "nodejs", + "display_name": "Node.js", + "root_system_id": "nodejs", + "entity_type": "system", + "latest_version": "", + "repo_url": "", + "package_registry": "", + "marketplace_url": "" + }, + { + "entity_id": "spring-framework", + "display_name": "Spring Framework", + "root_system_id": "spring-framework", + "entity_type": "system", + "latest_version": "", + "repo_url": "", + "package_registry": "", + "marketplace_url": "" + }, + { + "entity_id": "webpack", + "display_name": "webpack", + "root_system_id": "webpack", + "entity_type": "system", + "latest_version": "", + "repo_url": "", + "package_registry": "", + "marketplace_url": "" + } + ], + "unresolved_advisories": [ + { + "canonical_id": "adminer--CVE-2026-25878", + "system_id": "adminer", + "title": "CVE-2026-25878", + "official_source_url": "https://github.com/FriendsOfShopware/FroshPlatformAdminer/commit/c4dd6c3462af178b3a7d146d3c651c2c253e902b", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adminer--CVE-2026-25892", + "system_id": "adminer", + "title": "CVE-2026-25892", + "official_source_url": "https://github.com/vrana/adminer/commit/21d3a3150388677b18647d68aec93b7850e457d3", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--047932676d", + "system_id": "adobe-commerce", + "title": "APSB26-05 \u00a0: Security update available for Adobe Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb26-05.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--0a62931b31", + "system_id": "adobe-commerce", + "title": "APSB21-86 \u00a0Security\u202fupdates available\u202ffor Adobe Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb21-86.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--0eb3765231", + "system_id": "adobe-commerce", + "title": "APSB20-22 \u00a0Security\u202fupdates available\u202ffor Magento", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb20-22.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--1040fafca2", + "system_id": "adobe-commerce", + "title": "APSB20-41 \u00a0Security\u202fupdates available\u202ffor Magento", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb20-41.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--1255668bf0", + "system_id": "adobe-commerce", + "title": "APSB24-61 \u00a0: Security update available for Adobe Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-61.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--12ae93f161", + "system_id": "adobe-commerce", + "title": "APSB25-88 : Security update available for Adobe Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb25-88.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--3f204ca99f", + "system_id": "adobe-commerce", + "title": "APSB22-38\u00a0 :\u00a0Security update available for Adobe\u00a0Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--4db71027f6", + "system_id": "adobe-commerce", + "title": "APSB23-42 \u00a0: Security update available for Adobe Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-42.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--5451447fe7", + "system_id": "adobe-commerce", + "title": "APSB21-30 \u00a0Security\u202fupdates available\u202ffor Magento", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb21-30.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--54dc24517c", + "system_id": "adobe-commerce", + "title": "APSB25-26\u00a0 : Security update available for Adobe\u00a0Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb25-26.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--5cb7420cf3", + "system_id": "adobe-commerce", + "title": "Back to top", + "official_source_url": "https://helpx.adobe.com/security/products/magento.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--8c1e29399c", + "system_id": "adobe-commerce", + "title": "APSB24-73\u00a0 :\u00a0Security update available for Adobe Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-73.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--8ecb2a63a5", + "system_id": "adobe-commerce", + "title": "APSB23-17\u00a0 : Security update available for Adobe Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-17.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--933ad16ad5", + "system_id": "adobe-commerce", + "title": "APSB24-18 \u00a0: Security update available for Adobe Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-18.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--934b38c7e3", + "system_id": "adobe-commerce", + "title": "APSB23-50 \u00a0: Security update available for Adobe Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--979640da01", + "system_id": "adobe-commerce", + "title": "APSB23-35 \u00a0:\u00a0Security update available for Adobe Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2021-36035", + "system_id": "adobe-commerce", + "title": "CVE-2021-36035", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb21-64.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2021-39864", + "system_id": "adobe-commerce", + "title": "CVE-2021-39864", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb21-86.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2022-24086", + "system_id": "adobe-commerce", + "title": "CVE-2022-24086", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-12.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2022-24093", + "system_id": "adobe-commerce", + "title": "CVE-2022-24093", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-13.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2022-34253", + "system_id": "adobe-commerce", + "title": "CVE-2022-34253", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2022-34254", + "system_id": "adobe-commerce", + "title": "CVE-2022-34254", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2022-34255", + "system_id": "adobe-commerce", + "title": "CVE-2022-34255", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2022-34256", + "system_id": "adobe-commerce", + "title": "CVE-2022-34256", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2022-34257", + "system_id": "adobe-commerce", + "title": "CVE-2022-34257", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2022-34258", + "system_id": "adobe-commerce", + "title": "CVE-2022-34258", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2022-34259", + "system_id": "adobe-commerce", + "title": "CVE-2022-34259", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2022-35689", + "system_id": "adobe-commerce", + "title": "CVE-2022-35689", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-48.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2022-35692", + "system_id": "adobe-commerce", + "title": "CVE-2022-35692", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2022-35698", + "system_id": "adobe-commerce", + "title": "CVE-2022-35698", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-48.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2022-42344", + "system_id": "adobe-commerce", + "title": "CVE-2022-42344", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-22247", + "system_id": "adobe-commerce", + "title": "CVE-2023-22247", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-17.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-22248", + "system_id": "adobe-commerce", + "title": "CVE-2023-22248", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-22249", + "system_id": "adobe-commerce", + "title": "CVE-2023-22249", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-17.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-22250", + "system_id": "adobe-commerce", + "title": "CVE-2023-22250", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-17.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-22251", + "system_id": "adobe-commerce", + "title": "CVE-2023-22251", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-17.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-26366", + "system_id": "adobe-commerce", + "title": "CVE-2023-26366", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-26367", + "system_id": "adobe-commerce", + "title": "CVE-2023-26367", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-29287", + "system_id": "adobe-commerce", + "title": "CVE-2023-29287", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-29288", + "system_id": "adobe-commerce", + "title": "CVE-2023-29288", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-29289", + "system_id": "adobe-commerce", + "title": "CVE-2023-29289", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-29290", + "system_id": "adobe-commerce", + "title": "CVE-2023-29290", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-29291", + "system_id": "adobe-commerce", + "title": "CVE-2023-29291", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-29292", + "system_id": "adobe-commerce", + "title": "CVE-2023-29292", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-29293", + "system_id": "adobe-commerce", + "title": "CVE-2023-29293", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-29294", + "system_id": "adobe-commerce", + "title": "CVE-2023-29294", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-29295", + "system_id": "adobe-commerce", + "title": "CVE-2023-29295", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-29296", + "system_id": "adobe-commerce", + "title": "CVE-2023-29296", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-29297", + "system_id": "adobe-commerce", + "title": "CVE-2023-29297", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-38207", + "system_id": "adobe-commerce", + "title": "CVE-2023-38207", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-42.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-38208", + "system_id": "adobe-commerce", + "title": "CVE-2023-38208", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-42.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-38209", + "system_id": "adobe-commerce", + "title": "CVE-2023-38209", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-42.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-38218", + "system_id": "adobe-commerce", + "title": "CVE-2023-38218", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-38219", + "system_id": "adobe-commerce", + "title": "CVE-2023-38219", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-38220", + "system_id": "adobe-commerce", + "title": "CVE-2023-38220", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-38221", + "system_id": "adobe-commerce", + "title": "CVE-2023-38221", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-38249", + "system_id": "adobe-commerce", + "title": "CVE-2023-38249", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-38250", + "system_id": "adobe-commerce", + "title": "CVE-2023-38250", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2023-38251", + "system_id": "adobe-commerce", + "title": "CVE-2023-38251", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2024-20716", + "system_id": "adobe-commerce", + "title": "CVE-2024-20716", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-03.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2024-20717", + "system_id": "adobe-commerce", + "title": "CVE-2024-20717", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-03.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2024-20718", + "system_id": "adobe-commerce", + "title": "CVE-2024-20718", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-03.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2024-20719", + "system_id": "adobe-commerce", + "title": "CVE-2024-20719", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-03.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2024-20720", + "system_id": "adobe-commerce", + "title": "CVE-2024-20720", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-03.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2024-20758", + "system_id": "adobe-commerce", + "title": "CVE-2024-20758", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-18.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--CVE-2024-20759", + "system_id": "adobe-commerce", + "title": "CVE-2024-20759", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-18.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--a0a29ab7eb", + "system_id": "adobe-commerce", + "title": "APSB25-71\u00a0 : Security update available for Adobe Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb25-71.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--a5f12e77b4", + "system_id": "adobe-commerce", + "title": "APSB22-12 \u00a0Security\u202fupdates available\u202ffor Magento", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-12.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--a7b623e0d8", + "system_id": "adobe-commerce", + "title": "APSB21-08 \u00a0Security\u202fupdates available\u202ffor Magento", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb21-08.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--ac73b00a05", + "system_id": "adobe-commerce", + "title": "APSB24-40 \u00a0:\u00a0Security update available for Adobe Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-40.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--c1c61771df", + "system_id": "adobe-commerce", + "title": "APSB24-90 :\u00a0Security update available for Adobe Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-90.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--ce8484a7ed", + "system_id": "adobe-commerce", + "title": "APSB25-08\u00a0 : Security update available for Adobe Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb25-08.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--d3476d6b14", + "system_id": "adobe-commerce", + "title": "APSB25-94\u00a0 : Security update available for Adobe Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb25-94.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--d4e4aff8b8", + "system_id": "adobe-commerce", + "title": "APSB22-48 : Security updates available for Adobe Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-48.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--d688572a39", + "system_id": "adobe-commerce", + "title": "APSB20-02 \u00a0Security\u202fupdates available\u202ffor Magento", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb20-02.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--d88dbef013", + "system_id": "adobe-commerce", + "title": "APSB20-59 \u00a0Security\u202fupdates available\u202ffor Magento", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb20-59.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--da91b15885", + "system_id": "adobe-commerce", + "title": "APSB22-13 \u00a0:\u00a0Security update available for Adobe Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-13.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--ef1f4e7ed5", + "system_id": "adobe-commerce", + "title": "APSB21-64 \u00a0Security\u202fupdates available\u202ffor Magento", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb21-64.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--f2ffd83268", + "system_id": "adobe-commerce", + "title": "APSB25-50\u00a0: Security update available for Adobe Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb25-50.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--f35cbfee30", + "system_id": "adobe-commerce", + "title": "APSB24-03 \u00a0: Security update available for Adobe Commerce", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-03.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "adobe-commerce--fc2e2dc6d1", + "system_id": "adobe-commerce", + "title": "APSB20-47 \u00a0Security\u202fupdates available\u202ffor Magento", + "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb20-47.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--02cba8895c", + "system_id": "apache-httpd", + "title": "libapreq", + "official_source_url": "https://httpd.apache.org/apreq/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--05cc1afdb1", + "system_id": "apache-httpd", + "title": "Trunk", + "official_source_url": "https://svn.apache.org/viewvc/httpd/httpd/trunk/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--07805b501b", + "system_id": "apache-httpd", + "title": "CVE-2025-59775", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2025-59775", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--0a6be3d9f9", + "system_id": "apache-httpd", + "title": "CVE-2022-28330", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2022-28330", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--0bc105963e", + "system_id": "apache-httpd", + "title": "Documentation", + "official_source_url": "https://httpd.apache.org/docs/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--0ca4c19a23", + "system_id": "apache-httpd", + "title": "CVE-2024-38473", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-38473", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--0dbcc731e3", + "system_id": "apache-httpd", + "title": "Flood", + "official_source_url": "https://httpd.apache.org/test/flood/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--0e5b8af55a", + "system_id": "apache-httpd", + "title": "Mailing Lists", + "official_source_url": "https://httpd.apache.org/lists.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--101f2d16a4", + "system_id": "apache-httpd", + "title": "CVE-2024-40725", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-40725", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--1110a7f1d2", + "system_id": "apache-httpd", + "title": "CVE-2024-38472", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-38472", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--172cdd59be", + "system_id": "apache-httpd", + "title": "CVE-2025-66200", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2025-66200", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--1afb0f2b13", + "system_id": "apache-httpd", + "title": "Wiki", + "official_source_url": "https://wiki.apache.org/httpd/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--1c11edba84", + "system_id": "apache-httpd", + "title": "CVE-2025-54090", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2025-54090", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--1e9218e776", + "system_id": "apache-httpd", + "title": "impact rating", + "official_source_url": "https://httpd.apache.org/security/impact_levels.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--20376e1d55", + "system_id": "apache-httpd", + "title": "CVE-2024-47252", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-47252", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--203c36ee66", + "system_id": "apache-httpd", + "title": "CVE-2025-23048", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2025-23048", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--219b6d2e94", + "system_id": "apache-httpd", + "title": "CVE-2025-55753", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2025-55753", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--22307e5b33", + "system_id": "apache-httpd", + "title": "Sponsorship", + "official_source_url": "https://www.apache.org/foundation/sponsorship.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--22e8d8544b", + "system_id": "apache-httpd", + "title": "FAQ", + "official_source_url": "https://wiki.apache.org/httpd/FAQ", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--23cd71d5dd", + "system_id": "apache-httpd", + "title": "mod_fcgid", + "official_source_url": "https://httpd.apache.org/mod_fcgid/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--276abef65c", + "system_id": "apache-httpd", + "title": "Miscellaneous", + "official_source_url": "https://httpd.apache.org/info/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--2ba0a72733", + "system_id": "apache-httpd", + "title": "CVE-2024-43204", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-43204", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--2bc69387c4", + "system_id": "apache-httpd", + "title": "Download!", + "official_source_url": "https://httpd.apache.org/download.cgi", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--2bf906b1f1", + "system_id": "apache-httpd", + "title": "Apache Traffic Control", + "official_source_url": "https://trafficcontrol.apache.org/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--2d0d84c490", + "system_id": "apache-httpd", + "title": "User Support", + "official_source_url": "https://httpd.apache.org/support.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--2d92c01d3d", + "system_id": "apache-httpd", + "title": "Trunk (dev)", + "official_source_url": "https://httpd.apache.org/docs/trunk/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--2f5a1a9d6e", + "system_id": "apache-httpd", + "title": "APR", + "official_source_url": "https://apr.apache.org/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--331bc084fd", + "system_id": "apache-httpd", + "title": "Contributors", + "official_source_url": "https://httpd.apache.org/contributors/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--34efd686fd", + "system_id": "apache-httpd", + "title": "CVE-2023-27522", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2023-27522", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--39b0a97f1b", + "system_id": "apache-httpd", + "title": "CVE-2023-43622", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2023-43622", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--3abbe322bc", + "system_id": "apache-httpd", + "title": "CVE-2024-42516", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-42516", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--414d53727b", + "system_id": "apache-httpd", + "title": "CVE-2024-40898", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-40898", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--4c276fa297", + "system_id": "apache-httpd", + "title": "Version 2.4", + "official_source_url": "https://httpd.apache.org/docs/2.4/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--4f2f2006f0", + "system_id": "apache-httpd", + "title": "CVE-2023-25690", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2023-25690", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--53ed5e694b", + "system_id": "apache-httpd", + "title": "CVE-2006-20001", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2006-20001", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--54f4c83f62", + "system_id": "apache-httpd", + "title": "CVE-2024-24795", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-24795", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--597e01ff2b", + "system_id": "apache-httpd", + "title": "mod_perl", + "official_source_url": "https://perl.apache.org/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--62f6b74275", + "system_id": "apache-httpd", + "title": "Tomcat", + "official_source_url": "https://tomcat.apache.org/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--63991a76ba", + "system_id": "apache-httpd", + "title": "CVE-2025-53020", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2025-53020", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--66951029b9", + "system_id": "apache-httpd", + "title": "CVE-2024-27316", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-27316", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--67f45a8c73", + "system_id": "apache-httpd", + "title": "Security Reports", + "official_source_url": "https://httpd.apache.org/security_report.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--7235782431", + "system_id": "apache-httpd", + "title": "CVE-2025-65082", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2025-65082", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--72c286c42f", + "system_id": "apache-httpd", + "title": "CVE-2023-38709", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2023-38709", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--72d0a9488a", + "system_id": "apache-httpd", + "title": "Apache Traffic Server", + "official_source_url": "https://trafficserver.apache.org/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--743aad06f7", + "system_id": "apache-httpd", + "title": "CVE-2024-39573", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-39573", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--77dc43b9bd", + "system_id": "apache-httpd", + "title": "CVE-2022-30556", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2022-30556", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--7ebb8cbaf7", + "system_id": "apache-httpd", + "title": "Test", + "official_source_url": "https://httpd.apache.org/test/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--8021fd91fe", + "system_id": "apache-httpd", + "title": "General Information", + "official_source_url": "https://httpd.apache.org/dev/devnotes.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--865fc55d60", + "system_id": "apache-httpd", + "title": "CVE-2025-49630", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2025-49630", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--89048ff274", + "system_id": "apache-httpd", + "title": "mod_ftp", + "official_source_url": "https://httpd.apache.org/mod_ftp/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--8c1c4a9f69", + "system_id": "apache-httpd", + "title": "CVE-2022-36760", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2022-36760", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--8cb5b0c11c", + "system_id": "apache-httpd", + "title": "CVE-2025-58098", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2025-58098", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--933f3c3296", + "system_id": "apache-httpd", + "title": "CVE-2024-43394", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-43394", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--9351ed6cb8", + "system_id": "apache-httpd", + "title": "CVE-2024-36387", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-36387", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--9374eed004", + "system_id": "apache-httpd", + "title": "CVE-2023-31122", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2023-31122", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--9b89d11a37", + "system_id": "apache-httpd", + "title": "CVE-2022-26377", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2022-26377", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--9c906c368b", + "system_id": "apache-httpd", + "title": "Thanks!", + "official_source_url": "https://www.apache.org/foundation/thanks.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-1999-1412", + "system_id": "apache-httpd", + "title": "CVE-1999-1412", + "official_source_url": "http://www.securityfocus.com/archive/1/14215", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2000-0505", + "system_id": "apache-httpd", + "title": "CVE-2000-0505", + "official_source_url": "http://www.securityfocus.com/bid/1284", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2000-1168", + "system_id": "apache-httpd", + "title": "CVE-2000-1168", + "official_source_url": "http://marc.info/?l=bugtraq&m=97502498610979&w=2", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2001-1556", + "system_id": "apache-httpd", + "title": "CVE-2001-1556", + "official_source_url": "http://archives.neohapsis.com/archives/bugtraq/2001-10/0231.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2002-0240", + "system_id": "apache-httpd", + "title": "CVE-2002-0240", + "official_source_url": "http://marc.info/?l=bugtraq&m=101311746611160&w=2", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2002-1157", + "system_id": "apache-httpd", + "title": "CVE-2002-1157", + "official_source_url": "http://archives.neohapsis.com/archives/bugtraq/2002-10/0374.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2002-1793", + "system_id": "apache-httpd", + "title": "CVE-2002-1793", + "official_source_url": "http://online.securityfocus.com/advisories/4502", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2002-2007", + "system_id": "apache-httpd", + "title": "CVE-2002-2007", + "official_source_url": "http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00272.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2003-0249", + "system_id": "apache-httpd", + "title": "CVE-2003-0249", + "official_source_url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=97", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2003-1307", + "system_id": "apache-httpd", + "title": "CVE-2003-1307", + "official_source_url": "http://bugs.php.net/38915", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2003-1418", + "system_id": "apache-httpd", + "title": "CVE-2003-1418", + "official_source_url": "http://www.openbsd.org/errata32.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2004-0113", + "system_id": "apache-httpd", + "title": "CVE-2004-0113", + "official_source_url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000839", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2004-0646", + "system_id": "apache-httpd", + "title": "CVE-2004-0646", + "official_source_url": "http://secunia.com/advisories/12647/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2004-2115", + "system_id": "apache-httpd", + "title": "CVE-2004-2115", + "official_source_url": "http://marc.info/?l=bugtraq&m=107496560106967&w=2", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2004-2343", + "system_id": "apache-httpd", + "title": "CVE-2004-2343", + "official_source_url": "http://archives.neohapsis.com/archives/bugtraq/2004-02/0043.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2005-2088", + "system_id": "apache-httpd", + "title": "CVE-2005-2088", + "official_source_url": "http://docs.info.apple.com/article.html?artnum=302847", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2005-3630", + "system_id": "apache-httpd", + "title": "CVE-2005-3630", + "official_source_url": "http://directory.fedora.redhat.com/wiki/FDS10Announcement", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2005-4814", + "system_id": "apache-httpd", + "title": "CVE-2005-4814", + "official_source_url": "http://sourceforge.net/project/shownotes.php?release_id=456920&group_id=82171", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2006-2330", + "system_id": "apache-httpd", + "title": "CVE-2006-2330", + "official_source_url": "http://secunia.com/advisories/19992", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2006-3918", + "system_id": "apache-httpd", + "title": "CVE-2006-3918", + "official_source_url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2006-4004", + "system_id": "apache-httpd", + "title": "CVE-2006-4004", + "official_source_url": "http://secunia.com/advisories/21287", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2006-4191", + "system_id": "apache-httpd", + "title": "CVE-2006-4191", + "official_source_url": "http://retrogod.altervista.org/xmb_196_sql.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2006-4558", + "system_id": "apache-httpd", + "title": "CVE-2006-4558", + "official_source_url": "http://archives.neohapsis.com/archives/bugtraq/2006-05/0318.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2006-4625", + "system_id": "apache-httpd", + "title": "CVE-2006-4625", + "official_source_url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2006-4636", + "system_id": "apache-httpd", + "title": "CVE-2006-4636", + "official_source_url": "http://secunia.com/advisories/21753", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2006-5263", + "system_id": "apache-httpd", + "title": "CVE-2006-5263", + "official_source_url": "http://secunia.com/advisories/22346", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2006-5733", + "system_id": "apache-httpd", + "title": "CVE-2006-5733", + "official_source_url": "http://community.postnuke.com/Article2787.htm", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2006-5894", + "system_id": "apache-httpd", + "title": "CVE-2006-5894", + "official_source_url": "http://secunia.com/advisories/22847", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2006-6047", + "system_id": "apache-httpd", + "title": "CVE-2006-6047", + "official_source_url": "http://secunia.com/advisories/22885", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2006-6390", + "system_id": "apache-httpd", + "title": "CVE-2006-6390", + "official_source_url": "http://secunia.com/advisories/23168", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2006-6445", + "system_id": "apache-httpd", + "title": "CVE-2006-6445", + "official_source_url": "http://www.securityfocus.com/bid/21413", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2006-6613", + "system_id": "apache-httpd", + "title": "CVE-2006-6613", + "official_source_url": "http://www.securityfocus.com/bid/21519", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2006-6869", + "system_id": "apache-httpd", + "title": "CVE-2006-6869", + "official_source_url": "http://www.securityfocus.com/bid/21837", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2006-7098", + "system_id": "apache-httpd", + "title": "CVE-2006-7098", + "official_source_url": "http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0579.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2007-0086", + "system_id": "apache-httpd", + "title": "CVE-2007-0086", + "official_source_url": "http://osvdb.org/33456", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2007-0098", + "system_id": "apache-httpd", + "title": "CVE-2007-0098", + "official_source_url": "http://osvdb.org/32352", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2007-0173", + "system_id": "apache-httpd", + "title": "CVE-2007-0173", + "official_source_url": "http://osvdb.org/35914", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2007-0419", + "system_id": "apache-httpd", + "title": "CVE-2007-0419", + "official_source_url": "http://dev2dev.bea.com/pub/advisory/213", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2007-0450", + "system_id": "apache-httpd", + "title": "CVE-2007-0450", + "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2007-0637", + "system_id": "apache-httpd", + "title": "CVE-2007-0637", + "official_source_url": "http://osvdb.org/33033", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2007-1524", + "system_id": "apache-httpd", + "title": "CVE-2007-1524", + "official_source_url": "http://secunia.com/advisories/24520", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2007-1577", + "system_id": "apache-httpd", + "title": "CVE-2007-1577", + "official_source_url": "http://www.osvdb.org/33776", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2007-1633", + "system_id": "apache-httpd", + "title": "CVE-2007-1633", + "official_source_url": "http://osvdb.org/38599", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2007-1720", + "system_id": "apache-httpd", + "title": "CVE-2007-1720", + "official_source_url": "http://osvdb.org/36572", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2007-1741", + "system_id": "apache-httpd", + "title": "CVE-2007-1741", + "official_source_url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=511", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2007-1742", + "system_id": "apache-httpd", + "title": "CVE-2007-1742", + "official_source_url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=511", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2007-1743", + "system_id": "apache-httpd", + "title": "CVE-2007-1743", + "official_source_url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=511", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2007-1801", + "system_id": "apache-httpd", + "title": "CVE-2007-1801", + "official_source_url": "http://osvdb.org/35458", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2007-1842", + "system_id": "apache-httpd", + "title": "CVE-2007-1842", + "official_source_url": "http://kldp.net/plugins/scmcvs/cvsweb.php/jsboard-2/login.php.diff?r1=1.8%3Br2=1.9%3Bcvsroot=jsboard", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2007-1860", + "system_id": "apache-httpd", + "title": "CVE-2007-1860", + "official_source_url": "http://docs.info.apple.com/article.html?artnum=306172", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2019-0211", + "system_id": "apache-httpd", + "title": "Apache HTTP Server Privilege Escalation Vulnerability", + "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2021-40438", + "system_id": "apache-httpd", + "title": "Apache HTTP Server-Side Request Forgery (SSRF)", + "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2021-41773", + "system_id": "apache-httpd", + "title": "Apache HTTP Server Path Traversal Vulnerability", + "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2021-42013", + "system_id": "apache-httpd", + "title": "Apache HTTP Server Path Traversal Vulnerability", + "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--CVE-2024-38475", + "system_id": "apache-httpd", + "title": "Apache HTTP Server Improper Escaping of Output Vulnerability", + "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--a17785142a", + "system_id": "apache-httpd", + "title": "CVE-2022-28615", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2022-28615", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--a45c30ecd9", + "system_id": "apache-httpd", + "title": "License", + "official_source_url": "https://www.apache.org/licenses/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--a621acb133", + "system_id": "apache-httpd", + "title": "Docs", + "official_source_url": "https://httpd.apache.org/docs-project/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--a8a1854523", + "system_id": "apache-httpd", + "title": "CVE-2024-38474", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-38474", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--aacfaa6a80", + "system_id": "apache-httpd", + "title": "Developer Info", + "official_source_url": "https://httpd.apache.org/dev/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--aca919348b", + "system_id": "apache-httpd", + "title": "Bug Reports", + "official_source_url": "https://httpd.apache.org/bug_report.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--b61c783667", + "system_id": "apache-httpd", + "title": "CVE-2024-38477", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-38477", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--c63da36498", + "system_id": "apache-httpd", + "title": "CVE-2022-29404", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2022-29404", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--c6691454bc", + "system_id": "apache-httpd", + "title": "Apache httpd 2.2 vulnerabilities list", + "official_source_url": "https://httpd.apache.org/security/vulnerabilities_22.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--d0e22d65d1", + "system_id": "apache-httpd", + "title": "CVE-2022-37436", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2022-37436", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--d64723cb44", + "system_id": "apache-httpd", + "title": "Get Involved", + "official_source_url": "https://httpd.apache.org/contribute/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--daa9023ed5", + "system_id": "apache-httpd", + "title": "\u00b6", + "official_source_url": "https://httpd.apache.org/security/vulnerabilities_24.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--dd0bd113b7", + "system_id": "apache-httpd", + "title": "CVE-2023-45802", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2023-45802", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--de25fcbe49", + "system_id": "apache-httpd", + "title": "CVE-2024-38476", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-38476", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--e18cad1aed", + "system_id": "apache-httpd", + "title": "2.4", + "official_source_url": "https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--e3be78f3ce", + "system_id": "apache-httpd", + "title": "CVE-2024-39884", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-39884", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--e4fc049559", + "system_id": "apache-httpd", + "title": "Privacy", + "official_source_url": "https://www.apache.org/foundation/policies/privacy.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--eb473e3585", + "system_id": "apache-httpd", + "title": "About", + "official_source_url": "https://httpd.apache.org/ABOUT_APACHE.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--f0745e0763", + "system_id": "apache-httpd", + "title": "CVE-2022-28614", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2022-28614", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--f7a4b946cb", + "system_id": "apache-httpd", + "title": "Modules", + "official_source_url": "https://httpd.apache.org/modules", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--f8fa380112", + "system_id": "apache-httpd", + "title": "CVE-2024-38475", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-38475", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--fb4f0f6f89", + "system_id": "apache-httpd", + "title": "CVE-2022-30522", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2022-30522", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-httpd--fe666b8dc0", + "system_id": "apache-httpd", + "title": "CVE-2025-49812", + "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2025-49812", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--011725d3b7", + "system_id": "apache-tomcat", + "title": "5053fa82", + "official_source_url": "https://github.com/apache/tomcat/commit/5053fa82a1b2b52756810601227984a8b71888a4", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--049b7d0382", + "system_id": "apache-tomcat", + "title": "CVE-2025-48989", + "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48989", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--0a3c261703", + "system_id": "apache-tomcat", + "title": "CVE-2025-48988", + "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48988", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--0ca9da9c59", + "system_id": "apache-tomcat", + "title": "Taglibs", + "official_source_url": "https://tomcat.apache.org/taglibs.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--118d55a36a", + "system_id": "apache-tomcat", + "title": "238d2aa5", + "official_source_url": "https://github.com/apache/tomcat/commit/238d2aa54b99f91d1111467e2237d2244c64e558", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--13118e2458", + "system_id": "apache-tomcat", + "title": "Tomcat 9", + "official_source_url": "https://tomcat.apache.org/download-90.cgi", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--149d716532", + "system_id": "apache-tomcat", + "title": "af6e9181", + "official_source_url": "https://github.com/apache/tomcat/commit/af6e9181620304c0d818121c29c074e1330610d0", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--1ca9fd2888", + "system_id": "apache-tomcat", + "title": "2aa62612", + "official_source_url": "https://github.com/apache/tomcat/commit/2aa6261276ebe50b99276953591e3a2be7898bdb", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--1f1e953630", + "system_id": "apache-tomcat", + "title": "Tomcat 9.0", + "official_source_url": "https://tomcat.apache.org/tomcat-9.0-doc/index.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--207b10584e", + "system_id": "apache-tomcat", + "title": "CVE-2026-24734", + "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24734", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--242cf7a166", + "system_id": "apache-tomcat", + "title": "Presentations", + "official_source_url": "https://tomcat.apache.org/presentations.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--2ffc2aa787", + "system_id": "apache-tomcat", + "title": "CVE-2026-24733", + "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24733", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--32ce70ac24", + "system_id": "apache-tomcat", + "title": "130d36d8", + "official_source_url": "https://github.com/apache/tomcat/commit/130d36d8492ef9e4eb22952c17c92423cb35fd06", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--33b187389a", + "system_id": "apache-tomcat", + "title": "Tomcat 10.1", + "official_source_url": "https://tomcat.apache.org/tomcat-10.1-doc/index.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--3467b45391", + "system_id": "apache-tomcat", + "title": "Tomcat Native", + "official_source_url": "https://tomcat.apache.org/download-native.cgi", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--35abb36510", + "system_id": "apache-tomcat", + "title": "Tomcat Native 2", + "official_source_url": "https://tomcat.apache.org/native-doc/index.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--3fc96befd0", + "system_id": "apache-tomcat", + "title": "building.html", + "official_source_url": "https://tomcat.apache.org/tomcat-10.0-doc/building.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--41118a6375", + "system_id": "apache-tomcat", + "title": "667ddd76", + "official_source_url": "https://github.com/apache/tomcat/commit/667ddd76e2a0e762f3a784d86f0d25e7fd7cdb86", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--4d22e4456b", + "system_id": "apache-tomcat", + "title": "8621e4c6", + "official_source_url": "https://github.com/apache/tomcat/commit/8621e4c6ba2c916a41eb34cb0f781171ead33fb6", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--524fcf3503", + "system_id": "apache-tomcat", + "title": "Tomcat Connectors", + "official_source_url": "https://tomcat.apache.org/connectors-doc/index.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--55e780c0ef", + "system_id": "apache-tomcat", + "title": "CVE-2025-52520", + "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52520", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--57d32a8906", + "system_id": "apache-tomcat", + "title": "Which version?", + "official_source_url": "https://tomcat.apache.org/whichversion.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--583e0f80f0", + "system_id": "apache-tomcat", + "title": "Tools", + "official_source_url": "https://tomcat.apache.org/tools.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--5bcb504893", + "system_id": "apache-tomcat", + "title": "Mailing Lists", + "official_source_url": "https://tomcat.apache.org/lists.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--5de2d17648", + "system_id": "apache-tomcat", + "title": "73c04a10", + "official_source_url": "https://github.com/apache/tomcat/commit/73c04a10395774bda71a0b37802cf983662ce255", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--5e02bf0896", + "system_id": "apache-tomcat", + "title": "Who We Are", + "official_source_url": "https://tomcat.apache.org/whoweare.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--5e7ef9af14", + "system_id": "apache-tomcat", + "title": "Bug Database", + "official_source_url": "https://tomcat.apache.org/bugreport.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--62347916c4", + "system_id": "apache-tomcat", + "title": "Maven Plugin", + "official_source_url": "https://tomcat.apache.org/maven-plugin.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--656b24de26", + "system_id": "apache-tomcat", + "title": "Legal", + "official_source_url": "https://tomcat.apache.org/legal.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--66500f6f9d", + "system_id": "apache-tomcat", + "title": "CVE-2025-61795", + "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61795", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--69f233a427", + "system_id": "apache-tomcat", + "title": "CVE-2025-49125", + "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49125", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--6cb0b97c81", + "system_id": "apache-tomcat", + "title": "Tomcat Connectors", + "official_source_url": "https://tomcat.apache.org/download-connectors.cgi", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--7362e5d6ec", + "system_id": "apache-tomcat", + "title": "CVE-2025-48976", + "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48976", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--743c78dd96", + "system_id": "apache-tomcat", + "title": "Security Considerations", + "official_source_url": "https://tomcat.apache.org/tomcat-10.0-doc/security-howto.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--745679753c", + "system_id": "apache-tomcat", + "title": "972f9a5e", + "official_source_url": "https://github.com/apache/tomcat/commit/972f9a5e2a07674d92610c478aac1b205d60724e", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--7714a24368", + "system_id": "apache-tomcat", + "title": "138d7f5c", + "official_source_url": "https://github.com/apache/tomcat/commit/138d7f5cfaae683078948303333c080e6faa75d2", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--7d8dd36663", + "system_id": "apache-tomcat", + "title": "Tomcat Native 1.3", + "official_source_url": "https://tomcat.apache.org/native-1.3-doc/index.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--85a3b9b4c9", + "system_id": "apache-tomcat", + "title": "security impact rating", + "official_source_url": "https://tomcat.apache.org/security-impact.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--86b167c195", + "system_id": "apache-tomcat", + "title": "Contact", + "official_source_url": "https://tomcat.apache.org/contact.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--8cf8505808", + "system_id": "apache-tomcat", + "title": "Home", + "official_source_url": "https://tomcat.apache.org/index.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--8f448afa4f", + "system_id": "apache-tomcat", + "title": "CVE-2025-55754", + "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55754", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--91d886494d", + "system_id": "apache-tomcat", + "title": "Blog", + "official_source_url": "https://blogs.apache.org/tomcat/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--99779e97b3", + "system_id": "apache-tomcat", + "title": "CVE-2025-31651", + "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31651", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--9d2a8987e8", + "system_id": "apache-tomcat", + "title": "066bf6b6", + "official_source_url": "https://github.com/apache/tomcat/commit/066bf6b6a15a4e7e0941d4acf096841165b97098", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2000-0759", + "system_id": "apache-tomcat", + "title": "CVE-2000-0759", + "official_source_url": "http://www.iss.net/security_center/static/4967.php", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2000-0760", + "system_id": "apache-tomcat", + "title": "CVE-2000-0760", + "official_source_url": "http://www.securityfocus.com/bid/1532", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2000-1210", + "system_id": "apache-tomcat", + "title": "CVE-2000-1210", + "official_source_url": "http://marc.info/?l=bugtraq&m=95371672300045&w=2", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2001-0590", + "system_id": "apache-tomcat", + "title": "CVE-2001-0590", + "official_source_url": "http://archives.neohapsis.com/archives/bugtraq/2001-04/0031.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2001-0829", + "system_id": "apache-tomcat", + "title": "CVE-2001-0829", + "official_source_url": "http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2002-0493", + "system_id": "apache-tomcat", + "title": "CVE-2002-0493", + "official_source_url": "http://marc.info/?l=bugtraq&m=101709002410365&w=2", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2002-0682", + "system_id": "apache-tomcat", + "title": "CVE-2002-0682", + "official_source_url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0014.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2002-0935", + "system_id": "apache-tomcat", + "title": "CVE-2002-0935", + "official_source_url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0120.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2002-1394", + "system_id": "apache-tomcat", + "title": "CVE-2002-1394", + "official_source_url": "http://issues.apache.org/bugzilla/show_bug.cgi?id=13365", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2002-1567", + "system_id": "apache-tomcat", + "title": "CVE-2002-1567", + "official_source_url": "http://archives.neohapsis.com/archives/vuln-dev/2002-q3/0482.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2002-1895", + "system_id": "apache-tomcat", + "title": "CVE-2002-1895", + "official_source_url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0020.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2002-2006", + "system_id": "apache-tomcat", + "title": "CVE-2002-2006", + "official_source_url": "http://archives.neohapsis.com/archives/bugtraq/2002-04/0311.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2002-2007", + "system_id": "apache-tomcat", + "title": "CVE-2002-2007", + "official_source_url": "http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00272.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2002-2008", + "system_id": "apache-tomcat", + "title": "CVE-2002-2008", + "official_source_url": "http://archives.neohapsis.com/archives/bugtraq/2002-06/0225.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2002-2009", + "system_id": "apache-tomcat", + "title": "CVE-2002-2009", + "official_source_url": "http://tomcat.apache.org/security-4.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2002-2272", + "system_id": "apache-tomcat", + "title": "CVE-2002-2272", + "official_source_url": "http://archives.neohapsis.com/archives/bugtraq/2002-12/0045.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2005-0808", + "system_id": "apache-tomcat", + "title": "CVE-2005-0808", + "official_source_url": "http://www.hitachi-support.com/security_e/vuls_e/HS05-006_e/index-e.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2005-1753", + "system_id": "apache-tomcat", + "title": "CVE-2005-1753", + "official_source_url": "http://marc.info/?l=bugtraq&m=111697083812367&w=2", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2005-1754", + "system_id": "apache-tomcat", + "title": "CVE-2005-1754", + "official_source_url": "http://marc.info/?l=bugtraq&m=111697083812367&w=2", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2005-3164", + "system_id": "apache-tomcat", + "title": "CVE-2005-3164", + "official_source_url": "http://jvn.jp/jp/JVN%2379314822/index.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2005-3510", + "system_id": "apache-tomcat", + "title": "CVE-2005-3510", + "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2005-4703", + "system_id": "apache-tomcat", + "title": "CVE-2005-4703", + "official_source_url": "http://osvdb.org/ref/20/20033-tomcat-dos-path_disclosure.txt", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2005-4836", + "system_id": "apache-tomcat", + "title": "CVE-2005-4836", + "official_source_url": "http://tomcat.apache.org/security-4.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2006-3835", + "system_id": "apache-tomcat", + "title": "CVE-2006-3835", + "official_source_url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0467.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2006-7195", + "system_id": "apache-tomcat", + "title": "CVE-2006-7195", + "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2006-7196", + "system_id": "apache-tomcat", + "title": "CVE-2006-7196", + "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2006-7197", + "system_id": "apache-tomcat", + "title": "CVE-2006-7197", + "official_source_url": "http://issues.apache.org/bugzilla/show_bug.cgi?id=38859", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2007-0450", + "system_id": "apache-tomcat", + "title": "CVE-2007-0450", + "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2007-0774", + "system_id": "apache-tomcat", + "title": "CVE-2007-0774", + "official_source_url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2007-1358", + "system_id": "apache-tomcat", + "title": "CVE-2007-1358", + "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2007-1491", + "system_id": "apache-tomcat", + "title": "CVE-2007-1491", + "official_source_url": "http://secunia.com/advisories/24434", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2007-1858", + "system_id": "apache-tomcat", + "title": "CVE-2007-1858", + "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2007-1860", + "system_id": "apache-tomcat", + "title": "CVE-2007-1860", + "official_source_url": "http://docs.info.apple.com/article.html?artnum=306172", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2007-2449", + "system_id": "apache-tomcat", + "title": "CVE-2007-2449", + "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2007-2450", + "system_id": "apache-tomcat", + "title": "CVE-2007-2450", + "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2007-3382", + "system_id": "apache-tomcat", + "title": "CVE-2007-3382", + "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2007-3383", + "system_id": "apache-tomcat", + "title": "CVE-2007-3383", + "official_source_url": "http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2007-3384", + "system_id": "apache-tomcat", + "title": "CVE-2007-3384", + "official_source_url": "http://osvdb.org/39035", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2007-3385", + "system_id": "apache-tomcat", + "title": "CVE-2007-3385", + "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2007-3386", + "system_id": "apache-tomcat", + "title": "CVE-2007-3386", + "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2007-4724", + "system_id": "apache-tomcat", + "title": "CVE-2007-4724", + "official_source_url": "http://archives.neohapsis.com/archives/bugtraq/2007-09/0040.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2007-5333", + "system_id": "apache-tomcat", + "title": "CVE-2007-5333", + "official_source_url": "http://jvn.jp/jp/JVN%2309470767/index.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2007-5342", + "system_id": "apache-tomcat", + "title": "CVE-2007-5342", + "official_source_url": "http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2007-5461", + "system_id": "apache-tomcat", + "title": "CVE-2007-5461", + "official_source_url": "http://geronimo.apache.org/2007/10/18/potential-vulnerability-in-apache-tomcat-webdav-servlet.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2007-6286", + "system_id": "apache-tomcat", + "title": "CVE-2007-6286", + "official_source_url": "http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2008-0002", + "system_id": "apache-tomcat", + "title": "CVE-2008-0002", + "official_source_url": "http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2008-0128", + "system_id": "apache-tomcat", + "title": "CVE-2008-0128", + "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2008-0457", + "system_id": "apache-tomcat", + "title": "CVE-2008-0457", + "official_source_url": "http://secunia.com/advisories/28787", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2008-1232", + "system_id": "apache-tomcat", + "title": "CVE-2008-1232", + "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/06/15/ca20090615-02-ca-service-desk-tomcat-cross-site-scripting-vulnerability.aspx", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2008-1947", + "system_id": "apache-tomcat", + "title": "CVE-2008-1947", + "official_source_url": "http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2016-8735", + "system_id": "apache-tomcat", + "title": "Apache Tomcat Remote Code Execution Vulnerability", + "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2017-12615", + "system_id": "apache-tomcat", + "title": "Apache Tomcat on Windows Remote Code Execution Vulnerability", + "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2017-12617", + "system_id": "apache-tomcat", + "title": "Apache Tomcat Remote Code Execution Vulnerability", + "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2020-1938", + "system_id": "apache-tomcat", + "title": "Apache Tomcat Improper Privilege Management Vulnerability", + "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2021-1498", + "system_id": "apache-tomcat", + "title": "Cisco HyperFlex HX Data Platform Command Injection Vulnerability", + "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--CVE-2025-24813", + "system_id": "apache-tomcat", + "title": "Apache Tomcat Path Equivalence Vulnerability", + "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--a2590dc47b", + "system_id": "apache-tomcat", + "title": "CVE-2025-66614", + "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66614", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--ac3714eb57", + "system_id": "apache-tomcat", + "title": "Migration Guide", + "official_source_url": "https://tomcat.apache.org/migration.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--aea19824c2", + "system_id": "apache-tomcat", + "title": "Tomcat 11.0", + "official_source_url": "https://tomcat.apache.org/tomcat-11.0-doc/index.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--af3c91be5c", + "system_id": "apache-tomcat", + "title": "BUILDING.txt", + "official_source_url": "https://tomcat.apache.org/tomcat-10.0-doc/BUILDING.txt", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--b23c5e35c9", + "system_id": "apache-tomcat", + "title": "CVE-2025-55752", + "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55752", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--b55bb1b121", + "system_id": "apache-tomcat", + "title": "Heritage", + "official_source_url": "https://tomcat.apache.org/heritage.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--b744a50549", + "system_id": "apache-tomcat", + "title": "CVE-2025-55668", + "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55668", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--b7ac0eae42", + "system_id": "apache-tomcat", + "title": "Overview", + "official_source_url": "https://tomcat.apache.org/getinvolved.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--ba168e654b", + "system_id": "apache-tomcat", + "title": "Tomcat 10", + "official_source_url": "https://tomcat.apache.org/download-10.cgi", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--bc806658b3", + "system_id": "apache-tomcat", + "title": "Tomcat 11", + "official_source_url": "https://tomcat.apache.org/download-11.cgi", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--bdde1865a6", + "system_id": "apache-tomcat", + "title": "Security Reports", + "official_source_url": "https://tomcat.apache.org/security.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--c10a63610c", + "system_id": "apache-tomcat", + "title": "end of life", + "official_source_url": "https://tomcat.apache.org/tomcat-10.0-eol.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--c24871aac5", + "system_id": "apache-tomcat", + "title": "Twitter", + "official_source_url": "https://twitter.com/theapachetomcat", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--c470f39b6f", + "system_id": "apache-tomcat", + "title": "Fixed in Apache Tomcat 10.1.52", + "official_source_url": "https://tomcat.apache.org/security-10.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--c8a2e47ea5", + "system_id": "apache-tomcat", + "title": "Wiki", + "official_source_url": "https://cwiki.apache.org/confluence/display/TOMCAT", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--cc1565901e", + "system_id": "apache-tomcat", + "title": "YouTube", + "official_source_url": "https://www.youtube.com/c/ApacheTomcatOfficial", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--ce6ff70ffe", + "system_id": "apache-tomcat", + "title": "CVE-2025-31650", + "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31650", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--cf335ad174", + "system_id": "apache-tomcat", + "title": "cdde8e65", + "official_source_url": "https://github.com/apache/tomcat/commit/cdde8e655bc1c5c60a07efd216251d77c52fd7f6", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--d33b4cbf62", + "system_id": "apache-tomcat", + "title": "CVE-2025-46701", + "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46701", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--d3ce0dca4e", + "system_id": "apache-tomcat", + "title": "Buildbot", + "official_source_url": "https://tomcat.apache.org/ci.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--d9121f9c30", + "system_id": "apache-tomcat", + "title": "Source code", + "official_source_url": "https://tomcat.apache.org/source.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--d9eef50097", + "system_id": "apache-tomcat", + "title": "2c680011", + "official_source_url": "https://github.com/apache/tomcat/commit/2c6800111e7d8d8d5403c07978ea9bff3db5a5a5", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--dc60148766", + "system_id": "apache-tomcat", + "title": "Taglibs", + "official_source_url": "https://tomcat.apache.org/download-taglibs.cgi", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--e0fd2f8d0a", + "system_id": "apache-tomcat", + "title": "Resources", + "official_source_url": "https://tomcat.apache.org/resources.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--e112505b22", + "system_id": "apache-tomcat", + "title": "7617b9c2", + "official_source_url": "https://github.com/apache/tomcat/commit/7617b9c247bc77ed0444dd69adcd8aa48777886c", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--e36bb1c6d7", + "system_id": "apache-tomcat", + "title": "Upgrading", + "official_source_url": "https://tomcat.apache.org/upgrading.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--e4c4769574", + "system_id": "apache-tomcat", + "title": "Find help", + "official_source_url": "https://tomcat.apache.org/findhelp.html", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--e5e80c0a91", + "system_id": "apache-tomcat", + "title": "e0e07812", + "official_source_url": "https://github.com/apache/tomcat/commit/e0e07812224d327a321babb554f5a5758d30cc49", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--e9bbe07c29", + "system_id": "apache-tomcat", + "title": "fc42bbcc", + "official_source_url": "https://github.com/apache/tomcat/commit/fc42bbccb9041fafd194fbfdf3eab1d44cb5c45c", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--eaa9f7ab66", + "system_id": "apache-tomcat", + "title": "CVE-2025-49124", + "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49124", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--ec10641321", + "system_id": "apache-tomcat", + "title": "FAQ", + "official_source_url": "https://cwiki.apache.org/confluence/display/TOMCAT/FAQ", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--f182e5bf64", + "system_id": "apache-tomcat", + "title": "711b465c", + "official_source_url": "https://github.com/apache/tomcat/commit/711b465cf22684a1acf0cb43501cdbbce9b6c5f4", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--f38adeb312", + "system_id": "apache-tomcat", + "title": "Archives", + "official_source_url": "https://archive.apache.org/dist/tomcat/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--f64ec916fb", + "system_id": "apache-tomcat", + "title": "Tomcat Migration Tool for Jakarta EE", + "official_source_url": "https://tomcat.apache.org/download-migration.cgi", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--fc53c949b0", + "system_id": "apache-tomcat", + "title": "Swag", + "official_source_url": "https://www.redbubble.com/people/comdev/works/30885254-apache-tomcat", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "apache-tomcat--ff9ba8aa3b", + "system_id": "apache-tomcat", + "title": "CVE-2025-53506", + "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53506", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "aspnet-core--CVE-2020-1045", + "system_id": "aspnet-core", + "title": "CVE-2020-1045", + "official_source_url": "https://access.redhat.com/errata/RHSA-2020:3699", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "aspnet-core--CVE-2020-1597", + "system_id": "aspnet-core", + "title": "CVE-2020-1597", + "official_source_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WH5FQ5VT3JGHXFXOETHCTBWJUIAPGHHT/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "aspnet-core--CVE-2026-26130", + "system_id": "aspnet-core", + "title": "CVE-2026-26130", + "official_source_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26130", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--0158a8ddd8", + "system_id": "caddy", + "title": "Caddy: MatchHost becomes case-sensitive for large host lists (>100), enabling host-based route/auth bypass", + "official_source_url": "https://github.com/caddyserver/caddy/security/advisories/GHSA-x76f-jf84-rqj8", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--0921003cc6", + "system_id": "caddy", + "title": "Notifications", + "official_source_url": "https://github.com/login?return_to=%2Fcaddyserver%2Fcaddy", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--146569d56a", + "system_id": "caddy", + "title": "mTLS client authentication silently fails open when CA certificate file is missing or malformed", + "official_source_url": "https://github.com/caddyserver/caddy/security/advisories/GHSA-hffm-g8v7-wrv7", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--3b182d7701", + "system_id": "caddy", + "title": "Sign up", + "official_source_url": "https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Frepos%2Fadvisories%2Findex&source=header-repo&source_repo=caddyserver%2Fcaddy", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--44cbfe52c8", + "system_id": "caddy", + "title": "caddy", + "official_source_url": "https://github.com/caddyserver/caddy", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--54eb0db436", + "system_id": "caddy", + "title": "caddyserver", + "official_source_url": "https://github.com/caddyserver", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--6fb600a3f4", + "system_id": "caddy", + "title": "Improper sanitization of glob characters in file matcher may lead to bypassing security protections", + "official_source_url": "https://github.com/caddyserver/caddy/security/advisories/GHSA-4xrr-hq4w-6vf4", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--745ad1485a", + "system_id": "caddy", + "title": "Issues \n 201", + "official_source_url": "https://github.com/caddyserver/caddy/issues", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--752be55ec0", + "system_id": "caddy", + "title": "Security \n 8", + "official_source_url": "https://github.com/caddyserver/caddy/security", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--7c57bb87cf", + "system_id": "caddy", + "title": "Actions", + "official_source_url": "https://github.com/caddyserver/caddy/actions", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--85a3ff1f30", + "system_id": "caddy", + "title": "vars_regexp double-expands user input, leaking env vars and files", + "official_source_url": "https://github.com/caddyserver/caddy/security/advisories/GHSA-m2w3-8f23-hxxf", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--883104fe6c", + "system_id": "caddy", + "title": "Sign in", + "official_source_url": "https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fcaddyserver%2Fcaddy%2Fsecurity%2Fadvisories", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--921b808417", + "system_id": "caddy", + "title": "Caddy: MatchPath %xx (escaped-path) branch skips case normalization, enabling path-based route/auth bypass", + "official_source_url": "https://github.com/caddyserver/caddy/security/advisories/GHSA-g7pc-pc7g-h8jh", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--ade36bbb20", + "system_id": "caddy", + "title": "cross-origin config application via local admin API /load (caddy)", + "official_source_url": "https://github.com/caddyserver/caddy/security/advisories/GHSA-879p-475x-rqh2", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--c52981f5e2", + "system_id": "caddy", + "title": "Unicode case-folding length expansion causes incorrect split_path index (SCRIPT_NAME/PATH_INFO confusion) in FastCGI transport", + "official_source_url": "https://github.com/caddyserver/caddy/security/advisories/GHSA-5r3v-vc8m-m96g", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--cf9582f72a", + "system_id": "caddy", + "title": "Skip to content", + "official_source_url": "https://github.com/caddyserver/caddy/security/advisories", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--e598b86910", + "system_id": "caddy", + "title": "Insights", + "official_source_url": "https://github.com/caddyserver/caddy/pulse", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--e89796c7cf", + "system_id": "caddy", + "title": "Policy", + "official_source_url": "https://github.com/caddyserver/caddy/security/policy", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--f0734ced73", + "system_id": "caddy", + "title": "Pull requests \n 46", + "official_source_url": "https://github.com/caddyserver/caddy/pulls", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--f5135e4d5d", + "system_id": "caddy", + "title": "Caddy forward_auth copy_headers Does Not Strip Client-Supplied Headers, Allowing Identity Injection and Privilege Escalation", + "official_source_url": "https://github.com/caddyserver/caddy/security/advisories/GHSA-7r4p-vjf4-gxv4", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "caddy--fedac463f1", + "system_id": "caddy", + "title": "Report a vulnerability", + "official_source_url": "https://github.com/caddyserver/caddy/security/advisories/new", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--05a97ef95a", + "system_id": "directus", + "title": "Insights", + "official_source_url": "https://github.com/directus/directus/pulse", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--0f0b39c9f0", + "system_id": "directus", + "title": "Open redirect in SAML", + "official_source_url": "https://github.com/directus/directus/security/advisories/GHSA-3573-4c68-g8cc", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--27bdf5ad98", + "system_id": "directus", + "title": "directus", + "official_source_url": "https://github.com/directus", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--2af6171363", + "system_id": "directus", + "title": "Skip to content", + "official_source_url": "https://github.com/directus/directus/security/advisories", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--371ca874bf", + "system_id": "directus", + "title": "Actions", + "official_source_url": "https://github.com/directus/directus/actions", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--42698ca19c", + "system_id": "directus", + "title": "Improper Permission Handling on Deleted Fields in Directus", + "official_source_url": "https://github.com/directus/directus/security/advisories/GHSA-9x5g-62gj-wqf2", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--4894f4700e", + "system_id": "directus", + "title": "5", + "official_source_url": "https://github.com/directus/directus/security/advisories?page=5", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--6171b57605", + "system_id": "directus", + "title": "Projects", + "official_source_url": "https://github.com/directus/directus/projects", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--683f41088d", + "system_id": "directus", + "title": "Conceal fields are searchable if read permissions enabled", + "official_source_url": "https://github.com/directus/directus/security/advisories/GHSA-8jpw-gpr4-8cmh", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--699c51e2fd", + "system_id": "directus", + "title": "Information Leakage: Existing Collections", + "official_source_url": "https://github.com/directus/directus/security/advisories/GHSA-cph6-524f-3hgr", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--6bb5a641ff", + "system_id": "directus", + "title": "User Enumeration via Password Reset Timing Attack", + "official_source_url": "https://github.com/directus/directus/security/advisories/GHSA-jr94-gj3h-c8rf", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--6e0381fffb", + "system_id": "directus", + "title": "3", + "official_source_url": "https://github.com/directus/directus/security/advisories?page=3", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--780d166a7c", + "system_id": "directus", + "title": "Issues \n 344", + "official_source_url": "https://github.com/directus/directus/issues", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--838e2a1aa3", + "system_id": "directus", + "title": "Security \n 46", + "official_source_url": "https://github.com/directus/directus/security", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--8545270cc0", + "system_id": "directus", + "title": "Store XSS", + "official_source_url": "https://github.com/directus/directus/security/advisories/GHSA-vv2v-pw69-8crf", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--8a6ee374c5", + "system_id": "directus", + "title": "Missing permission checks for manual trigger Flows", + "official_source_url": "https://github.com/directus/directus/security/advisories/GHSA-7cvf-pxgp-42fc", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--928c5c25d6", + "system_id": "directus", + "title": "Pull requests \n 40", + "official_source_url": "https://github.com/directus/directus/pulls", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--9ec35d1559", + "system_id": "directus", + "title": "2", + "official_source_url": "https://github.com/directus/directus/security/advisories?page=2", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--ae275563c7", + "system_id": "directus", + "title": "directus", + "official_source_url": "https://github.com/directus/directus", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--ae534d9502", + "system_id": "directus", + "title": "Notifications", + "official_source_url": "https://github.com/login?return_to=%2Fdirectus%2Fdirectus", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--c792942c56", + "system_id": "directus", + "title": "Discussions", + "official_source_url": "https://github.com/directus/directus/discussions", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--c95f7731b4", + "system_id": "directus", + "title": "Unauthenticated file upload and file modification due to lacking input sanitization", + "official_source_url": "https://github.com/directus/directus/security/advisories/GHSA-mv33-9f6j-pfmc", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--cc08335ec9", + "system_id": "directus", + "title": "4", + "official_source_url": "https://github.com/directus/directus/security/advisories?page=4", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--ce991ada6e", + "system_id": "directus", + "title": "Sign up", + "official_source_url": "https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Frepos%2Fadvisories%2Findex&source=header-repo&source_repo=directus%2Fdirectus", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--dbeb181232", + "system_id": "directus", + "title": "S3 assets become unavailable after a burst of malformed transformations", + "official_source_url": "https://github.com/directus/directus/security/advisories/GHSA-j8xj-7jff-46mx", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--ef120db8c2", + "system_id": "directus", + "title": "Report a vulnerability", + "official_source_url": "https://github.com/directus/directus/security/advisories/new", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--f0befb3e4d", + "system_id": "directus", + "title": "Policy", + "official_source_url": "https://github.com/directus/directus/security/policy", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--f2d76edbde", + "system_id": "directus", + "title": "Sign in", + "official_source_url": "https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fdirectus%2Fdirectus%2Fsecurity%2Fadvisories", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "directus--f9abf30989", + "system_id": "directus", + "title": "Directus version number disclosure", + "official_source_url": "https://github.com/directus/directus/security/advisories/GHSA-rmjh-cf9q-pv7q", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--0a6de28d35", + "system_id": "discourse", + "title": "3.5.0.beta7: Smart link editing, better invite tracking, unique icons, and fixing name management", + "official_source_url": "https://meta.discourse.org/t/3-5-0-beta7-smart-link-editing-better-invite-tracking-unique-icons-and-fixing-name-management/370633", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--111e9b52a2", + "system_id": "discourse", + "title": "3.5.0.beta9: Improving color management, core welcome banner, and staff action log filters", + "official_source_url": "https://meta.discourse.org/t/3-5-0-beta9-improving-color-management-core-welcome-banner-and-staff-action-log-filters/379217", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--124fce0a46", + "system_id": "discourse", + "title": "3.5.0.beta4 Security fix release", + "official_source_url": "https://meta.discourse.org/t/3-5-0-beta4-security-fix-release/364850", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--20c3aec988", + "system_id": "discourse", + "title": "3.5.0: Major release", + "official_source_url": "https://meta.discourse.org/t/3-5-0-major-release/379212", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--321c09b9ad", + "system_id": "discourse", + "title": "January 2026 Releases", + "official_source_url": "https://meta.discourse.org/t/january-2026-releases/393903", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--3b96456013", + "system_id": "discourse", + "title": "3.4.0.beta3: Check for updates on What\u2019s New page, filter by user in the review queue, threading in Chat DMs and group chats, and more", + "official_source_url": "https://meta.discourse.org/t/3-4-0-beta3-check-for-updates-on-what-s-new-page-filter-by-user-in-the-review-queue-threading-in-chat-dms-and-group-chats-and-more/343237", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--4222d879a1", + "system_id": "discourse", + "title": "3.4.2: Security and bug fix release", + "official_source_url": "https://meta.discourse.org/t/3-4-2-security-and-bug-fix-release/358152", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--451d4d9871", + "system_id": "discourse", + "title": "3.5.0.beta1: Dark/light mode selector, better flagging info, and encouraging more valuable conversations", + "official_source_url": "https://meta.discourse.org/t/3-5-0-beta1-dark-light-mode-selector-better-flagging-info-and-encouraging-more-valuable-conversations/353246", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--4dbfe76896", + "system_id": "discourse", + "title": "3.5.0.beta6 Security fixes release", + "official_source_url": "https://meta.discourse.org/t/3-5-0-beta6-security-fixes-release/369346", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--5d3cafdece", + "system_id": "discourse", + "title": "Release v2025.11.0: AI translations improvements, chat search, new review queue, and improvements for posts with images", + "official_source_url": "https://meta.discourse.org/t/release-v2025-11-0-ai-translations-improvements-chat-search-new-review-queue-and-improvements-for-posts-with-images/389615", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--5dce90675e", + "system_id": "discourse", + "title": "March 2026 monthly release", + "official_source_url": "https://meta.discourse.org/t/march-2026-monthly-release/399630", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--615bee56ae", + "system_id": "discourse", + "title": "3.4.4: Bug fix and UX release", + "official_source_url": "https://meta.discourse.org/t/3-4-4-bug-fix-and-ux-release/367301", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--6216e2732b", + "system_id": "discourse", + "title": "3.5.2: Security and maintenance release", + "official_source_url": "https://meta.discourse.org/t/3-5-2-security-and-maintenance-release/386388", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--68e2bb93e1", + "system_id": "discourse", + "title": "3.5.0.beta5: Improved admin search, AI forum research, easier site appearance configuration, and simpler plugin development", + "official_source_url": "https://meta.discourse.org/t/3-5-0-beta5-improved-admin-search-ai-forum-research-easier-site-appearance-configuration-and-simpler-plugin-development/367300", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--703d073816", + "system_id": "discourse", + "title": "3.5.0.beta2: Review Queue, Welcome Banner, Admin Interface, and more", + "official_source_url": "https://meta.discourse.org/t/3-5-0-beta2-review-queue-welcome-banner-admin-interface-and-more/358151", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--734b2c6337", + "system_id": "discourse", + "title": "3.4.6: Security fix release", + "official_source_url": "https://meta.discourse.org/t/3-4-6-security-fix-release/370631", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--76d1008283", + "system_id": "discourse", + "title": "Release v2025.11.1: Security and maintenance release", + "official_source_url": "https://meta.discourse.org/t/release-v2025-11-1-security-and-maintenance-release/392356", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--79ee74932d", + "system_id": "discourse", + "title": "3.4.3: Bug fix and UX release", + "official_source_url": "https://meta.discourse.org/t/3-4-3-bug-fix-and-ux-release/362895", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--7dafb7d908", + "system_id": "discourse", + "title": "3.4.0.beta4: Redesigned emojis, exporting user data, flagging illegal content and more", + "official_source_url": "https://meta.discourse.org/t/3-4-0-beta4-redesigned-emojis-exporting-user-data-flagging-illegal-content-and-more/349299", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--88ede35504", + "system_id": "discourse", + "title": "3.4.1: Bug fix and UX release", + "official_source_url": "https://meta.discourse.org/t/3-4-1-bug-fix-and-ux-release/353247", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--8c344d4912", + "system_id": "discourse", + "title": "Release v3.5.3: Security and maintenance release", + "official_source_url": "https://meta.discourse.org/t/release-v3-5-3-security-and-maintenance-release/392357", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--9052caf22d", + "system_id": "discourse", + "title": "3.6.0.beta1: Color palette editing, user fields on sign up, themeable site setting discovery, images with Google AI, and reliable drafts", + "official_source_url": "https://meta.discourse.org/t/3-6-0-beta1-color-palette-editing-user-fields-on-sign-up-themeable-site-setting-discovery-images-with-google-ai-and-reliable-drafts/383509", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--9812e0316d", + "system_id": "discourse", + "title": "3.5.1: Security and maintenance release", + "official_source_url": "https://meta.discourse.org/t/3-5-1-security-and-maintenance-release/383511", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--b0b7e41525", + "system_id": "discourse", + "title": "3.4.7: Security and maintenance release", + "official_source_url": "https://meta.discourse.org/t/3-4-7-security-and-maintenance-release/375747", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--b1f0515c49", + "system_id": "discourse", + "title": "3.3.4: Security and maintenance release", + "official_source_url": "https://meta.discourse.org/t/3-3-4-security-and-maintenance-release/349301", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--b5351f62de", + "system_id": "discourse", + "title": "3.5.0beta3: Full admin search, better font selection, more robust site search, category personalization, and easier configuration management", + "official_source_url": "https://meta.discourse.org/t/3-5-0beta3-full-admin-search-better-font-selection-more-robust-site-search-category-personalization-and-easier-configuration-management/362894", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--be91796fd3", + "system_id": "discourse", + "title": "3.4.5 Security fixes release", + "official_source_url": "https://meta.discourse.org/t/3-4-5-security-fixes-release/369347", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--c407380775", + "system_id": "discourse", + "title": "3.6.0.beta2: Built-in palette editing, live AI translation progress, and better wiki tracking", + "official_source_url": "https://meta.discourse.org/t/3-6-0-beta2-built-in-palette-editing-live-ai-translation-progress-and-better-wiki-tracking/386389", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--c9760a2b16", + "system_id": "discourse", + "title": "Release v2025.12.0: Discourse Rewind, new review queue and UI to create tags, Chat channel customisation, and live PR statuses", + "official_source_url": "https://meta.discourse.org/t/release-v2025-12-0-discourse-rewind-new-review-queue-and-ui-to-create-tags-chat-channel-customisation-and-live-pr-statuses/392314", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--dc3c665a74", + "system_id": "discourse", + "title": "3.5.0.beta8: Bundled plugins, a new theme, better color management, powerful filtering, and advanced image controls", + "official_source_url": "https://meta.discourse.org/t/3-5-0-beta8-bundled-plugins-a-new-theme-better-color-management-powerful-filtering-and-advanced-image-controls/375746", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "discourse--feb2fecd8e", + "system_id": "discourse", + "title": "3.4.0: Major Release", + "official_source_url": "https://meta.discourse.org/t/3-4-0-major-release/349303", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--039dc7ddc9", + "system_id": "django", + "title": "March 2025", + "official_source_url": "https://www.djangoproject.com/weblog/2025/mar/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--04b01f915c", + "system_id": "django", + "title": "May 2023", + "official_source_url": "https://www.djangoproject.com/weblog/2023/may/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--09baedefbe", + "system_id": "django", + "title": "April 2025", + "official_source_url": "https://www.djangoproject.com/weblog/2025/apr/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--0aab906a01", + "system_id": "django", + "title": "Google Summer of Code 2026 with Django", + "official_source_url": "https://www.djangoproject.com/weblog/2026/feb/24/google-summer-of-code-2026-with-django/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--0b0d3e8528", + "system_id": "django", + "title": "June 2023", + "official_source_url": "https://www.djangoproject.com/weblog/2023/jun/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--0d2f5bfda9", + "system_id": "django", + "title": "2026", + "official_source_url": "https://www.djangoproject.com/weblog/2026/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--0de38e6fb7", + "system_id": "django", + "title": "5.2", + "official_source_url": "https://docs.djangoproject.com/en/5.2/releases/security/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--0e66e85b69", + "system_id": "django", + "title": "Next", + "official_source_url": "https://www.djangoproject.com/weblog/?page=2", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--119d0d44f0", + "system_id": "django", + "title": "5.1", + "official_source_url": "https://docs.djangoproject.com/en/5.1/releases/security/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--12d8627bfa", + "system_id": "django", + "title": "December 2022", + "official_source_url": "https://www.djangoproject.com/weblog/2022/dec/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--1596250124", + "system_id": "django", + "title": "September 2024", + "official_source_url": "https://www.djangoproject.com/weblog/2024/sep/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--163aa85f65", + "system_id": "django", + "title": "Plan to Adopt Contributor Covenant 3 as Django\u2019s New Code of Conduct", + "official_source_url": "https://www.djangoproject.com/weblog/2026/feb/19/2026-coc-update-phase-2/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--1b9318835e", + "system_id": "django", + "title": "5.0", + "official_source_url": "https://docs.djangoproject.com/en/5.0/releases/security/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--24b638c263", + "system_id": "django", + "title": "Djangonaut Space - Session 6 Accepting Applications", + "official_source_url": "https://www.djangoproject.com/weblog/2026/jan/21/djangonaut-space-session-6-accepting-applications/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--254015d606", + "system_id": "django", + "title": "Django Steering Council 2025 Year in Review", + "official_source_url": "https://www.djangoproject.com/weblog/2026/feb/11/steering-council-2025-year-in-review/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--29d47a1fa6", + "system_id": "django", + "title": "February 2025", + "official_source_url": "https://www.djangoproject.com/weblog/2025/feb/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--2a2a9aae5c", + "system_id": "django", + "title": "2025", + "official_source_url": "https://www.djangoproject.com/weblog/2025/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--309f1c9e59", + "system_id": "django", + "title": "May 2025", + "official_source_url": "https://www.djangoproject.com/weblog/2025/may/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--3215595b39", + "system_id": "django", + "title": "December 2025", + "official_source_url": "https://www.djangoproject.com/weblog/2025/dec/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--3d449deb1a", + "system_id": "django", + "title": "4.2", + "official_source_url": "https://docs.djangoproject.com/en/4.2/releases/security/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--4081c9ffc7", + "system_id": "django", + "title": "2023", + "official_source_url": "https://www.djangoproject.com/weblog/2023/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--40fd3207dc", + "system_id": "django", + "title": "September 2022", + "official_source_url": "https://www.djangoproject.com/weblog/2022/sep/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--42826bad6f", + "system_id": "django", + "title": "September 2023", + "official_source_url": "https://www.djangoproject.com/weblog/2023/sep/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--4664cc7401", + "system_id": "django", + "title": "November 2023", + "official_source_url": "https://www.djangoproject.com/weblog/2023/nov/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--48994827de", + "system_id": "django", + "title": "2.0", + "official_source_url": "https://docs.djangoproject.com/en/2.0/releases/security/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--4c2cb798dd", + "system_id": "django", + "title": "March 2026", + "official_source_url": "https://www.djangoproject.com/weblog/2026/mar/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--51863f2eee", + "system_id": "django", + "title": "April 2023", + "official_source_url": "https://www.djangoproject.com/weblog/2023/apr/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--5251fd783b", + "system_id": "django", + "title": "February 2026", + "official_source_url": "https://www.djangoproject.com/weblog/2026/feb/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--54c04190fc", + "system_id": "django", + "title": "February 2023", + "official_source_url": "https://www.djangoproject.com/weblog/2023/feb/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--5799bb4ab0", + "system_id": "django", + "title": "2024", + "official_source_url": "https://www.djangoproject.com/weblog/2024/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--59cca01c55", + "system_id": "django", + "title": "DSF member of the month - Baptiste Mispelon", + "official_source_url": "https://www.djangoproject.com/weblog/2026/feb/21/dsf-member-of-the-month-baptiste-mispelon/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--5c72de7281", + "system_id": "django", + "title": "October 2022", + "official_source_url": "https://www.djangoproject.com/weblog/2022/oct/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--6550a47df6", + "system_id": "django", + "title": "1.10", + "official_source_url": "https://docs.djangoproject.com/en/1.10/releases/security/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--6ae5586701", + "system_id": "django", + "title": "March 2023", + "official_source_url": "https://www.djangoproject.com/weblog/2023/mar/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--6db958e7e6", + "system_id": "django", + "title": "October 2024", + "official_source_url": "https://www.djangoproject.com/weblog/2024/oct/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--70feb242af", + "system_id": "django", + "title": "September 2025", + "official_source_url": "https://www.djangoproject.com/weblog/2025/sep/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--71dee0d572", + "system_id": "django", + "title": "June 2025", + "official_source_url": "https://www.djangoproject.com/weblog/2025/jun/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--758119a235", + "system_id": "django", + "title": "Django security releases issued: 6.0.3, 5.2.12, and 4.2.29", + "official_source_url": "https://www.djangoproject.com/weblog/2026/mar/03/security-releases/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--76e1c5f91b", + "system_id": "django", + "title": "3.2", + "official_source_url": "https://docs.djangoproject.com/en/3.2/releases/security/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--7a24d6ab99", + "system_id": "django", + "title": "August 2025", + "official_source_url": "https://www.djangoproject.com/weblog/2025/aug/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--7fd9d0710a", + "system_id": "django", + "title": "April 2024", + "official_source_url": "https://www.djangoproject.com/weblog/2024/apr/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--809f77ff6c", + "system_id": "django", + "title": "May 2024", + "official_source_url": "https://www.djangoproject.com/weblog/2024/may/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--86345b7646", + "system_id": "django", + "title": "6.0", + "official_source_url": "https://docs.djangoproject.com/en/6.0/releases/security/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--89b37a409b", + "system_id": "django", + "title": "January 2024", + "official_source_url": "https://www.djangoproject.com/weblog/2024/jan/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--8d2e24a3e2", + "system_id": "django", + "title": "January 2026", + "official_source_url": "https://www.djangoproject.com/weblog/2026/jan/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--8deb186b5c", + "system_id": "django", + "title": "2.1", + "official_source_url": "https://docs.djangoproject.com/en/2.1/releases/security/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--8f1d5b2184", + "system_id": "django", + "title": "December 2024", + "official_source_url": "https://www.djangoproject.com/weblog/2024/dec/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--928c980a74", + "system_id": "django", + "title": "October 2025", + "official_source_url": "https://www.djangoproject.com/weblog/2025/oct/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--9b63010325", + "system_id": "django", + "title": "July 2023", + "official_source_url": "https://www.djangoproject.com/weblog/2023/jul/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--9eea409102", + "system_id": "django", + "title": "August 2024", + "official_source_url": "https://www.djangoproject.com/weblog/2024/aug/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--a654414489", + "system_id": "django", + "title": "DSF member of the month - Theresa Seyram Agbenyegah", + "official_source_url": "https://www.djangoproject.com/weblog/2026/mar/08/dsf-member-of-the-month-theresa-seyram-agbenyegah/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--a74cec3cef", + "system_id": "django", + "title": "November 2024", + "official_source_url": "https://www.djangoproject.com/weblog/2024/nov/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--a879747124", + "system_id": "django", + "title": "3.1", + "official_source_url": "https://docs.djangoproject.com/en/3.1/releases/security/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--ab84c56040", + "system_id": "django", + "title": "June 2024", + "official_source_url": "https://www.djangoproject.com/weblog/2024/jun/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--abc897f0c7", + "system_id": "django", + "title": "4.0", + "official_source_url": "https://docs.djangoproject.com/en/4.0/releases/security/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--ad28ca10f9", + "system_id": "django", + "title": "2.2", + "official_source_url": "https://docs.djangoproject.com/en/2.2/releases/security/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--ae8246f865", + "system_id": "django", + "title": "July 2025", + "official_source_url": "https://www.djangoproject.com/weblog/2025/jul/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--aec284a220", + "system_id": "django", + "title": "4.1", + "official_source_url": "https://docs.djangoproject.com/en/4.1/releases/security/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--b1898bd10a", + "system_id": "django", + "title": "March 2024", + "official_source_url": "https://www.djangoproject.com/weblog/2024/mar/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--ba34c0875e", + "system_id": "django", + "title": "November 2025", + "official_source_url": "https://www.djangoproject.com/weblog/2025/nov/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--be47316ecb", + "system_id": "django", + "title": "3.0", + "official_source_url": "https://docs.djangoproject.com/en/3.0/releases/security/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + }, + { + "canonical_id": "django--c0e395334c", + "system_id": "django", + "title": "February 2024", + "official_source_url": "https://www.djangoproject.com/weblog/2024/feb/", + "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions" + } + ], + "lab_pending": [], + "auto_promoted_entities": [ + { + "entity_id": "directus--repo--directus-directus", + "display_name": "directus / directus", + "root_system_id": "directus", + "entity_type": "repo", + "catalog_source": "Directus GitHub Advisories" + }, + { + "entity_id": "ghost--repo--tryghost-ghost", + "display_name": "TryGhost / Ghost", + "root_system_id": "ghost", + "entity_type": "repo", + "catalog_source": "Ghost GitHub Advisories" + }, + { + "entity_id": "magento-open-source--repo--magento-magento2", + "display_name": "magento / magento2", + "root_system_id": "magento-open-source", + "entity_type": "repo", + "catalog_source": "Magento GitHub Advisories" + }, + { + "entity_id": "opencart--repo--opencart-opencart", + "display_name": "opencart / opencart", + "root_system_id": "opencart", + "entity_type": "repo", + "catalog_source": "OpenCart Releases" + }, + { + "entity_id": "openmage--repo--openmage-magento-lts", + "display_name": "OpenMage / magento-lts", + "root_system_id": "openmage", + "entity_type": "repo", + "catalog_source": "OpenMage GitHub Advisories" + }, + { + "entity_id": "prestashop--repo--prestashop-prestashop", + "display_name": "PrestaShop / PrestaShop", + "root_system_id": "prestashop", + "entity_type": "repo", + "catalog_source": "GitHub PrestaShop Advisories" + }, + { + "entity_id": "saleor--repo--saleor-saleor", + "display_name": "saleor / saleor", + "root_system_id": "saleor", + "entity_type": "repo", + "catalog_source": "GitHub Saleor Advisories" + }, + { + "entity_id": "shopware--repo--shopware-shopware", + "display_name": "shopware / shopware", + "root_system_id": "shopware", + "entity_type": "repo", + "catalog_source": "Shopware Security Advisories" + }, + { + "entity_id": "strapi--repo--strapi-strapi", + "display_name": "strapi / strapi", + "root_system_id": "strapi", + "entity_type": "repo", + "catalog_source": "Strapi GitHub Advisories" + }, + { + "entity_id": "woocommerce--repo--woocommerce-woocommerce", + "display_name": "woocommerce / woocommerce", + "root_system_id": "woocommerce", + "entity_type": "repo", + "catalog_source": "GitHub WooCommerce Advisories" + } + ] + }, + "monitor_summary": { + "generated_at": "2026-04-01T09:20:10+00:00", + "active_source_count": 102, + "green_source_count": 102, + "source_failure_count": 0, + "open_alert_count": 0, + "resolved_alert_count": 101, + "last_fully_green_run": "2026-04-01T09:20:10+00:00", + "source_catalog": { + "system_count": 62, + "source_count": 179, + "retired_source_count": 77 + }, + "ingest": { + "new_count": 3, + "updated_count": 0, + "failure_count": 0, + "systems_touched": [ + "discourse", + "mattermost", + "mediawiki" + ] + }, + "validation": { + "passed": true, + "error_count": 0, + "errors": [] + }, + "entity_coverage": { + "cataloged_entity_total": 110, + "candidate_entity_total": 7, + "history_full_complete_count": 41, + "workflow_complete_count": 100, + "version_mapped_count": 52, + "official_source_covered_count": 100 + }, + "version_coverage": { + "cataloged_entity_total": 110, + "latest_version_synced_count": 95, + "source_gap_count": 15, + "security_version_total": 6316, + "security_version_entity_count": 83, + "auto_promoted_entity_count": 10, + "lab_enqueued_count": 3 + }, + "lab_enqueue": { + "enqueued": 3, + "queue_total": 2387, + "pending_count": 0 + } + } +} diff --git a/08-threat-intel/registry/systems/discourse.json b/08-threat-intel/registry/systems/discourse.json index ef871bca..61712eb3 100644 --- a/08-threat-intel/registry/systems/discourse.json +++ b/08-threat-intel/registry/systems/discourse.json @@ -3,9 +3,9 @@ "display_name": "Discourse", "category": "cms", "tier": "rolling-24m", - "total": 30, + "total": 31, "markdown_cases": 0, - "triage_count": 30, + "triage_count": 31, "latest_update": "Wed, 28 May 2025 05:22:52 +0000", "output_dir": "07-framework-security/cms/discourse", "secure_code_topics": [ @@ -16,7 +16,7 @@ "verified_real": 0, "verified_synthetic": 0, "blocked_count": 0, - "manual_count": 30, + "manual_count": 31, "entity_summary": { "system_id": "discourse", "display_name": "Discourse", @@ -48,6 +48,7 @@ "discourse--0a6de28d35", "discourse--7dafb7d908", "discourse--b1f0515c49", + "discourse--5dce90675e", "discourse--9812e0316d", "discourse--9052caf22d", "discourse--8c344d4912", diff --git a/08-threat-intel/registry/systems/mattermost.json b/08-threat-intel/registry/systems/mattermost.json index 6fa8c3ce..fdbd244e 100644 --- a/08-threat-intel/registry/systems/mattermost.json +++ b/08-threat-intel/registry/systems/mattermost.json @@ -3,8 +3,8 @@ "display_name": "Mattermost", "category": "platforms", "tier": "rolling-24m", - "total": 35, - "markdown_cases": 35, + "total": 36, + "markdown_cases": 36, "triage_count": 0, "latest_update": "Fix Release Date", "output_dir": "07-framework-security/platforms/mattermost", @@ -16,7 +16,7 @@ "verified_real": 0, "verified_synthetic": 0, "blocked_count": 0, - "manual_count": 35, + "manual_count": 36, "entity_summary": { "system_id": "mattermost", "display_name": "Mattermost", @@ -42,7 +42,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "entity_type": "repo", "display_name": "mattermost / mattermost-server", - "advisory_count": 16, + "advisory_count": 17, "history_backfill_status": "seeded", "latest_sync_status": "green" }, @@ -75,6 +75,7 @@ }, "items": [ "mattermost--Issue Identifier", + "mattermost--CVE-2026-3113", "mattermost--CVE-2026-27656", "mattermost--CVE-2026-26233", "mattermost--CVE-2026-22545", diff --git a/08-threat-intel/registry/systems/mediawiki.json b/08-threat-intel/registry/systems/mediawiki.json index ec428bed..85c350af 100644 --- a/08-threat-intel/registry/systems/mediawiki.json +++ b/08-threat-intel/registry/systems/mediawiki.json @@ -3,9 +3,9 @@ "display_name": "MediaWiki", "category": "cms", "tier": "rolling-24m", - "total": 71, + "total": 72, "markdown_cases": 0, - "triage_count": 71, + "triage_count": 72, "latest_update": "Wed, 22 Oct 2025 21:44:43 +0000", "output_dir": "07-framework-security/cms/mediawiki", "secure_code_topics": [ @@ -16,7 +16,7 @@ "verified_real": 0, "verified_synthetic": 0, "blocked_count": 0, - "manual_count": 71, + "manual_count": 72, "entity_summary": { "system_id": "mediawiki", "display_name": "MediaWiki", @@ -45,6 +45,7 @@ "mediawiki--a7589e254a", "mediawiki--77f2193adf", "mediawiki--2b8b31c4ea", + "mediawiki--469c5db88b", "mediawiki--9520c4eb80", "mediawiki--0fe51dab1c", "mediawiki--8264120aae", diff --git a/08-threat-intel/registry/triage/discourse--5dce90675e.json b/08-threat-intel/registry/triage/discourse--5dce90675e.json new file mode 100644 index 00000000..33633c94 --- /dev/null +++ b/08-threat-intel/registry/triage/discourse--5dce90675e.json @@ -0,0 +1,12 @@ +{ + "canonical_id": "discourse--5dce90675e", + "system_id": "discourse", + "title": "March 2026 monthly release", + "reasons": [ + "missing affected/fixed version details" + ], + "candidate_count": 1, + "references": [ + "https://meta.discourse.org/t/march-2026-monthly-release/399630" + ] +} diff --git a/08-threat-intel/registry/triage/mediawiki--469c5db88b.json b/08-threat-intel/registry/triage/mediawiki--469c5db88b.json new file mode 100644 index 00000000..fa727715 --- /dev/null +++ b/08-threat-intel/registry/triage/mediawiki--469c5db88b.json @@ -0,0 +1,12 @@ +{ + "canonical_id": "mediawiki--469c5db88b", + "system_id": "mediawiki", + "title": "[MediaWiki-announce] Security and maintenance release: 1.43.7 / 1.44.4 / 1.45.2", + "reasons": [ + "missing affected/fixed version details" + ], + "candidate_count": 1, + "references": [ + "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/" + ] +} diff --git a/08-threat-intel/registry/versions/discourse--3-3-4.json b/08-threat-intel/registry/versions/discourse--2026-1-3.json similarity index 56% rename from 08-threat-intel/registry/versions/discourse--3-3-4.json rename to 08-threat-intel/registry/versions/discourse--2026-1-3.json index ba4da088..6b0cbf49 100644 --- a/08-threat-intel/registry/versions/discourse--3-3-4.json +++ b/08-threat-intel/registry/versions/discourse--2026-1-3.json @@ -1,10 +1,10 @@ { - "version_id": "discourse--3-3-4", + "version_id": "discourse--2026-1-3", "entity_id": "discourse", "root_system_id": "discourse", - "version": "3.3.4", - "released_at": "Wed, 05 Feb 2025 14:26:22 +0000", - "release_url": "https://meta.discourse.org/t/3-3-4-security-and-maintenance-release/349301", + "version": "2026.1.3", + "released_at": "Tue, 31 Mar 2026 14:35:49 +0000", + "release_url": "https://meta.discourse.org/t/march-2026-monthly-release/399630", "source_name": "Discourse Release Notes RSS", "source_confidence": "official", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/discourse--2026-2-2.json b/08-threat-intel/registry/versions/discourse--2026-2-2.json new file mode 100644 index 00000000..f166c9e4 --- /dev/null +++ b/08-threat-intel/registry/versions/discourse--2026-2-2.json @@ -0,0 +1,14 @@ +{ + "version_id": "discourse--2026-2-2", + "entity_id": "discourse", + "root_system_id": "discourse", + "version": "2026.2.2", + "released_at": "Tue, 31 Mar 2026 14:35:49 +0000", + "release_url": "https://meta.discourse.org/t/march-2026-monthly-release/399630", + "source_name": "Discourse Release Notes RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/discourse--2026-3-0.json b/08-threat-intel/registry/versions/discourse--2026-3-0.json new file mode 100644 index 00000000..67f973f5 --- /dev/null +++ b/08-threat-intel/registry/versions/discourse--2026-3-0.json @@ -0,0 +1,14 @@ +{ + "version_id": "discourse--2026-3-0", + "entity_id": "discourse", + "root_system_id": "discourse", + "version": "2026.3.0", + "released_at": "Tue, 31 Mar 2026 14:35:49 +0000", + "release_url": "https://meta.discourse.org/t/march-2026-monthly-release/399630", + "source_name": "Discourse Release Notes RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/discourse--2026-3.json b/08-threat-intel/registry/versions/discourse--2026-3.json new file mode 100644 index 00000000..5dac8ab3 --- /dev/null +++ b/08-threat-intel/registry/versions/discourse--2026-3.json @@ -0,0 +1,14 @@ +{ + "version_id": "discourse--2026-3", + "entity_id": "discourse", + "root_system_id": "discourse", + "version": "2026.3", + "released_at": "Tue, 31 Mar 2026 14:35:49 +0000", + "release_url": "https://meta.discourse.org/t/march-2026-monthly-release/399630", + "source_name": "Discourse Release Notes RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/discourse--3-3-4-security-and-maintenance-release.json b/08-threat-intel/registry/versions/discourse--3-3-4-security-and-maintenance-release.json deleted file mode 100644 index ecdd5e2f..00000000 --- a/08-threat-intel/registry/versions/discourse--3-3-4-security-and-maintenance-release.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "version_id": "discourse--3-3-4-security-and-maintenance-release", - "entity_id": "discourse", - "root_system_id": "discourse", - "version": "3-3-4-security-and-maintenance-release", - "released_at": "Wed, 05 Feb 2025 14:26:22 +0000", - "release_url": "https://meta.discourse.org/t/3-3-4-security-and-maintenance-release/349301", - "source_name": "Discourse Release Notes RSS", - "source_confidence": "official", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false -} diff --git a/08-threat-intel/registry/versions/joomla--1010-20250901-core-inadequate-content-filtering-within-the-checkattribute-filter-code-html.json b/08-threat-intel/registry/versions/joomla--1010-20250901-core-inadequate-content-filtering-within-the-checkattribute-filter-code-html.json deleted file mode 100644 index 18d347f2..00000000 --- a/08-threat-intel/registry/versions/joomla--1010-20250901-core-inadequate-content-filtering-within-the-checkattribute-filter-code-html.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "version_id": "joomla--1010-20250901-core-inadequate-content-filtering-within-the-checkattribute-filter-code-html", - "entity_id": "joomla", - "root_system_id": "joomla", - "version": "1010-20250901-core-inadequate-content-filtering-within-the-checkattribute-filter-code.html", - "released_at": null, - "release_url": "https://developer.joomla.org/security-centre/1010-20250901-core-inadequate-content-filtering-within-the-checkattribute-filter-code.html", - "source_name": "Joomla Security Centre", - "source_confidence": "official", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false -} diff --git a/08-threat-intel/registry/versions/joomla--1011-20250902-core-user-enumeration-in-passkey-authentication-method-html.json b/08-threat-intel/registry/versions/joomla--1011-20250902-core-user-enumeration-in-passkey-authentication-method-html.json deleted file mode 100644 index 38d7471d..00000000 --- a/08-threat-intel/registry/versions/joomla--1011-20250902-core-user-enumeration-in-passkey-authentication-method-html.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "version_id": "joomla--1011-20250902-core-user-enumeration-in-passkey-authentication-method-html", - "entity_id": "joomla", - "root_system_id": "joomla", - "version": "1011-20250902-core-user-enumeration-in-passkey-authentication-method.html", - "released_at": null, - "release_url": "https://developer.joomla.org/security-centre/1011-20250902-core-user-enumeration-in-passkey-authentication-method.html", - "source_name": "Joomla Security Centre", - "source_confidence": "official", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false -} diff --git a/08-threat-intel/registry/versions/joomla--1016-20260101-core-inadequate-content-filtering-for-data-urls-html.json b/08-threat-intel/registry/versions/joomla--1016-20260101-core-inadequate-content-filtering-for-data-urls-html.json deleted file mode 100644 index 5cf669f6..00000000 --- a/08-threat-intel/registry/versions/joomla--1016-20260101-core-inadequate-content-filtering-for-data-urls-html.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "version_id": "joomla--1016-20260101-core-inadequate-content-filtering-for-data-urls-html", - "entity_id": "joomla", - "root_system_id": "joomla", - "version": "1016-20260101-core-inadequate-content-filtering-for-data-urls.html", - "released_at": null, - "release_url": "https://developer.joomla.org/security-centre/1016-20260101-core-inadequate-content-filtering-for-data-urls.html", - "source_name": "Joomla Security Centre", - "source_confidence": "official", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false -} diff --git a/08-threat-intel/registry/versions/joomla--1017-20260102-core-xss-vector-in-the-pagebreak-plugin-html.json b/08-threat-intel/registry/versions/joomla--1027-20260301-core-acl-hardening-in-com-ajax-html.json similarity index 60% rename from 08-threat-intel/registry/versions/joomla--1017-20260102-core-xss-vector-in-the-pagebreak-plugin-html.json rename to 08-threat-intel/registry/versions/joomla--1027-20260301-core-acl-hardening-in-com-ajax-html.json index 8b721e04..965a61ff 100644 --- a/08-threat-intel/registry/versions/joomla--1017-20260102-core-xss-vector-in-the-pagebreak-plugin-html.json +++ b/08-threat-intel/registry/versions/joomla--1027-20260301-core-acl-hardening-in-com-ajax-html.json @@ -1,10 +1,10 @@ { - "version_id": "joomla--1017-20260102-core-xss-vector-in-the-pagebreak-plugin-html", + "version_id": "joomla--1027-20260301-core-acl-hardening-in-com-ajax-html", "entity_id": "joomla", "root_system_id": "joomla", - "version": "1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html", + "version": "1027-20260301-core-acl-hardening-in-com-ajax.html", "released_at": null, - "release_url": "https://developer.joomla.org/security-centre/1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html", + "release_url": "https://developer.joomla.org/security-centre/1027-20260301-core-acl-hardening-in-com-ajax.html", "source_name": "Joomla Security Centre", "source_confidence": "official", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/joomla--963-20250401-framework-sql-injection-vulnerability-in-quotenamestr-method-of-database-package-html.json b/08-threat-intel/registry/versions/joomla--963-20250401-framework-sql-injection-vulnerability-in-quotenamestr-method-of-database-package-html.json deleted file mode 100644 index 287f2c45..00000000 --- a/08-threat-intel/registry/versions/joomla--963-20250401-framework-sql-injection-vulnerability-in-quotenamestr-method-of-database-package-html.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "version_id": "joomla--963-20250401-framework-sql-injection-vulnerability-in-quotenamestr-method-of-database-package-html", - "entity_id": "joomla", - "root_system_id": "joomla", - "version": "963-20250401-framework-sql-injection-vulnerability-in-quotenamestr-method-of-database-package.html", - "released_at": null, - "release_url": "https://developer.joomla.org/security-centre/963-20250401-framework-sql-injection-vulnerability-in-quotenamestr-method-of-database-package.html", - "source_name": "Joomla Security Centre", - "source_confidence": "official", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false -} diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-12.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-12.json index be69b058..96f6f2be 100644 --- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-12.json +++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-12.json @@ -11,7 +11,8 @@ "reason": "fixed", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false } diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-4.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-4.json index 067ba98b..0ef5cf6c 100644 --- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-4.json +++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-4.json @@ -11,7 +11,8 @@ "reason": "fixed", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false } diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-3-2.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-3-2.json index c8cab5df..45bb324e 100644 --- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-3-2.json +++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-3-2.json @@ -11,7 +11,8 @@ "reason": "fixed", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false } diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-4-1.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-4-1.json index 011db449..6c889e38 100644 --- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-4-1.json +++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-4-1.json @@ -11,7 +11,8 @@ "reason": "fixed", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false } diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260217110922-b7d4a1f1f59b.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260217110922-b7d4a1f1f59b.json index 7ff4d3b1..b4be86b7 100644 --- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260217110922-b7d4a1f1f59b.json +++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260217110922-b7d4a1f1f59b.json @@ -11,7 +11,8 @@ "reason": "fixed", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false } diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-10-11-0-rc1-fixed-10-11-12.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-10-11-0-rc1-fixed-10-11-12.json index 451b14f7..003a015f 100644 --- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-10-11-0-rc1-fixed-10-11-12.json +++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-10-11-0-rc1-fixed-10-11-12.json @@ -11,7 +11,8 @@ "reason": "affected", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false } diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-2-0-rc1-fixed-11-2-4.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-2-0-rc1-fixed-11-2-4.json index 063c045b..74920529 100644 --- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-2-0-rc1-fixed-11-2-4.json +++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-2-0-rc1-fixed-11-2-4.json @@ -11,7 +11,8 @@ "reason": "affected", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false } diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-3-0-rc1-fixed-11-3-2.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-3-0-rc1-fixed-11-3-2.json index 9370b1e9..eae49808 100644 --- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-3-0-rc1-fixed-11-3-2.json +++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-3-0-rc1-fixed-11-3-2.json @@ -11,7 +11,8 @@ "reason": "affected", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false } diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-4-0-rc1-fixed-11-4-1.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-4-0-rc1-fixed-11-4-1.json index 96245c8e..ad22f912 100644 --- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-4-0-rc1-fixed-11-4-1.json +++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-4-0-rc1-fixed-11-4-1.json @@ -11,7 +11,8 @@ "reason": "affected", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false } diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-8-0-0-20260105080200-d27a2195068d-fixed-8-0-0-20260217110922-b7d4a1f1f59b.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-8-0-0-20260105080200-d27a2195068d-fixed-8-0-0-20260217110922-b7d4a1f1f59b.json index 058abba9..2e5458a3 100644 --- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-8-0-0-20260105080200-d27a2195068d-fixed-8-0-0-20260217110922-b7d4a1f1f59b.json +++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-8-0-0-20260105080200-d27a2195068d-fixed-8-0-0-20260217110922-b7d4a1f1f59b.json @@ -11,7 +11,8 @@ "reason": "affected", "advisory_refs": [ "mattermost--CVE-2026-26233", - "mattermost--CVE-2026-27656" + "mattermost--CVE-2026-27656", + "mattermost--CVE-2026-3113" ], "is_latest_snapshot": false } diff --git a/08-threat-intel/registry/versions/mediawiki--1-39.json b/08-threat-intel/registry/versions/mediawiki--1-39.json index 369718b0..f251bd2e 100644 --- a/08-threat-intel/registry/versions/mediawiki--1-39.json +++ b/08-threat-intel/registry/versions/mediawiki--1-39.json @@ -3,8 +3,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.39", - "released_at": "Mon, 30 Mar 2026 17:50:26 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FFD4KWZMOVZQJF4PIIVUTCEHDJLMNZEB/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/mediawiki--1-42.json b/08-threat-intel/registry/versions/mediawiki--1-42.json index b76d5880..68c31237 100644 --- a/08-threat-intel/registry/versions/mediawiki--1-42.json +++ b/08-threat-intel/registry/versions/mediawiki--1-42.json @@ -3,8 +3,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.42", - "released_at": "Mon, 30 Mar 2026 17:50:26 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FFD4KWZMOVZQJF4PIIVUTCEHDJLMNZEB/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/mediawiki--1-43-6.json b/08-threat-intel/registry/versions/mediawiki--1-43-6.json index 4b113fd7..825f7c00 100644 --- a/08-threat-intel/registry/versions/mediawiki--1-43-6.json +++ b/08-threat-intel/registry/versions/mediawiki--1-43-6.json @@ -3,8 +3,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.43.6", - "released_at": "Fri, 09 Jan 2026 17:54:29 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/J7SY6XVOKSONV7Y6VZ4ZASOMRF2FWMKN/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/mediawiki--1-43-7-patch-gz-sig.json b/08-threat-intel/registry/versions/mediawiki--1-43-7-patch-gz-sig.json new file mode 100644 index 00000000..02dba7e4 --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-43-7-patch-gz-sig.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-43-7-patch-gz-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.patch.gz.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-43-7-patch-gz.json b/08-threat-intel/registry/versions/mediawiki--1-43-7-patch-gz.json new file mode 100644 index 00000000..c4dd5a1c --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-43-7-patch-gz.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-43-7-patch-gz", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.patch.gz", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-43-7-patch-zip-sig.json b/08-threat-intel/registry/versions/mediawiki--1-43-7-patch-zip-sig.json new file mode 100644 index 00000000..a233fda7 --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-43-7-patch-zip-sig.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-43-7-patch-zip-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.patch.zip.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-43-7-patch-zip.json b/08-threat-intel/registry/versions/mediawiki--1-43-7-patch-zip.json new file mode 100644 index 00000000..efb13f62 --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-43-7-patch-zip.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-43-7-patch-zip", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.patch.zip", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-43-7-tar-gz-sig.json b/08-threat-intel/registry/versions/mediawiki--1-43-7-tar-gz-sig.json new file mode 100644 index 00000000..3df2f228 --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-43-7-tar-gz-sig.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-43-7-tar-gz-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.tar.gz.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-43-7-tar-gz.json b/08-threat-intel/registry/versions/mediawiki--1-43-7-tar-gz.json new file mode 100644 index 00000000..ed4545a6 --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-43-7-tar-gz.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-43-7-tar-gz", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.tar.gz", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-43-7-zip-sig.json b/08-threat-intel/registry/versions/mediawiki--1-43-7-zip-sig.json new file mode 100644 index 00000000..a32fb127 --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-43-7-zip-sig.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-43-7-zip-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.zip.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-43-7-zip.json b/08-threat-intel/registry/versions/mediawiki--1-43-7-zip.json new file mode 100644 index 00000000..d546b3cc --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-43-7-zip.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-43-7-zip", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.43.7.zip", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-43-7.json b/08-threat-intel/registry/versions/mediawiki--1-43-7.json index 716103e2..bfb3a5e4 100644 --- a/08-threat-intel/registry/versions/mediawiki--1-43-7.json +++ b/08-threat-intel/registry/versions/mediawiki--1-43-7.json @@ -3,8 +3,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.43.7", - "released_at": "Mon, 30 Mar 2026 17:50:26 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FFD4KWZMOVZQJF4PIIVUTCEHDJLMNZEB/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/mediawiki--1-43.json b/08-threat-intel/registry/versions/mediawiki--1-43.json index f03bfba6..f5fc1204 100644 --- a/08-threat-intel/registry/versions/mediawiki--1-43.json +++ b/08-threat-intel/registry/versions/mediawiki--1-43.json @@ -3,8 +3,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.43", - "released_at": "Mon, 29 Dec 2025 20:36:35 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/3EXWLDDHRGVDQACOHP3Y4ZE5H6BHBJPJ/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/mediawiki--1-44-3.json b/08-threat-intel/registry/versions/mediawiki--1-44-3.json index ebff625e..89f12819 100644 --- a/08-threat-intel/registry/versions/mediawiki--1-44-3.json +++ b/08-threat-intel/registry/versions/mediawiki--1-44-3.json @@ -3,8 +3,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.44.3", - "released_at": "Fri, 09 Jan 2026 17:54:29 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/J7SY6XVOKSONV7Y6VZ4ZASOMRF2FWMKN/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/mediawiki--1-44-4-patch-gz-sig.json b/08-threat-intel/registry/versions/mediawiki--1-44-4-patch-gz-sig.json new file mode 100644 index 00000000..d0af0bda --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-44-4-patch-gz-sig.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-44-4-patch-gz-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.patch.gz.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-44-4-patch-gz.json b/08-threat-intel/registry/versions/mediawiki--1-44-4-patch-gz.json new file mode 100644 index 00000000..75856314 --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-44-4-patch-gz.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-44-4-patch-gz", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.patch.gz", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-44-4-patch-zip-sig.json b/08-threat-intel/registry/versions/mediawiki--1-44-4-patch-zip-sig.json new file mode 100644 index 00000000..d06b0fed --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-44-4-patch-zip-sig.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-44-4-patch-zip-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.patch.zip.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-44-4-patch-zip.json b/08-threat-intel/registry/versions/mediawiki--1-44-4-patch-zip.json new file mode 100644 index 00000000..4ec2f40c --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-44-4-patch-zip.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-44-4-patch-zip", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.patch.zip", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-44-4-tar-gz-sig.json b/08-threat-intel/registry/versions/mediawiki--1-44-4-tar-gz-sig.json new file mode 100644 index 00000000..e4a3f366 --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-44-4-tar-gz-sig.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-44-4-tar-gz-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.tar.gz.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-44-4-tar-gz.json b/08-threat-intel/registry/versions/mediawiki--1-44-4-tar-gz.json new file mode 100644 index 00000000..d50894db --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-44-4-tar-gz.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-44-4-tar-gz", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.tar.gz", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-44-4-zip-sig.json b/08-threat-intel/registry/versions/mediawiki--1-44-4-zip-sig.json new file mode 100644 index 00000000..332b1ad7 --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-44-4-zip-sig.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-44-4-zip-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.zip.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-44-4-zip.json b/08-threat-intel/registry/versions/mediawiki--1-44-4-zip.json new file mode 100644 index 00000000..cdef17c1 --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-44-4-zip.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-44-4-zip", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.44.4.zip", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-44-4.json b/08-threat-intel/registry/versions/mediawiki--1-44-4.json index 60fb5be7..a3f998df 100644 --- a/08-threat-intel/registry/versions/mediawiki--1-44-4.json +++ b/08-threat-intel/registry/versions/mediawiki--1-44-4.json @@ -3,8 +3,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.44.4", - "released_at": "Mon, 30 Mar 2026 17:50:26 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FFD4KWZMOVZQJF4PIIVUTCEHDJLMNZEB/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/mediawiki--1-44.json b/08-threat-intel/registry/versions/mediawiki--1-44.json index 8c96d2c3..382cd47d 100644 --- a/08-threat-intel/registry/versions/mediawiki--1-44.json +++ b/08-threat-intel/registry/versions/mediawiki--1-44.json @@ -3,8 +3,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.44", - "released_at": "Mon, 29 Dec 2025 20:36:35 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/3EXWLDDHRGVDQACOHP3Y4ZE5H6BHBJPJ/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/mediawiki--1-45-1.json b/08-threat-intel/registry/versions/mediawiki--1-45-1.json index 4f740c1f..0e3859d2 100644 --- a/08-threat-intel/registry/versions/mediawiki--1-45-1.json +++ b/08-threat-intel/registry/versions/mediawiki--1-45-1.json @@ -3,8 +3,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.45.1", - "released_at": "Fri, 09 Jan 2026 17:54:29 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/J7SY6XVOKSONV7Y6VZ4ZASOMRF2FWMKN/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/mediawiki--1-45-2-patch-gz-sig.json b/08-threat-intel/registry/versions/mediawiki--1-45-2-patch-gz-sig.json new file mode 100644 index 00000000..ebc4c46b --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-45-2-patch-gz-sig.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-45-2-patch-gz-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.patch.gz.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-45-2-patch-gz.json b/08-threat-intel/registry/versions/mediawiki--1-45-2-patch-gz.json new file mode 100644 index 00000000..e9c399d4 --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-45-2-patch-gz.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-45-2-patch-gz", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.patch.gz", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-45-2-patch-zip-sig.json b/08-threat-intel/registry/versions/mediawiki--1-45-2-patch-zip-sig.json new file mode 100644 index 00000000..d5595941 --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-45-2-patch-zip-sig.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-45-2-patch-zip-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.patch.zip.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-45-2-patch-zip.json b/08-threat-intel/registry/versions/mediawiki--1-45-2-patch-zip.json new file mode 100644 index 00000000..f092f3b8 --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-45-2-patch-zip.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-45-2-patch-zip", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.patch.zip", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-45-2-tar-gz-sig.json b/08-threat-intel/registry/versions/mediawiki--1-45-2-tar-gz-sig.json new file mode 100644 index 00000000..0eced6f7 --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-45-2-tar-gz-sig.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-45-2-tar-gz-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.tar.gz.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-45-2-tar-gz.json b/08-threat-intel/registry/versions/mediawiki--1-45-2-tar-gz.json new file mode 100644 index 00000000..ef3e0420 --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-45-2-tar-gz.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-45-2-tar-gz", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.tar.gz", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-45-2-zip-sig.json b/08-threat-intel/registry/versions/mediawiki--1-45-2-zip-sig.json new file mode 100644 index 00000000..2c0ee844 --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-45-2-zip-sig.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-45-2-zip-sig", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.zip.sig", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-45-2-zip.json b/08-threat-intel/registry/versions/mediawiki--1-45-2-zip.json new file mode 100644 index 00000000..c438f102 --- /dev/null +++ b/08-threat-intel/registry/versions/mediawiki--1-45-2-zip.json @@ -0,0 +1,14 @@ +{ + "version_id": "mediawiki--1-45-2-zip", + "entity_id": "mediawiki", + "root_system_id": "mediawiki", + "version": "1.45.2.zip", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", + "source_name": "MediaWiki Announce RSS", + "source_confidence": "official", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/mediawiki--1-45-2.json b/08-threat-intel/registry/versions/mediawiki--1-45-2.json index 49536d95..9a2e4a63 100644 --- a/08-threat-intel/registry/versions/mediawiki--1-45-2.json +++ b/08-threat-intel/registry/versions/mediawiki--1-45-2.json @@ -3,8 +3,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.45.2", - "released_at": "Mon, 30 Mar 2026 17:50:26 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FFD4KWZMOVZQJF4PIIVUTCEHDJLMNZEB/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/mediawiki--1-45.json b/08-threat-intel/registry/versions/mediawiki--1-45.json index 0a5002db..9615ef4c 100644 --- a/08-threat-intel/registry/versions/mediawiki--1-45.json +++ b/08-threat-intel/registry/versions/mediawiki--1-45.json @@ -3,8 +3,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "1.45", - "released_at": "Mon, 29 Dec 2025 20:36:35 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/3EXWLDDHRGVDQACOHP3Y4ZE5H6BHBJPJ/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/mediawiki--8-0.json b/08-threat-intel/registry/versions/mediawiki--8-0.json index 4b0aab83..3b031656 100644 --- a/08-threat-intel/registry/versions/mediawiki--8-0.json +++ b/08-threat-intel/registry/versions/mediawiki--8-0.json @@ -3,8 +3,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "8.0", - "released_at": "Wed, 10 Dec 2025 22:22:38 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FOY6VXTBCCHIGYGSTQBPN3UFCL6CAX6Y/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/mediawiki--8-5.json b/08-threat-intel/registry/versions/mediawiki--8-5.json index c960428f..e9865118 100644 --- a/08-threat-intel/registry/versions/mediawiki--8-5.json +++ b/08-threat-intel/registry/versions/mediawiki--8-5.json @@ -3,8 +3,8 @@ "entity_id": "mediawiki", "root_system_id": "mediawiki", "version": "8.5", - "released_at": "Wed, 10 Dec 2025 22:22:38 +0000", - "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/FOY6VXTBCCHIGYGSTQBPN3UFCL6CAX6Y/", + "released_at": "Tue, 31 Mar 2026 23:06:16 +0000", + "release_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP/", "source_name": "MediaWiki Announce RSS", "source_confidence": "official", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/traefik--extension--github-com-traefik-traefik-v3--3-7-0-ea-2.json b/08-threat-intel/registry/versions/traefik--extension--github-com-traefik-traefik-v3--3-7-0-ea-2.json index d1a3ca70..09f3cf98 100644 --- a/08-threat-intel/registry/versions/traefik--extension--github-com-traefik-traefik-v3--3-7-0-ea-2.json +++ b/08-threat-intel/registry/versions/traefik--extension--github-com-traefik-traefik-v3--3-7-0-ea-2.json @@ -12,5 +12,5 @@ "advisory_refs": [ "traefik--CVE-2026-32305" ], - "is_latest_snapshot": false + "is_latest_snapshot": true } diff --git a/08-threat-intel/registry/versions/woocommerce--10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability.json b/08-threat-intel/registry/versions/woocommerce--10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability.json new file mode 100644 index 00000000..903b566b --- /dev/null +++ b/08-threat-intel/registry/versions/woocommerce--10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability.json @@ -0,0 +1,14 @@ +{ + "version_id": "woocommerce--10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "entity_id": "woocommerce", + "root_system_id": "woocommerce", + "version": "10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/woocommerce--10-5-1.json b/08-threat-intel/registry/versions/woocommerce--10-5-1.json new file mode 100644 index 00000000..26b1295e --- /dev/null +++ b/08-threat-intel/registry/versions/woocommerce--10-5-1.json @@ -0,0 +1,14 @@ +{ + "version_id": "woocommerce--10-5-1", + "entity_id": "woocommerce", + "root_system_id": "woocommerce", + "version": "10.5.1", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/woocommerce--repo--woocommerce-woocommerce--10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability.json b/08-threat-intel/registry/versions/woocommerce--repo--woocommerce-woocommerce--10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability.json new file mode 100644 index 00000000..34932b8d --- /dev/null +++ b/08-threat-intel/registry/versions/woocommerce--repo--woocommerce-woocommerce--10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability.json @@ -0,0 +1,14 @@ +{ + "version_id": "woocommerce--repo--woocommerce-woocommerce--10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "entity_id": "woocommerce--repo--woocommerce-woocommerce", + "root_system_id": "woocommerce", + "version": "10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/woocommerce--repo--woocommerce-woocommerce--10-5-1.json b/08-threat-intel/registry/versions/woocommerce--repo--woocommerce-woocommerce--10-5-1.json new file mode 100644 index 00000000..7c49c820 --- /dev/null +++ b/08-threat-intel/registry/versions/woocommerce--repo--woocommerce-woocommerce--10-5-1.json @@ -0,0 +1,14 @@ +{ + "version_id": "woocommerce--repo--woocommerce-woocommerce--10-5-1", + "entity_id": "woocommerce--repo--woocommerce-woocommerce", + "root_system_id": "woocommerce", + "version": "10.5.1", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/wordpress--3-0-22-unauthenticated-rest-call-vulnerability.json b/08-threat-intel/registry/versions/wordpress--1-0-6-unauthenticated-blind-ssrf-vulnerability.json similarity index 59% rename from 08-threat-intel/registry/versions/wordpress--3-0-22-unauthenticated-rest-call-vulnerability.json rename to 08-threat-intel/registry/versions/wordpress--1-0-6-unauthenticated-blind-ssrf-vulnerability.json index a4b0128e..9d03dfa2 100644 --- a/08-threat-intel/registry/versions/wordpress--3-0-22-unauthenticated-rest-call-vulnerability.json +++ b/08-threat-intel/registry/versions/wordpress--1-0-6-unauthenticated-blind-ssrf-vulnerability.json @@ -1,10 +1,10 @@ { - "version_id": "wordpress--3-0-22-unauthenticated-rest-call-vulnerability", + "version_id": "wordpress--1-0-6-unauthenticated-blind-ssrf-vulnerability", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "3-0-22-unauthenticated-rest-call-vulnerability", + "version": "1-0-6-unauthenticated-blind-ssrf-vulnerability", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/leadconnector/vulnerability/wordpress-leadconnector-plugin-3-0-22-unauthenticated-rest-call-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/performance-monitor/vulnerability/wordpress-performance-monitor-plugin-1-0-6-unauthenticated-blind-ssrf-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/wordpress--1-7-58.json b/08-threat-intel/registry/versions/wordpress--1-0-6.json similarity index 66% rename from 08-threat-intel/registry/versions/wordpress--1-7-58.json rename to 08-threat-intel/registry/versions/wordpress--1-0-6.json index ffe2c292..9f12cba0 100644 --- a/08-threat-intel/registry/versions/wordpress--1-7-58.json +++ b/08-threat-intel/registry/versions/wordpress--1-0-6.json @@ -1,10 +1,10 @@ { - "version_id": "wordpress--1-7-58", + "version_id": "wordpress--1-0-6", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "1.7.58", + "version": "1.0.6", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/shared-files/vulnerability/wordpress-shared-files-plugin-1-7-58-contributor-arbitrary-file-download-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/performance-monitor/vulnerability/wordpress-performance-monitor-plugin-1-0-6-unauthenticated-blind-ssrf-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/wordpress--1-4-9-missing-authorization-to-authenticated-contributor-sensitive-information-exposure-via-shortcode-vulnerability.json b/08-threat-intel/registry/versions/wordpress--1-4-9-missing-authorization-to-authenticated-contributor-sensitive-information-exposure-via-shortcode-vulnerability.json new file mode 100644 index 00000000..73621c68 --- /dev/null +++ b/08-threat-intel/registry/versions/wordpress--1-4-9-missing-authorization-to-authenticated-contributor-sensitive-information-exposure-via-shortcode-vulnerability.json @@ -0,0 +1,14 @@ +{ + "version_id": "wordpress--1-4-9-missing-authorization-to-authenticated-contributor-sensitive-information-exposure-via-shortcode-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "1-4-9-missing-authorization-to-authenticated-contributor-sensitive-information-exposure-via-shortcode-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/contact-form-entries/vulnerability/wordpress-database-for-contact-form-7-wpforms-elementor-forms-plugin-1-4-9-missing-authorization-to-authenticated-contributor-sensitive-information-exposure-via-shortcode-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/wordpress--1-4-9.json b/08-threat-intel/registry/versions/wordpress--1-4-9.json new file mode 100644 index 00000000..0748d6aa --- /dev/null +++ b/08-threat-intel/registry/versions/wordpress--1-4-9.json @@ -0,0 +1,14 @@ +{ + "version_id": "wordpress--1-4-9", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "1.4.9", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/contact-form-entries/vulnerability/wordpress-database-for-contact-form-7-wpforms-elementor-forms-plugin-1-4-9-missing-authorization-to-authenticated-contributor-sensitive-information-exposure-via-shortcode-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/wordpress--1-84-cross-site-request-forgery-to-stored-cross-site-scripting-via-aps-options-page-vulnerability.json b/08-threat-intel/registry/versions/wordpress--1-84-cross-site-request-forgery-to-stored-cross-site-scripting-via-aps-options-page-vulnerability.json new file mode 100644 index 00000000..950fc7de --- /dev/null +++ b/08-threat-intel/registry/versions/wordpress--1-84-cross-site-request-forgery-to-stored-cross-site-scripting-via-aps-options-page-vulnerability.json @@ -0,0 +1,14 @@ +{ + "version_id": "wordpress--1-84-cross-site-request-forgery-to-stored-cross-site-scripting-via-aps-options-page-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "1-84-cross-site-request-forgery-to-stored-cross-site-scripting-via-aps-options-page-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/auto-post-scheduler/vulnerability/wordpress-auto-post-scheduler-plugin-1-84-cross-site-request-forgery-to-stored-cross-site-scripting-via-aps-options-page-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/wordpress--2-4-9.json b/08-threat-intel/registry/versions/wordpress--1-84.json similarity index 60% rename from 08-threat-intel/registry/versions/wordpress--2-4-9.json rename to 08-threat-intel/registry/versions/wordpress--1-84.json index a32839d5..8243563d 100644 --- a/08-threat-intel/registry/versions/wordpress--2-4-9.json +++ b/08-threat-intel/registry/versions/wordpress--1-84.json @@ -1,10 +1,10 @@ { - "version_id": "wordpress--2-4-9", + "version_id": "wordpress--1-84", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "2.4.9", + "version": "1.84", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/wp-job-portal/vulnerability/wordpress-wp-job-portal-plugin-2-4-9-authenticated-subscriber-arbitrary-file-deletion-via-resume-custom-file-field-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/auto-post-scheduler/vulnerability/wordpress-auto-post-scheduler-plugin-1-84-cross-site-request-forgery-to-stored-cross-site-scripting-via-aps-options-page-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/wordpress--10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability.json b/08-threat-intel/registry/versions/wordpress--10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability.json new file mode 100644 index 00000000..558663f2 --- /dev/null +++ b/08-threat-intel/registry/versions/wordpress--10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability.json @@ -0,0 +1,14 @@ +{ + "version_id": "wordpress--10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/wordpress--2-1-6.json b/08-threat-intel/registry/versions/wordpress--10-5-1.json similarity index 59% rename from 08-threat-intel/registry/versions/wordpress--2-1-6.json rename to 08-threat-intel/registry/versions/wordpress--10-5-1.json index 0e75054d..70a98dd2 100644 --- a/08-threat-intel/registry/versions/wordpress--2-1-6.json +++ b/08-threat-intel/registry/versions/wordpress--10-5-1.json @@ -1,10 +1,10 @@ { - "version_id": "wordpress--2-1-6", + "version_id": "wordpress--10-5-1", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "2.1.6", + "version": "10.5.1", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/learning-management-system/vulnerability/wordpress-masteriyo-lms-plugin-2-1-6-missing-authorization-to-authenticated-student-privilege-escalation-to-administrator-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/woocommerce-payments/vulnerability/wordpress-woopayments-plugin-10-5-1-missing-authorization-to-unauthenticated-plugin-settings-update-via-save-upe-appearance-ajax-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/wordpress--2-1-12-cross-site-request-forgery-to-plugin-settings-update-vulnerability.json b/08-threat-intel/registry/versions/wordpress--2-1-12-cross-site-request-forgery-to-plugin-settings-update-vulnerability.json new file mode 100644 index 00000000..b56c9c94 --- /dev/null +++ b/08-threat-intel/registry/versions/wordpress--2-1-12-cross-site-request-forgery-to-plugin-settings-update-vulnerability.json @@ -0,0 +1,14 @@ +{ + "version_id": "wordpress--2-1-12-cross-site-request-forgery-to-plugin-settings-update-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "2-1-12-cross-site-request-forgery-to-plugin-settings-update-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/minify-html-markup/vulnerability/wordpress-minify-html-plugin-2-1-12-cross-site-request-forgery-to-plugin-settings-update-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/wordpress--2-5-2.json b/08-threat-intel/registry/versions/wordpress--2-1-12.json similarity index 63% rename from 08-threat-intel/registry/versions/wordpress--2-5-2.json rename to 08-threat-intel/registry/versions/wordpress--2-1-12.json index df7e0352..afb87d99 100644 --- a/08-threat-intel/registry/versions/wordpress--2-5-2.json +++ b/08-threat-intel/registry/versions/wordpress--2-1-12.json @@ -1,10 +1,10 @@ { - "version_id": "wordpress--2-5-2", + "version_id": "wordpress--2-1-12", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "2.5.2", + "version": "2.1.12", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/sureforms/vulnerability/wordpress-sureforms-plugin-2-5-2-unauthenticated-payment-amount-validation-bypass-via-form-id-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/minify-html-markup/vulnerability/wordpress-minify-html-plugin-2-1-12-cross-site-request-forgery-to-plugin-settings-update-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/wordpress--7-8-2-reflected-cross-site-scripting-via-noresults-parameter-vulnerability.json b/08-threat-intel/registry/versions/wordpress--2-1-2-authenticated-manager-sql-injection-via-sort-parameter-vulnerability.json similarity index 53% rename from 08-threat-intel/registry/versions/wordpress--7-8-2-reflected-cross-site-scripting-via-noresults-parameter-vulnerability.json rename to 08-threat-intel/registry/versions/wordpress--2-1-2-authenticated-manager-sql-injection-via-sort-parameter-vulnerability.json index 4eeaf4e0..78eedf95 100644 --- a/08-threat-intel/registry/versions/wordpress--7-8-2-reflected-cross-site-scripting-via-noresults-parameter-vulnerability.json +++ b/08-threat-intel/registry/versions/wordpress--2-1-2-authenticated-manager-sql-injection-via-sort-parameter-vulnerability.json @@ -1,10 +1,10 @@ { - "version_id": "wordpress--7-8-2-reflected-cross-site-scripting-via-noresults-parameter-vulnerability", + "version_id": "wordpress--2-1-2-authenticated-manager-sql-injection-via-sort-parameter-vulnerability", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "7-8-2-reflected-cross-site-scripting-via-noresults-parameter-vulnerability", + "version": "2-1-2-authenticated-manager-sql-injection-via-sort-parameter-vulnerability", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/bakkbone-florist-companion/vulnerability/wordpress-floristpress-for-woo-plugin-7-8-2-reflected-cross-site-scripting-via-noresults-parameter-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/ameliabooking/vulnerability/wordpress-amelia-plugin-2-1-2-authenticated-manager-sql-injection-via-sort-parameter-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/wordpress--3-4-3.json b/08-threat-intel/registry/versions/wordpress--2-1-2.json similarity index 64% rename from 08-threat-intel/registry/versions/wordpress--3-4-3.json rename to 08-threat-intel/registry/versions/wordpress--2-1-2.json index b3b4a031..7508d59e 100644 --- a/08-threat-intel/registry/versions/wordpress--3-4-3.json +++ b/08-threat-intel/registry/versions/wordpress--2-1-2.json @@ -1,10 +1,10 @@ { - "version_id": "wordpress--3-4-3", + "version_id": "wordpress--2-1-2", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "3.4.3", + "version": "2.1.2", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/responsive-add-ons/vulnerability/wordpress-responsive-plus-plugin-3-4-3-unauthenticated-arbitrary-shortcode-execution-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/ameliabooking/vulnerability/wordpress-amelia-plugin-2-1-2-authenticated-manager-sql-injection-via-sort-parameter-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/wordpress--2-1-6-missing-authorization-to-authenticated-student-privilege-escalation-to-administrator-vulnerability.json b/08-threat-intel/registry/versions/wordpress--2-1-6-missing-authorization-to-authenticated-student-privilege-escalation-to-administrator-vulnerability.json deleted file mode 100644 index 17658c90..00000000 --- a/08-threat-intel/registry/versions/wordpress--2-1-6-missing-authorization-to-authenticated-student-privilege-escalation-to-administrator-vulnerability.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "version_id": "wordpress--2-1-6-missing-authorization-to-authenticated-student-privilege-escalation-to-administrator-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "2-1-6-missing-authorization-to-authenticated-student-privilege-escalation-to-administrator-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/learning-management-system/vulnerability/wordpress-masteriyo-lms-plugin-2-1-6-missing-authorization-to-authenticated-student-privilege-escalation-to-administrator-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false -} diff --git a/08-threat-intel/registry/versions/wordpress--2-11-2-authenticated-contributor-sensitive-information-exposure-to-account-takeover-via-shortcode-template-tag-vulnerability.json b/08-threat-intel/registry/versions/wordpress--2-11-2-authenticated-contributor-sensitive-information-exposure-to-account-takeover-via-shortcode-template-tag-vulnerability.json deleted file mode 100644 index 769a5c18..00000000 --- a/08-threat-intel/registry/versions/wordpress--2-11-2-authenticated-contributor-sensitive-information-exposure-to-account-takeover-via-shortcode-template-tag-vulnerability.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "version_id": "wordpress--2-11-2-authenticated-contributor-sensitive-information-exposure-to-account-takeover-via-shortcode-template-tag-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "2-11-2-authenticated-contributor-sensitive-information-exposure-to-account-takeover-via-shortcode-template-tag-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/ultimate-member/vulnerability/wordpress-ultimate-member-plugin-2-11-2-authenticated-contributor-sensitive-information-exposure-to-account-takeover-via-shortcode-template-tag-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false -} diff --git a/08-threat-intel/registry/versions/wordpress--2-4-9-authenticated-subscriber-arbitrary-file-deletion-via-resume-custom-file-field-vulnerability.json b/08-threat-intel/registry/versions/wordpress--2-4-9-authenticated-subscriber-arbitrary-file-deletion-via-resume-custom-file-field-vulnerability.json deleted file mode 100644 index f1bf1d92..00000000 --- a/08-threat-intel/registry/versions/wordpress--2-4-9-authenticated-subscriber-arbitrary-file-deletion-via-resume-custom-file-field-vulnerability.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "version_id": "wordpress--2-4-9-authenticated-subscriber-arbitrary-file-deletion-via-resume-custom-file-field-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "2-4-9-authenticated-subscriber-arbitrary-file-deletion-via-resume-custom-file-field-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/wp-job-portal/vulnerability/wordpress-wp-job-portal-plugin-2-4-9-authenticated-subscriber-arbitrary-file-deletion-via-resume-custom-file-field-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false -} diff --git a/08-threat-intel/registry/versions/wordpress--2-5-2-unauthenticated-payment-amount-validation-bypass-via-form-id-vulnerability.json b/08-threat-intel/registry/versions/wordpress--2-5-2-unauthenticated-payment-amount-validation-bypass-via-form-id-vulnerability.json deleted file mode 100644 index 05cfe4e5..00000000 --- a/08-threat-intel/registry/versions/wordpress--2-5-2-unauthenticated-payment-amount-validation-bypass-via-form-id-vulnerability.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "version_id": "wordpress--2-5-2-unauthenticated-payment-amount-validation-bypass-via-form-id-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "2-5-2-unauthenticated-payment-amount-validation-bypass-via-form-id-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/sureforms/vulnerability/wordpress-sureforms-plugin-2-5-2-unauthenticated-payment-amount-validation-bypass-via-form-id-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false -} diff --git a/08-threat-intel/registry/versions/wordpress--2-7-0-cross-site-scripting-xss-vulnerability.json b/08-threat-intel/registry/versions/wordpress--2-7-0-cross-site-scripting-xss-vulnerability.json new file mode 100644 index 00000000..ac6e5379 --- /dev/null +++ b/08-threat-intel/registry/versions/wordpress--2-7-0-cross-site-scripting-xss-vulnerability.json @@ -0,0 +1,14 @@ +{ + "version_id": "wordpress--2-7-0-cross-site-scripting-xss-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "2-7-0-cross-site-scripting-xss-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/kubio/vulnerability/wordpress-kubio-ai-page-builder-plugin-2-7-0-cross-site-scripting-xss-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/wordpress--3-0-22.json b/08-threat-intel/registry/versions/wordpress--2-7-0.json similarity index 67% rename from 08-threat-intel/registry/versions/wordpress--3-0-22.json rename to 08-threat-intel/registry/versions/wordpress--2-7-0.json index 68048467..4f795868 100644 --- a/08-threat-intel/registry/versions/wordpress--3-0-22.json +++ b/08-threat-intel/registry/versions/wordpress--2-7-0.json @@ -1,10 +1,10 @@ { - "version_id": "wordpress--3-0-22", + "version_id": "wordpress--2-7-0", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "3.0.22", + "version": "2.7.0", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/leadconnector/vulnerability/wordpress-leadconnector-plugin-3-0-22-unauthenticated-rest-call-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/kubio/vulnerability/wordpress-kubio-ai-page-builder-plugin-2-7-0-cross-site-scripting-xss-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/wordpress--3-0-4-unauthenticated-sql-injection-via-multiformid-parameter-vulnerability.json b/08-threat-intel/registry/versions/wordpress--3-0-4-unauthenticated-sql-injection-via-multiformid-parameter-vulnerability.json deleted file mode 100644 index 7d4062c9..00000000 --- a/08-threat-intel/registry/versions/wordpress--3-0-4-unauthenticated-sql-injection-via-multiformid-parameter-vulnerability.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "version_id": "wordpress--3-0-4-unauthenticated-sql-injection-via-multiformid-parameter-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3-0-4-unauthenticated-sql-injection-via-multiformid-parameter-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/js-support-ticket/vulnerability/wordpress-js-help-desk-ai-powered-support-ticketing-system-plugin-3-0-4-unauthenticated-sql-injection-via-multiformid-parameter-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false -} diff --git a/08-threat-intel/registry/versions/wordpress--3-0-4.json b/08-threat-intel/registry/versions/wordpress--3-0-4.json deleted file mode 100644 index f02ee0fd..00000000 --- a/08-threat-intel/registry/versions/wordpress--3-0-4.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "version_id": "wordpress--3-0-4", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3.0.4", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/js-support-ticket/vulnerability/wordpress-js-help-desk-ai-powered-support-ticketing-system-plugin-3-0-4-unauthenticated-sql-injection-via-multiformid-parameter-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false -} diff --git a/08-threat-intel/registry/versions/wordpress--3-15-5-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-post-author-reassignment-via-avatar-field-vulnerability.json b/08-threat-intel/registry/versions/wordpress--3-15-5-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-post-author-reassignment-via-avatar-field-vulnerability.json new file mode 100644 index 00000000..4b676f4f --- /dev/null +++ b/08-threat-intel/registry/versions/wordpress--3-15-5-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-post-author-reassignment-via-avatar-field-vulnerability.json @@ -0,0 +1,14 @@ +{ + "version_id": "wordpress--3-15-5-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-post-author-reassignment-via-avatar-field-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "3-15-5-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-post-author-reassignment-via-avatar-field-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/profile-builder/vulnerability/wordpress-user-profile-builder-beautiful-user-registration-forms-user-profiles-user-role-editor-plugin-3-15-5-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-post-author-reassignment-via-avatar-field-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/wordpress--3-15-5.json b/08-threat-intel/registry/versions/wordpress--3-15-5.json new file mode 100644 index 00000000..c5d7677f --- /dev/null +++ b/08-threat-intel/registry/versions/wordpress--3-15-5.json @@ -0,0 +1,14 @@ +{ + "version_id": "wordpress--3-15-5", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "3.15.5", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/profile-builder/vulnerability/wordpress-user-profile-builder-beautiful-user-registration-forms-user-profiles-user-role-editor-plugin-3-15-5-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-post-author-reassignment-via-avatar-field-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/wordpress--1-7-58-contributor-arbitrary-file-download-vulnerability.json b/08-threat-intel/registry/versions/wordpress--3-21-4-cross-site-scripting-xss-vulnerability.json similarity index 55% rename from 08-threat-intel/registry/versions/wordpress--1-7-58-contributor-arbitrary-file-download-vulnerability.json rename to 08-threat-intel/registry/versions/wordpress--3-21-4-cross-site-scripting-xss-vulnerability.json index 2387b3a4..24390c1e 100644 --- a/08-threat-intel/registry/versions/wordpress--1-7-58-contributor-arbitrary-file-download-vulnerability.json +++ b/08-threat-intel/registry/versions/wordpress--3-21-4-cross-site-scripting-xss-vulnerability.json @@ -1,10 +1,10 @@ { - "version_id": "wordpress--1-7-58-contributor-arbitrary-file-download-vulnerability", + "version_id": "wordpress--3-21-4-cross-site-scripting-xss-vulnerability", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "1-7-58-contributor-arbitrary-file-download-vulnerability", + "version": "3-21-4-cross-site-scripting-xss-vulnerability", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/shared-files/vulnerability/wordpress-shared-files-plugin-1-7-58-contributor-arbitrary-file-download-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/ultimate_vc_addons/vulnerability/wordpress-ultimate-addons-for-wpbakery-page-builder-plugin-3-21-4-cross-site-scripting-xss-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/wordpress--3-21-4.json b/08-threat-intel/registry/versions/wordpress--3-21-4.json new file mode 100644 index 00000000..6cbd44c1 --- /dev/null +++ b/08-threat-intel/registry/versions/wordpress--3-21-4.json @@ -0,0 +1,14 @@ +{ + "version_id": "wordpress--3-21-4", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "3.21.4", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/ultimate_vc_addons/vulnerability/wordpress-ultimate-addons-for-wpbakery-page-builder-plugin-3-21-4-cross-site-scripting-xss-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/wordpress--3-28-31-authenticated-editor-php-object-injection-via-post-content-of-admin-form-posts-vulnerability.json b/08-threat-intel/registry/versions/wordpress--3-28-31-authenticated-editor-php-object-injection-via-post-content-of-admin-form-posts-vulnerability.json deleted file mode 100644 index e92609c0..00000000 --- a/08-threat-intel/registry/versions/wordpress--3-28-31-authenticated-editor-php-object-injection-via-post-content-of-admin-form-posts-vulnerability.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "version_id": "wordpress--3-28-31-authenticated-editor-php-object-injection-via-post-content-of-admin-form-posts-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3-28-31-authenticated-editor-php-object-injection-via-post-content-of-admin-form-posts-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/acf-frontend-form-element/vulnerability/wordpress-frontend-admin-by-dynamiapps-plugin-3-28-31-authenticated-editor-php-object-injection-via-post-content-of-admin-form-posts-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false -} diff --git a/08-threat-intel/registry/versions/wordpress--3-28-31.json b/08-threat-intel/registry/versions/wordpress--3-28-31.json deleted file mode 100644 index 428b1370..00000000 --- a/08-threat-intel/registry/versions/wordpress--3-28-31.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "version_id": "wordpress--3-28-31", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3.28.31", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/acf-frontend-form-element/vulnerability/wordpress-frontend-admin-by-dynamiapps-plugin-3-28-31-authenticated-editor-php-object-injection-via-post-content-of-admin-form-posts-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false -} diff --git a/08-threat-intel/registry/versions/wordpress--3-4-3-unauthenticated-arbitrary-shortcode-execution-vulnerability.json b/08-threat-intel/registry/versions/wordpress--3-4-3-unauthenticated-arbitrary-shortcode-execution-vulnerability.json deleted file mode 100644 index 20bd3770..00000000 --- a/08-threat-intel/registry/versions/wordpress--3-4-3-unauthenticated-arbitrary-shortcode-execution-vulnerability.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "version_id": "wordpress--3-4-3-unauthenticated-arbitrary-shortcode-execution-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3-4-3-unauthenticated-arbitrary-shortcode-execution-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/responsive-add-ons/vulnerability/wordpress-responsive-plus-plugin-3-4-3-unauthenticated-arbitrary-shortcode-execution-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false -} diff --git a/08-threat-intel/registry/versions/wordpress--3-8-unauthenticated-stored-cross-site-scripting-via-user-agent-http-header-vulnerability.json b/08-threat-intel/registry/versions/wordpress--3-8-unauthenticated-stored-cross-site-scripting-via-user-agent-http-header-vulnerability.json deleted file mode 100644 index 1061f7a5..00000000 --- a/08-threat-intel/registry/versions/wordpress--3-8-unauthenticated-stored-cross-site-scripting-via-user-agent-http-header-vulnerability.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "version_id": "wordpress--3-8-unauthenticated-stored-cross-site-scripting-via-user-agent-http-header-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3-8-unauthenticated-stored-cross-site-scripting-via-user-agent-http-header-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/blackhole-bad-bots/vulnerability/wordpress-blackhole-for-bad-bots-plugin-3-8-unauthenticated-stored-cross-site-scripting-via-user-agent-http-header-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false -} diff --git a/08-threat-intel/registry/versions/wordpress--3-8.json b/08-threat-intel/registry/versions/wordpress--3-8.json deleted file mode 100644 index b11f56c5..00000000 --- a/08-threat-intel/registry/versions/wordpress--3-8.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "version_id": "wordpress--3-8", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "3.8", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/blackhole-bad-bots/vulnerability/wordpress-blackhole-for-bad-bots-plugin-3-8-unauthenticated-stored-cross-site-scripting-via-user-agent-http-header-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false -} diff --git a/08-threat-intel/registry/versions/wordpress--51-1-38-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-widgets-vulnerability.json b/08-threat-intel/registry/versions/wordpress--51-1-38-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-widgets-vulnerability.json new file mode 100644 index 00000000..08361356 --- /dev/null +++ b/08-threat-intel/registry/versions/wordpress--51-1-38-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-widgets-vulnerability.json @@ -0,0 +1,14 @@ +{ + "version_id": "wordpress--51-1-38-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-widgets-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "51-1-38-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-widgets-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/king-addons/vulnerability/wordpress-king-addons-for-elementor-plugin-51-1-38-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-widgets-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/wordpress--51-1-53.json b/08-threat-intel/registry/versions/wordpress--51-1-53.json new file mode 100644 index 00000000..4588e450 --- /dev/null +++ b/08-threat-intel/registry/versions/wordpress--51-1-53.json @@ -0,0 +1,14 @@ +{ + "version_id": "wordpress--51-1-53", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "51.1.53", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/king-addons/vulnerability/wordpress-king-addons-for-elementor-plugin-51-1-38-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-widgets-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": true +} diff --git a/08-threat-intel/registry/versions/wordpress--7-4-10-authenticated-contributor-stored-cross-site-scripting-via-max-width-shortcode-attribute-vulnerability.json b/08-threat-intel/registry/versions/wordpress--7-4-10-authenticated-contributor-stored-cross-site-scripting-via-max-width-shortcode-attribute-vulnerability.json new file mode 100644 index 00000000..99028cd4 --- /dev/null +++ b/08-threat-intel/registry/versions/wordpress--7-4-10-authenticated-contributor-stored-cross-site-scripting-via-max-width-shortcode-attribute-vulnerability.json @@ -0,0 +1,14 @@ +{ + "version_id": "wordpress--7-4-10-authenticated-contributor-stored-cross-site-scripting-via-max-width-shortcode-attribute-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "7-4-10-authenticated-contributor-stored-cross-site-scripting-via-max-width-shortcode-attribute-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/shortcodes-ultimate/vulnerability/wordpress-wp-shortcodes-plugin-shortcodes-ultimate-plugin-7-4-10-authenticated-contributor-stored-cross-site-scripting-via-max-width-shortcode-attribute-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false +} diff --git a/08-threat-intel/registry/versions/wordpress--2-11-2.json b/08-threat-intel/registry/versions/wordpress--7-4-10.json similarity index 56% rename from 08-threat-intel/registry/versions/wordpress--2-11-2.json rename to 08-threat-intel/registry/versions/wordpress--7-4-10.json index f9da7648..f468fdb5 100644 --- a/08-threat-intel/registry/versions/wordpress--2-11-2.json +++ b/08-threat-intel/registry/versions/wordpress--7-4-10.json @@ -1,10 +1,10 @@ { - "version_id": "wordpress--2-11-2", + "version_id": "wordpress--7-4-10", "entity_id": "wordpress", "root_system_id": "wordpress", - "version": "2.11.2", + "version": "7.4.10", "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/ultimate-member/vulnerability/wordpress-ultimate-member-plugin-2-11-2-authenticated-contributor-sensitive-information-exposure-to-account-takeover-via-shortcode-template-tag-vulnerability", + "release_url": "https://patchstack.com/database/wordpress/plugin/shortcodes-ultimate/vulnerability/wordpress-wp-shortcodes-plugin-shortcodes-ultimate-plugin-7-4-10-authenticated-contributor-stored-cross-site-scripting-via-max-width-shortcode-attribute-vulnerability", "source_name": "Patchstack Database", "source_confidence": "ecosystem-authority", "security_relevant": true, diff --git a/08-threat-intel/registry/versions/wordpress--7-8-2.json b/08-threat-intel/registry/versions/wordpress--7-8-2.json deleted file mode 100644 index a9e84b4f..00000000 --- a/08-threat-intel/registry/versions/wordpress--7-8-2.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "version_id": "wordpress--7-8-2", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "7.8.2", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/bakkbone-florist-companion/vulnerability/wordpress-floristpress-for-woo-plugin-7-8-2-reflected-cross-site-scripting-via-noresults-parameter-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false -} diff --git a/08-threat-intel/registry/versions/wordpress--7-9.json b/08-threat-intel/registry/versions/wordpress--7-9.json index b6f88605..1e6eefba 100644 --- a/08-threat-intel/registry/versions/wordpress--7-9.json +++ b/08-threat-intel/registry/versions/wordpress--7-9.json @@ -10,5 +10,5 @@ "security_relevant": true, "reason": "security-release", "advisory_refs": [], - "is_latest_snapshot": true + "is_latest_snapshot": false } diff --git a/docs/testing-completeness-report.md b/docs/testing-completeness-report.md index e744a762..02351352 100644 --- a/docs/testing-completeness-report.md +++ b/docs/testing-completeness-report.md @@ -1,6 +1,6 @@ # 全库 Advisory 完整度报告 -- 生成时间: `2026-03-31T09:18:21+00:00` +- 生成时间: `2026-04-01T09:21:06+00:00` - 最新 advisory 完整度: `89/89` `verified-real` - 合成验证数量: `0` - 阻塞数量: `0` @@ -8,7 +8,7 @@ - 完整度百分比: `100.0%` - active source 全绿: `102/102` - source open alerts: `0` -- 最近一次 source 全绿: `2026-03-31T09:18:05+00:00` +- 最近一次 source 全绿: `2026-04-01T09:20:10+00:00` - 已编目实体: `110` - 待编目 backlog: `7` diff --git a/scripts/.DS_Store b/scripts/.DS_Store new file mode 100644 index 00000000..273cb87f Binary files /dev/null and b/scripts/.DS_Store differ