{"grype_matches":[{"artifact":{"id":"28d5db15190e922b","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.23.8&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119586","versionConstraint":"<= 3.54.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119586","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119586","cwe":"CWE-77","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119586","date":"2026-11-12","epss":0.01545,"percentile":0.75347}],"risk":1.2089625,"urls":["https://abraxaslabs.tech/research/sqlite-cli-recover","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.54.1/ext/recover/sqlite3recover.c#L1221-L1223","https://github.com/sqlite/sqlite/blob/version-3.54.1/src/shell.c.in#L7877-L7891","https://www.vulncheck.com/advisories/sqlite-cli-through-3.54.1-command-injection-via-recover-output"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119586","description":"SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-commands stored in sqlite_schema.sql values verbatim. Attackers can craft a database whose schema holds a valid CREATE statement followed by a .shell or .system line, executing OS commands when victims pipe .recover output into sqlite3."},"relatedVulnerabilities":[]},{"artifact":{"id":"09327264ca577f0a","cpes":["cpe:2.3:a:python-software-foundation:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software_foundation:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software-foundation:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software_foundation:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python3:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.16-r0:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:apk/alpine/python3@3.12.16-r0?arch=x86_64&distro=alpine-3.23.8","type":"apk","version":"3.12.16-r0","language":"","licenses":["PSF-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/2to3"},{"path":"/usr/bin/2to3-3.12"},{"path":"/usr/bin/pydoc3"},{"path":"/usr/bin/pydoc3.12"},{"path":"/usr/bin/python"},{"path":"/usr/bin/python3"},{"path":"/usr/bin/python3.12"},{"path":"/usr/include"},{"path":"/usr/include/python3.12"},{"path":"/usr/include/python3.12/pyconfig.h"},{"path":"/usr/lib"},{"path":"/usr/lib/libpython3.12.so.1.0"},{"path":"/usr/lib/libpython3.so"},{"path":"/usr/lib/python3.12"},{"path":"/usr/lib/python3.12/EXTERNALLY-MANAGED"},{"path":"/usr/lib/python3.12/LICENSE.txt"},{"path":"/usr/lib/python3.12/__future__.py"},{"path":"/usr/lib/python3.12/__hello__.py"},{"path":"/usr/lib/python3.12/_aix_support.py"},{"path":"/usr/lib/python3.12/_collections_abc.py"},{"path":"/usr/lib/python3.12/_compat_pickle.py"},{"path":"/usr/lib/python3.12/_compression.py"},{"path":"/usr/lib/python3.12/_markupbase.py"},{"path":"/usr/lib/python3.12/_osx_support.py"},{"path":"/usr/lib/python3.12/_py_abc.py"},{"path":"/usr/lib/python3.12/_pydatetime.py"},{"path":"/usr/lib/python3.12/_pydecimal.py"},{"path":"/usr/lib/python3.12/_pyio.py"},{"path":"/usr/lib/python3.12/_pylong.py"},{"path":"/usr/lib/python3.12/_sitebuiltins.py"},{"path":"/usr/lib/python3.12/_strptime.py"},{"path":"/usr/lib/python3.12/_sysconfigdata__linux_x86_64-linux-musl.py"},{"path":"/usr/lib/python3.12/_threading_local.py"},{"path":"/usr/lib/python3.12/_weakrefset.py"},{"path":"/usr/lib/python3.12/abc.py"},{"path":"/usr/lib/python3.12/aifc.py"},{"path":"/usr/lib/python3.12/antigravity.py"},{"path":"/usr/lib/python3.12/argparse.py"},{"path":"/usr/lib/python3.12/ast.py"},{"path":"/usr/lib/python3.12/base64.py"},{"path":"/usr/lib/python3.12/bdb.py"},{"path":"/usr/lib/python3.12/bisect.py"},{"path":"/usr/lib/python3.12/bz2.py"},{"path":"/usr/lib/python3.12/cProfile.py"},{"path":"/usr/lib/python3.12/calendar.py"},{"path":"/usr/lib/python3.12/cgi.py"},{"path":"/usr/lib/python3.12/cgitb.py"},{"path":"/usr/lib/python3.12/chunk.py"},{"path":"/usr/lib/python3.12/cmd.py"},{"path":"/usr/lib/python3.12/code.py"},{"path":"/usr/lib/python3.12/codecs.py"},{"path":"/usr/lib/python3.12/codeop.py"},{"path":"/usr/lib/python3.12/colorsys.py"},{"path":"/usr/lib/python3.12/compileall.py"},{"path":"/usr/lib/python3.12/configparser.py"},{"path":"/usr/lib/python3.12/contextlib.py"},{"path":"/usr/lib/python3.12/contextvars.py"},{"path":"/usr/lib/python3.12/copy.py"},{"path":"/usr/lib/python3.12/copyreg.py"},{"path":"/usr/lib/python3.12/crypt.py"},{"path":"/usr/lib/python3.12/csv.py"},{"path":"/usr/lib/python3.12/dataclasses.py"},{"path":"/usr/lib/python3.12/datetime.py"},{"path":"/usr/lib/python3.12/decimal.py"},{"path":"/usr/lib/python3.12/difflib.py"},{"path":"/usr/lib/python3.12/dis.py"},{"path":"/usr/lib/python3.12/doctest.py"},{"path":"/usr/lib/python3.12/enum.py"},{"path":"/usr/lib/python3.12/filecmp.py"},{"path":"/usr/lib/python3.12/fileinput.py"},{"path":"/usr/lib/python3.12/fnmatch.py"},{"path":"/usr/lib/python3.12/fractions.py"},{"path":"/usr/lib/python3.12/ftplib.py"},{"path":"/usr/lib/python3.12/functools.py"},{"path":"/usr/lib/python3.12/genericpath.py"},{"path":"/usr/lib/python3.12/getopt.py"},{"path":"/usr/lib/python3.12/getpass.py"},{"path":"/usr/lib/python3.12/gettext.py"},{"path":"/usr/lib/python3.12/glob.py"},{"path":"/usr/lib/python3.12/graphlib.py"},{"path":"/usr/lib/python3.12/gzip.py"},{"path":"/usr/lib/python3.12/hashlib.py"},{"path":"/usr/lib/python3.12/heapq.py"},{"path":"/usr/lib/python3.12/hmac.py"},{"path":"/usr/lib/python3.12/imaplib.py"},{"path":"/usr/lib/python3.12/imghdr.py"},{"path":"/usr/lib/python3.12/inspect.py"},{"path":"/usr/lib/python3.12/io.py"},{"path":"/usr/lib/python3.12/ipaddress.py"},{"path":"/usr/lib/python3.12/keyword.py"},{"path":"/usr/lib/python3.12/linecache.py"},{"path":"/usr/lib/python3.12/locale.py"},{"path":"/usr/lib/python3.12/lzma.py"},{"path":"/usr/lib/python3.12/mailbox.py"},{"path":"/usr/lib/python3.12/mailcap.py"},{"path":"/usr/lib/python3.12/mimetypes.py"},{"path":"/usr/lib/python3.12/modulefinder.py"},{"path":"/usr/lib/python3.12/netrc.py"},{"path":"/usr/lib/python3.12/nntplib.py"},{"path":"/usr/lib/python3.12/ntpath.py"},{"path":"/usr/lib/python3.12/nturl2path.py"},{"path":"/usr/lib/python3.12/numbers.py"},{"path":"/usr/lib/python3.12/opcode.py"},{"path":"/usr/lib/python3.12/operator.py"},{"path":"/usr/lib/python3.12/optparse.py"},{"path":"/usr/lib/python3.12/os.py"},{"path":"/usr/lib/python3.12/pathlib.py"},{"path":"/usr/lib/python3.12/pdb.py"},{"path":"/usr/lib/python3.12/pickle.py"},{"path":"/usr/lib/python3.12/pickletools.py"},{"path":"/usr/lib/python3.12/pipes.py"},{"path":"/usr/lib/python3.12/pkgutil.py"},{"path":"/usr/lib/python3.12/platform.py"},{"path":"/usr/lib/python3.12/plistlib.py"},{"path":"/usr/lib/python3.12/poplib.py"},{"path":"/usr/lib/python3.12/posixpath.py"},{"path":"/usr/lib/python3.12/pprint.py"},{"path":"/usr/lib/python3.12/profile.py"},{"path":"/usr/lib/python3.12/pstats.py"},{"path":"/usr/lib/python3.12/pty.py"},{"path":"/usr/lib/python3.12/py_compile.py"},{"path":"/usr/lib/python3.12/pyclbr.py"},{"path":"/usr/lib/python3.12/pydoc.py"},{"path":"/usr/lib/python3.12/queue.py"},{"path":"/usr/lib/python3.12/quopri.py"},{"path":"/usr/lib/python3.12/random.py"},{"path":"/usr/lib/python3.12/reprlib.py"},{"path":"/usr/lib/python3.12/rlcompleter.py"},{"path":"/usr/lib/python3.12/runpy.py"},{"path":"/usr/lib/python3.12/sched.py"},{"path":"/usr/lib/python3.12/secrets.py"},{"path":"/usr/lib/python3.12/selectors.py"},{"path":"/usr/lib/python3.12/shelve.py"},{"path":"/usr/lib/python3.12/shlex.py"},{"path":"/usr/lib/python3.12/shutil.py"},{"path":"/usr/lib/python3.12/signal.py"},{"path":"/usr/lib/python3.12/site.py"},{"path":"/usr/lib/python3.12/smtplib.py"},{"path":"/usr/lib/python3.12/sndhdr.py"},{"path":"/usr/lib/python3.12/socket.py"},{"path":"/usr/lib/python3.12/socketserver.py"},{"path":"/usr/lib/python3.12/sre_compile.py"},{"path":"/usr/lib/python3.12/sre_constants.py"},{"path":"/usr/lib/python3.12/sre_parse.py"},{"path":"/usr/lib/python3.12/ssl.py"},{"path":"/usr/lib/python3.12/stat.py"},{"path":"/usr/lib/python3.12/statistics.py"},{"path":"/usr/lib/python3.12/string.py"},{"path":"/usr/lib/python3.12/stringprep.py"},{"path":"/usr/lib/python3.12/struct.py"},{"path":"/usr/lib/python3.12/subprocess.py"},{"path":"/usr/lib/python3.12/sunau.py"},{"path":"/usr/lib/python3.12/symtable.py"},{"path":"/usr/lib/python3.12/sysconfig.py"},{"path":"/usr/lib/python3.12/tabnanny.py"},{"path":"/usr/lib/python3.12/tarfile.py"},{"path":"/usr/lib/python3.12/telnetlib.py"},{"path":"/usr/lib/python3.12/tempfile.py"},{"path":"/usr/lib/python3.12/textwrap.py"},{"path":"/usr/lib/python3.12/this.py"},{"path":"/usr/lib/python3.12/threading.py"},{"path":"/usr/lib/python3.12/timeit.py"},{"path":"/usr/lib/python3.12/token.py"},{"path":"/usr/lib/python3.12/tokenize.py"},{"path":"/usr/lib/python3.12/trace.py"},{"path":"/usr/lib/python3.12/traceback.py"},{"path":"/usr/lib/python3.12/tracemalloc.py"},{"path":"/usr/lib/python3.12/tty.py"},{"path":"/usr/lib/python3.12/turtle.py"},{"path":"/usr/lib/python3.12/types.py"},{"path":"/usr/lib/python3.12/typing.py"},{"path":"/usr/lib/python3.12/uu.py"},{"path":"/usr/lib/python3.12/uuid.py"},{"path":"/usr/lib/python3.12/warnings.py"},{"path":"/usr/lib/python3.12/wave.py"},{"path":"/usr/lib/python3.12/weakref.py"},{"path":"/usr/lib/python3.12/webbrowser.py"},{"path":"/usr/lib/python3.12/xdrlib.py"},{"path":"/usr/lib/python3.12/zipapp.py"},{"path":"/usr/lib/python3.12/zipimport.py"},{"path":"/usr/lib/python3.12/__phello__"},{"path":"/usr/lib/python3.12/__phello__/__init__.py"},{"path":"/usr/lib/python3.12/__phello__/spam.py"},{"path":"/usr/lib/python3.12/asyncio"},{"path":"/usr/lib/python3.12/asyncio/__init__.py"},{"path":"/usr/lib/python3.12/asyncio/__main__.py"},{"path":"/usr/lib/python3.12/asyncio/base_events.py"},{"path":"/usr/lib/python3.12/asyncio/base_futures.py"},{"path":"/usr/lib/python3.12/asyncio/base_subprocess.py"},{"path":"/usr/lib/python3.12/asyncio/base_tasks.py"},{"path":"/usr/lib/python3.12/asyncio/constants.py"},{"path":"/usr/lib/python3.12/asyncio/coroutines.py"},{"path":"/usr/lib/python3.12/asyncio/events.py"},{"path":"/usr/lib/python3.12/asyncio/exceptions.py"},{"path":"/usr/lib/python3.12/asyncio/format_helpers.py"},{"path":"/usr/lib/python3.12/asyncio/futures.py"},{"path":"/usr/lib/python3.12/asyncio/locks.py"},{"path":"/usr/lib/python3.12/asyncio/log.py"},{"path":"/usr/lib/python3.12/asyncio/mixins.py"},{"path":"/usr/lib/python3.12/asyncio/proactor_events.py"},{"path":"/usr/lib/python3.12/asyncio/protocols.py"},{"path":"/usr/lib/python3.12/asyncio/queues.py"},{"path":"/usr/lib/python3.12/asyncio/runners.py"},{"path":"/usr/lib/python3.12/asyncio/selector_events.py"},{"path":"/usr/lib/python3.12/asyncio/sslproto.py"},{"path":"/usr/lib/python3.12/asyncio/staggered.py"},{"path":"/usr/lib/python3.12/asyncio/streams.py"},{"path":"/usr/lib/python3.12/asyncio/subprocess.py"},{"path":"/usr/lib/python3.12/asyncio/taskgroups.py"},{"path":"/usr/lib/python3.12/asyncio/tasks.py"},{"path":"/usr/lib/python3.12/asyncio/threads.py"},{"path":"/usr/lib/python3.12/asyncio/timeouts.py"},{"path":"/usr/lib/python3.12/asyncio/transports.py"},{"path":"/usr/lib/python3.12/asyncio/trsock.py"},{"path":"/usr/lib/python3.12/asyncio/unix_events.py"},{"path":"/usr/lib/python3.12/asyncio/windows_events.py"},{"path":"/usr/lib/python3.12/asyncio/windows_utils.py"},{"path":"/usr/lib/python3.12/collections"},{"path":"/usr/lib/python3.12/collections/__init__.py"},{"path":"/usr/lib/python3.12/collections/abc.py"},{"path":"/usr/lib/python3.12/concurrent"},{"path":"/usr/lib/python3.12/concurrent/__init__.py"},{"path":"/usr/lib/python3.12/concurrent/futures"},{"path":"/usr/lib/python3.12/concurrent/futures/__init__.py"},{"path":"/usr/lib/python3.12/concurrent/futures/_base.py"},{"path":"/usr/lib/python3.12/concurrent/futures/process.py"},{"path":"/usr/lib/python3.12/concurrent/futures/thread.py"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Makefile"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.bootstrap"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.local"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.stdlib"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/config.c.in"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/install-sh"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/makesetup"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/python-config.py"},{"path":"/usr/lib/python3.12/ctypes"},{"path":"/usr/lib/python3.12/ctypes/__init__.py"},{"path":"/usr/lib/python3.12/ctypes/_aix.py"},{"path":"/usr/lib/python3.12/ctypes/_endian.py"},{"path":"/usr/lib/python3.12/ctypes/util.py"},{"path":"/usr/lib/python3.12/ctypes/wintypes.py"},{"path":"/usr/lib/python3.12/ctypes/macholib"},{"path":"/usr/lib/python3.12/ctypes/macholib/README.ctypes"},{"path":"/usr/lib/python3.12/ctypes/macholib/__init__.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/dyld.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/dylib.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/fetch_macholib"},{"path":"/usr/lib/python3.12/ctypes/macholib/fetch_macholib.bat"},{"path":"/usr/lib/python3.12/ctypes/macholib/framework.py"},{"path":"/usr/lib/python3.12/curses"},{"path":"/usr/lib/python3.12/curses/__init__.py"},{"path":"/usr/lib/python3.12/curses/ascii.py"},{"path":"/usr/lib/python3.12/curses/has_key.py"},{"path":"/usr/lib/python3.12/curses/panel.py"},{"path":"/usr/lib/python3.12/curses/textpad.py"},{"path":"/usr/lib/python3.12/dbm"},{"path":"/usr/lib/python3.12/dbm/__init__.py"},{"path":"/usr/lib/python3.12/dbm/dumb.py"},{"path":"/usr/lib/python3.12/dbm/gnu.py"},{"path":"/usr/lib/python3.12/dbm/ndbm.py"},{"path":"/usr/lib/python3.12/email"},{"path":"/usr/lib/python3.12/email/__init__.py"},{"path":"/usr/lib/python3.12/email/_encoded_words.py"},{"path":"/usr/lib/python3.12/email/_header_value_parser.py"},{"path":"/usr/lib/python3.12/email/_parseaddr.py"},{"path":"/usr/lib/python3.12/email/_policybase.py"},{"path":"/usr/lib/python3.12/email/architecture.rst"},{"path":"/usr/lib/python3.12/email/base64mime.py"},{"path":"/usr/lib/python3.12/email/charset.py"},{"path":"/usr/lib/python3.12/email/contentmanager.py"},{"path":"/usr/lib/python3.12/email/encoders.py"},{"path":"/usr/lib/python3.12/email/errors.py"},{"path":"/usr/lib/python3.12/email/feedparser.py"},{"path":"/usr/lib/python3.12/email/generator.py"},{"path":"/usr/lib/python3.12/email/header.py"},{"path":"/usr/lib/python3.12/email/headerregistry.py"},{"path":"/usr/lib/python3.12/email/iterators.py"},{"path":"/usr/lib/python3.12/email/message.py"},{"path":"/usr/lib/python3.12/email/parser.py"},{"path":"/usr/lib/python3.12/email/policy.py"},{"path":"/usr/lib/python3.12/email/quoprimime.py"},{"path":"/usr/lib/python3.12/email/utils.py"},{"path":"/usr/lib/python3.12/email/mime"},{"path":"/usr/lib/python3.12/email/mime/__init__.py"},{"path":"/usr/lib/python3.12/email/mime/application.py"},{"path":"/usr/lib/python3.12/email/mime/audio.py"},{"path":"/usr/lib/python3.12/email/mime/base.py"},{"path":"/usr/lib/python3.12/email/mime/image.py"},{"path":"/usr/lib/python3.12/email/mime/message.py"},{"path":"/usr/lib/python3.12/email/mime/multipart.py"},{"path":"/usr/lib/python3.12/email/mime/nonmultipart.py"},{"path":"/usr/lib/python3.12/email/mime/text.py"},{"path":"/usr/lib/python3.12/encodings"},{"path":"/usr/lib/python3.12/encodings/__init__.py"},{"path":"/usr/lib/python3.12/encodings/aliases.py"},{"path":"/usr/lib/python3.12/encodings/ascii.py"},{"path":"/usr/lib/python3.12/encodings/base64_codec.py"},{"path":"/usr/lib/python3.12/encodings/big5.py"},{"path":"/usr/lib/python3.12/encodings/big5hkscs.py"},{"path":"/usr/lib/python3.12/encodings/bz2_codec.py"},{"path":"/usr/lib/python3.12/encodings/charmap.py"},{"path":"/usr/lib/python3.12/encodings/cp037.py"},{"path":"/usr/lib/python3.12/encodings/cp1006.py"},{"path":"/usr/lib/python3.12/encodings/cp1026.py"},{"path":"/usr/lib/python3.12/encodings/cp1125.py"},{"path":"/usr/lib/python3.12/encodings/cp1140.py"},{"path":"/usr/lib/python3.12/encodings/cp1250.py"},{"path":"/usr/lib/python3.12/encodings/cp1251.py"},{"path":"/usr/lib/python3.12/encodings/cp1252.py"},{"path":"/usr/lib/python3.12/encodings/cp1253.py"},{"path":"/usr/lib/python3.12/encodings/cp1254.py"},{"path":"/usr/lib/python3.12/encodings/cp1255.py"},{"path":"/usr/lib/python3.12/encodings/cp1256.py"},{"path":"/usr/lib/python3.12/encodings/cp1257.py"},{"path":"/usr/lib/python3.12/encodings/cp1258.py"},{"path":"/usr/lib/python3.12/encodings/cp273.py"},{"path":"/usr/lib/python3.12/encodings/cp424.py"},{"path":"/usr/lib/python3.12/encodings/cp437.py"},{"path":"/usr/lib/python3.12/encodings/cp500.py"},{"path":"/usr/lib/python3.12/encodings/cp720.py"},{"path":"/usr/lib/python3.12/encodings/cp737.py"},{"path":"/usr/lib/python3.12/encodings/cp775.py"},{"path":"/usr/lib/python3.12/encodings/cp850.py"},{"path":"/usr/lib/python3.12/encodings/cp852.py"},{"path":"/usr/lib/python3.12/encodings/cp855.py"},{"path":"/usr/lib/python3.12/encodings/cp856.py"},{"path":"/usr/lib/python3.12/encodings/cp857.py"},{"path":"/usr/lib/python3.12/encodings/cp858.py"},{"path":"/usr/lib/python3.12/encodings/cp860.py"},{"path":"/usr/lib/python3.12/encodings/cp861.py"},{"path":"/usr/lib/python3.12/encodings/cp862.py"},{"path":"/usr/lib/python3.12/encodings/cp863.py"},{"path":"/usr/lib/python3.12/encodings/cp864.py"},{"path":"/usr/lib/python3.12/encodings/cp865.py"},{"path":"/usr/lib/python3.12/encodings/cp866.py"},{"path":"/usr/lib/python3.12/encodings/cp869.py"},{"path":"/usr/lib/python3.12/encodings/cp874.py"},{"path":"/usr/lib/python3.12/encodings/cp875.py"},{"path":"/usr/lib/python3.12/encodings/cp932.py"},{"path":"/usr/lib/python3.12/encodings/cp949.py"},{"path":"/usr/lib/python3.12/encodings/cp950.py"},{"path":"/usr/lib/python3.12/encodings/euc_jis_2004.py"},{"path":"/usr/lib/python3.12/encodings/euc_jisx0213.py"},{"path":"/usr/lib/python3.12/encodings/euc_jp.py"},{"path":"/usr/lib/python3.12/encodings/euc_kr.py"},{"path":"/usr/lib/python3.12/encodings/gb18030.py"},{"path":"/usr/lib/python3.12/encodings/gb2312.py"},{"path":"/usr/lib/python3.12/encodings/gbk.py"},{"path":"/usr/lib/python3.12/encodings/hex_codec.py"},{"path":"/usr/lib/python3.12/encodings/hp_roman8.py"},{"path":"/usr/lib/python3.12/encodings/hz.py"},{"path":"/usr/lib/python3.12/encodings/idna.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_1.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_2.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_2004.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_3.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_ext.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_kr.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_1.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_10.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_11.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_13.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_14.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_15.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_16.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_2.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_3.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_4.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_5.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_6.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_7.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_8.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_9.py"},{"path":"/usr/lib/python3.12/encodings/johab.py"},{"path":"/usr/lib/python3.12/encodings/koi8_r.py"},{"path":"/usr/lib/python3.12/encodings/koi8_t.py"},{"path":"/usr/lib/python3.12/encodings/koi8_u.py"},{"path":"/usr/lib/python3.12/encodings/kz1048.py"},{"path":"/usr/lib/python3.12/encodings/latin_1.py"},{"path":"/usr/lib/python3.12/encodings/mac_arabic.py"},{"path":"/usr/lib/python3.12/encodings/mac_croatian.py"},{"path":"/usr/lib/python3.12/encodings/mac_cyrillic.py"},{"path":"/usr/lib/python3.12/encodings/mac_farsi.py"},{"path":"/usr/lib/python3.12/encodings/mac_greek.py"},{"path":"/usr/lib/python3.12/encodings/mac_iceland.py"},{"path":"/usr/lib/python3.12/encodings/mac_latin2.py"},{"path":"/usr/lib/python3.12/encodings/mac_roman.py"},{"path":"/usr/lib/python3.12/encodings/mac_romanian.py"},{"path":"/usr/lib/python3.12/encodings/mac_turkish.py"},{"path":"/usr/lib/python3.12/encodings/mbcs.py"},{"path":"/usr/lib/python3.12/encodings/oem.py"},{"path":"/usr/lib/python3.12/encodings/palmos.py"},{"path":"/usr/lib/python3.12/encodings/ptcp154.py"},{"path":"/usr/lib/python3.12/encodings/punycode.py"},{"path":"/usr/lib/python3.12/encodings/quopri_codec.py"},{"path":"/usr/lib/python3.12/encodings/raw_unicode_escape.py"},{"path":"/usr/lib/python3.12/encodings/rot_13.py"},{"path":"/usr/lib/python3.12/encodings/shift_jis.py"},{"path":"/usr/lib/python3.12/encodings/shift_jis_2004.py"},{"path":"/usr/lib/python3.12/encodings/shift_jisx0213.py"},{"path":"/usr/lib/python3.12/encodings/tis_620.py"},{"path":"/usr/lib/python3.12/encodings/undefined.py"},{"path":"/usr/lib/python3.12/encodings/unicode_escape.py"},{"path":"/usr/lib/python3.12/encodings/utf_16.py"},{"path":"/usr/lib/python3.12/encodings/utf_16_be.py"},{"path":"/usr/lib/python3.12/encodings/utf_16_le.py"},{"path":"/usr/lib/python3.12/encodings/utf_32.py"},{"path":"/usr/lib/python3.12/encodings/utf_32_be.py"},{"path":"/usr/lib/python3.12/encodings/utf_32_le.py"},{"path":"/usr/lib/python3.12/encodings/utf_7.py"},{"path":"/usr/lib/python3.12/encodings/utf_8.py"},{"path":"/usr/lib/python3.12/encodings/utf_8_sig.py"},{"path":"/usr/lib/python3.12/encodings/uu_codec.py"},{"path":"/usr/lib/python3.12/encodings/zlib_codec.py"},{"path":"/usr/lib/python3.12/ensurepip"},{"path":"/usr/lib/python3.12/ensurepip/__init__.py"},{"path":"/usr/lib/python3.12/ensurepip/__main__.py"},{"path":"/usr/lib/python3.12/ensurepip/_uninstall.py"},{"path":"/usr/lib/python3.12/ensurepip/_bundled"},{"path":"/usr/lib/python3.12/ensurepip/_bundled/pip-25.0.1-py3-none-any.whl"},{"path":"/usr/lib/python3.12/html"},{"path":"/usr/lib/python3.12/html/__init__.py"},{"path":"/usr/lib/python3.12/html/entities.py"},{"path":"/usr/lib/python3.12/html/parser.py"},{"path":"/usr/lib/python3.12/http"},{"path":"/usr/lib/python3.12/http/__init__.py"},{"path":"/usr/lib/python3.12/http/client.py"},{"path":"/usr/lib/python3.12/http/cookiejar.py"},{"path":"/usr/lib/python3.12/http/cookies.py"},{"path":"/usr/lib/python3.12/http/server.py"},{"path":"/usr/lib/python3.12/importlib"},{"path":"/usr/lib/python3.12/importlib/__init__.py"},{"path":"/usr/lib/python3.12/importlib/_abc.py"},{"path":"/usr/lib/python3.12/importlib/_bootstrap.py"},{"path":"/usr/lib/python3.12/importlib/_bootstrap_external.py"},{"path":"/usr/lib/python3.12/importlib/abc.py"},{"path":"/usr/lib/python3.12/importlib/machinery.py"},{"path":"/usr/lib/python3.12/importlib/readers.py"},{"path":"/usr/lib/python3.12/importlib/simple.py"},{"path":"/usr/lib/python3.12/importlib/util.py"},{"path":"/usr/lib/python3.12/importlib/metadata"},{"path":"/usr/lib/python3.12/importlib/metadata/__init__.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_adapters.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_collections.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_functools.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_itertools.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_meta.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_text.py"},{"path":"/usr/lib/python3.12/importlib/resources"},{"path":"/usr/lib/python3.12/importlib/resources/__init__.py"},{"path":"/usr/lib/python3.12/importlib/resources/_adapters.py"},{"path":"/usr/lib/python3.12/importlib/resources/_common.py"},{"path":"/usr/lib/python3.12/importlib/resources/_itertools.py"},{"path":"/usr/lib/python3.12/importlib/resources/_legacy.py"},{"path":"/usr/lib/python3.12/importlib/resources/abc.py"},{"path":"/usr/lib/python3.12/importlib/resources/readers.py"},{"path":"/usr/lib/python3.12/importlib/resources/simple.py"},{"path":"/usr/lib/python3.12/json"},{"path":"/usr/lib/python3.12/json/__init__.py"},{"path":"/usr/lib/python3.12/json/decoder.py"},{"path":"/usr/lib/python3.12/json/encoder.py"},{"path":"/usr/lib/python3.12/json/scanner.py"},{"path":"/usr/lib/python3.12/json/tool.py"},{"path":"/usr/lib/python3.12/lib-dynload"},{"path":"/usr/lib/python3.12/lib-dynload/_asyncio.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_bisect.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_blake2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_bz2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_cn.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_hk.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_iso2022.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_jp.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_kr.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_tw.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_contextvars.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_crypt.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_csv.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ctypes.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ctypes_test.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_curses.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_curses_panel.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_datetime.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_dbm.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_decimal.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_elementtree.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_hashlib.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_heapq.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_json.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_lsprof.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_lzma.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_md5.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_multibytecodec.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_multiprocessing.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_opcode.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_pickle.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_posixshmem.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_posixsubprocess.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_queue.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_random.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha1.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha3.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_socket.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sqlite3.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ssl.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_statistics.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_struct.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testbuffer.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testcapi.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testclinic.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testimportmultiple.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testinternalcapi.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testmultiphase.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testsinglephase.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxinterpchannels.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxsubinterpreters.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxtestfuzz.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_zoneinfo.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/array.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/audioop.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/binascii.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/cmath.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/fcntl.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/grp.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/math.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/mmap.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/ossaudiodev.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/pyexpat.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/readline.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/resource.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/select.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/spwd.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/syslog.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/termios.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/unicodedata.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxlimited.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxlimited_35.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxsubtype.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/zlib.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib2to3"},{"path":"/usr/lib/python3.12/lib2to3/Grammar.txt"},{"path":"/usr/lib/python3.12/lib2to3/Grammar3.12.16.final.0.pickle"},{"path":"/usr/lib/python3.12/lib2to3/PatternGrammar.txt"},{"path":"/usr/lib/python3.12/lib2to3/PatternGrammar3.12.16.final.0.pickle"},{"path":"/usr/lib/python3.12/lib2to3/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/__main__.py"},{"path":"/usr/lib/python3.12/lib2to3/btm_matcher.py"},{"path":"/usr/lib/python3.12/lib2to3/btm_utils.py"},{"path":"/usr/lib/python3.12/lib2to3/fixer_base.py"},{"path":"/usr/lib/python3.12/lib2to3/fixer_util.py"},{"path":"/usr/lib/python3.12/lib2to3/main.py"},{"path":"/usr/lib/python3.12/lib2to3/patcomp.py"},{"path":"/usr/lib/python3.12/lib2to3/pygram.py"},{"path":"/usr/lib/python3.12/lib2to3/pytree.py"},{"path":"/usr/lib/python3.12/lib2to3/refactor.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes"},{"path":"/usr/lib/python3.12/lib2to3/fixes/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_apply.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_asserts.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_basestring.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_buffer.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_dict.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_except.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_exec.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_execfile.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_exitfunc.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_filter.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_funcattrs.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_future.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_getcwdu.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_has_key.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_idioms.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_import.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_imports.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_imports2.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_input.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_intern.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_isinstance.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_itertools.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_itertools_imports.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_long.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_map.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_metaclass.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_methodattrs.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_ne.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_next.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_nonzero.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_numliterals.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_operator.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_paren.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_print.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_raise.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_raw_input.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_reduce.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_reload.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_renames.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_repr.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_set_literal.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_standarderror.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_sys_exc.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_throw.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_tuple_params.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_types.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_unicode.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_urllib.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_ws_comma.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_xrange.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_xreadlines.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_zip.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/conv.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/driver.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/grammar.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/literals.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/parse.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/pgen.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/token.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/tokenize.py"},{"path":"/usr/lib/python3.12/logging"},{"path":"/usr/lib/python3.12/logging/__init__.py"},{"path":"/usr/lib/python3.12/logging/config.py"},{"path":"/usr/lib/python3.12/logging/handlers.py"},{"path":"/usr/lib/python3.12/multiprocessing"},{"path":"/usr/lib/python3.12/multiprocessing/__init__.py"},{"path":"/usr/lib/python3.12/multiprocessing/connection.py"},{"path":"/usr/lib/python3.12/multiprocessing/context.py"},{"path":"/usr/lib/python3.12/multiprocessing/forkserver.py"},{"path":"/usr/lib/python3.12/multiprocessing/heap.py"},{"path":"/usr/lib/python3.12/multiprocessing/managers.py"},{"path":"/usr/lib/python3.12/multiprocessing/pool.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_fork.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_forkserver.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_spawn_posix.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_spawn_win32.py"},{"path":"/usr/lib/python3.12/multiprocessing/process.py"},{"path":"/usr/lib/python3.12/multiprocessing/queues.py"},{"path":"/usr/lib/python3.12/multiprocessing/reduction.py"},{"path":"/usr/lib/python3.12/multiprocessing/resource_sharer.py"},{"path":"/usr/lib/python3.12/multiprocessing/resource_tracker.py"},{"path":"/usr/lib/python3.12/multiprocessing/shared_memory.py"},{"path":"/usr/lib/python3.12/multiprocessing/sharedctypes.py"},{"path":"/usr/lib/python3.12/multiprocessing/spawn.py"},{"path":"/usr/lib/python3.12/multiprocessing/synchronize.py"},{"path":"/usr/lib/python3.12/multiprocessing/util.py"},{"path":"/usr/lib/python3.12/multiprocessing/dummy"},{"path":"/usr/lib/python3.12/multiprocessing/dummy/__init__.py"},{"path":"/usr/lib/python3.12/multiprocessing/dummy/connection.py"},{"path":"/usr/lib/python3.12/pydoc_data"},{"path":"/usr/lib/python3.12/pydoc_data/__init__.py"},{"path":"/usr/lib/python3.12/pydoc_data/_pydoc.css"},{"path":"/usr/lib/python3.12/pydoc_data/topics.py"},{"path":"/usr/lib/python3.12/re"},{"path":"/usr/lib/python3.12/re/__init__.py"},{"path":"/usr/lib/python3.12/re/_casefix.py"},{"path":"/usr/lib/python3.12/re/_compiler.py"},{"path":"/usr/lib/python3.12/re/_constants.py"},{"path":"/usr/lib/python3.12/re/_parser.py"},{"path":"/usr/lib/python3.12/site-packages"},{"path":"/usr/lib/python3.12/site-packages/README.txt"},{"path":"/usr/lib/python3.12/sqlite3"},{"path":"/usr/lib/python3.12/sqlite3/__init__.py"},{"path":"/usr/lib/python3.12/sqlite3/__main__.py"},{"path":"/usr/lib/python3.12/sqlite3/dbapi2.py"},{"path":"/usr/lib/python3.12/sqlite3/dump.py"},{"path":"/usr/lib/python3.12/tomllib"},{"path":"/usr/lib/python3.12/tomllib/__init__.py"},{"path":"/usr/lib/python3.12/tomllib/_parser.py"},{"path":"/usr/lib/python3.12/tomllib/_re.py"},{"path":"/usr/lib/python3.12/tomllib/_types.py"},{"path":"/usr/lib/python3.12/turtledemo"},{"path":"/usr/lib/python3.12/turtledemo/__init__.py"},{"path":"/usr/lib/python3.12/turtledemo/__main__.py"},{"path":"/usr/lib/python3.12/turtledemo/bytedesign.py"},{"path":"/usr/lib/python3.12/turtledemo/chaos.py"},{"path":"/usr/lib/python3.12/turtledemo/clock.py"},{"path":"/usr/lib/python3.12/turtledemo/colormixer.py"},{"path":"/usr/lib/python3.12/turtledemo/forest.py"},{"path":"/usr/lib/python3.12/turtledemo/fractalcurves.py"},{"path":"/usr/lib/python3.12/turtledemo/lindenmayer.py"},{"path":"/usr/lib/python3.12/turtledemo/minimal_hanoi.py"},{"path":"/usr/lib/python3.12/turtledemo/nim.py"},{"path":"/usr/lib/python3.12/turtledemo/paint.py"},{"path":"/usr/lib/python3.12/turtledemo/peace.py"},{"path":"/usr/lib/python3.12/turtledemo/penrose.py"},{"path":"/usr/lib/python3.12/turtledemo/planet_and_moon.py"},{"path":"/usr/lib/python3.12/turtledemo/rosette.py"},{"path":"/usr/lib/python3.12/turtledemo/round_dance.py"},{"path":"/usr/lib/python3.12/turtledemo/sorting_animate.py"},{"path":"/usr/lib/python3.12/turtledemo/tree.py"},{"path":"/usr/lib/python3.12/turtledemo/turtle.cfg"},{"path":"/usr/lib/python3.12/turtledemo/two_canvases.py"},{"path":"/usr/lib/python3.12/turtledemo/yinyang.py"},{"path":"/usr/lib/python3.12/unittest"},{"path":"/usr/lib/python3.12/unittest/__init__.py"},{"path":"/usr/lib/python3.12/unittest/__main__.py"},{"path":"/usr/lib/python3.12/unittest/_log.py"},{"path":"/usr/lib/python3.12/unittest/async_case.py"},{"path":"/usr/lib/python3.12/unittest/case.py"},{"path":"/usr/lib/python3.12/unittest/loader.py"},{"path":"/usr/lib/python3.12/unittest/main.py"},{"path":"/usr/lib/python3.12/unittest/mock.py"},{"path":"/usr/lib/python3.12/unittest/result.py"},{"path":"/usr/lib/python3.12/unittest/runner.py"},{"path":"/usr/lib/python3.12/unittest/signals.py"},{"path":"/usr/lib/python3.12/unittest/suite.py"},{"path":"/usr/lib/python3.12/unittest/util.py"},{"path":"/usr/lib/python3.12/urllib"},{"path":"/usr/lib/python3.12/urllib/__init__.py"},{"path":"/usr/lib/python3.12/urllib/error.py"},{"path":"/usr/lib/python3.12/urllib/parse.py"},{"path":"/usr/lib/python3.12/urllib/request.py"},{"path":"/usr/lib/python3.12/urllib/response.py"},{"path":"/usr/lib/python3.12/urllib/robotparser.py"},{"path":"/usr/lib/python3.12/venv"},{"path":"/usr/lib/python3.12/venv/__init__.py"},{"path":"/usr/lib/python3.12/venv/__main__.py"},{"path":"/usr/lib/python3.12/venv/scripts"},{"path":"/usr/lib/python3.12/venv/scripts/common"},{"path":"/usr/lib/python3.12/venv/scripts/common/Activate.ps1"},{"path":"/usr/lib/python3.12/venv/scripts/common/activate"},{"path":"/usr/lib/python3.12/venv/scripts/posix"},{"path":"/usr/lib/python3.12/venv/scripts/posix/activate.csh"},{"path":"/usr/lib/python3.12/venv/scripts/posix/activate.fish"},{"path":"/usr/lib/python3.12/wsgiref"},{"path":"/usr/lib/python3.12/wsgiref/__init__.py"},{"path":"/usr/lib/python3.12/wsgiref/handlers.py"},{"path":"/usr/lib/python3.12/wsgiref/headers.py"},{"path":"/usr/lib/python3.12/wsgiref/simple_server.py"},{"path":"/usr/lib/python3.12/wsgiref/types.py"},{"path":"/usr/lib/python3.12/wsgiref/util.py"},{"path":"/usr/lib/python3.12/wsgiref/validate.py"},{"path":"/usr/lib/python3.12/xml"},{"path":"/usr/lib/python3.12/xml/__init__.py"},{"path":"/usr/lib/python3.12/xml/dom"},{"path":"/usr/lib/python3.12/xml/dom/NodeFilter.py"},{"path":"/usr/lib/python3.12/xml/dom/__init__.py"},{"path":"/usr/lib/python3.12/xml/dom/domreg.py"},{"path":"/usr/lib/python3.12/xml/dom/expatbuilder.py"},{"path":"/usr/lib/python3.12/xml/dom/minicompat.py"},{"path":"/usr/lib/python3.12/xml/dom/minidom.py"},{"path":"/usr/lib/python3.12/xml/dom/pulldom.py"},{"path":"/usr/lib/python3.12/xml/dom/xmlbuilder.py"},{"path":"/usr/lib/python3.12/xml/etree"},{"path":"/usr/lib/python3.12/xml/etree/ElementInclude.py"},{"path":"/usr/lib/python3.12/xml/etree/ElementPath.py"},{"path":"/usr/lib/python3.12/xml/etree/ElementTree.py"},{"path":"/usr/lib/python3.12/xml/etree/__init__.py"},{"path":"/usr/lib/python3.12/xml/etree/cElementTree.py"},{"path":"/usr/lib/python3.12/xml/parsers"},{"path":"/usr/lib/python3.12/xml/parsers/__init__.py"},{"path":"/usr/lib/python3.12/xml/parsers/expat.py"},{"path":"/usr/lib/python3.12/xml/sax"},{"path":"/usr/lib/python3.12/xml/sax/__init__.py"},{"path":"/usr/lib/python3.12/xml/sax/_exceptions.py"},{"path":"/usr/lib/python3.12/xml/sax/expatreader.py"},{"path":"/usr/lib/python3.12/xml/sax/handler.py"},{"path":"/usr/lib/python3.12/xml/sax/saxutils.py"},{"path":"/usr/lib/python3.12/xml/sax/xmlreader.py"},{"path":"/usr/lib/python3.12/xmlrpc"},{"path":"/usr/lib/python3.12/xmlrpc/__init__.py"},{"path":"/usr/lib/python3.12/xmlrpc/client.py"},{"path":"/usr/lib/python3.12/xmlrpc/server.py"},{"path":"/usr/lib/python3.12/zipfile"},{"path":"/usr/lib/python3.12/zipfile/__init__.py"},{"path":"/usr/lib/python3.12/zipfile/__main__.py"},{"path":"/usr/lib/python3.12/zipfile/_path"},{"path":"/usr/lib/python3.12/zipfile/_path/__init__.py"},{"path":"/usr/lib/python3.12/zipfile/_path/glob.py"},{"path":"/usr/lib/python3.12/zoneinfo"},{"path":"/usr/lib/python3.12/zoneinfo/__init__.py"},{"path":"/usr/lib/python3.12/zoneinfo/_common.py"},{"path":"/usr/lib/python3.12/zoneinfo/_tzpath.py"},{"path":"/usr/lib/python3.12/zoneinfo/_zoneinfo.py"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-12781","versionConstraint":"< 3.13.10||>= 3.14.0, < 3.14.1||>= 3.15.0a1, < 3.15.0a2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.16:*:*:*:*:*:*:*"],"package":{"name":"python3","version":"3.12.16-r0"},"namespace":"nvd:cpe"}},{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-12781","versionConstraint":"< 3.13.10||>= 3.14.0, < 3.14.1||>= 3.15.0a1, < 3.15.0a2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.16:*:*:*:*:*:*:*"],"package":{"name":"python3","version":"3.12.16-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-12781","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-12781","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-12781","date":"2026-11-12","epss":0.00859,"percentile":0.58959}],"risk":0.46386000000000005,"urls":["https://github.com/python/cpython/commit/13360efd385d1a7d0659beba03787ea3d063ef9b","https://github.com/python/cpython/commit/1be80bec7960f5ccd059e75f3dfbd45fca302947","https://github.com/python/cpython/commit/9060b4abbe475591b6230b23c2afefeff26fcca5","https://github.com/python/cpython/commit/e95e783dff443b68e8179fdb57737025bf02ba76","https://github.com/python/cpython/commit/fd17ee026fa9b67f6288cbafe374a3e479fe03a5","https://github.com/python/cpython/issues/125346","https://github.com/python/cpython/pull/141128","https://mail.python.org/archives/list/security-announce@python.org/thread/KRI7GC6S27YV5NJ4FPDALS2WI5ENAFJ6/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-12781","description":"When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the \"base64\" module the characters \"+/\" will always be accepted, regardless of the value of \"altchars\" parameter, typically used to establish an \"alternative base64 alphabet\" such as the URL safe alphabet. This behavior matches what is recommended in earlier base64 RFCs, but newer RFCs now recommend either dropping characters outside the specified base64 alphabet or raising an error. The old behavior has the possibility of causing data integrity issues.\n\n\n\n\nThis behavior can only be insecure if your application uses an alternate base64 alphabet (without \"+/\"). If your application does not use the \"altchars\" parameter or the urlsafe_b64decode() function, then your application does not use an alternative base64 alphabet.\n\n\n\n\nThe attached patches DOES NOT make the base64-decode behavior raise an error, as this would be a change in behavior and break existing programs. Instead, the patch deprecates the behavior which will be replaced with the newly recommended behavior in a future version of Python. Users are recommended to mitigate by verifying user-controlled inputs match the base64 \nalphabet they are expecting or verify that their application would not be \naffected if the b64decode() functions accepted \"+\" or \"/\" outside of altchars."},"relatedVulnerabilities":[]},{"artifact":{"id":"09327264ca577f0a","cpes":["cpe:2.3:a:python-software-foundation:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software_foundation:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software-foundation:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software_foundation:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python3:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.16-r0:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:apk/alpine/python3@3.12.16-r0?arch=x86_64&distro=alpine-3.23.8","type":"apk","version":"3.12.16-r0","language":"","licenses":["PSF-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/2to3"},{"path":"/usr/bin/2to3-3.12"},{"path":"/usr/bin/pydoc3"},{"path":"/usr/bin/pydoc3.12"},{"path":"/usr/bin/python"},{"path":"/usr/bin/python3"},{"path":"/usr/bin/python3.12"},{"path":"/usr/include"},{"path":"/usr/include/python3.12"},{"path":"/usr/include/python3.12/pyconfig.h"},{"path":"/usr/lib"},{"path":"/usr/lib/libpython3.12.so.1.0"},{"path":"/usr/lib/libpython3.so"},{"path":"/usr/lib/python3.12"},{"path":"/usr/lib/python3.12/EXTERNALLY-MANAGED"},{"path":"/usr/lib/python3.12/LICENSE.txt"},{"path":"/usr/lib/python3.12/__future__.py"},{"path":"/usr/lib/python3.12/__hello__.py"},{"path":"/usr/lib/python3.12/_aix_support.py"},{"path":"/usr/lib/python3.12/_collections_abc.py"},{"path":"/usr/lib/python3.12/_compat_pickle.py"},{"path":"/usr/lib/python3.12/_compression.py"},{"path":"/usr/lib/python3.12/_markupbase.py"},{"path":"/usr/lib/python3.12/_osx_support.py"},{"path":"/usr/lib/python3.12/_py_abc.py"},{"path":"/usr/lib/python3.12/_pydatetime.py"},{"path":"/usr/lib/python3.12/_pydecimal.py"},{"path":"/usr/lib/python3.12/_pyio.py"},{"path":"/usr/lib/python3.12/_pylong.py"},{"path":"/usr/lib/python3.12/_sitebuiltins.py"},{"path":"/usr/lib/python3.12/_strptime.py"},{"path":"/usr/lib/python3.12/_sysconfigdata__linux_x86_64-linux-musl.py"},{"path":"/usr/lib/python3.12/_threading_local.py"},{"path":"/usr/lib/python3.12/_weakrefset.py"},{"path":"/usr/lib/python3.12/abc.py"},{"path":"/usr/lib/python3.12/aifc.py"},{"path":"/usr/lib/python3.12/antigravity.py"},{"path":"/usr/lib/python3.12/argparse.py"},{"path":"/usr/lib/python3.12/ast.py"},{"path":"/usr/lib/python3.12/base64.py"},{"path":"/usr/lib/python3.12/bdb.py"},{"path":"/usr/lib/python3.12/bisect.py"},{"path":"/usr/lib/python3.12/bz2.py"},{"path":"/usr/lib/python3.12/cProfile.py"},{"path":"/usr/lib/python3.12/calendar.py"},{"path":"/usr/lib/python3.12/cgi.py"},{"path":"/usr/lib/python3.12/cgitb.py"},{"path":"/usr/lib/python3.12/chunk.py"},{"path":"/usr/lib/python3.12/cmd.py"},{"path":"/usr/lib/python3.12/code.py"},{"path":"/usr/lib/python3.12/codecs.py"},{"path":"/usr/lib/python3.12/codeop.py"},{"path":"/usr/lib/python3.12/colorsys.py"},{"path":"/usr/lib/python3.12/compileall.py"},{"path":"/usr/lib/python3.12/configparser.py"},{"path":"/usr/lib/python3.12/contextlib.py"},{"path":"/usr/lib/python3.12/contextvars.py"},{"path":"/usr/lib/python3.12/copy.py"},{"path":"/usr/lib/python3.12/copyreg.py"},{"path":"/usr/lib/python3.12/crypt.py"},{"path":"/usr/lib/python3.12/csv.py"},{"path":"/usr/lib/python3.12/dataclasses.py"},{"path":"/usr/lib/python3.12/datetime.py"},{"path":"/usr/lib/python3.12/decimal.py"},{"path":"/usr/lib/python3.12/difflib.py"},{"path":"/usr/lib/python3.12/dis.py"},{"path":"/usr/lib/python3.12/doctest.py"},{"path":"/usr/lib/python3.12/enum.py"},{"path":"/usr/lib/python3.12/filecmp.py"},{"path":"/usr/lib/python3.12/fileinput.py"},{"path":"/usr/lib/python3.12/fnmatch.py"},{"path":"/usr/lib/python3.12/fractions.py"},{"path":"/usr/lib/python3.12/ftplib.py"},{"path":"/usr/lib/python3.12/functools.py"},{"path":"/usr/lib/python3.12/genericpath.py"},{"path":"/usr/lib/python3.12/getopt.py"},{"path":"/usr/lib/python3.12/getpass.py"},{"path":"/usr/lib/python3.12/gettext.py"},{"path":"/usr/lib/python3.12/glob.py"},{"path":"/usr/lib/python3.12/graphlib.py"},{"path":"/usr/lib/python3.12/gzip.py"},{"path":"/usr/lib/python3.12/hashlib.py"},{"path":"/usr/lib/python3.12/heapq.py"},{"path":"/usr/lib/python3.12/hmac.py"},{"path":"/usr/lib/python3.12/imaplib.py"},{"path":"/usr/lib/python3.12/imghdr.py"},{"path":"/usr/lib/python3.12/inspect.py"},{"path":"/usr/lib/python3.12/io.py"},{"path":"/usr/lib/python3.12/ipaddress.py"},{"path":"/usr/lib/python3.12/keyword.py"},{"path":"/usr/lib/python3.12/linecache.py"},{"path":"/usr/lib/python3.12/locale.py"},{"path":"/usr/lib/python3.12/lzma.py"},{"path":"/usr/lib/python3.12/mailbox.py"},{"path":"/usr/lib/python3.12/mailcap.py"},{"path":"/usr/lib/python3.12/mimetypes.py"},{"path":"/usr/lib/python3.12/modulefinder.py"},{"path":"/usr/lib/python3.12/netrc.py"},{"path":"/usr/lib/python3.12/nntplib.py"},{"path":"/usr/lib/python3.12/ntpath.py"},{"path":"/usr/lib/python3.12/nturl2path.py"},{"path":"/usr/lib/python3.12/numbers.py"},{"path":"/usr/lib/python3.12/opcode.py"},{"path":"/usr/lib/python3.12/operator.py"},{"path":"/usr/lib/python3.12/optparse.py"},{"path":"/usr/lib/python3.12/os.py"},{"path":"/usr/lib/python3.12/pathlib.py"},{"path":"/usr/lib/python3.12/pdb.py"},{"path":"/usr/lib/python3.12/pickle.py"},{"path":"/usr/lib/python3.12/pickletools.py"},{"path":"/usr/lib/python3.12/pipes.py"},{"path":"/usr/lib/python3.12/pkgutil.py"},{"path":"/usr/lib/python3.12/platform.py"},{"path":"/usr/lib/python3.12/plistlib.py"},{"path":"/usr/lib/python3.12/poplib.py"},{"path":"/usr/lib/python3.12/posixpath.py"},{"path":"/usr/lib/python3.12/pprint.py"},{"path":"/usr/lib/python3.12/profile.py"},{"path":"/usr/lib/python3.12/pstats.py"},{"path":"/usr/lib/python3.12/pty.py"},{"path":"/usr/lib/python3.12/py_compile.py"},{"path":"/usr/lib/python3.12/pyclbr.py"},{"path":"/usr/lib/python3.12/pydoc.py"},{"path":"/usr/lib/python3.12/queue.py"},{"path":"/usr/lib/python3.12/quopri.py"},{"path":"/usr/lib/python3.12/random.py"},{"path":"/usr/lib/python3.12/reprlib.py"},{"path":"/usr/lib/python3.12/rlcompleter.py"},{"path":"/usr/lib/python3.12/runpy.py"},{"path":"/usr/lib/python3.12/sched.py"},{"path":"/usr/lib/python3.12/secrets.py"},{"path":"/usr/lib/python3.12/selectors.py"},{"path":"/usr/lib/python3.12/shelve.py"},{"path":"/usr/lib/python3.12/shlex.py"},{"path":"/usr/lib/python3.12/shutil.py"},{"path":"/usr/lib/python3.12/signal.py"},{"path":"/usr/lib/python3.12/site.py"},{"path":"/usr/lib/python3.12/smtplib.py"},{"path":"/usr/lib/python3.12/sndhdr.py"},{"path":"/usr/lib/python3.12/socket.py"},{"path":"/usr/lib/python3.12/socketserver.py"},{"path":"/usr/lib/python3.12/sre_compile.py"},{"path":"/usr/lib/python3.12/sre_constants.py"},{"path":"/usr/lib/python3.12/sre_parse.py"},{"path":"/usr/lib/python3.12/ssl.py"},{"path":"/usr/lib/python3.12/stat.py"},{"path":"/usr/lib/python3.12/statistics.py"},{"path":"/usr/lib/python3.12/string.py"},{"path":"/usr/lib/python3.12/stringprep.py"},{"path":"/usr/lib/python3.12/struct.py"},{"path":"/usr/lib/python3.12/subprocess.py"},{"path":"/usr/lib/python3.12/sunau.py"},{"path":"/usr/lib/python3.12/symtable.py"},{"path":"/usr/lib/python3.12/sysconfig.py"},{"path":"/usr/lib/python3.12/tabnanny.py"},{"path":"/usr/lib/python3.12/tarfile.py"},{"path":"/usr/lib/python3.12/telnetlib.py"},{"path":"/usr/lib/python3.12/tempfile.py"},{"path":"/usr/lib/python3.12/textwrap.py"},{"path":"/usr/lib/python3.12/this.py"},{"path":"/usr/lib/python3.12/threading.py"},{"path":"/usr/lib/python3.12/timeit.py"},{"path":"/usr/lib/python3.12/token.py"},{"path":"/usr/lib/python3.12/tokenize.py"},{"path":"/usr/lib/python3.12/trace.py"},{"path":"/usr/lib/python3.12/traceback.py"},{"path":"/usr/lib/python3.12/tracemalloc.py"},{"path":"/usr/lib/python3.12/tty.py"},{"path":"/usr/lib/python3.12/turtle.py"},{"path":"/usr/lib/python3.12/types.py"},{"path":"/usr/lib/python3.12/typing.py"},{"path":"/usr/lib/python3.12/uu.py"},{"path":"/usr/lib/python3.12/uuid.py"},{"path":"/usr/lib/python3.12/warnings.py"},{"path":"/usr/lib/python3.12/wave.py"},{"path":"/usr/lib/python3.12/weakref.py"},{"path":"/usr/lib/python3.12/webbrowser.py"},{"path":"/usr/lib/python3.12/xdrlib.py"},{"path":"/usr/lib/python3.12/zipapp.py"},{"path":"/usr/lib/python3.12/zipimport.py"},{"path":"/usr/lib/python3.12/__phello__"},{"path":"/usr/lib/python3.12/__phello__/__init__.py"},{"path":"/usr/lib/python3.12/__phello__/spam.py"},{"path":"/usr/lib/python3.12/asyncio"},{"path":"/usr/lib/python3.12/asyncio/__init__.py"},{"path":"/usr/lib/python3.12/asyncio/__main__.py"},{"path":"/usr/lib/python3.12/asyncio/base_events.py"},{"path":"/usr/lib/python3.12/asyncio/base_futures.py"},{"path":"/usr/lib/python3.12/asyncio/base_subprocess.py"},{"path":"/usr/lib/python3.12/asyncio/base_tasks.py"},{"path":"/usr/lib/python3.12/asyncio/constants.py"},{"path":"/usr/lib/python3.12/asyncio/coroutines.py"},{"path":"/usr/lib/python3.12/asyncio/events.py"},{"path":"/usr/lib/python3.12/asyncio/exceptions.py"},{"path":"/usr/lib/python3.12/asyncio/format_helpers.py"},{"path":"/usr/lib/python3.12/asyncio/futures.py"},{"path":"/usr/lib/python3.12/asyncio/locks.py"},{"path":"/usr/lib/python3.12/asyncio/log.py"},{"path":"/usr/lib/python3.12/asyncio/mixins.py"},{"path":"/usr/lib/python3.12/asyncio/proactor_events.py"},{"path":"/usr/lib/python3.12/asyncio/protocols.py"},{"path":"/usr/lib/python3.12/asyncio/queues.py"},{"path":"/usr/lib/python3.12/asyncio/runners.py"},{"path":"/usr/lib/python3.12/asyncio/selector_events.py"},{"path":"/usr/lib/python3.12/asyncio/sslproto.py"},{"path":"/usr/lib/python3.12/asyncio/staggered.py"},{"path":"/usr/lib/python3.12/asyncio/streams.py"},{"path":"/usr/lib/python3.12/asyncio/subprocess.py"},{"path":"/usr/lib/python3.12/asyncio/taskgroups.py"},{"path":"/usr/lib/python3.12/asyncio/tasks.py"},{"path":"/usr/lib/python3.12/asyncio/threads.py"},{"path":"/usr/lib/python3.12/asyncio/timeouts.py"},{"path":"/usr/lib/python3.12/asyncio/transports.py"},{"path":"/usr/lib/python3.12/asyncio/trsock.py"},{"path":"/usr/lib/python3.12/asyncio/unix_events.py"},{"path":"/usr/lib/python3.12/asyncio/windows_events.py"},{"path":"/usr/lib/python3.12/asyncio/windows_utils.py"},{"path":"/usr/lib/python3.12/collections"},{"path":"/usr/lib/python3.12/collections/__init__.py"},{"path":"/usr/lib/python3.12/collections/abc.py"},{"path":"/usr/lib/python3.12/concurrent"},{"path":"/usr/lib/python3.12/concurrent/__init__.py"},{"path":"/usr/lib/python3.12/concurrent/futures"},{"path":"/usr/lib/python3.12/concurrent/futures/__init__.py"},{"path":"/usr/lib/python3.12/concurrent/futures/_base.py"},{"path":"/usr/lib/python3.12/concurrent/futures/process.py"},{"path":"/usr/lib/python3.12/concurrent/futures/thread.py"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Makefile"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.bootstrap"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.local"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.stdlib"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/config.c.in"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/install-sh"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/makesetup"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/python-config.py"},{"path":"/usr/lib/python3.12/ctypes"},{"path":"/usr/lib/python3.12/ctypes/__init__.py"},{"path":"/usr/lib/python3.12/ctypes/_aix.py"},{"path":"/usr/lib/python3.12/ctypes/_endian.py"},{"path":"/usr/lib/python3.12/ctypes/util.py"},{"path":"/usr/lib/python3.12/ctypes/wintypes.py"},{"path":"/usr/lib/python3.12/ctypes/macholib"},{"path":"/usr/lib/python3.12/ctypes/macholib/README.ctypes"},{"path":"/usr/lib/python3.12/ctypes/macholib/__init__.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/dyld.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/dylib.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/fetch_macholib"},{"path":"/usr/lib/python3.12/ctypes/macholib/fetch_macholib.bat"},{"path":"/usr/lib/python3.12/ctypes/macholib/framework.py"},{"path":"/usr/lib/python3.12/curses"},{"path":"/usr/lib/python3.12/curses/__init__.py"},{"path":"/usr/lib/python3.12/curses/ascii.py"},{"path":"/usr/lib/python3.12/curses/has_key.py"},{"path":"/usr/lib/python3.12/curses/panel.py"},{"path":"/usr/lib/python3.12/curses/textpad.py"},{"path":"/usr/lib/python3.12/dbm"},{"path":"/usr/lib/python3.12/dbm/__init__.py"},{"path":"/usr/lib/python3.12/dbm/dumb.py"},{"path":"/usr/lib/python3.12/dbm/gnu.py"},{"path":"/usr/lib/python3.12/dbm/ndbm.py"},{"path":"/usr/lib/python3.12/email"},{"path":"/usr/lib/python3.12/email/__init__.py"},{"path":"/usr/lib/python3.12/email/_encoded_words.py"},{"path":"/usr/lib/python3.12/email/_header_value_parser.py"},{"path":"/usr/lib/python3.12/email/_parseaddr.py"},{"path":"/usr/lib/python3.12/email/_policybase.py"},{"path":"/usr/lib/python3.12/email/architecture.rst"},{"path":"/usr/lib/python3.12/email/base64mime.py"},{"path":"/usr/lib/python3.12/email/charset.py"},{"path":"/usr/lib/python3.12/email/contentmanager.py"},{"path":"/usr/lib/python3.12/email/encoders.py"},{"path":"/usr/lib/python3.12/email/errors.py"},{"path":"/usr/lib/python3.12/email/feedparser.py"},{"path":"/usr/lib/python3.12/email/generator.py"},{"path":"/usr/lib/python3.12/email/header.py"},{"path":"/usr/lib/python3.12/email/headerregistry.py"},{"path":"/usr/lib/python3.12/email/iterators.py"},{"path":"/usr/lib/python3.12/email/message.py"},{"path":"/usr/lib/python3.12/email/parser.py"},{"path":"/usr/lib/python3.12/email/policy.py"},{"path":"/usr/lib/python3.12/email/quoprimime.py"},{"path":"/usr/lib/python3.12/email/utils.py"},{"path":"/usr/lib/python3.12/email/mime"},{"path":"/usr/lib/python3.12/email/mime/__init__.py"},{"path":"/usr/lib/python3.12/email/mime/application.py"},{"path":"/usr/lib/python3.12/email/mime/audio.py"},{"path":"/usr/lib/python3.12/email/mime/base.py"},{"path":"/usr/lib/python3.12/email/mime/image.py"},{"path":"/usr/lib/python3.12/email/mime/message.py"},{"path":"/usr/lib/python3.12/email/mime/multipart.py"},{"path":"/usr/lib/python3.12/email/mime/nonmultipart.py"},{"path":"/usr/lib/python3.12/email/mime/text.py"},{"path":"/usr/lib/python3.12/encodings"},{"path":"/usr/lib/python3.12/encodings/__init__.py"},{"path":"/usr/lib/python3.12/encodings/aliases.py"},{"path":"/usr/lib/python3.12/encodings/ascii.py"},{"path":"/usr/lib/python3.12/encodings/base64_codec.py"},{"path":"/usr/lib/python3.12/encodings/big5.py"},{"path":"/usr/lib/python3.12/encodings/big5hkscs.py"},{"path":"/usr/lib/python3.12/encodings/bz2_codec.py"},{"path":"/usr/lib/python3.12/encodings/charmap.py"},{"path":"/usr/lib/python3.12/encodings/cp037.py"},{"path":"/usr/lib/python3.12/encodings/cp1006.py"},{"path":"/usr/lib/python3.12/encodings/cp1026.py"},{"path":"/usr/lib/python3.12/encodings/cp1125.py"},{"path":"/usr/lib/python3.12/encodings/cp1140.py"},{"path":"/usr/lib/python3.12/encodings/cp1250.py"},{"path":"/usr/lib/python3.12/encodings/cp1251.py"},{"path":"/usr/lib/python3.12/encodings/cp1252.py"},{"path":"/usr/lib/python3.12/encodings/cp1253.py"},{"path":"/usr/lib/python3.12/encodings/cp1254.py"},{"path":"/usr/lib/python3.12/encodings/cp1255.py"},{"path":"/usr/lib/python3.12/encodings/cp1256.py"},{"path":"/usr/lib/python3.12/encodings/cp1257.py"},{"path":"/usr/lib/python3.12/encodings/cp1258.py"},{"path":"/usr/lib/python3.12/encodings/cp273.py"},{"path":"/usr/lib/python3.12/encodings/cp424.py"},{"path":"/usr/lib/python3.12/encodings/cp437.py"},{"path":"/usr/lib/python3.12/encodings/cp500.py"},{"path":"/usr/lib/python3.12/encodings/cp720.py"},{"path":"/usr/lib/python3.12/encodings/cp737.py"},{"path":"/usr/lib/python3.12/encodings/cp775.py"},{"path":"/usr/lib/python3.12/encodings/cp850.py"},{"path":"/usr/lib/python3.12/encodings/cp852.py"},{"path":"/usr/lib/python3.12/encodings/cp855.py"},{"path":"/usr/lib/python3.12/encodings/cp856.py"},{"path":"/usr/lib/python3.12/encodings/cp857.py"},{"path":"/usr/lib/python3.12/encodings/cp858.py"},{"path":"/usr/lib/python3.12/encodings/cp860.py"},{"path":"/usr/lib/python3.12/encodings/cp861.py"},{"path":"/usr/lib/python3.12/encodings/cp862.py"},{"path":"/usr/lib/python3.12/encodings/cp863.py"},{"path":"/usr/lib/python3.12/encodings/cp864.py"},{"path":"/usr/lib/python3.12/encodings/cp865.py"},{"path":"/usr/lib/python3.12/encodings/cp866.py"},{"path":"/usr/lib/python3.12/encodings/cp869.py"},{"path":"/usr/lib/python3.12/encodings/cp874.py"},{"path":"/usr/lib/python3.12/encodings/cp875.py"},{"path":"/usr/lib/python3.12/encodings/cp932.py"},{"path":"/usr/lib/python3.12/encodings/cp949.py"},{"path":"/usr/lib/python3.12/encodings/cp950.py"},{"path":"/usr/lib/python3.12/encodings/euc_jis_2004.py"},{"path":"/usr/lib/python3.12/encodings/euc_jisx0213.py"},{"path":"/usr/lib/python3.12/encodings/euc_jp.py"},{"path":"/usr/lib/python3.12/encodings/euc_kr.py"},{"path":"/usr/lib/python3.12/encodings/gb18030.py"},{"path":"/usr/lib/python3.12/encodings/gb2312.py"},{"path":"/usr/lib/python3.12/encodings/gbk.py"},{"path":"/usr/lib/python3.12/encodings/hex_codec.py"},{"path":"/usr/lib/python3.12/encodings/hp_roman8.py"},{"path":"/usr/lib/python3.12/encodings/hz.py"},{"path":"/usr/lib/python3.12/encodings/idna.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_1.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_2.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_2004.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_3.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_ext.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_kr.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_1.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_10.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_11.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_13.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_14.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_15.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_16.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_2.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_3.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_4.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_5.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_6.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_7.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_8.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_9.py"},{"path":"/usr/lib/python3.12/encodings/johab.py"},{"path":"/usr/lib/python3.12/encodings/koi8_r.py"},{"path":"/usr/lib/python3.12/encodings/koi8_t.py"},{"path":"/usr/lib/python3.12/encodings/koi8_u.py"},{"path":"/usr/lib/python3.12/encodings/kz1048.py"},{"path":"/usr/lib/python3.12/encodings/latin_1.py"},{"path":"/usr/lib/python3.12/encodings/mac_arabic.py"},{"path":"/usr/lib/python3.12/encodings/mac_croatian.py"},{"path":"/usr/lib/python3.12/encodings/mac_cyrillic.py"},{"path":"/usr/lib/python3.12/encodings/mac_farsi.py"},{"path":"/usr/lib/python3.12/encodings/mac_greek.py"},{"path":"/usr/lib/python3.12/encodings/mac_iceland.py"},{"path":"/usr/lib/python3.12/encodings/mac_latin2.py"},{"path":"/usr/lib/python3.12/encodings/mac_roman.py"},{"path":"/usr/lib/python3.12/encodings/mac_romanian.py"},{"path":"/usr/lib/python3.12/encodings/mac_turkish.py"},{"path":"/usr/lib/python3.12/encodings/mbcs.py"},{"path":"/usr/lib/python3.12/encodings/oem.py"},{"path":"/usr/lib/python3.12/encodings/palmos.py"},{"path":"/usr/lib/python3.12/encodings/ptcp154.py"},{"path":"/usr/lib/python3.12/encodings/punycode.py"},{"path":"/usr/lib/python3.12/encodings/quopri_codec.py"},{"path":"/usr/lib/python3.12/encodings/raw_unicode_escape.py"},{"path":"/usr/lib/python3.12/encodings/rot_13.py"},{"path":"/usr/lib/python3.12/encodings/shift_jis.py"},{"path":"/usr/lib/python3.12/encodings/shift_jis_2004.py"},{"path":"/usr/lib/python3.12/encodings/shift_jisx0213.py"},{"path":"/usr/lib/python3.12/encodings/tis_620.py"},{"path":"/usr/lib/python3.12/encodings/undefined.py"},{"path":"/usr/lib/python3.12/encodings/unicode_escape.py"},{"path":"/usr/lib/python3.12/encodings/utf_16.py"},{"path":"/usr/lib/python3.12/encodings/utf_16_be.py"},{"path":"/usr/lib/python3.12/encodings/utf_16_le.py"},{"path":"/usr/lib/python3.12/encodings/utf_32.py"},{"path":"/usr/lib/python3.12/encodings/utf_32_be.py"},{"path":"/usr/lib/python3.12/encodings/utf_32_le.py"},{"path":"/usr/lib/python3.12/encodings/utf_7.py"},{"path":"/usr/lib/python3.12/encodings/utf_8.py"},{"path":"/usr/lib/python3.12/encodings/utf_8_sig.py"},{"path":"/usr/lib/python3.12/encodings/uu_codec.py"},{"path":"/usr/lib/python3.12/encodings/zlib_codec.py"},{"path":"/usr/lib/python3.12/ensurepip"},{"path":"/usr/lib/python3.12/ensurepip/__init__.py"},{"path":"/usr/lib/python3.12/ensurepip/__main__.py"},{"path":"/usr/lib/python3.12/ensurepip/_uninstall.py"},{"path":"/usr/lib/python3.12/ensurepip/_bundled"},{"path":"/usr/lib/python3.12/ensurepip/_bundled/pip-25.0.1-py3-none-any.whl"},{"path":"/usr/lib/python3.12/html"},{"path":"/usr/lib/python3.12/html/__init__.py"},{"path":"/usr/lib/python3.12/html/entities.py"},{"path":"/usr/lib/python3.12/html/parser.py"},{"path":"/usr/lib/python3.12/http"},{"path":"/usr/lib/python3.12/http/__init__.py"},{"path":"/usr/lib/python3.12/http/client.py"},{"path":"/usr/lib/python3.12/http/cookiejar.py"},{"path":"/usr/lib/python3.12/http/cookies.py"},{"path":"/usr/lib/python3.12/http/server.py"},{"path":"/usr/lib/python3.12/importlib"},{"path":"/usr/lib/python3.12/importlib/__init__.py"},{"path":"/usr/lib/python3.12/importlib/_abc.py"},{"path":"/usr/lib/python3.12/importlib/_bootstrap.py"},{"path":"/usr/lib/python3.12/importlib/_bootstrap_external.py"},{"path":"/usr/lib/python3.12/importlib/abc.py"},{"path":"/usr/lib/python3.12/importlib/machinery.py"},{"path":"/usr/lib/python3.12/importlib/readers.py"},{"path":"/usr/lib/python3.12/importlib/simple.py"},{"path":"/usr/lib/python3.12/importlib/util.py"},{"path":"/usr/lib/python3.12/importlib/metadata"},{"path":"/usr/lib/python3.12/importlib/metadata/__init__.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_adapters.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_collections.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_functools.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_itertools.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_meta.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_text.py"},{"path":"/usr/lib/python3.12/importlib/resources"},{"path":"/usr/lib/python3.12/importlib/resources/__init__.py"},{"path":"/usr/lib/python3.12/importlib/resources/_adapters.py"},{"path":"/usr/lib/python3.12/importlib/resources/_common.py"},{"path":"/usr/lib/python3.12/importlib/resources/_itertools.py"},{"path":"/usr/lib/python3.12/importlib/resources/_legacy.py"},{"path":"/usr/lib/python3.12/importlib/resources/abc.py"},{"path":"/usr/lib/python3.12/importlib/resources/readers.py"},{"path":"/usr/lib/python3.12/importlib/resources/simple.py"},{"path":"/usr/lib/python3.12/json"},{"path":"/usr/lib/python3.12/json/__init__.py"},{"path":"/usr/lib/python3.12/json/decoder.py"},{"path":"/usr/lib/python3.12/json/encoder.py"},{"path":"/usr/lib/python3.12/json/scanner.py"},{"path":"/usr/lib/python3.12/json/tool.py"},{"path":"/usr/lib/python3.12/lib-dynload"},{"path":"/usr/lib/python3.12/lib-dynload/_asyncio.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_bisect.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_blake2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_bz2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_cn.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_hk.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_iso2022.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_jp.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_kr.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_tw.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_contextvars.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_crypt.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_csv.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ctypes.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ctypes_test.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_curses.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_curses_panel.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_datetime.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_dbm.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_decimal.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_elementtree.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_hashlib.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_heapq.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_json.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_lsprof.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_lzma.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_md5.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_multibytecodec.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_multiprocessing.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_opcode.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_pickle.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_posixshmem.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_posixsubprocess.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_queue.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_random.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha1.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha3.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_socket.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sqlite3.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ssl.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_statistics.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_struct.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testbuffer.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testcapi.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testclinic.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testimportmultiple.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testinternalcapi.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testmultiphase.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testsinglephase.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxinterpchannels.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxsubinterpreters.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxtestfuzz.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_zoneinfo.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/array.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/audioop.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/binascii.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/cmath.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/fcntl.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/grp.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/math.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/mmap.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/ossaudiodev.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/pyexpat.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/readline.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/resource.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/select.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/spwd.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/syslog.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/termios.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/unicodedata.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxlimited.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxlimited_35.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxsubtype.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/zlib.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib2to3"},{"path":"/usr/lib/python3.12/lib2to3/Grammar.txt"},{"path":"/usr/lib/python3.12/lib2to3/Grammar3.12.16.final.0.pickle"},{"path":"/usr/lib/python3.12/lib2to3/PatternGrammar.txt"},{"path":"/usr/lib/python3.12/lib2to3/PatternGrammar3.12.16.final.0.pickle"},{"path":"/usr/lib/python3.12/lib2to3/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/__main__.py"},{"path":"/usr/lib/python3.12/lib2to3/btm_matcher.py"},{"path":"/usr/lib/python3.12/lib2to3/btm_utils.py"},{"path":"/usr/lib/python3.12/lib2to3/fixer_base.py"},{"path":"/usr/lib/python3.12/lib2to3/fixer_util.py"},{"path":"/usr/lib/python3.12/lib2to3/main.py"},{"path":"/usr/lib/python3.12/lib2to3/patcomp.py"},{"path":"/usr/lib/python3.12/lib2to3/pygram.py"},{"path":"/usr/lib/python3.12/lib2to3/pytree.py"},{"path":"/usr/lib/python3.12/lib2to3/refactor.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes"},{"path":"/usr/lib/python3.12/lib2to3/fixes/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_apply.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_asserts.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_basestring.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_buffer.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_dict.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_except.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_exec.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_execfile.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_exitfunc.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_filter.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_funcattrs.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_future.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_getcwdu.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_has_key.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_idioms.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_import.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_imports.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_imports2.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_input.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_intern.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_isinstance.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_itertools.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_itertools_imports.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_long.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_map.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_metaclass.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_methodattrs.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_ne.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_next.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_nonzero.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_numliterals.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_operator.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_paren.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_print.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_raise.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_raw_input.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_reduce.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_reload.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_renames.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_repr.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_set_literal.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_standarderror.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_sys_exc.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_throw.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_tuple_params.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_types.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_unicode.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_urllib.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_ws_comma.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_xrange.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_xreadlines.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_zip.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/conv.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/driver.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/grammar.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/literals.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/parse.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/pgen.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/token.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/tokenize.py"},{"path":"/usr/lib/python3.12/logging"},{"path":"/usr/lib/python3.12/logging/__init__.py"},{"path":"/usr/lib/python3.12/logging/config.py"},{"path":"/usr/lib/python3.12/logging/handlers.py"},{"path":"/usr/lib/python3.12/multiprocessing"},{"path":"/usr/lib/python3.12/multiprocessing/__init__.py"},{"path":"/usr/lib/python3.12/multiprocessing/connection.py"},{"path":"/usr/lib/python3.12/multiprocessing/context.py"},{"path":"/usr/lib/python3.12/multiprocessing/forkserver.py"},{"path":"/usr/lib/python3.12/multiprocessing/heap.py"},{"path":"/usr/lib/python3.12/multiprocessing/managers.py"},{"path":"/usr/lib/python3.12/multiprocessing/pool.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_fork.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_forkserver.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_spawn_posix.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_spawn_win32.py"},{"path":"/usr/lib/python3.12/multiprocessing/process.py"},{"path":"/usr/lib/python3.12/multiprocessing/queues.py"},{"path":"/usr/lib/python3.12/multiprocessing/reduction.py"},{"path":"/usr/lib/python3.12/multiprocessing/resource_sharer.py"},{"path":"/usr/lib/python3.12/multiprocessing/resource_tracker.py"},{"path":"/usr/lib/python3.12/multiprocessing/shared_memory.py"},{"path":"/usr/lib/python3.12/multiprocessing/sharedctypes.py"},{"path":"/usr/lib/python3.12/multiprocessing/spawn.py"},{"path":"/usr/lib/python3.12/multiprocessing/synchronize.py"},{"path":"/usr/lib/python3.12/multiprocessing/util.py"},{"path":"/usr/lib/python3.12/multiprocessing/dummy"},{"path":"/usr/lib/python3.12/multiprocessing/dummy/__init__.py"},{"path":"/usr/lib/python3.12/multiprocessing/dummy/connection.py"},{"path":"/usr/lib/python3.12/pydoc_data"},{"path":"/usr/lib/python3.12/pydoc_data/__init__.py"},{"path":"/usr/lib/python3.12/pydoc_data/_pydoc.css"},{"path":"/usr/lib/python3.12/pydoc_data/topics.py"},{"path":"/usr/lib/python3.12/re"},{"path":"/usr/lib/python3.12/re/__init__.py"},{"path":"/usr/lib/python3.12/re/_casefix.py"},{"path":"/usr/lib/python3.12/re/_compiler.py"},{"path":"/usr/lib/python3.12/re/_constants.py"},{"path":"/usr/lib/python3.12/re/_parser.py"},{"path":"/usr/lib/python3.12/site-packages"},{"path":"/usr/lib/python3.12/site-packages/README.txt"},{"path":"/usr/lib/python3.12/sqlite3"},{"path":"/usr/lib/python3.12/sqlite3/__init__.py"},{"path":"/usr/lib/python3.12/sqlite3/__main__.py"},{"path":"/usr/lib/python3.12/sqlite3/dbapi2.py"},{"path":"/usr/lib/python3.12/sqlite3/dump.py"},{"path":"/usr/lib/python3.12/tomllib"},{"path":"/usr/lib/python3.12/tomllib/__init__.py"},{"path":"/usr/lib/python3.12/tomllib/_parser.py"},{"path":"/usr/lib/python3.12/tomllib/_re.py"},{"path":"/usr/lib/python3.12/tomllib/_types.py"},{"path":"/usr/lib/python3.12/turtledemo"},{"path":"/usr/lib/python3.12/turtledemo/__init__.py"},{"path":"/usr/lib/python3.12/turtledemo/__main__.py"},{"path":"/usr/lib/python3.12/turtledemo/bytedesign.py"},{"path":"/usr/lib/python3.12/turtledemo/chaos.py"},{"path":"/usr/lib/python3.12/turtledemo/clock.py"},{"path":"/usr/lib/python3.12/turtledemo/colormixer.py"},{"path":"/usr/lib/python3.12/turtledemo/forest.py"},{"path":"/usr/lib/python3.12/turtledemo/fractalcurves.py"},{"path":"/usr/lib/python3.12/turtledemo/lindenmayer.py"},{"path":"/usr/lib/python3.12/turtledemo/minimal_hanoi.py"},{"path":"/usr/lib/python3.12/turtledemo/nim.py"},{"path":"/usr/lib/python3.12/turtledemo/paint.py"},{"path":"/usr/lib/python3.12/turtledemo/peace.py"},{"path":"/usr/lib/python3.12/turtledemo/penrose.py"},{"path":"/usr/lib/python3.12/turtledemo/planet_and_moon.py"},{"path":"/usr/lib/python3.12/turtledemo/rosette.py"},{"path":"/usr/lib/python3.12/turtledemo/round_dance.py"},{"path":"/usr/lib/python3.12/turtledemo/sorting_animate.py"},{"path":"/usr/lib/python3.12/turtledemo/tree.py"},{"path":"/usr/lib/python3.12/turtledemo/turtle.cfg"},{"path":"/usr/lib/python3.12/turtledemo/two_canvases.py"},{"path":"/usr/lib/python3.12/turtledemo/yinyang.py"},{"path":"/usr/lib/python3.12/unittest"},{"path":"/usr/lib/python3.12/unittest/__init__.py"},{"path":"/usr/lib/python3.12/unittest/__main__.py"},{"path":"/usr/lib/python3.12/unittest/_log.py"},{"path":"/usr/lib/python3.12/unittest/async_case.py"},{"path":"/usr/lib/python3.12/unittest/case.py"},{"path":"/usr/lib/python3.12/unittest/loader.py"},{"path":"/usr/lib/python3.12/unittest/main.py"},{"path":"/usr/lib/python3.12/unittest/mock.py"},{"path":"/usr/lib/python3.12/unittest/result.py"},{"path":"/usr/lib/python3.12/unittest/runner.py"},{"path":"/usr/lib/python3.12/unittest/signals.py"},{"path":"/usr/lib/python3.12/unittest/suite.py"},{"path":"/usr/lib/python3.12/unittest/util.py"},{"path":"/usr/lib/python3.12/urllib"},{"path":"/usr/lib/python3.12/urllib/__init__.py"},{"path":"/usr/lib/python3.12/urllib/error.py"},{"path":"/usr/lib/python3.12/urllib/parse.py"},{"path":"/usr/lib/python3.12/urllib/request.py"},{"path":"/usr/lib/python3.12/urllib/response.py"},{"path":"/usr/lib/python3.12/urllib/robotparser.py"},{"path":"/usr/lib/python3.12/venv"},{"path":"/usr/lib/python3.12/venv/__init__.py"},{"path":"/usr/lib/python3.12/venv/__main__.py"},{"path":"/usr/lib/python3.12/venv/scripts"},{"path":"/usr/lib/python3.12/venv/scripts/common"},{"path":"/usr/lib/python3.12/venv/scripts/common/Activate.ps1"},{"path":"/usr/lib/python3.12/venv/scripts/common/activate"},{"path":"/usr/lib/python3.12/venv/scripts/posix"},{"path":"/usr/lib/python3.12/venv/scripts/posix/activate.csh"},{"path":"/usr/lib/python3.12/venv/scripts/posix/activate.fish"},{"path":"/usr/lib/python3.12/wsgiref"},{"path":"/usr/lib/python3.12/wsgiref/__init__.py"},{"path":"/usr/lib/python3.12/wsgiref/handlers.py"},{"path":"/usr/lib/python3.12/wsgiref/headers.py"},{"path":"/usr/lib/python3.12/wsgiref/simple_server.py"},{"path":"/usr/lib/python3.12/wsgiref/types.py"},{"path":"/usr/lib/python3.12/wsgiref/util.py"},{"path":"/usr/lib/python3.12/wsgiref/validate.py"},{"path":"/usr/lib/python3.12/xml"},{"path":"/usr/lib/python3.12/xml/__init__.py"},{"path":"/usr/lib/python3.12/xml/dom"},{"path":"/usr/lib/python3.12/xml/dom/NodeFilter.py"},{"path":"/usr/lib/python3.12/xml/dom/__init__.py"},{"path":"/usr/lib/python3.12/xml/dom/domreg.py"},{"path":"/usr/lib/python3.12/xml/dom/expatbuilder.py"},{"path":"/usr/lib/python3.12/xml/dom/minicompat.py"},{"path":"/usr/lib/python3.12/xml/dom/minidom.py"},{"path":"/usr/lib/python3.12/xml/dom/pulldom.py"},{"path":"/usr/lib/python3.12/xml/dom/xmlbuilder.py"},{"path":"/usr/lib/python3.12/xml/etree"},{"path":"/usr/lib/python3.12/xml/etree/ElementInclude.py"},{"path":"/usr/lib/python3.12/xml/etree/ElementPath.py"},{"path":"/usr/lib/python3.12/xml/etree/ElementTree.py"},{"path":"/usr/lib/python3.12/xml/etree/__init__.py"},{"path":"/usr/lib/python3.12/xml/etree/cElementTree.py"},{"path":"/usr/lib/python3.12/xml/parsers"},{"path":"/usr/lib/python3.12/xml/parsers/__init__.py"},{"path":"/usr/lib/python3.12/xml/parsers/expat.py"},{"path":"/usr/lib/python3.12/xml/sax"},{"path":"/usr/lib/python3.12/xml/sax/__init__.py"},{"path":"/usr/lib/python3.12/xml/sax/_exceptions.py"},{"path":"/usr/lib/python3.12/xml/sax/expatreader.py"},{"path":"/usr/lib/python3.12/xml/sax/handler.py"},{"path":"/usr/lib/python3.12/xml/sax/saxutils.py"},{"path":"/usr/lib/python3.12/xml/sax/xmlreader.py"},{"path":"/usr/lib/python3.12/xmlrpc"},{"path":"/usr/lib/python3.12/xmlrpc/__init__.py"},{"path":"/usr/lib/python3.12/xmlrpc/client.py"},{"path":"/usr/lib/python3.12/xmlrpc/server.py"},{"path":"/usr/lib/python3.12/zipfile"},{"path":"/usr/lib/python3.12/zipfile/__init__.py"},{"path":"/usr/lib/python3.12/zipfile/__main__.py"},{"path":"/usr/lib/python3.12/zipfile/_path"},{"path":"/usr/lib/python3.12/zipfile/_path/__init__.py"},{"path":"/usr/lib/python3.12/zipfile/_path/glob.py"},{"path":"/usr/lib/python3.12/zoneinfo"},{"path":"/usr/lib/python3.12/zoneinfo/__init__.py"},{"path":"/usr/lib/python3.12/zoneinfo/_common.py"},{"path":"/usr/lib/python3.12/zoneinfo/_tzpath.py"},{"path":"/usr/lib/python3.12/zoneinfo/_zoneinfo.py"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-15366","versionConstraint":"< 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.16:*:*:*:*:*:*:*"],"package":{"name":"python3","version":"3.12.16-r0"},"namespace":"nvd:cpe"}},{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-15366","versionConstraint":"< 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.16:*:*:*:*:*:*:*"],"package":{"name":"python3","version":"3.12.16-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-15366","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15366","cwe":"CWE-77","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-15366","date":"2026-11-12","epss":0.00431,"percentile":0.37851}],"risk":0.234895,"urls":["https://github.com/python/cpython/commit/298182272a740ce2016aee2f54acbd0bba1944c1","https://github.com/python/cpython/commit/6262704b134db2a4ba12e85ecfbd968534f28b45","https://github.com/python/cpython/commit/71926d943c05bde79bd2a866933103541d91b6a2","https://github.com/python/cpython/commit/d0921efb665aff26b378f495e5ff84f7e3fe649d","https://github.com/python/cpython/commit/f2cd7ef89aa8a0dcbc7283bbd39548b76f2a736a","https://github.com/python/cpython/issues/143921","https://github.com/python/cpython/pull/143922","https://mail.python.org/archives/list/security-announce@python.org/thread/DD7C7JZJYTBXMDOWKCEIEBJLBRU64OMR/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15366","description":"The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters."},"relatedVulnerabilities":[]},{"artifact":{"id":"28d5db15190e922b","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.23.8&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119379","versionConstraint":"< 3.54.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119379","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119379","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119379","date":"2026-11-12","epss":0.00278,"percentile":0.20526}],"risk":0.217535,"urls":["https://abraxaslabs.tech/research/sqlite-session-ncol","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/session/sqlite3session.c#L5619","https://github.com/sqlite/sqlite/commit/64459c87cc702d600704fb77ee40ca1782398a52","https://sqlite.org/bugs/info/2026-08-16T10:15:25Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/3f57024aecea0f3b","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-session-extension-sessionupdatefind"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119379","description":"SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows attackers to corrupt heap memory by supplying crafted changesets. Attackers can repeat a table name in a second changeset block with a larger column count, causing sessionUpdateFind() to memset past the undersized aUpdateMask allocation."},"relatedVulnerabilities":[]},{"artifact":{"id":"09327264ca577f0a","cpes":["cpe:2.3:a:python-software-foundation:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software_foundation:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software-foundation:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software_foundation:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python3:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.16-r0:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:apk/alpine/python3@3.12.16-r0?arch=x86_64&distro=alpine-3.23.8","type":"apk","version":"3.12.16-r0","language":"","licenses":["PSF-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/2to3"},{"path":"/usr/bin/2to3-3.12"},{"path":"/usr/bin/pydoc3"},{"path":"/usr/bin/pydoc3.12"},{"path":"/usr/bin/python"},{"path":"/usr/bin/python3"},{"path":"/usr/bin/python3.12"},{"path":"/usr/include"},{"path":"/usr/include/python3.12"},{"path":"/usr/include/python3.12/pyconfig.h"},{"path":"/usr/lib"},{"path":"/usr/lib/libpython3.12.so.1.0"},{"path":"/usr/lib/libpython3.so"},{"path":"/usr/lib/python3.12"},{"path":"/usr/lib/python3.12/EXTERNALLY-MANAGED"},{"path":"/usr/lib/python3.12/LICENSE.txt"},{"path":"/usr/lib/python3.12/__future__.py"},{"path":"/usr/lib/python3.12/__hello__.py"},{"path":"/usr/lib/python3.12/_aix_support.py"},{"path":"/usr/lib/python3.12/_collections_abc.py"},{"path":"/usr/lib/python3.12/_compat_pickle.py"},{"path":"/usr/lib/python3.12/_compression.py"},{"path":"/usr/lib/python3.12/_markupbase.py"},{"path":"/usr/lib/python3.12/_osx_support.py"},{"path":"/usr/lib/python3.12/_py_abc.py"},{"path":"/usr/lib/python3.12/_pydatetime.py"},{"path":"/usr/lib/python3.12/_pydecimal.py"},{"path":"/usr/lib/python3.12/_pyio.py"},{"path":"/usr/lib/python3.12/_pylong.py"},{"path":"/usr/lib/python3.12/_sitebuiltins.py"},{"path":"/usr/lib/python3.12/_strptime.py"},{"path":"/usr/lib/python3.12/_sysconfigdata__linux_x86_64-linux-musl.py"},{"path":"/usr/lib/python3.12/_threading_local.py"},{"path":"/usr/lib/python3.12/_weakrefset.py"},{"path":"/usr/lib/python3.12/abc.py"},{"path":"/usr/lib/python3.12/aifc.py"},{"path":"/usr/lib/python3.12/antigravity.py"},{"path":"/usr/lib/python3.12/argparse.py"},{"path":"/usr/lib/python3.12/ast.py"},{"path":"/usr/lib/python3.12/base64.py"},{"path":"/usr/lib/python3.12/bdb.py"},{"path":"/usr/lib/python3.12/bisect.py"},{"path":"/usr/lib/python3.12/bz2.py"},{"path":"/usr/lib/python3.12/cProfile.py"},{"path":"/usr/lib/python3.12/calendar.py"},{"path":"/usr/lib/python3.12/cgi.py"},{"path":"/usr/lib/python3.12/cgitb.py"},{"path":"/usr/lib/python3.12/chunk.py"},{"path":"/usr/lib/python3.12/cmd.py"},{"path":"/usr/lib/python3.12/code.py"},{"path":"/usr/lib/python3.12/codecs.py"},{"path":"/usr/lib/python3.12/codeop.py"},{"path":"/usr/lib/python3.12/colorsys.py"},{"path":"/usr/lib/python3.12/compileall.py"},{"path":"/usr/lib/python3.12/configparser.py"},{"path":"/usr/lib/python3.12/contextlib.py"},{"path":"/usr/lib/python3.12/contextvars.py"},{"path":"/usr/lib/python3.12/copy.py"},{"path":"/usr/lib/python3.12/copyreg.py"},{"path":"/usr/lib/python3.12/crypt.py"},{"path":"/usr/lib/python3.12/csv.py"},{"path":"/usr/lib/python3.12/dataclasses.py"},{"path":"/usr/lib/python3.12/datetime.py"},{"path":"/usr/lib/python3.12/decimal.py"},{"path":"/usr/lib/python3.12/difflib.py"},{"path":"/usr/lib/python3.12/dis.py"},{"path":"/usr/lib/python3.12/doctest.py"},{"path":"/usr/lib/python3.12/enum.py"},{"path":"/usr/lib/python3.12/filecmp.py"},{"path":"/usr/lib/python3.12/fileinput.py"},{"path":"/usr/lib/python3.12/fnmatch.py"},{"path":"/usr/lib/python3.12/fractions.py"},{"path":"/usr/lib/python3.12/ftplib.py"},{"path":"/usr/lib/python3.12/functools.py"},{"path":"/usr/lib/python3.12/genericpath.py"},{"path":"/usr/lib/python3.12/getopt.py"},{"path":"/usr/lib/python3.12/getpass.py"},{"path":"/usr/lib/python3.12/gettext.py"},{"path":"/usr/lib/python3.12/glob.py"},{"path":"/usr/lib/python3.12/graphlib.py"},{"path":"/usr/lib/python3.12/gzip.py"},{"path":"/usr/lib/python3.12/hashlib.py"},{"path":"/usr/lib/python3.12/heapq.py"},{"path":"/usr/lib/python3.12/hmac.py"},{"path":"/usr/lib/python3.12/imaplib.py"},{"path":"/usr/lib/python3.12/imghdr.py"},{"path":"/usr/lib/python3.12/inspect.py"},{"path":"/usr/lib/python3.12/io.py"},{"path":"/usr/lib/python3.12/ipaddress.py"},{"path":"/usr/lib/python3.12/keyword.py"},{"path":"/usr/lib/python3.12/linecache.py"},{"path":"/usr/lib/python3.12/locale.py"},{"path":"/usr/lib/python3.12/lzma.py"},{"path":"/usr/lib/python3.12/mailbox.py"},{"path":"/usr/lib/python3.12/mailcap.py"},{"path":"/usr/lib/python3.12/mimetypes.py"},{"path":"/usr/lib/python3.12/modulefinder.py"},{"path":"/usr/lib/python3.12/netrc.py"},{"path":"/usr/lib/python3.12/nntplib.py"},{"path":"/usr/lib/python3.12/ntpath.py"},{"path":"/usr/lib/python3.12/nturl2path.py"},{"path":"/usr/lib/python3.12/numbers.py"},{"path":"/usr/lib/python3.12/opcode.py"},{"path":"/usr/lib/python3.12/operator.py"},{"path":"/usr/lib/python3.12/optparse.py"},{"path":"/usr/lib/python3.12/os.py"},{"path":"/usr/lib/python3.12/pathlib.py"},{"path":"/usr/lib/python3.12/pdb.py"},{"path":"/usr/lib/python3.12/pickle.py"},{"path":"/usr/lib/python3.12/pickletools.py"},{"path":"/usr/lib/python3.12/pipes.py"},{"path":"/usr/lib/python3.12/pkgutil.py"},{"path":"/usr/lib/python3.12/platform.py"},{"path":"/usr/lib/python3.12/plistlib.py"},{"path":"/usr/lib/python3.12/poplib.py"},{"path":"/usr/lib/python3.12/posixpath.py"},{"path":"/usr/lib/python3.12/pprint.py"},{"path":"/usr/lib/python3.12/profile.py"},{"path":"/usr/lib/python3.12/pstats.py"},{"path":"/usr/lib/python3.12/pty.py"},{"path":"/usr/lib/python3.12/py_compile.py"},{"path":"/usr/lib/python3.12/pyclbr.py"},{"path":"/usr/lib/python3.12/pydoc.py"},{"path":"/usr/lib/python3.12/queue.py"},{"path":"/usr/lib/python3.12/quopri.py"},{"path":"/usr/lib/python3.12/random.py"},{"path":"/usr/lib/python3.12/reprlib.py"},{"path":"/usr/lib/python3.12/rlcompleter.py"},{"path":"/usr/lib/python3.12/runpy.py"},{"path":"/usr/lib/python3.12/sched.py"},{"path":"/usr/lib/python3.12/secrets.py"},{"path":"/usr/lib/python3.12/selectors.py"},{"path":"/usr/lib/python3.12/shelve.py"},{"path":"/usr/lib/python3.12/shlex.py"},{"path":"/usr/lib/python3.12/shutil.py"},{"path":"/usr/lib/python3.12/signal.py"},{"path":"/usr/lib/python3.12/site.py"},{"path":"/usr/lib/python3.12/smtplib.py"},{"path":"/usr/lib/python3.12/sndhdr.py"},{"path":"/usr/lib/python3.12/socket.py"},{"path":"/usr/lib/python3.12/socketserver.py"},{"path":"/usr/lib/python3.12/sre_compile.py"},{"path":"/usr/lib/python3.12/sre_constants.py"},{"path":"/usr/lib/python3.12/sre_parse.py"},{"path":"/usr/lib/python3.12/ssl.py"},{"path":"/usr/lib/python3.12/stat.py"},{"path":"/usr/lib/python3.12/statistics.py"},{"path":"/usr/lib/python3.12/string.py"},{"path":"/usr/lib/python3.12/stringprep.py"},{"path":"/usr/lib/python3.12/struct.py"},{"path":"/usr/lib/python3.12/subprocess.py"},{"path":"/usr/lib/python3.12/sunau.py"},{"path":"/usr/lib/python3.12/symtable.py"},{"path":"/usr/lib/python3.12/sysconfig.py"},{"path":"/usr/lib/python3.12/tabnanny.py"},{"path":"/usr/lib/python3.12/tarfile.py"},{"path":"/usr/lib/python3.12/telnetlib.py"},{"path":"/usr/lib/python3.12/tempfile.py"},{"path":"/usr/lib/python3.12/textwrap.py"},{"path":"/usr/lib/python3.12/this.py"},{"path":"/usr/lib/python3.12/threading.py"},{"path":"/usr/lib/python3.12/timeit.py"},{"path":"/usr/lib/python3.12/token.py"},{"path":"/usr/lib/python3.12/tokenize.py"},{"path":"/usr/lib/python3.12/trace.py"},{"path":"/usr/lib/python3.12/traceback.py"},{"path":"/usr/lib/python3.12/tracemalloc.py"},{"path":"/usr/lib/python3.12/tty.py"},{"path":"/usr/lib/python3.12/turtle.py"},{"path":"/usr/lib/python3.12/types.py"},{"path":"/usr/lib/python3.12/typing.py"},{"path":"/usr/lib/python3.12/uu.py"},{"path":"/usr/lib/python3.12/uuid.py"},{"path":"/usr/lib/python3.12/warnings.py"},{"path":"/usr/lib/python3.12/wave.py"},{"path":"/usr/lib/python3.12/weakref.py"},{"path":"/usr/lib/python3.12/webbrowser.py"},{"path":"/usr/lib/python3.12/xdrlib.py"},{"path":"/usr/lib/python3.12/zipapp.py"},{"path":"/usr/lib/python3.12/zipimport.py"},{"path":"/usr/lib/python3.12/__phello__"},{"path":"/usr/lib/python3.12/__phello__/__init__.py"},{"path":"/usr/lib/python3.12/__phello__/spam.py"},{"path":"/usr/lib/python3.12/asyncio"},{"path":"/usr/lib/python3.12/asyncio/__init__.py"},{"path":"/usr/lib/python3.12/asyncio/__main__.py"},{"path":"/usr/lib/python3.12/asyncio/base_events.py"},{"path":"/usr/lib/python3.12/asyncio/base_futures.py"},{"path":"/usr/lib/python3.12/asyncio/base_subprocess.py"},{"path":"/usr/lib/python3.12/asyncio/base_tasks.py"},{"path":"/usr/lib/python3.12/asyncio/constants.py"},{"path":"/usr/lib/python3.12/asyncio/coroutines.py"},{"path":"/usr/lib/python3.12/asyncio/events.py"},{"path":"/usr/lib/python3.12/asyncio/exceptions.py"},{"path":"/usr/lib/python3.12/asyncio/format_helpers.py"},{"path":"/usr/lib/python3.12/asyncio/futures.py"},{"path":"/usr/lib/python3.12/asyncio/locks.py"},{"path":"/usr/lib/python3.12/asyncio/log.py"},{"path":"/usr/lib/python3.12/asyncio/mixins.py"},{"path":"/usr/lib/python3.12/asyncio/proactor_events.py"},{"path":"/usr/lib/python3.12/asyncio/protocols.py"},{"path":"/usr/lib/python3.12/asyncio/queues.py"},{"path":"/usr/lib/python3.12/asyncio/runners.py"},{"path":"/usr/lib/python3.12/asyncio/selector_events.py"},{"path":"/usr/lib/python3.12/asyncio/sslproto.py"},{"path":"/usr/lib/python3.12/asyncio/staggered.py"},{"path":"/usr/lib/python3.12/asyncio/streams.py"},{"path":"/usr/lib/python3.12/asyncio/subprocess.py"},{"path":"/usr/lib/python3.12/asyncio/taskgroups.py"},{"path":"/usr/lib/python3.12/asyncio/tasks.py"},{"path":"/usr/lib/python3.12/asyncio/threads.py"},{"path":"/usr/lib/python3.12/asyncio/timeouts.py"},{"path":"/usr/lib/python3.12/asyncio/transports.py"},{"path":"/usr/lib/python3.12/asyncio/trsock.py"},{"path":"/usr/lib/python3.12/asyncio/unix_events.py"},{"path":"/usr/lib/python3.12/asyncio/windows_events.py"},{"path":"/usr/lib/python3.12/asyncio/windows_utils.py"},{"path":"/usr/lib/python3.12/collections"},{"path":"/usr/lib/python3.12/collections/__init__.py"},{"path":"/usr/lib/python3.12/collections/abc.py"},{"path":"/usr/lib/python3.12/concurrent"},{"path":"/usr/lib/python3.12/concurrent/__init__.py"},{"path":"/usr/lib/python3.12/concurrent/futures"},{"path":"/usr/lib/python3.12/concurrent/futures/__init__.py"},{"path":"/usr/lib/python3.12/concurrent/futures/_base.py"},{"path":"/usr/lib/python3.12/concurrent/futures/process.py"},{"path":"/usr/lib/python3.12/concurrent/futures/thread.py"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Makefile"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.bootstrap"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.local"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.stdlib"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/config.c.in"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/install-sh"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/makesetup"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/python-config.py"},{"path":"/usr/lib/python3.12/ctypes"},{"path":"/usr/lib/python3.12/ctypes/__init__.py"},{"path":"/usr/lib/python3.12/ctypes/_aix.py"},{"path":"/usr/lib/python3.12/ctypes/_endian.py"},{"path":"/usr/lib/python3.12/ctypes/util.py"},{"path":"/usr/lib/python3.12/ctypes/wintypes.py"},{"path":"/usr/lib/python3.12/ctypes/macholib"},{"path":"/usr/lib/python3.12/ctypes/macholib/README.ctypes"},{"path":"/usr/lib/python3.12/ctypes/macholib/__init__.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/dyld.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/dylib.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/fetch_macholib"},{"path":"/usr/lib/python3.12/ctypes/macholib/fetch_macholib.bat"},{"path":"/usr/lib/python3.12/ctypes/macholib/framework.py"},{"path":"/usr/lib/python3.12/curses"},{"path":"/usr/lib/python3.12/curses/__init__.py"},{"path":"/usr/lib/python3.12/curses/ascii.py"},{"path":"/usr/lib/python3.12/curses/has_key.py"},{"path":"/usr/lib/python3.12/curses/panel.py"},{"path":"/usr/lib/python3.12/curses/textpad.py"},{"path":"/usr/lib/python3.12/dbm"},{"path":"/usr/lib/python3.12/dbm/__init__.py"},{"path":"/usr/lib/python3.12/dbm/dumb.py"},{"path":"/usr/lib/python3.12/dbm/gnu.py"},{"path":"/usr/lib/python3.12/dbm/ndbm.py"},{"path":"/usr/lib/python3.12/email"},{"path":"/usr/lib/python3.12/email/__init__.py"},{"path":"/usr/lib/python3.12/email/_encoded_words.py"},{"path":"/usr/lib/python3.12/email/_header_value_parser.py"},{"path":"/usr/lib/python3.12/email/_parseaddr.py"},{"path":"/usr/lib/python3.12/email/_policybase.py"},{"path":"/usr/lib/python3.12/email/architecture.rst"},{"path":"/usr/lib/python3.12/email/base64mime.py"},{"path":"/usr/lib/python3.12/email/charset.py"},{"path":"/usr/lib/python3.12/email/contentmanager.py"},{"path":"/usr/lib/python3.12/email/encoders.py"},{"path":"/usr/lib/python3.12/email/errors.py"},{"path":"/usr/lib/python3.12/email/feedparser.py"},{"path":"/usr/lib/python3.12/email/generator.py"},{"path":"/usr/lib/python3.12/email/header.py"},{"path":"/usr/lib/python3.12/email/headerregistry.py"},{"path":"/usr/lib/python3.12/email/iterators.py"},{"path":"/usr/lib/python3.12/email/message.py"},{"path":"/usr/lib/python3.12/email/parser.py"},{"path":"/usr/lib/python3.12/email/policy.py"},{"path":"/usr/lib/python3.12/email/quoprimime.py"},{"path":"/usr/lib/python3.12/email/utils.py"},{"path":"/usr/lib/python3.12/email/mime"},{"path":"/usr/lib/python3.12/email/mime/__init__.py"},{"path":"/usr/lib/python3.12/email/mime/application.py"},{"path":"/usr/lib/python3.12/email/mime/audio.py"},{"path":"/usr/lib/python3.12/email/mime/base.py"},{"path":"/usr/lib/python3.12/email/mime/image.py"},{"path":"/usr/lib/python3.12/email/mime/message.py"},{"path":"/usr/lib/python3.12/email/mime/multipart.py"},{"path":"/usr/lib/python3.12/email/mime/nonmultipart.py"},{"path":"/usr/lib/python3.12/email/mime/text.py"},{"path":"/usr/lib/python3.12/encodings"},{"path":"/usr/lib/python3.12/encodings/__init__.py"},{"path":"/usr/lib/python3.12/encodings/aliases.py"},{"path":"/usr/lib/python3.12/encodings/ascii.py"},{"path":"/usr/lib/python3.12/encodings/base64_codec.py"},{"path":"/usr/lib/python3.12/encodings/big5.py"},{"path":"/usr/lib/python3.12/encodings/big5hkscs.py"},{"path":"/usr/lib/python3.12/encodings/bz2_codec.py"},{"path":"/usr/lib/python3.12/encodings/charmap.py"},{"path":"/usr/lib/python3.12/encodings/cp037.py"},{"path":"/usr/lib/python3.12/encodings/cp1006.py"},{"path":"/usr/lib/python3.12/encodings/cp1026.py"},{"path":"/usr/lib/python3.12/encodings/cp1125.py"},{"path":"/usr/lib/python3.12/encodings/cp1140.py"},{"path":"/usr/lib/python3.12/encodings/cp1250.py"},{"path":"/usr/lib/python3.12/encodings/cp1251.py"},{"path":"/usr/lib/python3.12/encodings/cp1252.py"},{"path":"/usr/lib/python3.12/encodings/cp1253.py"},{"path":"/usr/lib/python3.12/encodings/cp1254.py"},{"path":"/usr/lib/python3.12/encodings/cp1255.py"},{"path":"/usr/lib/python3.12/encodings/cp1256.py"},{"path":"/usr/lib/python3.12/encodings/cp1257.py"},{"path":"/usr/lib/python3.12/encodings/cp1258.py"},{"path":"/usr/lib/python3.12/encodings/cp273.py"},{"path":"/usr/lib/python3.12/encodings/cp424.py"},{"path":"/usr/lib/python3.12/encodings/cp437.py"},{"path":"/usr/lib/python3.12/encodings/cp500.py"},{"path":"/usr/lib/python3.12/encodings/cp720.py"},{"path":"/usr/lib/python3.12/encodings/cp737.py"},{"path":"/usr/lib/python3.12/encodings/cp775.py"},{"path":"/usr/lib/python3.12/encodings/cp850.py"},{"path":"/usr/lib/python3.12/encodings/cp852.py"},{"path":"/usr/lib/python3.12/encodings/cp855.py"},{"path":"/usr/lib/python3.12/encodings/cp856.py"},{"path":"/usr/lib/python3.12/encodings/cp857.py"},{"path":"/usr/lib/python3.12/encodings/cp858.py"},{"path":"/usr/lib/python3.12/encodings/cp860.py"},{"path":"/usr/lib/python3.12/encodings/cp861.py"},{"path":"/usr/lib/python3.12/encodings/cp862.py"},{"path":"/usr/lib/python3.12/encodings/cp863.py"},{"path":"/usr/lib/python3.12/encodings/cp864.py"},{"path":"/usr/lib/python3.12/encodings/cp865.py"},{"path":"/usr/lib/python3.12/encodings/cp866.py"},{"path":"/usr/lib/python3.12/encodings/cp869.py"},{"path":"/usr/lib/python3.12/encodings/cp874.py"},{"path":"/usr/lib/python3.12/encodings/cp875.py"},{"path":"/usr/lib/python3.12/encodings/cp932.py"},{"path":"/usr/lib/python3.12/encodings/cp949.py"},{"path":"/usr/lib/python3.12/encodings/cp950.py"},{"path":"/usr/lib/python3.12/encodings/euc_jis_2004.py"},{"path":"/usr/lib/python3.12/encodings/euc_jisx0213.py"},{"path":"/usr/lib/python3.12/encodings/euc_jp.py"},{"path":"/usr/lib/python3.12/encodings/euc_kr.py"},{"path":"/usr/lib/python3.12/encodings/gb18030.py"},{"path":"/usr/lib/python3.12/encodings/gb2312.py"},{"path":"/usr/lib/python3.12/encodings/gbk.py"},{"path":"/usr/lib/python3.12/encodings/hex_codec.py"},{"path":"/usr/lib/python3.12/encodings/hp_roman8.py"},{"path":"/usr/lib/python3.12/encodings/hz.py"},{"path":"/usr/lib/python3.12/encodings/idna.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_1.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_2.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_2004.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_3.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_ext.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_kr.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_1.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_10.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_11.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_13.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_14.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_15.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_16.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_2.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_3.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_4.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_5.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_6.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_7.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_8.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_9.py"},{"path":"/usr/lib/python3.12/encodings/johab.py"},{"path":"/usr/lib/python3.12/encodings/koi8_r.py"},{"path":"/usr/lib/python3.12/encodings/koi8_t.py"},{"path":"/usr/lib/python3.12/encodings/koi8_u.py"},{"path":"/usr/lib/python3.12/encodings/kz1048.py"},{"path":"/usr/lib/python3.12/encodings/latin_1.py"},{"path":"/usr/lib/python3.12/encodings/mac_arabic.py"},{"path":"/usr/lib/python3.12/encodings/mac_croatian.py"},{"path":"/usr/lib/python3.12/encodings/mac_cyrillic.py"},{"path":"/usr/lib/python3.12/encodings/mac_farsi.py"},{"path":"/usr/lib/python3.12/encodings/mac_greek.py"},{"path":"/usr/lib/python3.12/encodings/mac_iceland.py"},{"path":"/usr/lib/python3.12/encodings/mac_latin2.py"},{"path":"/usr/lib/python3.12/encodings/mac_roman.py"},{"path":"/usr/lib/python3.12/encodings/mac_romanian.py"},{"path":"/usr/lib/python3.12/encodings/mac_turkish.py"},{"path":"/usr/lib/python3.12/encodings/mbcs.py"},{"path":"/usr/lib/python3.12/encodings/oem.py"},{"path":"/usr/lib/python3.12/encodings/palmos.py"},{"path":"/usr/lib/python3.12/encodings/ptcp154.py"},{"path":"/usr/lib/python3.12/encodings/punycode.py"},{"path":"/usr/lib/python3.12/encodings/quopri_codec.py"},{"path":"/usr/lib/python3.12/encodings/raw_unicode_escape.py"},{"path":"/usr/lib/python3.12/encodings/rot_13.py"},{"path":"/usr/lib/python3.12/encodings/shift_jis.py"},{"path":"/usr/lib/python3.12/encodings/shift_jis_2004.py"},{"path":"/usr/lib/python3.12/encodings/shift_jisx0213.py"},{"path":"/usr/lib/python3.12/encodings/tis_620.py"},{"path":"/usr/lib/python3.12/encodings/undefined.py"},{"path":"/usr/lib/python3.12/encodings/unicode_escape.py"},{"path":"/usr/lib/python3.12/encodings/utf_16.py"},{"path":"/usr/lib/python3.12/encodings/utf_16_be.py"},{"path":"/usr/lib/python3.12/encodings/utf_16_le.py"},{"path":"/usr/lib/python3.12/encodings/utf_32.py"},{"path":"/usr/lib/python3.12/encodings/utf_32_be.py"},{"path":"/usr/lib/python3.12/encodings/utf_32_le.py"},{"path":"/usr/lib/python3.12/encodings/utf_7.py"},{"path":"/usr/lib/python3.12/encodings/utf_8.py"},{"path":"/usr/lib/python3.12/encodings/utf_8_sig.py"},{"path":"/usr/lib/python3.12/encodings/uu_codec.py"},{"path":"/usr/lib/python3.12/encodings/zlib_codec.py"},{"path":"/usr/lib/python3.12/ensurepip"},{"path":"/usr/lib/python3.12/ensurepip/__init__.py"},{"path":"/usr/lib/python3.12/ensurepip/__main__.py"},{"path":"/usr/lib/python3.12/ensurepip/_uninstall.py"},{"path":"/usr/lib/python3.12/ensurepip/_bundled"},{"path":"/usr/lib/python3.12/ensurepip/_bundled/pip-25.0.1-py3-none-any.whl"},{"path":"/usr/lib/python3.12/html"},{"path":"/usr/lib/python3.12/html/__init__.py"},{"path":"/usr/lib/python3.12/html/entities.py"},{"path":"/usr/lib/python3.12/html/parser.py"},{"path":"/usr/lib/python3.12/http"},{"path":"/usr/lib/python3.12/http/__init__.py"},{"path":"/usr/lib/python3.12/http/client.py"},{"path":"/usr/lib/python3.12/http/cookiejar.py"},{"path":"/usr/lib/python3.12/http/cookies.py"},{"path":"/usr/lib/python3.12/http/server.py"},{"path":"/usr/lib/python3.12/importlib"},{"path":"/usr/lib/python3.12/importlib/__init__.py"},{"path":"/usr/lib/python3.12/importlib/_abc.py"},{"path":"/usr/lib/python3.12/importlib/_bootstrap.py"},{"path":"/usr/lib/python3.12/importlib/_bootstrap_external.py"},{"path":"/usr/lib/python3.12/importlib/abc.py"},{"path":"/usr/lib/python3.12/importlib/machinery.py"},{"path":"/usr/lib/python3.12/importlib/readers.py"},{"path":"/usr/lib/python3.12/importlib/simple.py"},{"path":"/usr/lib/python3.12/importlib/util.py"},{"path":"/usr/lib/python3.12/importlib/metadata"},{"path":"/usr/lib/python3.12/importlib/metadata/__init__.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_adapters.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_collections.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_functools.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_itertools.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_meta.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_text.py"},{"path":"/usr/lib/python3.12/importlib/resources"},{"path":"/usr/lib/python3.12/importlib/resources/__init__.py"},{"path":"/usr/lib/python3.12/importlib/resources/_adapters.py"},{"path":"/usr/lib/python3.12/importlib/resources/_common.py"},{"path":"/usr/lib/python3.12/importlib/resources/_itertools.py"},{"path":"/usr/lib/python3.12/importlib/resources/_legacy.py"},{"path":"/usr/lib/python3.12/importlib/resources/abc.py"},{"path":"/usr/lib/python3.12/importlib/resources/readers.py"},{"path":"/usr/lib/python3.12/importlib/resources/simple.py"},{"path":"/usr/lib/python3.12/json"},{"path":"/usr/lib/python3.12/json/__init__.py"},{"path":"/usr/lib/python3.12/json/decoder.py"},{"path":"/usr/lib/python3.12/json/encoder.py"},{"path":"/usr/lib/python3.12/json/scanner.py"},{"path":"/usr/lib/python3.12/json/tool.py"},{"path":"/usr/lib/python3.12/lib-dynload"},{"path":"/usr/lib/python3.12/lib-dynload/_asyncio.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_bisect.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_blake2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_bz2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_cn.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_hk.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_iso2022.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_jp.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_kr.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_tw.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_contextvars.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_crypt.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_csv.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ctypes.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ctypes_test.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_curses.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_curses_panel.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_datetime.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_dbm.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_decimal.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_elementtree.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_hashlib.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_heapq.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_json.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_lsprof.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_lzma.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_md5.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_multibytecodec.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_multiprocessing.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_opcode.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_pickle.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_posixshmem.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_posixsubprocess.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_queue.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_random.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha1.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha3.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_socket.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sqlite3.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ssl.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_statistics.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_struct.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testbuffer.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testcapi.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testclinic.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testimportmultiple.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testinternalcapi.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testmultiphase.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testsinglephase.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxinterpchannels.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxsubinterpreters.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxtestfuzz.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_zoneinfo.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/array.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/audioop.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/binascii.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/cmath.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/fcntl.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/grp.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/math.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/mmap.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/ossaudiodev.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/pyexpat.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/readline.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/resource.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/select.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/spwd.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/syslog.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/termios.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/unicodedata.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxlimited.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxlimited_35.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxsubtype.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/zlib.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib2to3"},{"path":"/usr/lib/python3.12/lib2to3/Grammar.txt"},{"path":"/usr/lib/python3.12/lib2to3/Grammar3.12.16.final.0.pickle"},{"path":"/usr/lib/python3.12/lib2to3/PatternGrammar.txt"},{"path":"/usr/lib/python3.12/lib2to3/PatternGrammar3.12.16.final.0.pickle"},{"path":"/usr/lib/python3.12/lib2to3/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/__main__.py"},{"path":"/usr/lib/python3.12/lib2to3/btm_matcher.py"},{"path":"/usr/lib/python3.12/lib2to3/btm_utils.py"},{"path":"/usr/lib/python3.12/lib2to3/fixer_base.py"},{"path":"/usr/lib/python3.12/lib2to3/fixer_util.py"},{"path":"/usr/lib/python3.12/lib2to3/main.py"},{"path":"/usr/lib/python3.12/lib2to3/patcomp.py"},{"path":"/usr/lib/python3.12/lib2to3/pygram.py"},{"path":"/usr/lib/python3.12/lib2to3/pytree.py"},{"path":"/usr/lib/python3.12/lib2to3/refactor.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes"},{"path":"/usr/lib/python3.12/lib2to3/fixes/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_apply.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_asserts.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_basestring.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_buffer.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_dict.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_except.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_exec.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_execfile.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_exitfunc.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_filter.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_funcattrs.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_future.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_getcwdu.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_has_key.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_idioms.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_import.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_imports.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_imports2.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_input.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_intern.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_isinstance.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_itertools.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_itertools_imports.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_long.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_map.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_metaclass.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_methodattrs.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_ne.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_next.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_nonzero.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_numliterals.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_operator.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_paren.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_print.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_raise.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_raw_input.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_reduce.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_reload.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_renames.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_repr.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_set_literal.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_standarderror.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_sys_exc.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_throw.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_tuple_params.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_types.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_unicode.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_urllib.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_ws_comma.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_xrange.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_xreadlines.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_zip.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/conv.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/driver.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/grammar.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/literals.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/parse.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/pgen.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/token.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/tokenize.py"},{"path":"/usr/lib/python3.12/logging"},{"path":"/usr/lib/python3.12/logging/__init__.py"},{"path":"/usr/lib/python3.12/logging/config.py"},{"path":"/usr/lib/python3.12/logging/handlers.py"},{"path":"/usr/lib/python3.12/multiprocessing"},{"path":"/usr/lib/python3.12/multiprocessing/__init__.py"},{"path":"/usr/lib/python3.12/multiprocessing/connection.py"},{"path":"/usr/lib/python3.12/multiprocessing/context.py"},{"path":"/usr/lib/python3.12/multiprocessing/forkserver.py"},{"path":"/usr/lib/python3.12/multiprocessing/heap.py"},{"path":"/usr/lib/python3.12/multiprocessing/managers.py"},{"path":"/usr/lib/python3.12/multiprocessing/pool.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_fork.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_forkserver.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_spawn_posix.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_spawn_win32.py"},{"path":"/usr/lib/python3.12/multiprocessing/process.py"},{"path":"/usr/lib/python3.12/multiprocessing/queues.py"},{"path":"/usr/lib/python3.12/multiprocessing/reduction.py"},{"path":"/usr/lib/python3.12/multiprocessing/resource_sharer.py"},{"path":"/usr/lib/python3.12/multiprocessing/resource_tracker.py"},{"path":"/usr/lib/python3.12/multiprocessing/shared_memory.py"},{"path":"/usr/lib/python3.12/multiprocessing/sharedctypes.py"},{"path":"/usr/lib/python3.12/multiprocessing/spawn.py"},{"path":"/usr/lib/python3.12/multiprocessing/synchronize.py"},{"path":"/usr/lib/python3.12/multiprocessing/util.py"},{"path":"/usr/lib/python3.12/multiprocessing/dummy"},{"path":"/usr/lib/python3.12/multiprocessing/dummy/__init__.py"},{"path":"/usr/lib/python3.12/multiprocessing/dummy/connection.py"},{"path":"/usr/lib/python3.12/pydoc_data"},{"path":"/usr/lib/python3.12/pydoc_data/__init__.py"},{"path":"/usr/lib/python3.12/pydoc_data/_pydoc.css"},{"path":"/usr/lib/python3.12/pydoc_data/topics.py"},{"path":"/usr/lib/python3.12/re"},{"path":"/usr/lib/python3.12/re/__init__.py"},{"path":"/usr/lib/python3.12/re/_casefix.py"},{"path":"/usr/lib/python3.12/re/_compiler.py"},{"path":"/usr/lib/python3.12/re/_constants.py"},{"path":"/usr/lib/python3.12/re/_parser.py"},{"path":"/usr/lib/python3.12/site-packages"},{"path":"/usr/lib/python3.12/site-packages/README.txt"},{"path":"/usr/lib/python3.12/sqlite3"},{"path":"/usr/lib/python3.12/sqlite3/__init__.py"},{"path":"/usr/lib/python3.12/sqlite3/__main__.py"},{"path":"/usr/lib/python3.12/sqlite3/dbapi2.py"},{"path":"/usr/lib/python3.12/sqlite3/dump.py"},{"path":"/usr/lib/python3.12/tomllib"},{"path":"/usr/lib/python3.12/tomllib/__init__.py"},{"path":"/usr/lib/python3.12/tomllib/_parser.py"},{"path":"/usr/lib/python3.12/tomllib/_re.py"},{"path":"/usr/lib/python3.12/tomllib/_types.py"},{"path":"/usr/lib/python3.12/turtledemo"},{"path":"/usr/lib/python3.12/turtledemo/__init__.py"},{"path":"/usr/lib/python3.12/turtledemo/__main__.py"},{"path":"/usr/lib/python3.12/turtledemo/bytedesign.py"},{"path":"/usr/lib/python3.12/turtledemo/chaos.py"},{"path":"/usr/lib/python3.12/turtledemo/clock.py"},{"path":"/usr/lib/python3.12/turtledemo/colormixer.py"},{"path":"/usr/lib/python3.12/turtledemo/forest.py"},{"path":"/usr/lib/python3.12/turtledemo/fractalcurves.py"},{"path":"/usr/lib/python3.12/turtledemo/lindenmayer.py"},{"path":"/usr/lib/python3.12/turtledemo/minimal_hanoi.py"},{"path":"/usr/lib/python3.12/turtledemo/nim.py"},{"path":"/usr/lib/python3.12/turtledemo/paint.py"},{"path":"/usr/lib/python3.12/turtledemo/peace.py"},{"path":"/usr/lib/python3.12/turtledemo/penrose.py"},{"path":"/usr/lib/python3.12/turtledemo/planet_and_moon.py"},{"path":"/usr/lib/python3.12/turtledemo/rosette.py"},{"path":"/usr/lib/python3.12/turtledemo/round_dance.py"},{"path":"/usr/lib/python3.12/turtledemo/sorting_animate.py"},{"path":"/usr/lib/python3.12/turtledemo/tree.py"},{"path":"/usr/lib/python3.12/turtledemo/turtle.cfg"},{"path":"/usr/lib/python3.12/turtledemo/two_canvases.py"},{"path":"/usr/lib/python3.12/turtledemo/yinyang.py"},{"path":"/usr/lib/python3.12/unittest"},{"path":"/usr/lib/python3.12/unittest/__init__.py"},{"path":"/usr/lib/python3.12/unittest/__main__.py"},{"path":"/usr/lib/python3.12/unittest/_log.py"},{"path":"/usr/lib/python3.12/unittest/async_case.py"},{"path":"/usr/lib/python3.12/unittest/case.py"},{"path":"/usr/lib/python3.12/unittest/loader.py"},{"path":"/usr/lib/python3.12/unittest/main.py"},{"path":"/usr/lib/python3.12/unittest/mock.py"},{"path":"/usr/lib/python3.12/unittest/result.py"},{"path":"/usr/lib/python3.12/unittest/runner.py"},{"path":"/usr/lib/python3.12/unittest/signals.py"},{"path":"/usr/lib/python3.12/unittest/suite.py"},{"path":"/usr/lib/python3.12/unittest/util.py"},{"path":"/usr/lib/python3.12/urllib"},{"path":"/usr/lib/python3.12/urllib/__init__.py"},{"path":"/usr/lib/python3.12/urllib/error.py"},{"path":"/usr/lib/python3.12/urllib/parse.py"},{"path":"/usr/lib/python3.12/urllib/request.py"},{"path":"/usr/lib/python3.12/urllib/response.py"},{"path":"/usr/lib/python3.12/urllib/robotparser.py"},{"path":"/usr/lib/python3.12/venv"},{"path":"/usr/lib/python3.12/venv/__init__.py"},{"path":"/usr/lib/python3.12/venv/__main__.py"},{"path":"/usr/lib/python3.12/venv/scripts"},{"path":"/usr/lib/python3.12/venv/scripts/common"},{"path":"/usr/lib/python3.12/venv/scripts/common/Activate.ps1"},{"path":"/usr/lib/python3.12/venv/scripts/common/activate"},{"path":"/usr/lib/python3.12/venv/scripts/posix"},{"path":"/usr/lib/python3.12/venv/scripts/posix/activate.csh"},{"path":"/usr/lib/python3.12/venv/scripts/posix/activate.fish"},{"path":"/usr/lib/python3.12/wsgiref"},{"path":"/usr/lib/python3.12/wsgiref/__init__.py"},{"path":"/usr/lib/python3.12/wsgiref/handlers.py"},{"path":"/usr/lib/python3.12/wsgiref/headers.py"},{"path":"/usr/lib/python3.12/wsgiref/simple_server.py"},{"path":"/usr/lib/python3.12/wsgiref/types.py"},{"path":"/usr/lib/python3.12/wsgiref/util.py"},{"path":"/usr/lib/python3.12/wsgiref/validate.py"},{"path":"/usr/lib/python3.12/xml"},{"path":"/usr/lib/python3.12/xml/__init__.py"},{"path":"/usr/lib/python3.12/xml/dom"},{"path":"/usr/lib/python3.12/xml/dom/NodeFilter.py"},{"path":"/usr/lib/python3.12/xml/dom/__init__.py"},{"path":"/usr/lib/python3.12/xml/dom/domreg.py"},{"path":"/usr/lib/python3.12/xml/dom/expatbuilder.py"},{"path":"/usr/lib/python3.12/xml/dom/minicompat.py"},{"path":"/usr/lib/python3.12/xml/dom/minidom.py"},{"path":"/usr/lib/python3.12/xml/dom/pulldom.py"},{"path":"/usr/lib/python3.12/xml/dom/xmlbuilder.py"},{"path":"/usr/lib/python3.12/xml/etree"},{"path":"/usr/lib/python3.12/xml/etree/ElementInclude.py"},{"path":"/usr/lib/python3.12/xml/etree/ElementPath.py"},{"path":"/usr/lib/python3.12/xml/etree/ElementTree.py"},{"path":"/usr/lib/python3.12/xml/etree/__init__.py"},{"path":"/usr/lib/python3.12/xml/etree/cElementTree.py"},{"path":"/usr/lib/python3.12/xml/parsers"},{"path":"/usr/lib/python3.12/xml/parsers/__init__.py"},{"path":"/usr/lib/python3.12/xml/parsers/expat.py"},{"path":"/usr/lib/python3.12/xml/sax"},{"path":"/usr/lib/python3.12/xml/sax/__init__.py"},{"path":"/usr/lib/python3.12/xml/sax/_exceptions.py"},{"path":"/usr/lib/python3.12/xml/sax/expatreader.py"},{"path":"/usr/lib/python3.12/xml/sax/handler.py"},{"path":"/usr/lib/python3.12/xml/sax/saxutils.py"},{"path":"/usr/lib/python3.12/xml/sax/xmlreader.py"},{"path":"/usr/lib/python3.12/xmlrpc"},{"path":"/usr/lib/python3.12/xmlrpc/__init__.py"},{"path":"/usr/lib/python3.12/xmlrpc/client.py"},{"path":"/usr/lib/python3.12/xmlrpc/server.py"},{"path":"/usr/lib/python3.12/zipfile"},{"path":"/usr/lib/python3.12/zipfile/__init__.py"},{"path":"/usr/lib/python3.12/zipfile/__main__.py"},{"path":"/usr/lib/python3.12/zipfile/_path"},{"path":"/usr/lib/python3.12/zipfile/_path/__init__.py"},{"path":"/usr/lib/python3.12/zipfile/_path/glob.py"},{"path":"/usr/lib/python3.12/zoneinfo"},{"path":"/usr/lib/python3.12/zoneinfo/__init__.py"},{"path":"/usr/lib/python3.12/zoneinfo/_common.py"},{"path":"/usr/lib/python3.12/zoneinfo/_tzpath.py"},{"path":"/usr/lib/python3.12/zoneinfo/_zoneinfo.py"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-15367","versionConstraint":"< 3.15.0a6 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.16:*:*:*:*:*:*:*"],"package":{"name":"python3","version":"3.12.16-r0"},"namespace":"nvd:cpe"}},{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-15367","versionConstraint":"< 3.15.0a6 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.16:*:*:*:*:*:*:*"],"package":{"name":"python3","version":"3.12.16-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-15367","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15367","cwe":"CWE-77","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-15367","date":"2026-11-12","epss":0.00377,"percentile":0.32138}],"risk":0.20546500000000004,"urls":["https://github.com/python/cpython/commit/b234a2b67539f787e191d2ef19a7cbdce32874e7","https://github.com/python/cpython/issues/143923","https://github.com/python/cpython/pull/143924","https://mail.python.org/archives/list/security-announce@python.org/thread/CBFBOWVGGUJFSGITQCCBZS4GEYYZ7ZNE/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15367","description":"The poplib module, when passed a user-controlled command, can have\nadditional commands injected using newlines. Mitigation rejects commands\ncontaining control characters."},"relatedVulnerabilities":[]},{"artifact":{"id":"746a5398c68762fd","cpes":["cpe:2.3:a:coreutils:coreutils:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils:9.8-r1:*:*:*:*:*:*:*"],"name":"coreutils","purl":"pkg:apk/alpine/coreutils@9.8-r1?arch=x86_64&distro=alpine-3.23.8","type":"apk","version":"9.8-r1","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/base64"},{"path":"/bin/cat"},{"path":"/bin/chgrp"},{"path":"/bin/chmod"},{"path":"/bin/chown"},{"path":"/bin/coreutils"},{"path":"/bin/cp"},{"path":"/bin/date"},{"path":"/bin/dd"},{"path":"/bin/df"},{"path":"/bin/echo"},{"path":"/bin/false"},{"path":"/bin/link"},{"path":"/bin/ln"},{"path":"/bin/ls"},{"path":"/bin/mkdir"},{"path":"/bin/mknod"},{"path":"/bin/mktemp"},{"path":"/bin/mv"},{"path":"/bin/nice"},{"path":"/bin/printenv"},{"path":"/bin/pwd"},{"path":"/bin/rm"},{"path":"/bin/rmdir"},{"path":"/bin/sleep"},{"path":"/bin/stat"},{"path":"/bin/stty"},{"path":"/bin/sync"},{"path":"/bin/touch"},{"path":"/bin/true"},{"path":"/bin/uname"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/["},{"path":"/usr/bin/b2sum"},{"path":"/usr/bin/base32"},{"path":"/usr/bin/basename"},{"path":"/usr/bin/basenc"},{"path":"/usr/bin/chcon"},{"path":"/usr/bin/cksum"},{"path":"/usr/bin/comm"},{"path":"/usr/bin/csplit"},{"path":"/usr/bin/cut"},{"path":"/usr/bin/dir"},{"path":"/usr/bin/dircolors"},{"path":"/usr/bin/dirname"},{"path":"/usr/bin/du"},{"path":"/usr/bin/expand"},{"path":"/usr/bin/expr"},{"path":"/usr/bin/factor"},{"path":"/usr/bin/fold"},{"path":"/usr/bin/head"},{"path":"/usr/bin/hostid"},{"path":"/usr/bin/id"},{"path":"/usr/bin/install"},{"path":"/usr/bin/join"},{"path":"/usr/bin/logname"},{"path":"/usr/bin/md5sum"},{"path":"/usr/bin/mkfifo"},{"path":"/usr/bin/nl"},{"path":"/usr/bin/nohup"},{"path":"/usr/bin/nproc"},{"path":"/usr/bin/numfmt"},{"path":"/usr/bin/od"},{"path":"/usr/bin/paste"},{"path":"/usr/bin/pathchk"},{"path":"/usr/bin/pinky"},{"path":"/usr/bin/pr"},{"path":"/usr/bin/printf"},{"path":"/usr/bin/ptx"},{"path":"/usr/bin/readlink"},{"path":"/usr/bin/realpath"},{"path":"/usr/bin/runcon"},{"path":"/usr/bin/seq"},{"path":"/usr/bin/sha1sum"},{"path":"/usr/bin/sha224sum"},{"path":"/usr/bin/sha256sum"},{"path":"/usr/bin/sha384sum"},{"path":"/usr/bin/shred"},{"path":"/usr/bin/shuf"},{"path":"/usr/bin/sort"},{"path":"/usr/bin/split"},{"path":"/usr/bin/stdbuf"},{"path":"/usr/bin/sum"},{"path":"/usr/bin/tac"},{"path":"/usr/bin/tail"},{"path":"/usr/bin/tee"},{"path":"/usr/bin/test"},{"path":"/usr/bin/timeout"},{"path":"/usr/bin/tr"},{"path":"/usr/bin/truncate"},{"path":"/usr/bin/tsort"},{"path":"/usr/bin/tty"},{"path":"/usr/bin/unexpand"},{"path":"/usr/bin/uniq"},{"path":"/usr/bin/unlink"},{"path":"/usr/bin/users"},{"path":"/usr/bin/vdir"},{"path":"/usr/bin/wc"},{"path":"/usr/bin/who"},{"path":"/usr/bin/whoami"},{"path":"/usr/bin/yes"},{"path":"/usr/libexec"},{"path":"/usr/libexec/coreutils"},{"path":"/usr/libexec/coreutils/libstdbuf.so"},{"path":"/usr/sbin"},{"path":"/usr/sbin/chroot"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2016-2781","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.8:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.8-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2016-2781","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":2.1,"impactScore":2.9,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":4.6,"impactScore":2.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2781","date":"2026-11-12","epss":0.00428,"percentile":0.37532}],"risk":0.20115999999999998,"urls":["http://www.openwall.com/lists/oss-security/2016/02/28/2","http://www.openwall.com/lists/oss-security/2016/02/28/3","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2781","description":"chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"80fc7e85cd2608c5","cpes":["cpe:2.3:a:coreutils-env:coreutils-env:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-env:coreutils_env:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils-env:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils_env:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-env:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_env:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-env:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_env:9.8-r1:*:*:*:*:*:*:*"],"name":"coreutils-env","purl":"pkg:apk/alpine/coreutils-env@9.8-r1?arch=x86_64&distro=alpine-3.23.8&upstream=coreutils","type":"apk","version":"9.8-r1","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/env"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2016-2781","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.8:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.8-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2016-2781","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":2.1,"impactScore":2.9,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":4.6,"impactScore":2.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2781","date":"2026-11-12","epss":0.00428,"percentile":0.37532}],"risk":0.20115999999999998,"urls":["http://www.openwall.com/lists/oss-security/2016/02/28/2","http://www.openwall.com/lists/oss-security/2016/02/28/3","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2781","description":"chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"68b3fbeb4ac465f1","cpes":["cpe:2.3:a:coreutils-fmt:coreutils-fmt:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-fmt:coreutils_fmt:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils-fmt:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils_fmt:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-fmt:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_fmt:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-fmt:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_fmt:9.8-r1:*:*:*:*:*:*:*"],"name":"coreutils-fmt","purl":"pkg:apk/alpine/coreutils-fmt@9.8-r1?arch=x86_64&distro=alpine-3.23.8&upstream=coreutils","type":"apk","version":"9.8-r1","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/fmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2016-2781","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.8:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.8-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2016-2781","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":2.1,"impactScore":2.9,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":4.6,"impactScore":2.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2781","date":"2026-11-12","epss":0.00428,"percentile":0.37532}],"risk":0.20115999999999998,"urls":["http://www.openwall.com/lists/oss-security/2016/02/28/2","http://www.openwall.com/lists/oss-security/2016/02/28/3","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2781","description":"chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"b7fbe9298b523216","cpes":["cpe:2.3:a:coreutils-sha512sum:coreutils-sha512sum:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-sha512sum:coreutils_sha512sum:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils-sha512sum:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils_sha512sum:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-sha512sum:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_sha512sum:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-sha512sum:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_sha512sum:9.8-r1:*:*:*:*:*:*:*"],"name":"coreutils-sha512sum","purl":"pkg:apk/alpine/coreutils-sha512sum@9.8-r1?arch=x86_64&distro=alpine-3.23.8&upstream=coreutils","type":"apk","version":"9.8-r1","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/sha512sum"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2016-2781","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.8:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.8-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2016-2781","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":2.1,"impactScore":2.9,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":4.6,"impactScore":2.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2781","date":"2026-11-12","epss":0.00428,"percentile":0.37532}],"risk":0.20115999999999998,"urls":["http://www.openwall.com/lists/oss-security/2016/02/28/2","http://www.openwall.com/lists/oss-security/2016/02/28/3","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2781","description":"chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"28d5db15190e922b","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.23.8&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119374","versionConstraint":"< 3.54.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119374","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119374","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119374","date":"2026-11-12","epss":0.0023,"percentile":0.13979}],"risk":0.179975,"urls":["https://abraxaslabs.tech/research/sqlite-fts5-securedel","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L5525","https://github.com/sqlite/sqlite/commit/d9de6eedbe918c074c7556400fa21df5960704d9","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/9cd4f9e920","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-fts5-fts5dosecuredelete"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119374","description":"SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer via crafted footer key offsets. Attackers can supply a database file with a corrupted FTS5 index that, when deleted from with secure-delete enabled, corrupts heap memory and crashes the application."},"relatedVulnerabilities":[]},{"artifact":{"id":"5b8a9495e4efe754","cpes":["cpe:2.3:a:busybox:busybox:1.37.0-r30:*:*:*:*:*:*:*"],"name":"busybox","purl":"pkg:apk/alpine/busybox@1.37.0-r30?arch=x86_64&distro=alpine-3.23.8","type":"apk","version":"1.37.0-r30","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/busybox"},{"path":"/etc"},{"path":"/etc/securetty"},{"path":"/etc/busybox-paths.d"},{"path":"/etc/busybox-paths.d/busybox"},{"path":"/etc/logrotate.d"},{"path":"/etc/logrotate.d/acpid"},{"path":"/etc/network"},{"path":"/etc/network/if-down.d"},{"path":"/etc/network/if-post-down.d"},{"path":"/etc/network/if-post-up.d"},{"path":"/etc/network/if-pre-down.d"},{"path":"/etc/network/if-pre-up.d"},{"path":"/etc/network/if-up.d"},{"path":"/etc/network/if-up.d/dad"},{"path":"/etc/udhcpc"},{"path":"/etc/udhcpc/udhcpc.conf"},{"path":"/sbin"},{"path":"/usr"},{"path":"/usr/sbin"},{"path":"/usr/share"},{"path":"/usr/share/udhcpc"},{"path":"/usr/share/udhcpc/default.script"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r30"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-11-12","epss":0.00312,"percentile":0.24431}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"3e88c98a595f91bf","cpes":["cpe:2.3:a:busybox-binsh:busybox-binsh:1.37.0-r30:*:*:*:*:*:*:*","cpe:2.3:a:busybox-binsh:busybox_binsh:1.37.0-r30:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox-binsh:1.37.0-r30:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox_binsh:1.37.0-r30:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox-binsh:1.37.0-r30:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox_binsh:1.37.0-r30:*:*:*:*:*:*:*"],"name":"busybox-binsh","purl":"pkg:apk/alpine/busybox-binsh@1.37.0-r30?arch=x86_64&distro=alpine-3.23.8&upstream=busybox","type":"apk","version":"1.37.0-r30","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/sh"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r30"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-11-12","epss":0.00312,"percentile":0.24431}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"70e62fc46b7f6a24","cpes":["cpe:2.3:a:ssl-client:ssl-client:1.37.0-r30:*:*:*:*:*:*:*","cpe:2.3:a:ssl-client:ssl_client:1.37.0-r30:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl-client:1.37.0-r30:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl_client:1.37.0-r30:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl-client:1.37.0-r30:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl_client:1.37.0-r30:*:*:*:*:*:*:*"],"name":"ssl_client","purl":"pkg:apk/alpine/ssl_client@1.37.0-r30?arch=x86_64&distro=alpine-3.23.8&upstream=busybox","type":"apk","version":"1.37.0-r30","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ssl_client"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r30"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-11-12","epss":0.00312,"percentile":0.24431}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"28d5db15190e922b","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.23.8&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119378","versionConstraint":"< 3.54.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119378","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119378","cwe":"CWE-416","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119378","date":"2026-11-12","epss":0.00251,"percentile":0.16587}],"risk":0.13993250000000002,"urls":["https://abraxaslabs.tech/research/sqlite-rtree-rowid0","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/rtree/rtree.c#L905","https://github.com/sqlite/sqlite/commit/d21bd37c7cfc1b85b17a6703555f0926b6236e04","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/6a9e1415659f9e75","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-use-after-free-in-r-tree-nodewrite"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119378","description":"SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed heap memory by manipulating the %_node shadow table. Attackers can supply a database declaring %_node WITHOUT ROWID or with a RAISE(IGNORE) trigger so nodeWrite() hashes nodes as 0, crashing the process after node splits."},"relatedVulnerabilities":[]},{"artifact":{"id":"8d6f32361002c027","cpes":["cpe:2.3:a:nghttp2-libs:nghttp2-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2-libs:nghttp2_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2_libs:nghttp2-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2_libs:nghttp2_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp-libs:nghttp2-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp-libs:nghttp2_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2-libs:nghttp-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2-libs:nghttp_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2_libs:nghttp-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2_libs:nghttp_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp_libs:nghttp2-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp_libs:nghttp2_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp-libs:nghttp-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp-libs:nghttp_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp_libs:nghttp-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp_libs:nghttp_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2:nghttp2-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2:nghttp2_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2:nghttp-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2:nghttp_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp:nghttp2-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp:nghttp2_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp:nghttp-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp:nghttp_libs:1.69.0-r0:*:*:*:*:*:*:*"],"name":"nghttp2-libs","purl":"pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=x86_64&distro=alpine-3.23.8&upstream=nghttp2","type":"apk","version":"1.69.0-r0","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libnghttp2.so.14"},{"path":"/usr/lib/libnghttp2.so.14.29.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nghttp2"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:nghttp2:nghttp2:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-58055","versionConstraint":"<= 1.69.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:nghttp2:nghttp2:1.69.0:*:*:*:*:*:*:*"],"package":{"name":"nghttp2","version":"1.69.0-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-58055","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58055","cwe":"CWE-444","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58055","date":"2026-11-12","epss":0.00253,"percentile":0.16972}],"risk":0.1372525,"urls":["https://github.com/bikini/exploitarium/tree/main/nghttp2-nghttpx-upgrade-queue-poison-poc","https://github.com/nghttp2/nghttp2/commit/ab28105c4a0197da24f8bfc414bc116055249e1e","https://www.vulncheck.com/advisories/nghttp2-nghttpx-http-request-response-smuggling-via-upgrade-request-with-content-length"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58055","description":"nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and body onto reusable keep-alive backend connections, re-adding the Upgrade and Connection headers while passing Content-Length verbatim. A backend that resolves the resulting ambiguous message in the attacker's favor enables HTTP request/response smuggling and cross-client response-queue poisoning."},"relatedVulnerabilities":[]},{"artifact":{"id":"09327264ca577f0a","cpes":["cpe:2.3:a:python-software-foundation:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software_foundation:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software-foundation:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software_foundation:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python3:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.16-r0:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:apk/alpine/python3@3.12.16-r0?arch=x86_64&distro=alpine-3.23.8","type":"apk","version":"3.12.16-r0","language":"","licenses":["PSF-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/2to3"},{"path":"/usr/bin/2to3-3.12"},{"path":"/usr/bin/pydoc3"},{"path":"/usr/bin/pydoc3.12"},{"path":"/usr/bin/python"},{"path":"/usr/bin/python3"},{"path":"/usr/bin/python3.12"},{"path":"/usr/include"},{"path":"/usr/include/python3.12"},{"path":"/usr/include/python3.12/pyconfig.h"},{"path":"/usr/lib"},{"path":"/usr/lib/libpython3.12.so.1.0"},{"path":"/usr/lib/libpython3.so"},{"path":"/usr/lib/python3.12"},{"path":"/usr/lib/python3.12/EXTERNALLY-MANAGED"},{"path":"/usr/lib/python3.12/LICENSE.txt"},{"path":"/usr/lib/python3.12/__future__.py"},{"path":"/usr/lib/python3.12/__hello__.py"},{"path":"/usr/lib/python3.12/_aix_support.py"},{"path":"/usr/lib/python3.12/_collections_abc.py"},{"path":"/usr/lib/python3.12/_compat_pickle.py"},{"path":"/usr/lib/python3.12/_compression.py"},{"path":"/usr/lib/python3.12/_markupbase.py"},{"path":"/usr/lib/python3.12/_osx_support.py"},{"path":"/usr/lib/python3.12/_py_abc.py"},{"path":"/usr/lib/python3.12/_pydatetime.py"},{"path":"/usr/lib/python3.12/_pydecimal.py"},{"path":"/usr/lib/python3.12/_pyio.py"},{"path":"/usr/lib/python3.12/_pylong.py"},{"path":"/usr/lib/python3.12/_sitebuiltins.py"},{"path":"/usr/lib/python3.12/_strptime.py"},{"path":"/usr/lib/python3.12/_sysconfigdata__linux_x86_64-linux-musl.py"},{"path":"/usr/lib/python3.12/_threading_local.py"},{"path":"/usr/lib/python3.12/_weakrefset.py"},{"path":"/usr/lib/python3.12/abc.py"},{"path":"/usr/lib/python3.12/aifc.py"},{"path":"/usr/lib/python3.12/antigravity.py"},{"path":"/usr/lib/python3.12/argparse.py"},{"path":"/usr/lib/python3.12/ast.py"},{"path":"/usr/lib/python3.12/base64.py"},{"path":"/usr/lib/python3.12/bdb.py"},{"path":"/usr/lib/python3.12/bisect.py"},{"path":"/usr/lib/python3.12/bz2.py"},{"path":"/usr/lib/python3.12/cProfile.py"},{"path":"/usr/lib/python3.12/calendar.py"},{"path":"/usr/lib/python3.12/cgi.py"},{"path":"/usr/lib/python3.12/cgitb.py"},{"path":"/usr/lib/python3.12/chunk.py"},{"path":"/usr/lib/python3.12/cmd.py"},{"path":"/usr/lib/python3.12/code.py"},{"path":"/usr/lib/python3.12/codecs.py"},{"path":"/usr/lib/python3.12/codeop.py"},{"path":"/usr/lib/python3.12/colorsys.py"},{"path":"/usr/lib/python3.12/compileall.py"},{"path":"/usr/lib/python3.12/configparser.py"},{"path":"/usr/lib/python3.12/contextlib.py"},{"path":"/usr/lib/python3.12/contextvars.py"},{"path":"/usr/lib/python3.12/copy.py"},{"path":"/usr/lib/python3.12/copyreg.py"},{"path":"/usr/lib/python3.12/crypt.py"},{"path":"/usr/lib/python3.12/csv.py"},{"path":"/usr/lib/python3.12/dataclasses.py"},{"path":"/usr/lib/python3.12/datetime.py"},{"path":"/usr/lib/python3.12/decimal.py"},{"path":"/usr/lib/python3.12/difflib.py"},{"path":"/usr/lib/python3.12/dis.py"},{"path":"/usr/lib/python3.12/doctest.py"},{"path":"/usr/lib/python3.12/enum.py"},{"path":"/usr/lib/python3.12/filecmp.py"},{"path":"/usr/lib/python3.12/fileinput.py"},{"path":"/usr/lib/python3.12/fnmatch.py"},{"path":"/usr/lib/python3.12/fractions.py"},{"path":"/usr/lib/python3.12/ftplib.py"},{"path":"/usr/lib/python3.12/functools.py"},{"path":"/usr/lib/python3.12/genericpath.py"},{"path":"/usr/lib/python3.12/getopt.py"},{"path":"/usr/lib/python3.12/getpass.py"},{"path":"/usr/lib/python3.12/gettext.py"},{"path":"/usr/lib/python3.12/glob.py"},{"path":"/usr/lib/python3.12/graphlib.py"},{"path":"/usr/lib/python3.12/gzip.py"},{"path":"/usr/lib/python3.12/hashlib.py"},{"path":"/usr/lib/python3.12/heapq.py"},{"path":"/usr/lib/python3.12/hmac.py"},{"path":"/usr/lib/python3.12/imaplib.py"},{"path":"/usr/lib/python3.12/imghdr.py"},{"path":"/usr/lib/python3.12/inspect.py"},{"path":"/usr/lib/python3.12/io.py"},{"path":"/usr/lib/python3.12/ipaddress.py"},{"path":"/usr/lib/python3.12/keyword.py"},{"path":"/usr/lib/python3.12/linecache.py"},{"path":"/usr/lib/python3.12/locale.py"},{"path":"/usr/lib/python3.12/lzma.py"},{"path":"/usr/lib/python3.12/mailbox.py"},{"path":"/usr/lib/python3.12/mailcap.py"},{"path":"/usr/lib/python3.12/mimetypes.py"},{"path":"/usr/lib/python3.12/modulefinder.py"},{"path":"/usr/lib/python3.12/netrc.py"},{"path":"/usr/lib/python3.12/nntplib.py"},{"path":"/usr/lib/python3.12/ntpath.py"},{"path":"/usr/lib/python3.12/nturl2path.py"},{"path":"/usr/lib/python3.12/numbers.py"},{"path":"/usr/lib/python3.12/opcode.py"},{"path":"/usr/lib/python3.12/operator.py"},{"path":"/usr/lib/python3.12/optparse.py"},{"path":"/usr/lib/python3.12/os.py"},{"path":"/usr/lib/python3.12/pathlib.py"},{"path":"/usr/lib/python3.12/pdb.py"},{"path":"/usr/lib/python3.12/pickle.py"},{"path":"/usr/lib/python3.12/pickletools.py"},{"path":"/usr/lib/python3.12/pipes.py"},{"path":"/usr/lib/python3.12/pkgutil.py"},{"path":"/usr/lib/python3.12/platform.py"},{"path":"/usr/lib/python3.12/plistlib.py"},{"path":"/usr/lib/python3.12/poplib.py"},{"path":"/usr/lib/python3.12/posixpath.py"},{"path":"/usr/lib/python3.12/pprint.py"},{"path":"/usr/lib/python3.12/profile.py"},{"path":"/usr/lib/python3.12/pstats.py"},{"path":"/usr/lib/python3.12/pty.py"},{"path":"/usr/lib/python3.12/py_compile.py"},{"path":"/usr/lib/python3.12/pyclbr.py"},{"path":"/usr/lib/python3.12/pydoc.py"},{"path":"/usr/lib/python3.12/queue.py"},{"path":"/usr/lib/python3.12/quopri.py"},{"path":"/usr/lib/python3.12/random.py"},{"path":"/usr/lib/python3.12/reprlib.py"},{"path":"/usr/lib/python3.12/rlcompleter.py"},{"path":"/usr/lib/python3.12/runpy.py"},{"path":"/usr/lib/python3.12/sched.py"},{"path":"/usr/lib/python3.12/secrets.py"},{"path":"/usr/lib/python3.12/selectors.py"},{"path":"/usr/lib/python3.12/shelve.py"},{"path":"/usr/lib/python3.12/shlex.py"},{"path":"/usr/lib/python3.12/shutil.py"},{"path":"/usr/lib/python3.12/signal.py"},{"path":"/usr/lib/python3.12/site.py"},{"path":"/usr/lib/python3.12/smtplib.py"},{"path":"/usr/lib/python3.12/sndhdr.py"},{"path":"/usr/lib/python3.12/socket.py"},{"path":"/usr/lib/python3.12/socketserver.py"},{"path":"/usr/lib/python3.12/sre_compile.py"},{"path":"/usr/lib/python3.12/sre_constants.py"},{"path":"/usr/lib/python3.12/sre_parse.py"},{"path":"/usr/lib/python3.12/ssl.py"},{"path":"/usr/lib/python3.12/stat.py"},{"path":"/usr/lib/python3.12/statistics.py"},{"path":"/usr/lib/python3.12/string.py"},{"path":"/usr/lib/python3.12/stringprep.py"},{"path":"/usr/lib/python3.12/struct.py"},{"path":"/usr/lib/python3.12/subprocess.py"},{"path":"/usr/lib/python3.12/sunau.py"},{"path":"/usr/lib/python3.12/symtable.py"},{"path":"/usr/lib/python3.12/sysconfig.py"},{"path":"/usr/lib/python3.12/tabnanny.py"},{"path":"/usr/lib/python3.12/tarfile.py"},{"path":"/usr/lib/python3.12/telnetlib.py"},{"path":"/usr/lib/python3.12/tempfile.py"},{"path":"/usr/lib/python3.12/textwrap.py"},{"path":"/usr/lib/python3.12/this.py"},{"path":"/usr/lib/python3.12/threading.py"},{"path":"/usr/lib/python3.12/timeit.py"},{"path":"/usr/lib/python3.12/token.py"},{"path":"/usr/lib/python3.12/tokenize.py"},{"path":"/usr/lib/python3.12/trace.py"},{"path":"/usr/lib/python3.12/traceback.py"},{"path":"/usr/lib/python3.12/tracemalloc.py"},{"path":"/usr/lib/python3.12/tty.py"},{"path":"/usr/lib/python3.12/turtle.py"},{"path":"/usr/lib/python3.12/types.py"},{"path":"/usr/lib/python3.12/typing.py"},{"path":"/usr/lib/python3.12/uu.py"},{"path":"/usr/lib/python3.12/uuid.py"},{"path":"/usr/lib/python3.12/warnings.py"},{"path":"/usr/lib/python3.12/wave.py"},{"path":"/usr/lib/python3.12/weakref.py"},{"path":"/usr/lib/python3.12/webbrowser.py"},{"path":"/usr/lib/python3.12/xdrlib.py"},{"path":"/usr/lib/python3.12/zipapp.py"},{"path":"/usr/lib/python3.12/zipimport.py"},{"path":"/usr/lib/python3.12/__phello__"},{"path":"/usr/lib/python3.12/__phello__/__init__.py"},{"path":"/usr/lib/python3.12/__phello__/spam.py"},{"path":"/usr/lib/python3.12/asyncio"},{"path":"/usr/lib/python3.12/asyncio/__init__.py"},{"path":"/usr/lib/python3.12/asyncio/__main__.py"},{"path":"/usr/lib/python3.12/asyncio/base_events.py"},{"path":"/usr/lib/python3.12/asyncio/base_futures.py"},{"path":"/usr/lib/python3.12/asyncio/base_subprocess.py"},{"path":"/usr/lib/python3.12/asyncio/base_tasks.py"},{"path":"/usr/lib/python3.12/asyncio/constants.py"},{"path":"/usr/lib/python3.12/asyncio/coroutines.py"},{"path":"/usr/lib/python3.12/asyncio/events.py"},{"path":"/usr/lib/python3.12/asyncio/exceptions.py"},{"path":"/usr/lib/python3.12/asyncio/format_helpers.py"},{"path":"/usr/lib/python3.12/asyncio/futures.py"},{"path":"/usr/lib/python3.12/asyncio/locks.py"},{"path":"/usr/lib/python3.12/asyncio/log.py"},{"path":"/usr/lib/python3.12/asyncio/mixins.py"},{"path":"/usr/lib/python3.12/asyncio/proactor_events.py"},{"path":"/usr/lib/python3.12/asyncio/protocols.py"},{"path":"/usr/lib/python3.12/asyncio/queues.py"},{"path":"/usr/lib/python3.12/asyncio/runners.py"},{"path":"/usr/lib/python3.12/asyncio/selector_events.py"},{"path":"/usr/lib/python3.12/asyncio/sslproto.py"},{"path":"/usr/lib/python3.12/asyncio/staggered.py"},{"path":"/usr/lib/python3.12/asyncio/streams.py"},{"path":"/usr/lib/python3.12/asyncio/subprocess.py"},{"path":"/usr/lib/python3.12/asyncio/taskgroups.py"},{"path":"/usr/lib/python3.12/asyncio/tasks.py"},{"path":"/usr/lib/python3.12/asyncio/threads.py"},{"path":"/usr/lib/python3.12/asyncio/timeouts.py"},{"path":"/usr/lib/python3.12/asyncio/transports.py"},{"path":"/usr/lib/python3.12/asyncio/trsock.py"},{"path":"/usr/lib/python3.12/asyncio/unix_events.py"},{"path":"/usr/lib/python3.12/asyncio/windows_events.py"},{"path":"/usr/lib/python3.12/asyncio/windows_utils.py"},{"path":"/usr/lib/python3.12/collections"},{"path":"/usr/lib/python3.12/collections/__init__.py"},{"path":"/usr/lib/python3.12/collections/abc.py"},{"path":"/usr/lib/python3.12/concurrent"},{"path":"/usr/lib/python3.12/concurrent/__init__.py"},{"path":"/usr/lib/python3.12/concurrent/futures"},{"path":"/usr/lib/python3.12/concurrent/futures/__init__.py"},{"path":"/usr/lib/python3.12/concurrent/futures/_base.py"},{"path":"/usr/lib/python3.12/concurrent/futures/process.py"},{"path":"/usr/lib/python3.12/concurrent/futures/thread.py"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Makefile"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.bootstrap"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.local"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.stdlib"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/config.c.in"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/install-sh"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/makesetup"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/python-config.py"},{"path":"/usr/lib/python3.12/ctypes"},{"path":"/usr/lib/python3.12/ctypes/__init__.py"},{"path":"/usr/lib/python3.12/ctypes/_aix.py"},{"path":"/usr/lib/python3.12/ctypes/_endian.py"},{"path":"/usr/lib/python3.12/ctypes/util.py"},{"path":"/usr/lib/python3.12/ctypes/wintypes.py"},{"path":"/usr/lib/python3.12/ctypes/macholib"},{"path":"/usr/lib/python3.12/ctypes/macholib/README.ctypes"},{"path":"/usr/lib/python3.12/ctypes/macholib/__init__.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/dyld.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/dylib.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/fetch_macholib"},{"path":"/usr/lib/python3.12/ctypes/macholib/fetch_macholib.bat"},{"path":"/usr/lib/python3.12/ctypes/macholib/framework.py"},{"path":"/usr/lib/python3.12/curses"},{"path":"/usr/lib/python3.12/curses/__init__.py"},{"path":"/usr/lib/python3.12/curses/ascii.py"},{"path":"/usr/lib/python3.12/curses/has_key.py"},{"path":"/usr/lib/python3.12/curses/panel.py"},{"path":"/usr/lib/python3.12/curses/textpad.py"},{"path":"/usr/lib/python3.12/dbm"},{"path":"/usr/lib/python3.12/dbm/__init__.py"},{"path":"/usr/lib/python3.12/dbm/dumb.py"},{"path":"/usr/lib/python3.12/dbm/gnu.py"},{"path":"/usr/lib/python3.12/dbm/ndbm.py"},{"path":"/usr/lib/python3.12/email"},{"path":"/usr/lib/python3.12/email/__init__.py"},{"path":"/usr/lib/python3.12/email/_encoded_words.py"},{"path":"/usr/lib/python3.12/email/_header_value_parser.py"},{"path":"/usr/lib/python3.12/email/_parseaddr.py"},{"path":"/usr/lib/python3.12/email/_policybase.py"},{"path":"/usr/lib/python3.12/email/architecture.rst"},{"path":"/usr/lib/python3.12/email/base64mime.py"},{"path":"/usr/lib/python3.12/email/charset.py"},{"path":"/usr/lib/python3.12/email/contentmanager.py"},{"path":"/usr/lib/python3.12/email/encoders.py"},{"path":"/usr/lib/python3.12/email/errors.py"},{"path":"/usr/lib/python3.12/email/feedparser.py"},{"path":"/usr/lib/python3.12/email/generator.py"},{"path":"/usr/lib/python3.12/email/header.py"},{"path":"/usr/lib/python3.12/email/headerregistry.py"},{"path":"/usr/lib/python3.12/email/iterators.py"},{"path":"/usr/lib/python3.12/email/message.py"},{"path":"/usr/lib/python3.12/email/parser.py"},{"path":"/usr/lib/python3.12/email/policy.py"},{"path":"/usr/lib/python3.12/email/quoprimime.py"},{"path":"/usr/lib/python3.12/email/utils.py"},{"path":"/usr/lib/python3.12/email/mime"},{"path":"/usr/lib/python3.12/email/mime/__init__.py"},{"path":"/usr/lib/python3.12/email/mime/application.py"},{"path":"/usr/lib/python3.12/email/mime/audio.py"},{"path":"/usr/lib/python3.12/email/mime/base.py"},{"path":"/usr/lib/python3.12/email/mime/image.py"},{"path":"/usr/lib/python3.12/email/mime/message.py"},{"path":"/usr/lib/python3.12/email/mime/multipart.py"},{"path":"/usr/lib/python3.12/email/mime/nonmultipart.py"},{"path":"/usr/lib/python3.12/email/mime/text.py"},{"path":"/usr/lib/python3.12/encodings"},{"path":"/usr/lib/python3.12/encodings/__init__.py"},{"path":"/usr/lib/python3.12/encodings/aliases.py"},{"path":"/usr/lib/python3.12/encodings/ascii.py"},{"path":"/usr/lib/python3.12/encodings/base64_codec.py"},{"path":"/usr/lib/python3.12/encodings/big5.py"},{"path":"/usr/lib/python3.12/encodings/big5hkscs.py"},{"path":"/usr/lib/python3.12/encodings/bz2_codec.py"},{"path":"/usr/lib/python3.12/encodings/charmap.py"},{"path":"/usr/lib/python3.12/encodings/cp037.py"},{"path":"/usr/lib/python3.12/encodings/cp1006.py"},{"path":"/usr/lib/python3.12/encodings/cp1026.py"},{"path":"/usr/lib/python3.12/encodings/cp1125.py"},{"path":"/usr/lib/python3.12/encodings/cp1140.py"},{"path":"/usr/lib/python3.12/encodings/cp1250.py"},{"path":"/usr/lib/python3.12/encodings/cp1251.py"},{"path":"/usr/lib/python3.12/encodings/cp1252.py"},{"path":"/usr/lib/python3.12/encodings/cp1253.py"},{"path":"/usr/lib/python3.12/encodings/cp1254.py"},{"path":"/usr/lib/python3.12/encodings/cp1255.py"},{"path":"/usr/lib/python3.12/encodings/cp1256.py"},{"path":"/usr/lib/python3.12/encodings/cp1257.py"},{"path":"/usr/lib/python3.12/encodings/cp1258.py"},{"path":"/usr/lib/python3.12/encodings/cp273.py"},{"path":"/usr/lib/python3.12/encodings/cp424.py"},{"path":"/usr/lib/python3.12/encodings/cp437.py"},{"path":"/usr/lib/python3.12/encodings/cp500.py"},{"path":"/usr/lib/python3.12/encodings/cp720.py"},{"path":"/usr/lib/python3.12/encodings/cp737.py"},{"path":"/usr/lib/python3.12/encodings/cp775.py"},{"path":"/usr/lib/python3.12/encodings/cp850.py"},{"path":"/usr/lib/python3.12/encodings/cp852.py"},{"path":"/usr/lib/python3.12/encodings/cp855.py"},{"path":"/usr/lib/python3.12/encodings/cp856.py"},{"path":"/usr/lib/python3.12/encodings/cp857.py"},{"path":"/usr/lib/python3.12/encodings/cp858.py"},{"path":"/usr/lib/python3.12/encodings/cp860.py"},{"path":"/usr/lib/python3.12/encodings/cp861.py"},{"path":"/usr/lib/python3.12/encodings/cp862.py"},{"path":"/usr/lib/python3.12/encodings/cp863.py"},{"path":"/usr/lib/python3.12/encodings/cp864.py"},{"path":"/usr/lib/python3.12/encodings/cp865.py"},{"path":"/usr/lib/python3.12/encodings/cp866.py"},{"path":"/usr/lib/python3.12/encodings/cp869.py"},{"path":"/usr/lib/python3.12/encodings/cp874.py"},{"path":"/usr/lib/python3.12/encodings/cp875.py"},{"path":"/usr/lib/python3.12/encodings/cp932.py"},{"path":"/usr/lib/python3.12/encodings/cp949.py"},{"path":"/usr/lib/python3.12/encodings/cp950.py"},{"path":"/usr/lib/python3.12/encodings/euc_jis_2004.py"},{"path":"/usr/lib/python3.12/encodings/euc_jisx0213.py"},{"path":"/usr/lib/python3.12/encodings/euc_jp.py"},{"path":"/usr/lib/python3.12/encodings/euc_kr.py"},{"path":"/usr/lib/python3.12/encodings/gb18030.py"},{"path":"/usr/lib/python3.12/encodings/gb2312.py"},{"path":"/usr/lib/python3.12/encodings/gbk.py"},{"path":"/usr/lib/python3.12/encodings/hex_codec.py"},{"path":"/usr/lib/python3.12/encodings/hp_roman8.py"},{"path":"/usr/lib/python3.12/encodings/hz.py"},{"path":"/usr/lib/python3.12/encodings/idna.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_1.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_2.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_2004.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_3.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_ext.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_kr.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_1.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_10.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_11.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_13.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_14.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_15.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_16.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_2.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_3.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_4.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_5.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_6.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_7.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_8.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_9.py"},{"path":"/usr/lib/python3.12/encodings/johab.py"},{"path":"/usr/lib/python3.12/encodings/koi8_r.py"},{"path":"/usr/lib/python3.12/encodings/koi8_t.py"},{"path":"/usr/lib/python3.12/encodings/koi8_u.py"},{"path":"/usr/lib/python3.12/encodings/kz1048.py"},{"path":"/usr/lib/python3.12/encodings/latin_1.py"},{"path":"/usr/lib/python3.12/encodings/mac_arabic.py"},{"path":"/usr/lib/python3.12/encodings/mac_croatian.py"},{"path":"/usr/lib/python3.12/encodings/mac_cyrillic.py"},{"path":"/usr/lib/python3.12/encodings/mac_farsi.py"},{"path":"/usr/lib/python3.12/encodings/mac_greek.py"},{"path":"/usr/lib/python3.12/encodings/mac_iceland.py"},{"path":"/usr/lib/python3.12/encodings/mac_latin2.py"},{"path":"/usr/lib/python3.12/encodings/mac_roman.py"},{"path":"/usr/lib/python3.12/encodings/mac_romanian.py"},{"path":"/usr/lib/python3.12/encodings/mac_turkish.py"},{"path":"/usr/lib/python3.12/encodings/mbcs.py"},{"path":"/usr/lib/python3.12/encodings/oem.py"},{"path":"/usr/lib/python3.12/encodings/palmos.py"},{"path":"/usr/lib/python3.12/encodings/ptcp154.py"},{"path":"/usr/lib/python3.12/encodings/punycode.py"},{"path":"/usr/lib/python3.12/encodings/quopri_codec.py"},{"path":"/usr/lib/python3.12/encodings/raw_unicode_escape.py"},{"path":"/usr/lib/python3.12/encodings/rot_13.py"},{"path":"/usr/lib/python3.12/encodings/shift_jis.py"},{"path":"/usr/lib/python3.12/encodings/shift_jis_2004.py"},{"path":"/usr/lib/python3.12/encodings/shift_jisx0213.py"},{"path":"/usr/lib/python3.12/encodings/tis_620.py"},{"path":"/usr/lib/python3.12/encodings/undefined.py"},{"path":"/usr/lib/python3.12/encodings/unicode_escape.py"},{"path":"/usr/lib/python3.12/encodings/utf_16.py"},{"path":"/usr/lib/python3.12/encodings/utf_16_be.py"},{"path":"/usr/lib/python3.12/encodings/utf_16_le.py"},{"path":"/usr/lib/python3.12/encodings/utf_32.py"},{"path":"/usr/lib/python3.12/encodings/utf_32_be.py"},{"path":"/usr/lib/python3.12/encodings/utf_32_le.py"},{"path":"/usr/lib/python3.12/encodings/utf_7.py"},{"path":"/usr/lib/python3.12/encodings/utf_8.py"},{"path":"/usr/lib/python3.12/encodings/utf_8_sig.py"},{"path":"/usr/lib/python3.12/encodings/uu_codec.py"},{"path":"/usr/lib/python3.12/encodings/zlib_codec.py"},{"path":"/usr/lib/python3.12/ensurepip"},{"path":"/usr/lib/python3.12/ensurepip/__init__.py"},{"path":"/usr/lib/python3.12/ensurepip/__main__.py"},{"path":"/usr/lib/python3.12/ensurepip/_uninstall.py"},{"path":"/usr/lib/python3.12/ensurepip/_bundled"},{"path":"/usr/lib/python3.12/ensurepip/_bundled/pip-25.0.1-py3-none-any.whl"},{"path":"/usr/lib/python3.12/html"},{"path":"/usr/lib/python3.12/html/__init__.py"},{"path":"/usr/lib/python3.12/html/entities.py"},{"path":"/usr/lib/python3.12/html/parser.py"},{"path":"/usr/lib/python3.12/http"},{"path":"/usr/lib/python3.12/http/__init__.py"},{"path":"/usr/lib/python3.12/http/client.py"},{"path":"/usr/lib/python3.12/http/cookiejar.py"},{"path":"/usr/lib/python3.12/http/cookies.py"},{"path":"/usr/lib/python3.12/http/server.py"},{"path":"/usr/lib/python3.12/importlib"},{"path":"/usr/lib/python3.12/importlib/__init__.py"},{"path":"/usr/lib/python3.12/importlib/_abc.py"},{"path":"/usr/lib/python3.12/importlib/_bootstrap.py"},{"path":"/usr/lib/python3.12/importlib/_bootstrap_external.py"},{"path":"/usr/lib/python3.12/importlib/abc.py"},{"path":"/usr/lib/python3.12/importlib/machinery.py"},{"path":"/usr/lib/python3.12/importlib/readers.py"},{"path":"/usr/lib/python3.12/importlib/simple.py"},{"path":"/usr/lib/python3.12/importlib/util.py"},{"path":"/usr/lib/python3.12/importlib/metadata"},{"path":"/usr/lib/python3.12/importlib/metadata/__init__.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_adapters.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_collections.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_functools.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_itertools.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_meta.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_text.py"},{"path":"/usr/lib/python3.12/importlib/resources"},{"path":"/usr/lib/python3.12/importlib/resources/__init__.py"},{"path":"/usr/lib/python3.12/importlib/resources/_adapters.py"},{"path":"/usr/lib/python3.12/importlib/resources/_common.py"},{"path":"/usr/lib/python3.12/importlib/resources/_itertools.py"},{"path":"/usr/lib/python3.12/importlib/resources/_legacy.py"},{"path":"/usr/lib/python3.12/importlib/resources/abc.py"},{"path":"/usr/lib/python3.12/importlib/resources/readers.py"},{"path":"/usr/lib/python3.12/importlib/resources/simple.py"},{"path":"/usr/lib/python3.12/json"},{"path":"/usr/lib/python3.12/json/__init__.py"},{"path":"/usr/lib/python3.12/json/decoder.py"},{"path":"/usr/lib/python3.12/json/encoder.py"},{"path":"/usr/lib/python3.12/json/scanner.py"},{"path":"/usr/lib/python3.12/json/tool.py"},{"path":"/usr/lib/python3.12/lib-dynload"},{"path":"/usr/lib/python3.12/lib-dynload/_asyncio.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_bisect.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_blake2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_bz2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_cn.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_hk.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_iso2022.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_jp.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_kr.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_tw.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_contextvars.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_crypt.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_csv.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ctypes.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ctypes_test.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_curses.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_curses_panel.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_datetime.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_dbm.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_decimal.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_elementtree.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_hashlib.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_heapq.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_json.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_lsprof.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_lzma.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_md5.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_multibytecodec.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_multiprocessing.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_opcode.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_pickle.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_posixshmem.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_posixsubprocess.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_queue.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_random.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha1.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha3.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_socket.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sqlite3.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ssl.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_statistics.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_struct.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testbuffer.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testcapi.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testclinic.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testimportmultiple.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testinternalcapi.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testmultiphase.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testsinglephase.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxinterpchannels.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxsubinterpreters.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxtestfuzz.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_zoneinfo.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/array.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/audioop.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/binascii.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/cmath.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/fcntl.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/grp.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/math.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/mmap.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/ossaudiodev.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/pyexpat.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/readline.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/resource.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/select.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/spwd.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/syslog.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/termios.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/unicodedata.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxlimited.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxlimited_35.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxsubtype.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/zlib.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib2to3"},{"path":"/usr/lib/python3.12/lib2to3/Grammar.txt"},{"path":"/usr/lib/python3.12/lib2to3/Grammar3.12.16.final.0.pickle"},{"path":"/usr/lib/python3.12/lib2to3/PatternGrammar.txt"},{"path":"/usr/lib/python3.12/lib2to3/PatternGrammar3.12.16.final.0.pickle"},{"path":"/usr/lib/python3.12/lib2to3/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/__main__.py"},{"path":"/usr/lib/python3.12/lib2to3/btm_matcher.py"},{"path":"/usr/lib/python3.12/lib2to3/btm_utils.py"},{"path":"/usr/lib/python3.12/lib2to3/fixer_base.py"},{"path":"/usr/lib/python3.12/lib2to3/fixer_util.py"},{"path":"/usr/lib/python3.12/lib2to3/main.py"},{"path":"/usr/lib/python3.12/lib2to3/patcomp.py"},{"path":"/usr/lib/python3.12/lib2to3/pygram.py"},{"path":"/usr/lib/python3.12/lib2to3/pytree.py"},{"path":"/usr/lib/python3.12/lib2to3/refactor.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes"},{"path":"/usr/lib/python3.12/lib2to3/fixes/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_apply.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_asserts.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_basestring.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_buffer.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_dict.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_except.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_exec.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_execfile.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_exitfunc.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_filter.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_funcattrs.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_future.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_getcwdu.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_has_key.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_idioms.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_import.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_imports.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_imports2.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_input.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_intern.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_isinstance.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_itertools.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_itertools_imports.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_long.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_map.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_metaclass.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_methodattrs.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_ne.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_next.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_nonzero.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_numliterals.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_operator.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_paren.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_print.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_raise.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_raw_input.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_reduce.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_reload.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_renames.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_repr.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_set_literal.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_standarderror.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_sys_exc.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_throw.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_tuple_params.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_types.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_unicode.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_urllib.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_ws_comma.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_xrange.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_xreadlines.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_zip.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/conv.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/driver.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/grammar.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/literals.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/parse.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/pgen.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/token.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/tokenize.py"},{"path":"/usr/lib/python3.12/logging"},{"path":"/usr/lib/python3.12/logging/__init__.py"},{"path":"/usr/lib/python3.12/logging/config.py"},{"path":"/usr/lib/python3.12/logging/handlers.py"},{"path":"/usr/lib/python3.12/multiprocessing"},{"path":"/usr/lib/python3.12/multiprocessing/__init__.py"},{"path":"/usr/lib/python3.12/multiprocessing/connection.py"},{"path":"/usr/lib/python3.12/multiprocessing/context.py"},{"path":"/usr/lib/python3.12/multiprocessing/forkserver.py"},{"path":"/usr/lib/python3.12/multiprocessing/heap.py"},{"path":"/usr/lib/python3.12/multiprocessing/managers.py"},{"path":"/usr/lib/python3.12/multiprocessing/pool.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_fork.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_forkserver.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_spawn_posix.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_spawn_win32.py"},{"path":"/usr/lib/python3.12/multiprocessing/process.py"},{"path":"/usr/lib/python3.12/multiprocessing/queues.py"},{"path":"/usr/lib/python3.12/multiprocessing/reduction.py"},{"path":"/usr/lib/python3.12/multiprocessing/resource_sharer.py"},{"path":"/usr/lib/python3.12/multiprocessing/resource_tracker.py"},{"path":"/usr/lib/python3.12/multiprocessing/shared_memory.py"},{"path":"/usr/lib/python3.12/multiprocessing/sharedctypes.py"},{"path":"/usr/lib/python3.12/multiprocessing/spawn.py"},{"path":"/usr/lib/python3.12/multiprocessing/synchronize.py"},{"path":"/usr/lib/python3.12/multiprocessing/util.py"},{"path":"/usr/lib/python3.12/multiprocessing/dummy"},{"path":"/usr/lib/python3.12/multiprocessing/dummy/__init__.py"},{"path":"/usr/lib/python3.12/multiprocessing/dummy/connection.py"},{"path":"/usr/lib/python3.12/pydoc_data"},{"path":"/usr/lib/python3.12/pydoc_data/__init__.py"},{"path":"/usr/lib/python3.12/pydoc_data/_pydoc.css"},{"path":"/usr/lib/python3.12/pydoc_data/topics.py"},{"path":"/usr/lib/python3.12/re"},{"path":"/usr/lib/python3.12/re/__init__.py"},{"path":"/usr/lib/python3.12/re/_casefix.py"},{"path":"/usr/lib/python3.12/re/_compiler.py"},{"path":"/usr/lib/python3.12/re/_constants.py"},{"path":"/usr/lib/python3.12/re/_parser.py"},{"path":"/usr/lib/python3.12/site-packages"},{"path":"/usr/lib/python3.12/site-packages/README.txt"},{"path":"/usr/lib/python3.12/sqlite3"},{"path":"/usr/lib/python3.12/sqlite3/__init__.py"},{"path":"/usr/lib/python3.12/sqlite3/__main__.py"},{"path":"/usr/lib/python3.12/sqlite3/dbapi2.py"},{"path":"/usr/lib/python3.12/sqlite3/dump.py"},{"path":"/usr/lib/python3.12/tomllib"},{"path":"/usr/lib/python3.12/tomllib/__init__.py"},{"path":"/usr/lib/python3.12/tomllib/_parser.py"},{"path":"/usr/lib/python3.12/tomllib/_re.py"},{"path":"/usr/lib/python3.12/tomllib/_types.py"},{"path":"/usr/lib/python3.12/turtledemo"},{"path":"/usr/lib/python3.12/turtledemo/__init__.py"},{"path":"/usr/lib/python3.12/turtledemo/__main__.py"},{"path":"/usr/lib/python3.12/turtledemo/bytedesign.py"},{"path":"/usr/lib/python3.12/turtledemo/chaos.py"},{"path":"/usr/lib/python3.12/turtledemo/clock.py"},{"path":"/usr/lib/python3.12/turtledemo/colormixer.py"},{"path":"/usr/lib/python3.12/turtledemo/forest.py"},{"path":"/usr/lib/python3.12/turtledemo/fractalcurves.py"},{"path":"/usr/lib/python3.12/turtledemo/lindenmayer.py"},{"path":"/usr/lib/python3.12/turtledemo/minimal_hanoi.py"},{"path":"/usr/lib/python3.12/turtledemo/nim.py"},{"path":"/usr/lib/python3.12/turtledemo/paint.py"},{"path":"/usr/lib/python3.12/turtledemo/peace.py"},{"path":"/usr/lib/python3.12/turtledemo/penrose.py"},{"path":"/usr/lib/python3.12/turtledemo/planet_and_moon.py"},{"path":"/usr/lib/python3.12/turtledemo/rosette.py"},{"path":"/usr/lib/python3.12/turtledemo/round_dance.py"},{"path":"/usr/lib/python3.12/turtledemo/sorting_animate.py"},{"path":"/usr/lib/python3.12/turtledemo/tree.py"},{"path":"/usr/lib/python3.12/turtledemo/turtle.cfg"},{"path":"/usr/lib/python3.12/turtledemo/two_canvases.py"},{"path":"/usr/lib/python3.12/turtledemo/yinyang.py"},{"path":"/usr/lib/python3.12/unittest"},{"path":"/usr/lib/python3.12/unittest/__init__.py"},{"path":"/usr/lib/python3.12/unittest/__main__.py"},{"path":"/usr/lib/python3.12/unittest/_log.py"},{"path":"/usr/lib/python3.12/unittest/async_case.py"},{"path":"/usr/lib/python3.12/unittest/case.py"},{"path":"/usr/lib/python3.12/unittest/loader.py"},{"path":"/usr/lib/python3.12/unittest/main.py"},{"path":"/usr/lib/python3.12/unittest/mock.py"},{"path":"/usr/lib/python3.12/unittest/result.py"},{"path":"/usr/lib/python3.12/unittest/runner.py"},{"path":"/usr/lib/python3.12/unittest/signals.py"},{"path":"/usr/lib/python3.12/unittest/suite.py"},{"path":"/usr/lib/python3.12/unittest/util.py"},{"path":"/usr/lib/python3.12/urllib"},{"path":"/usr/lib/python3.12/urllib/__init__.py"},{"path":"/usr/lib/python3.12/urllib/error.py"},{"path":"/usr/lib/python3.12/urllib/parse.py"},{"path":"/usr/lib/python3.12/urllib/request.py"},{"path":"/usr/lib/python3.12/urllib/response.py"},{"path":"/usr/lib/python3.12/urllib/robotparser.py"},{"path":"/usr/lib/python3.12/venv"},{"path":"/usr/lib/python3.12/venv/__init__.py"},{"path":"/usr/lib/python3.12/venv/__main__.py"},{"path":"/usr/lib/python3.12/venv/scripts"},{"path":"/usr/lib/python3.12/venv/scripts/common"},{"path":"/usr/lib/python3.12/venv/scripts/common/Activate.ps1"},{"path":"/usr/lib/python3.12/venv/scripts/common/activate"},{"path":"/usr/lib/python3.12/venv/scripts/posix"},{"path":"/usr/lib/python3.12/venv/scripts/posix/activate.csh"},{"path":"/usr/lib/python3.12/venv/scripts/posix/activate.fish"},{"path":"/usr/lib/python3.12/wsgiref"},{"path":"/usr/lib/python3.12/wsgiref/__init__.py"},{"path":"/usr/lib/python3.12/wsgiref/handlers.py"},{"path":"/usr/lib/python3.12/wsgiref/headers.py"},{"path":"/usr/lib/python3.12/wsgiref/simple_server.py"},{"path":"/usr/lib/python3.12/wsgiref/types.py"},{"path":"/usr/lib/python3.12/wsgiref/util.py"},{"path":"/usr/lib/python3.12/wsgiref/validate.py"},{"path":"/usr/lib/python3.12/xml"},{"path":"/usr/lib/python3.12/xml/__init__.py"},{"path":"/usr/lib/python3.12/xml/dom"},{"path":"/usr/lib/python3.12/xml/dom/NodeFilter.py"},{"path":"/usr/lib/python3.12/xml/dom/__init__.py"},{"path":"/usr/lib/python3.12/xml/dom/domreg.py"},{"path":"/usr/lib/python3.12/xml/dom/expatbuilder.py"},{"path":"/usr/lib/python3.12/xml/dom/minicompat.py"},{"path":"/usr/lib/python3.12/xml/dom/minidom.py"},{"path":"/usr/lib/python3.12/xml/dom/pulldom.py"},{"path":"/usr/lib/python3.12/xml/dom/xmlbuilder.py"},{"path":"/usr/lib/python3.12/xml/etree"},{"path":"/usr/lib/python3.12/xml/etree/ElementInclude.py"},{"path":"/usr/lib/python3.12/xml/etree/ElementPath.py"},{"path":"/usr/lib/python3.12/xml/etree/ElementTree.py"},{"path":"/usr/lib/python3.12/xml/etree/__init__.py"},{"path":"/usr/lib/python3.12/xml/etree/cElementTree.py"},{"path":"/usr/lib/python3.12/xml/parsers"},{"path":"/usr/lib/python3.12/xml/parsers/__init__.py"},{"path":"/usr/lib/python3.12/xml/parsers/expat.py"},{"path":"/usr/lib/python3.12/xml/sax"},{"path":"/usr/lib/python3.12/xml/sax/__init__.py"},{"path":"/usr/lib/python3.12/xml/sax/_exceptions.py"},{"path":"/usr/lib/python3.12/xml/sax/expatreader.py"},{"path":"/usr/lib/python3.12/xml/sax/handler.py"},{"path":"/usr/lib/python3.12/xml/sax/saxutils.py"},{"path":"/usr/lib/python3.12/xml/sax/xmlreader.py"},{"path":"/usr/lib/python3.12/xmlrpc"},{"path":"/usr/lib/python3.12/xmlrpc/__init__.py"},{"path":"/usr/lib/python3.12/xmlrpc/client.py"},{"path":"/usr/lib/python3.12/xmlrpc/server.py"},{"path":"/usr/lib/python3.12/zipfile"},{"path":"/usr/lib/python3.12/zipfile/__init__.py"},{"path":"/usr/lib/python3.12/zipfile/__main__.py"},{"path":"/usr/lib/python3.12/zipfile/_path"},{"path":"/usr/lib/python3.12/zipfile/_path/__init__.py"},{"path":"/usr/lib/python3.12/zipfile/_path/glob.py"},{"path":"/usr/lib/python3.12/zoneinfo"},{"path":"/usr/lib/python3.12/zoneinfo/__init__.py"},{"path":"/usr/lib/python3.12/zoneinfo/_common.py"},{"path":"/usr/lib/python3.12/zoneinfo/_tzpath.py"},{"path":"/usr/lib/python3.12/zoneinfo/_zoneinfo.py"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-116566","versionConstraint":"< 3.16.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.16:*:*:*:*:*:*:*"],"package":{"name":"python3","version":"3.12.16-r0"},"namespace":"nvd:cpe"}},{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-116566","versionConstraint":"< 3.16.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.16:*:*:*:*:*:*:*"],"package":{"name":"python3","version":"3.12.16-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-116566","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116566","cwe":"CWE-158","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-116566","date":"2026-11-12","epss":0.00259,"percentile":0.17806}],"risk":0.133385,"urls":["https://github.com/python/cpython/commit/131a3a66c5f400b588f9fd2732a5ed4e89623ee3","https://github.com/python/cpython/issues/160898","https://github.com/python/cpython/pull/160899","https://mail.python.org/archives/list/security-announce@python.org/thread/HCHE62VYTPYI6WOPJQDWUBR4CINBPSM7/","http://www.openwall.com/lists/oss-security/2026/10/29/4"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116566","description":"socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated."},"relatedVulnerabilities":[]},{"artifact":{"id":"28d5db15190e922b","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.23.8&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119373","versionConstraint":"< 3.54.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119373","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119373","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119373","date":"2026-11-12","epss":0.00162,"percentile":0.05485}],"risk":0.126765,"urls":["https://abraxaslabs.tech/research/sqlite-fts5-rowidmerge","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L6107","https://github.com/sqlite/sqlite/commit/e1c9934f9f11a499029abb020ea715a08970da80","https://sqlite.org/bugs/info/2026-08-04T08:49:27Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/a7f8c92f62","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-fts5-heap-buffer-overflow-via-fts5mergerowidlists"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119373","description":"SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with negative rowids and run a prefix MATCH query can write past the allocation, corrupting heap memory and crashing the process."},"relatedVulnerabilities":[]},{"artifact":{"id":"28d5db15190e922b","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.23.8&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119375","versionConstraint":"< 3.54.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119375","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119375","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119375","date":"2026-11-12","epss":0.00195,"percentile":0.09266}],"risk":0.1087125,"urls":["https://abraxaslabs.tech/research/sqlite-wal-pagesize","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/src/wal.c#L3672","https://github.com/sqlite/sqlite/commit/e5bf119821f25be1d7f10ef0a2edbe175289166e","https://sqlite.org/bugs/info/2026-08-17T15:54:41Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/f9b4ee369557c36c","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-information-disclosure-via-wal-page-size-mismatch"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119375","description":"SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized page-cache memory by supplying a WAL file with an undersized page size. Attackers can craft a database and WAL file whose oversized record payload makes queries like substr() return stale bytes, disclosing other table rows and internal pointers."},"relatedVulnerabilities":[]},{"artifact":{"id":"28d5db15190e922b","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.23.8&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119371","versionConstraint":"< 3.54.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119371","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119371","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119371","date":"2026-11-12","epss":0.00191,"percentile":0.08871}],"risk":0.1064825,"urls":["https://abraxaslabs.tech/research/sqlite-cte-nest","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/src/select.c#L5754","https://github.com/sqlite/sqlite/commit/e6ff280c839fdfc7418fd5add12e8f32702a17fb","https://sqlite.org/bugs/info/2026-10-04T04:58:58Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/f54730871303e655","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-stack-exhaustion-via-cte-chain-in-selectexpander"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119371","description":"SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEPTH nesting limit because common table expressions are not counted against it. Attackers can supply a WITH clause chaining tens of thousands of CTEs, via plain SQL or a view in an untrusted database file, causing unbounded selectExpander() recursion that crashes the process."},"relatedVulnerabilities":[]},{"artifact":{"id":"28d5db15190e922b","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.23.8&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119376","versionConstraint":"< 3.54.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119376","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119376","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119376","date":"2026-11-12","epss":0.00183,"percentile":0.07943}],"risk":0.1020225,"urls":["https://abraxaslabs.tech/research/sqlite-collate-depth","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/src/expr.c#L175","https://github.com/sqlite/sqlite/commit/d54522a5b832422ab893a1e9fa7a99ab314ea4e2","https://sqlite.org/bugs/info/2026-10-04T04:50:56Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/252c0b7bf5a727d2","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-stack-exhaustion-via-collate-operator-chain"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119376","description":"SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEPTH limit by chaining COLLATE postfix operators. Attackers can supply roughly 175,000 chained COLLATE operators in SQL or an untrusted database view to trigger unbounded recursion in sqlite3WalkExprNN() and crash the process."},"relatedVulnerabilities":[]},{"artifact":{"id":"09327264ca577f0a","cpes":["cpe:2.3:a:python-software-foundation:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software_foundation:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software-foundation:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software_foundation:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python3:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.16-r0:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:apk/alpine/python3@3.12.16-r0?arch=x86_64&distro=alpine-3.23.8","type":"apk","version":"3.12.16-r0","language":"","licenses":["PSF-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/2to3"},{"path":"/usr/bin/2to3-3.12"},{"path":"/usr/bin/pydoc3"},{"path":"/usr/bin/pydoc3.12"},{"path":"/usr/bin/python"},{"path":"/usr/bin/python3"},{"path":"/usr/bin/python3.12"},{"path":"/usr/include"},{"path":"/usr/include/python3.12"},{"path":"/usr/include/python3.12/pyconfig.h"},{"path":"/usr/lib"},{"path":"/usr/lib/libpython3.12.so.1.0"},{"path":"/usr/lib/libpython3.so"},{"path":"/usr/lib/python3.12"},{"path":"/usr/lib/python3.12/EXTERNALLY-MANAGED"},{"path":"/usr/lib/python3.12/LICENSE.txt"},{"path":"/usr/lib/python3.12/__future__.py"},{"path":"/usr/lib/python3.12/__hello__.py"},{"path":"/usr/lib/python3.12/_aix_support.py"},{"path":"/usr/lib/python3.12/_collections_abc.py"},{"path":"/usr/lib/python3.12/_compat_pickle.py"},{"path":"/usr/lib/python3.12/_compression.py"},{"path":"/usr/lib/python3.12/_markupbase.py"},{"path":"/usr/lib/python3.12/_osx_support.py"},{"path":"/usr/lib/python3.12/_py_abc.py"},{"path":"/usr/lib/python3.12/_pydatetime.py"},{"path":"/usr/lib/python3.12/_pydecimal.py"},{"path":"/usr/lib/python3.12/_pyio.py"},{"path":"/usr/lib/python3.12/_pylong.py"},{"path":"/usr/lib/python3.12/_sitebuiltins.py"},{"path":"/usr/lib/python3.12/_strptime.py"},{"path":"/usr/lib/python3.12/_sysconfigdata__linux_x86_64-linux-musl.py"},{"path":"/usr/lib/python3.12/_threading_local.py"},{"path":"/usr/lib/python3.12/_weakrefset.py"},{"path":"/usr/lib/python3.12/abc.py"},{"path":"/usr/lib/python3.12/aifc.py"},{"path":"/usr/lib/python3.12/antigravity.py"},{"path":"/usr/lib/python3.12/argparse.py"},{"path":"/usr/lib/python3.12/ast.py"},{"path":"/usr/lib/python3.12/base64.py"},{"path":"/usr/lib/python3.12/bdb.py"},{"path":"/usr/lib/python3.12/bisect.py"},{"path":"/usr/lib/python3.12/bz2.py"},{"path":"/usr/lib/python3.12/cProfile.py"},{"path":"/usr/lib/python3.12/calendar.py"},{"path":"/usr/lib/python3.12/cgi.py"},{"path":"/usr/lib/python3.12/cgitb.py"},{"path":"/usr/lib/python3.12/chunk.py"},{"path":"/usr/lib/python3.12/cmd.py"},{"path":"/usr/lib/python3.12/code.py"},{"path":"/usr/lib/python3.12/codecs.py"},{"path":"/usr/lib/python3.12/codeop.py"},{"path":"/usr/lib/python3.12/colorsys.py"},{"path":"/usr/lib/python3.12/compileall.py"},{"path":"/usr/lib/python3.12/configparser.py"},{"path":"/usr/lib/python3.12/contextlib.py"},{"path":"/usr/lib/python3.12/contextvars.py"},{"path":"/usr/lib/python3.12/copy.py"},{"path":"/usr/lib/python3.12/copyreg.py"},{"path":"/usr/lib/python3.12/crypt.py"},{"path":"/usr/lib/python3.12/csv.py"},{"path":"/usr/lib/python3.12/dataclasses.py"},{"path":"/usr/lib/python3.12/datetime.py"},{"path":"/usr/lib/python3.12/decimal.py"},{"path":"/usr/lib/python3.12/difflib.py"},{"path":"/usr/lib/python3.12/dis.py"},{"path":"/usr/lib/python3.12/doctest.py"},{"path":"/usr/lib/python3.12/enum.py"},{"path":"/usr/lib/python3.12/filecmp.py"},{"path":"/usr/lib/python3.12/fileinput.py"},{"path":"/usr/lib/python3.12/fnmatch.py"},{"path":"/usr/lib/python3.12/fractions.py"},{"path":"/usr/lib/python3.12/ftplib.py"},{"path":"/usr/lib/python3.12/functools.py"},{"path":"/usr/lib/python3.12/genericpath.py"},{"path":"/usr/lib/python3.12/getopt.py"},{"path":"/usr/lib/python3.12/getpass.py"},{"path":"/usr/lib/python3.12/gettext.py"},{"path":"/usr/lib/python3.12/glob.py"},{"path":"/usr/lib/python3.12/graphlib.py"},{"path":"/usr/lib/python3.12/gzip.py"},{"path":"/usr/lib/python3.12/hashlib.py"},{"path":"/usr/lib/python3.12/heapq.py"},{"path":"/usr/lib/python3.12/hmac.py"},{"path":"/usr/lib/python3.12/imaplib.py"},{"path":"/usr/lib/python3.12/imghdr.py"},{"path":"/usr/lib/python3.12/inspect.py"},{"path":"/usr/lib/python3.12/io.py"},{"path":"/usr/lib/python3.12/ipaddress.py"},{"path":"/usr/lib/python3.12/keyword.py"},{"path":"/usr/lib/python3.12/linecache.py"},{"path":"/usr/lib/python3.12/locale.py"},{"path":"/usr/lib/python3.12/lzma.py"},{"path":"/usr/lib/python3.12/mailbox.py"},{"path":"/usr/lib/python3.12/mailcap.py"},{"path":"/usr/lib/python3.12/mimetypes.py"},{"path":"/usr/lib/python3.12/modulefinder.py"},{"path":"/usr/lib/python3.12/netrc.py"},{"path":"/usr/lib/python3.12/nntplib.py"},{"path":"/usr/lib/python3.12/ntpath.py"},{"path":"/usr/lib/python3.12/nturl2path.py"},{"path":"/usr/lib/python3.12/numbers.py"},{"path":"/usr/lib/python3.12/opcode.py"},{"path":"/usr/lib/python3.12/operator.py"},{"path":"/usr/lib/python3.12/optparse.py"},{"path":"/usr/lib/python3.12/os.py"},{"path":"/usr/lib/python3.12/pathlib.py"},{"path":"/usr/lib/python3.12/pdb.py"},{"path":"/usr/lib/python3.12/pickle.py"},{"path":"/usr/lib/python3.12/pickletools.py"},{"path":"/usr/lib/python3.12/pipes.py"},{"path":"/usr/lib/python3.12/pkgutil.py"},{"path":"/usr/lib/python3.12/platform.py"},{"path":"/usr/lib/python3.12/plistlib.py"},{"path":"/usr/lib/python3.12/poplib.py"},{"path":"/usr/lib/python3.12/posixpath.py"},{"path":"/usr/lib/python3.12/pprint.py"},{"path":"/usr/lib/python3.12/profile.py"},{"path":"/usr/lib/python3.12/pstats.py"},{"path":"/usr/lib/python3.12/pty.py"},{"path":"/usr/lib/python3.12/py_compile.py"},{"path":"/usr/lib/python3.12/pyclbr.py"},{"path":"/usr/lib/python3.12/pydoc.py"},{"path":"/usr/lib/python3.12/queue.py"},{"path":"/usr/lib/python3.12/quopri.py"},{"path":"/usr/lib/python3.12/random.py"},{"path":"/usr/lib/python3.12/reprlib.py"},{"path":"/usr/lib/python3.12/rlcompleter.py"},{"path":"/usr/lib/python3.12/runpy.py"},{"path":"/usr/lib/python3.12/sched.py"},{"path":"/usr/lib/python3.12/secrets.py"},{"path":"/usr/lib/python3.12/selectors.py"},{"path":"/usr/lib/python3.12/shelve.py"},{"path":"/usr/lib/python3.12/shlex.py"},{"path":"/usr/lib/python3.12/shutil.py"},{"path":"/usr/lib/python3.12/signal.py"},{"path":"/usr/lib/python3.12/site.py"},{"path":"/usr/lib/python3.12/smtplib.py"},{"path":"/usr/lib/python3.12/sndhdr.py"},{"path":"/usr/lib/python3.12/socket.py"},{"path":"/usr/lib/python3.12/socketserver.py"},{"path":"/usr/lib/python3.12/sre_compile.py"},{"path":"/usr/lib/python3.12/sre_constants.py"},{"path":"/usr/lib/python3.12/sre_parse.py"},{"path":"/usr/lib/python3.12/ssl.py"},{"path":"/usr/lib/python3.12/stat.py"},{"path":"/usr/lib/python3.12/statistics.py"},{"path":"/usr/lib/python3.12/string.py"},{"path":"/usr/lib/python3.12/stringprep.py"},{"path":"/usr/lib/python3.12/struct.py"},{"path":"/usr/lib/python3.12/subprocess.py"},{"path":"/usr/lib/python3.12/sunau.py"},{"path":"/usr/lib/python3.12/symtable.py"},{"path":"/usr/lib/python3.12/sysconfig.py"},{"path":"/usr/lib/python3.12/tabnanny.py"},{"path":"/usr/lib/python3.12/tarfile.py"},{"path":"/usr/lib/python3.12/telnetlib.py"},{"path":"/usr/lib/python3.12/tempfile.py"},{"path":"/usr/lib/python3.12/textwrap.py"},{"path":"/usr/lib/python3.12/this.py"},{"path":"/usr/lib/python3.12/threading.py"},{"path":"/usr/lib/python3.12/timeit.py"},{"path":"/usr/lib/python3.12/token.py"},{"path":"/usr/lib/python3.12/tokenize.py"},{"path":"/usr/lib/python3.12/trace.py"},{"path":"/usr/lib/python3.12/traceback.py"},{"path":"/usr/lib/python3.12/tracemalloc.py"},{"path":"/usr/lib/python3.12/tty.py"},{"path":"/usr/lib/python3.12/turtle.py"},{"path":"/usr/lib/python3.12/types.py"},{"path":"/usr/lib/python3.12/typing.py"},{"path":"/usr/lib/python3.12/uu.py"},{"path":"/usr/lib/python3.12/uuid.py"},{"path":"/usr/lib/python3.12/warnings.py"},{"path":"/usr/lib/python3.12/wave.py"},{"path":"/usr/lib/python3.12/weakref.py"},{"path":"/usr/lib/python3.12/webbrowser.py"},{"path":"/usr/lib/python3.12/xdrlib.py"},{"path":"/usr/lib/python3.12/zipapp.py"},{"path":"/usr/lib/python3.12/zipimport.py"},{"path":"/usr/lib/python3.12/__phello__"},{"path":"/usr/lib/python3.12/__phello__/__init__.py"},{"path":"/usr/lib/python3.12/__phello__/spam.py"},{"path":"/usr/lib/python3.12/asyncio"},{"path":"/usr/lib/python3.12/asyncio/__init__.py"},{"path":"/usr/lib/python3.12/asyncio/__main__.py"},{"path":"/usr/lib/python3.12/asyncio/base_events.py"},{"path":"/usr/lib/python3.12/asyncio/base_futures.py"},{"path":"/usr/lib/python3.12/asyncio/base_subprocess.py"},{"path":"/usr/lib/python3.12/asyncio/base_tasks.py"},{"path":"/usr/lib/python3.12/asyncio/constants.py"},{"path":"/usr/lib/python3.12/asyncio/coroutines.py"},{"path":"/usr/lib/python3.12/asyncio/events.py"},{"path":"/usr/lib/python3.12/asyncio/exceptions.py"},{"path":"/usr/lib/python3.12/asyncio/format_helpers.py"},{"path":"/usr/lib/python3.12/asyncio/futures.py"},{"path":"/usr/lib/python3.12/asyncio/locks.py"},{"path":"/usr/lib/python3.12/asyncio/log.py"},{"path":"/usr/lib/python3.12/asyncio/mixins.py"},{"path":"/usr/lib/python3.12/asyncio/proactor_events.py"},{"path":"/usr/lib/python3.12/asyncio/protocols.py"},{"path":"/usr/lib/python3.12/asyncio/queues.py"},{"path":"/usr/lib/python3.12/asyncio/runners.py"},{"path":"/usr/lib/python3.12/asyncio/selector_events.py"},{"path":"/usr/lib/python3.12/asyncio/sslproto.py"},{"path":"/usr/lib/python3.12/asyncio/staggered.py"},{"path":"/usr/lib/python3.12/asyncio/streams.py"},{"path":"/usr/lib/python3.12/asyncio/subprocess.py"},{"path":"/usr/lib/python3.12/asyncio/taskgroups.py"},{"path":"/usr/lib/python3.12/asyncio/tasks.py"},{"path":"/usr/lib/python3.12/asyncio/threads.py"},{"path":"/usr/lib/python3.12/asyncio/timeouts.py"},{"path":"/usr/lib/python3.12/asyncio/transports.py"},{"path":"/usr/lib/python3.12/asyncio/trsock.py"},{"path":"/usr/lib/python3.12/asyncio/unix_events.py"},{"path":"/usr/lib/python3.12/asyncio/windows_events.py"},{"path":"/usr/lib/python3.12/asyncio/windows_utils.py"},{"path":"/usr/lib/python3.12/collections"},{"path":"/usr/lib/python3.12/collections/__init__.py"},{"path":"/usr/lib/python3.12/collections/abc.py"},{"path":"/usr/lib/python3.12/concurrent"},{"path":"/usr/lib/python3.12/concurrent/__init__.py"},{"path":"/usr/lib/python3.12/concurrent/futures"},{"path":"/usr/lib/python3.12/concurrent/futures/__init__.py"},{"path":"/usr/lib/python3.12/concurrent/futures/_base.py"},{"path":"/usr/lib/python3.12/concurrent/futures/process.py"},{"path":"/usr/lib/python3.12/concurrent/futures/thread.py"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Makefile"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.bootstrap"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.local"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.stdlib"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/config.c.in"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/install-sh"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/makesetup"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/python-config.py"},{"path":"/usr/lib/python3.12/ctypes"},{"path":"/usr/lib/python3.12/ctypes/__init__.py"},{"path":"/usr/lib/python3.12/ctypes/_aix.py"},{"path":"/usr/lib/python3.12/ctypes/_endian.py"},{"path":"/usr/lib/python3.12/ctypes/util.py"},{"path":"/usr/lib/python3.12/ctypes/wintypes.py"},{"path":"/usr/lib/python3.12/ctypes/macholib"},{"path":"/usr/lib/python3.12/ctypes/macholib/README.ctypes"},{"path":"/usr/lib/python3.12/ctypes/macholib/__init__.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/dyld.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/dylib.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/fetch_macholib"},{"path":"/usr/lib/python3.12/ctypes/macholib/fetch_macholib.bat"},{"path":"/usr/lib/python3.12/ctypes/macholib/framework.py"},{"path":"/usr/lib/python3.12/curses"},{"path":"/usr/lib/python3.12/curses/__init__.py"},{"path":"/usr/lib/python3.12/curses/ascii.py"},{"path":"/usr/lib/python3.12/curses/has_key.py"},{"path":"/usr/lib/python3.12/curses/panel.py"},{"path":"/usr/lib/python3.12/curses/textpad.py"},{"path":"/usr/lib/python3.12/dbm"},{"path":"/usr/lib/python3.12/dbm/__init__.py"},{"path":"/usr/lib/python3.12/dbm/dumb.py"},{"path":"/usr/lib/python3.12/dbm/gnu.py"},{"path":"/usr/lib/python3.12/dbm/ndbm.py"},{"path":"/usr/lib/python3.12/email"},{"path":"/usr/lib/python3.12/email/__init__.py"},{"path":"/usr/lib/python3.12/email/_encoded_words.py"},{"path":"/usr/lib/python3.12/email/_header_value_parser.py"},{"path":"/usr/lib/python3.12/email/_parseaddr.py"},{"path":"/usr/lib/python3.12/email/_policybase.py"},{"path":"/usr/lib/python3.12/email/architecture.rst"},{"path":"/usr/lib/python3.12/email/base64mime.py"},{"path":"/usr/lib/python3.12/email/charset.py"},{"path":"/usr/lib/python3.12/email/contentmanager.py"},{"path":"/usr/lib/python3.12/email/encoders.py"},{"path":"/usr/lib/python3.12/email/errors.py"},{"path":"/usr/lib/python3.12/email/feedparser.py"},{"path":"/usr/lib/python3.12/email/generator.py"},{"path":"/usr/lib/python3.12/email/header.py"},{"path":"/usr/lib/python3.12/email/headerregistry.py"},{"path":"/usr/lib/python3.12/email/iterators.py"},{"path":"/usr/lib/python3.12/email/message.py"},{"path":"/usr/lib/python3.12/email/parser.py"},{"path":"/usr/lib/python3.12/email/policy.py"},{"path":"/usr/lib/python3.12/email/quoprimime.py"},{"path":"/usr/lib/python3.12/email/utils.py"},{"path":"/usr/lib/python3.12/email/mime"},{"path":"/usr/lib/python3.12/email/mime/__init__.py"},{"path":"/usr/lib/python3.12/email/mime/application.py"},{"path":"/usr/lib/python3.12/email/mime/audio.py"},{"path":"/usr/lib/python3.12/email/mime/base.py"},{"path":"/usr/lib/python3.12/email/mime/image.py"},{"path":"/usr/lib/python3.12/email/mime/message.py"},{"path":"/usr/lib/python3.12/email/mime/multipart.py"},{"path":"/usr/lib/python3.12/email/mime/nonmultipart.py"},{"path":"/usr/lib/python3.12/email/mime/text.py"},{"path":"/usr/lib/python3.12/encodings"},{"path":"/usr/lib/python3.12/encodings/__init__.py"},{"path":"/usr/lib/python3.12/encodings/aliases.py"},{"path":"/usr/lib/python3.12/encodings/ascii.py"},{"path":"/usr/lib/python3.12/encodings/base64_codec.py"},{"path":"/usr/lib/python3.12/encodings/big5.py"},{"path":"/usr/lib/python3.12/encodings/big5hkscs.py"},{"path":"/usr/lib/python3.12/encodings/bz2_codec.py"},{"path":"/usr/lib/python3.12/encodings/charmap.py"},{"path":"/usr/lib/python3.12/encodings/cp037.py"},{"path":"/usr/lib/python3.12/encodings/cp1006.py"},{"path":"/usr/lib/python3.12/encodings/cp1026.py"},{"path":"/usr/lib/python3.12/encodings/cp1125.py"},{"path":"/usr/lib/python3.12/encodings/cp1140.py"},{"path":"/usr/lib/python3.12/encodings/cp1250.py"},{"path":"/usr/lib/python3.12/encodings/cp1251.py"},{"path":"/usr/lib/python3.12/encodings/cp1252.py"},{"path":"/usr/lib/python3.12/encodings/cp1253.py"},{"path":"/usr/lib/python3.12/encodings/cp1254.py"},{"path":"/usr/lib/python3.12/encodings/cp1255.py"},{"path":"/usr/lib/python3.12/encodings/cp1256.py"},{"path":"/usr/lib/python3.12/encodings/cp1257.py"},{"path":"/usr/lib/python3.12/encodings/cp1258.py"},{"path":"/usr/lib/python3.12/encodings/cp273.py"},{"path":"/usr/lib/python3.12/encodings/cp424.py"},{"path":"/usr/lib/python3.12/encodings/cp437.py"},{"path":"/usr/lib/python3.12/encodings/cp500.py"},{"path":"/usr/lib/python3.12/encodings/cp720.py"},{"path":"/usr/lib/python3.12/encodings/cp737.py"},{"path":"/usr/lib/python3.12/encodings/cp775.py"},{"path":"/usr/lib/python3.12/encodings/cp850.py"},{"path":"/usr/lib/python3.12/encodings/cp852.py"},{"path":"/usr/lib/python3.12/encodings/cp855.py"},{"path":"/usr/lib/python3.12/encodings/cp856.py"},{"path":"/usr/lib/python3.12/encodings/cp857.py"},{"path":"/usr/lib/python3.12/encodings/cp858.py"},{"path":"/usr/lib/python3.12/encodings/cp860.py"},{"path":"/usr/lib/python3.12/encodings/cp861.py"},{"path":"/usr/lib/python3.12/encodings/cp862.py"},{"path":"/usr/lib/python3.12/encodings/cp863.py"},{"path":"/usr/lib/python3.12/encodings/cp864.py"},{"path":"/usr/lib/python3.12/encodings/cp865.py"},{"path":"/usr/lib/python3.12/encodings/cp866.py"},{"path":"/usr/lib/python3.12/encodings/cp869.py"},{"path":"/usr/lib/python3.12/encodings/cp874.py"},{"path":"/usr/lib/python3.12/encodings/cp875.py"},{"path":"/usr/lib/python3.12/encodings/cp932.py"},{"path":"/usr/lib/python3.12/encodings/cp949.py"},{"path":"/usr/lib/python3.12/encodings/cp950.py"},{"path":"/usr/lib/python3.12/encodings/euc_jis_2004.py"},{"path":"/usr/lib/python3.12/encodings/euc_jisx0213.py"},{"path":"/usr/lib/python3.12/encodings/euc_jp.py"},{"path":"/usr/lib/python3.12/encodings/euc_kr.py"},{"path":"/usr/lib/python3.12/encodings/gb18030.py"},{"path":"/usr/lib/python3.12/encodings/gb2312.py"},{"path":"/usr/lib/python3.12/encodings/gbk.py"},{"path":"/usr/lib/python3.12/encodings/hex_codec.py"},{"path":"/usr/lib/python3.12/encodings/hp_roman8.py"},{"path":"/usr/lib/python3.12/encodings/hz.py"},{"path":"/usr/lib/python3.12/encodings/idna.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_1.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_2.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_2004.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_3.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_ext.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_kr.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_1.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_10.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_11.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_13.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_14.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_15.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_16.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_2.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_3.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_4.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_5.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_6.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_7.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_8.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_9.py"},{"path":"/usr/lib/python3.12/encodings/johab.py"},{"path":"/usr/lib/python3.12/encodings/koi8_r.py"},{"path":"/usr/lib/python3.12/encodings/koi8_t.py"},{"path":"/usr/lib/python3.12/encodings/koi8_u.py"},{"path":"/usr/lib/python3.12/encodings/kz1048.py"},{"path":"/usr/lib/python3.12/encodings/latin_1.py"},{"path":"/usr/lib/python3.12/encodings/mac_arabic.py"},{"path":"/usr/lib/python3.12/encodings/mac_croatian.py"},{"path":"/usr/lib/python3.12/encodings/mac_cyrillic.py"},{"path":"/usr/lib/python3.12/encodings/mac_farsi.py"},{"path":"/usr/lib/python3.12/encodings/mac_greek.py"},{"path":"/usr/lib/python3.12/encodings/mac_iceland.py"},{"path":"/usr/lib/python3.12/encodings/mac_latin2.py"},{"path":"/usr/lib/python3.12/encodings/mac_roman.py"},{"path":"/usr/lib/python3.12/encodings/mac_romanian.py"},{"path":"/usr/lib/python3.12/encodings/mac_turkish.py"},{"path":"/usr/lib/python3.12/encodings/mbcs.py"},{"path":"/usr/lib/python3.12/encodings/oem.py"},{"path":"/usr/lib/python3.12/encodings/palmos.py"},{"path":"/usr/lib/python3.12/encodings/ptcp154.py"},{"path":"/usr/lib/python3.12/encodings/punycode.py"},{"path":"/usr/lib/python3.12/encodings/quopri_codec.py"},{"path":"/usr/lib/python3.12/encodings/raw_unicode_escape.py"},{"path":"/usr/lib/python3.12/encodings/rot_13.py"},{"path":"/usr/lib/python3.12/encodings/shift_jis.py"},{"path":"/usr/lib/python3.12/encodings/shift_jis_2004.py"},{"path":"/usr/lib/python3.12/encodings/shift_jisx0213.py"},{"path":"/usr/lib/python3.12/encodings/tis_620.py"},{"path":"/usr/lib/python3.12/encodings/undefined.py"},{"path":"/usr/lib/python3.12/encodings/unicode_escape.py"},{"path":"/usr/lib/python3.12/encodings/utf_16.py"},{"path":"/usr/lib/python3.12/encodings/utf_16_be.py"},{"path":"/usr/lib/python3.12/encodings/utf_16_le.py"},{"path":"/usr/lib/python3.12/encodings/utf_32.py"},{"path":"/usr/lib/python3.12/encodings/utf_32_be.py"},{"path":"/usr/lib/python3.12/encodings/utf_32_le.py"},{"path":"/usr/lib/python3.12/encodings/utf_7.py"},{"path":"/usr/lib/python3.12/encodings/utf_8.py"},{"path":"/usr/lib/python3.12/encodings/utf_8_sig.py"},{"path":"/usr/lib/python3.12/encodings/uu_codec.py"},{"path":"/usr/lib/python3.12/encodings/zlib_codec.py"},{"path":"/usr/lib/python3.12/ensurepip"},{"path":"/usr/lib/python3.12/ensurepip/__init__.py"},{"path":"/usr/lib/python3.12/ensurepip/__main__.py"},{"path":"/usr/lib/python3.12/ensurepip/_uninstall.py"},{"path":"/usr/lib/python3.12/ensurepip/_bundled"},{"path":"/usr/lib/python3.12/ensurepip/_bundled/pip-25.0.1-py3-none-any.whl"},{"path":"/usr/lib/python3.12/html"},{"path":"/usr/lib/python3.12/html/__init__.py"},{"path":"/usr/lib/python3.12/html/entities.py"},{"path":"/usr/lib/python3.12/html/parser.py"},{"path":"/usr/lib/python3.12/http"},{"path":"/usr/lib/python3.12/http/__init__.py"},{"path":"/usr/lib/python3.12/http/client.py"},{"path":"/usr/lib/python3.12/http/cookiejar.py"},{"path":"/usr/lib/python3.12/http/cookies.py"},{"path":"/usr/lib/python3.12/http/server.py"},{"path":"/usr/lib/python3.12/importlib"},{"path":"/usr/lib/python3.12/importlib/__init__.py"},{"path":"/usr/lib/python3.12/importlib/_abc.py"},{"path":"/usr/lib/python3.12/importlib/_bootstrap.py"},{"path":"/usr/lib/python3.12/importlib/_bootstrap_external.py"},{"path":"/usr/lib/python3.12/importlib/abc.py"},{"path":"/usr/lib/python3.12/importlib/machinery.py"},{"path":"/usr/lib/python3.12/importlib/readers.py"},{"path":"/usr/lib/python3.12/importlib/simple.py"},{"path":"/usr/lib/python3.12/importlib/util.py"},{"path":"/usr/lib/python3.12/importlib/metadata"},{"path":"/usr/lib/python3.12/importlib/metadata/__init__.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_adapters.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_collections.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_functools.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_itertools.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_meta.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_text.py"},{"path":"/usr/lib/python3.12/importlib/resources"},{"path":"/usr/lib/python3.12/importlib/resources/__init__.py"},{"path":"/usr/lib/python3.12/importlib/resources/_adapters.py"},{"path":"/usr/lib/python3.12/importlib/resources/_common.py"},{"path":"/usr/lib/python3.12/importlib/resources/_itertools.py"},{"path":"/usr/lib/python3.12/importlib/resources/_legacy.py"},{"path":"/usr/lib/python3.12/importlib/resources/abc.py"},{"path":"/usr/lib/python3.12/importlib/resources/readers.py"},{"path":"/usr/lib/python3.12/importlib/resources/simple.py"},{"path":"/usr/lib/python3.12/json"},{"path":"/usr/lib/python3.12/json/__init__.py"},{"path":"/usr/lib/python3.12/json/decoder.py"},{"path":"/usr/lib/python3.12/json/encoder.py"},{"path":"/usr/lib/python3.12/json/scanner.py"},{"path":"/usr/lib/python3.12/json/tool.py"},{"path":"/usr/lib/python3.12/lib-dynload"},{"path":"/usr/lib/python3.12/lib-dynload/_asyncio.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_bisect.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_blake2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_bz2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_cn.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_hk.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_iso2022.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_jp.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_kr.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_tw.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_contextvars.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_crypt.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_csv.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ctypes.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ctypes_test.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_curses.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_curses_panel.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_datetime.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_dbm.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_decimal.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_elementtree.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_hashlib.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_heapq.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_json.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_lsprof.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_lzma.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_md5.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_multibytecodec.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_multiprocessing.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_opcode.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_pickle.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_posixshmem.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_posixsubprocess.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_queue.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_random.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha1.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha3.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_socket.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sqlite3.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ssl.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_statistics.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_struct.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testbuffer.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testcapi.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testclinic.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testimportmultiple.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testinternalcapi.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testmultiphase.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testsinglephase.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxinterpchannels.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxsubinterpreters.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxtestfuzz.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_zoneinfo.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/array.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/audioop.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/binascii.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/cmath.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/fcntl.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/grp.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/math.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/mmap.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/ossaudiodev.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/pyexpat.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/readline.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/resource.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/select.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/spwd.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/syslog.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/termios.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/unicodedata.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxlimited.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxlimited_35.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxsubtype.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/zlib.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib2to3"},{"path":"/usr/lib/python3.12/lib2to3/Grammar.txt"},{"path":"/usr/lib/python3.12/lib2to3/Grammar3.12.16.final.0.pickle"},{"path":"/usr/lib/python3.12/lib2to3/PatternGrammar.txt"},{"path":"/usr/lib/python3.12/lib2to3/PatternGrammar3.12.16.final.0.pickle"},{"path":"/usr/lib/python3.12/lib2to3/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/__main__.py"},{"path":"/usr/lib/python3.12/lib2to3/btm_matcher.py"},{"path":"/usr/lib/python3.12/lib2to3/btm_utils.py"},{"path":"/usr/lib/python3.12/lib2to3/fixer_base.py"},{"path":"/usr/lib/python3.12/lib2to3/fixer_util.py"},{"path":"/usr/lib/python3.12/lib2to3/main.py"},{"path":"/usr/lib/python3.12/lib2to3/patcomp.py"},{"path":"/usr/lib/python3.12/lib2to3/pygram.py"},{"path":"/usr/lib/python3.12/lib2to3/pytree.py"},{"path":"/usr/lib/python3.12/lib2to3/refactor.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes"},{"path":"/usr/lib/python3.12/lib2to3/fixes/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_apply.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_asserts.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_basestring.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_buffer.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_dict.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_except.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_exec.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_execfile.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_exitfunc.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_filter.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_funcattrs.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_future.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_getcwdu.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_has_key.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_idioms.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_import.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_imports.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_imports2.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_input.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_intern.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_isinstance.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_itertools.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_itertools_imports.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_long.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_map.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_metaclass.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_methodattrs.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_ne.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_next.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_nonzero.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_numliterals.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_operator.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_paren.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_print.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_raise.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_raw_input.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_reduce.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_reload.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_renames.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_repr.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_set_literal.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_standarderror.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_sys_exc.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_throw.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_tuple_params.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_types.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_unicode.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_urllib.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_ws_comma.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_xrange.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_xreadlines.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_zip.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/conv.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/driver.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/grammar.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/literals.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/parse.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/pgen.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/token.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/tokenize.py"},{"path":"/usr/lib/python3.12/logging"},{"path":"/usr/lib/python3.12/logging/__init__.py"},{"path":"/usr/lib/python3.12/logging/config.py"},{"path":"/usr/lib/python3.12/logging/handlers.py"},{"path":"/usr/lib/python3.12/multiprocessing"},{"path":"/usr/lib/python3.12/multiprocessing/__init__.py"},{"path":"/usr/lib/python3.12/multiprocessing/connection.py"},{"path":"/usr/lib/python3.12/multiprocessing/context.py"},{"path":"/usr/lib/python3.12/multiprocessing/forkserver.py"},{"path":"/usr/lib/python3.12/multiprocessing/heap.py"},{"path":"/usr/lib/python3.12/multiprocessing/managers.py"},{"path":"/usr/lib/python3.12/multiprocessing/pool.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_fork.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_forkserver.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_spawn_posix.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_spawn_win32.py"},{"path":"/usr/lib/python3.12/multiprocessing/process.py"},{"path":"/usr/lib/python3.12/multiprocessing/queues.py"},{"path":"/usr/lib/python3.12/multiprocessing/reduction.py"},{"path":"/usr/lib/python3.12/multiprocessing/resource_sharer.py"},{"path":"/usr/lib/python3.12/multiprocessing/resource_tracker.py"},{"path":"/usr/lib/python3.12/multiprocessing/shared_memory.py"},{"path":"/usr/lib/python3.12/multiprocessing/sharedctypes.py"},{"path":"/usr/lib/python3.12/multiprocessing/spawn.py"},{"path":"/usr/lib/python3.12/multiprocessing/synchronize.py"},{"path":"/usr/lib/python3.12/multiprocessing/util.py"},{"path":"/usr/lib/python3.12/multiprocessing/dummy"},{"path":"/usr/lib/python3.12/multiprocessing/dummy/__init__.py"},{"path":"/usr/lib/python3.12/multiprocessing/dummy/connection.py"},{"path":"/usr/lib/python3.12/pydoc_data"},{"path":"/usr/lib/python3.12/pydoc_data/__init__.py"},{"path":"/usr/lib/python3.12/pydoc_data/_pydoc.css"},{"path":"/usr/lib/python3.12/pydoc_data/topics.py"},{"path":"/usr/lib/python3.12/re"},{"path":"/usr/lib/python3.12/re/__init__.py"},{"path":"/usr/lib/python3.12/re/_casefix.py"},{"path":"/usr/lib/python3.12/re/_compiler.py"},{"path":"/usr/lib/python3.12/re/_constants.py"},{"path":"/usr/lib/python3.12/re/_parser.py"},{"path":"/usr/lib/python3.12/site-packages"},{"path":"/usr/lib/python3.12/site-packages/README.txt"},{"path":"/usr/lib/python3.12/sqlite3"},{"path":"/usr/lib/python3.12/sqlite3/__init__.py"},{"path":"/usr/lib/python3.12/sqlite3/__main__.py"},{"path":"/usr/lib/python3.12/sqlite3/dbapi2.py"},{"path":"/usr/lib/python3.12/sqlite3/dump.py"},{"path":"/usr/lib/python3.12/tomllib"},{"path":"/usr/lib/python3.12/tomllib/__init__.py"},{"path":"/usr/lib/python3.12/tomllib/_parser.py"},{"path":"/usr/lib/python3.12/tomllib/_re.py"},{"path":"/usr/lib/python3.12/tomllib/_types.py"},{"path":"/usr/lib/python3.12/turtledemo"},{"path":"/usr/lib/python3.12/turtledemo/__init__.py"},{"path":"/usr/lib/python3.12/turtledemo/__main__.py"},{"path":"/usr/lib/python3.12/turtledemo/bytedesign.py"},{"path":"/usr/lib/python3.12/turtledemo/chaos.py"},{"path":"/usr/lib/python3.12/turtledemo/clock.py"},{"path":"/usr/lib/python3.12/turtledemo/colormixer.py"},{"path":"/usr/lib/python3.12/turtledemo/forest.py"},{"path":"/usr/lib/python3.12/turtledemo/fractalcurves.py"},{"path":"/usr/lib/python3.12/turtledemo/lindenmayer.py"},{"path":"/usr/lib/python3.12/turtledemo/minimal_hanoi.py"},{"path":"/usr/lib/python3.12/turtledemo/nim.py"},{"path":"/usr/lib/python3.12/turtledemo/paint.py"},{"path":"/usr/lib/python3.12/turtledemo/peace.py"},{"path":"/usr/lib/python3.12/turtledemo/penrose.py"},{"path":"/usr/lib/python3.12/turtledemo/planet_and_moon.py"},{"path":"/usr/lib/python3.12/turtledemo/rosette.py"},{"path":"/usr/lib/python3.12/turtledemo/round_dance.py"},{"path":"/usr/lib/python3.12/turtledemo/sorting_animate.py"},{"path":"/usr/lib/python3.12/turtledemo/tree.py"},{"path":"/usr/lib/python3.12/turtledemo/turtle.cfg"},{"path":"/usr/lib/python3.12/turtledemo/two_canvases.py"},{"path":"/usr/lib/python3.12/turtledemo/yinyang.py"},{"path":"/usr/lib/python3.12/unittest"},{"path":"/usr/lib/python3.12/unittest/__init__.py"},{"path":"/usr/lib/python3.12/unittest/__main__.py"},{"path":"/usr/lib/python3.12/unittest/_log.py"},{"path":"/usr/lib/python3.12/unittest/async_case.py"},{"path":"/usr/lib/python3.12/unittest/case.py"},{"path":"/usr/lib/python3.12/unittest/loader.py"},{"path":"/usr/lib/python3.12/unittest/main.py"},{"path":"/usr/lib/python3.12/unittest/mock.py"},{"path":"/usr/lib/python3.12/unittest/result.py"},{"path":"/usr/lib/python3.12/unittest/runner.py"},{"path":"/usr/lib/python3.12/unittest/signals.py"},{"path":"/usr/lib/python3.12/unittest/suite.py"},{"path":"/usr/lib/python3.12/unittest/util.py"},{"path":"/usr/lib/python3.12/urllib"},{"path":"/usr/lib/python3.12/urllib/__init__.py"},{"path":"/usr/lib/python3.12/urllib/error.py"},{"path":"/usr/lib/python3.12/urllib/parse.py"},{"path":"/usr/lib/python3.12/urllib/request.py"},{"path":"/usr/lib/python3.12/urllib/response.py"},{"path":"/usr/lib/python3.12/urllib/robotparser.py"},{"path":"/usr/lib/python3.12/venv"},{"path":"/usr/lib/python3.12/venv/__init__.py"},{"path":"/usr/lib/python3.12/venv/__main__.py"},{"path":"/usr/lib/python3.12/venv/scripts"},{"path":"/usr/lib/python3.12/venv/scripts/common"},{"path":"/usr/lib/python3.12/venv/scripts/common/Activate.ps1"},{"path":"/usr/lib/python3.12/venv/scripts/common/activate"},{"path":"/usr/lib/python3.12/venv/scripts/posix"},{"path":"/usr/lib/python3.12/venv/scripts/posix/activate.csh"},{"path":"/usr/lib/python3.12/venv/scripts/posix/activate.fish"},{"path":"/usr/lib/python3.12/wsgiref"},{"path":"/usr/lib/python3.12/wsgiref/__init__.py"},{"path":"/usr/lib/python3.12/wsgiref/handlers.py"},{"path":"/usr/lib/python3.12/wsgiref/headers.py"},{"path":"/usr/lib/python3.12/wsgiref/simple_server.py"},{"path":"/usr/lib/python3.12/wsgiref/types.py"},{"path":"/usr/lib/python3.12/wsgiref/util.py"},{"path":"/usr/lib/python3.12/wsgiref/validate.py"},{"path":"/usr/lib/python3.12/xml"},{"path":"/usr/lib/python3.12/xml/__init__.py"},{"path":"/usr/lib/python3.12/xml/dom"},{"path":"/usr/lib/python3.12/xml/dom/NodeFilter.py"},{"path":"/usr/lib/python3.12/xml/dom/__init__.py"},{"path":"/usr/lib/python3.12/xml/dom/domreg.py"},{"path":"/usr/lib/python3.12/xml/dom/expatbuilder.py"},{"path":"/usr/lib/python3.12/xml/dom/minicompat.py"},{"path":"/usr/lib/python3.12/xml/dom/minidom.py"},{"path":"/usr/lib/python3.12/xml/dom/pulldom.py"},{"path":"/usr/lib/python3.12/xml/dom/xmlbuilder.py"},{"path":"/usr/lib/python3.12/xml/etree"},{"path":"/usr/lib/python3.12/xml/etree/ElementInclude.py"},{"path":"/usr/lib/python3.12/xml/etree/ElementPath.py"},{"path":"/usr/lib/python3.12/xml/etree/ElementTree.py"},{"path":"/usr/lib/python3.12/xml/etree/__init__.py"},{"path":"/usr/lib/python3.12/xml/etree/cElementTree.py"},{"path":"/usr/lib/python3.12/xml/parsers"},{"path":"/usr/lib/python3.12/xml/parsers/__init__.py"},{"path":"/usr/lib/python3.12/xml/parsers/expat.py"},{"path":"/usr/lib/python3.12/xml/sax"},{"path":"/usr/lib/python3.12/xml/sax/__init__.py"},{"path":"/usr/lib/python3.12/xml/sax/_exceptions.py"},{"path":"/usr/lib/python3.12/xml/sax/expatreader.py"},{"path":"/usr/lib/python3.12/xml/sax/handler.py"},{"path":"/usr/lib/python3.12/xml/sax/saxutils.py"},{"path":"/usr/lib/python3.12/xml/sax/xmlreader.py"},{"path":"/usr/lib/python3.12/xmlrpc"},{"path":"/usr/lib/python3.12/xmlrpc/__init__.py"},{"path":"/usr/lib/python3.12/xmlrpc/client.py"},{"path":"/usr/lib/python3.12/xmlrpc/server.py"},{"path":"/usr/lib/python3.12/zipfile"},{"path":"/usr/lib/python3.12/zipfile/__init__.py"},{"path":"/usr/lib/python3.12/zipfile/__main__.py"},{"path":"/usr/lib/python3.12/zipfile/_path"},{"path":"/usr/lib/python3.12/zipfile/_path/__init__.py"},{"path":"/usr/lib/python3.12/zipfile/_path/glob.py"},{"path":"/usr/lib/python3.12/zoneinfo"},{"path":"/usr/lib/python3.12/zoneinfo/__init__.py"},{"path":"/usr/lib/python3.12/zoneinfo/_common.py"},{"path":"/usr/lib/python3.12/zoneinfo/_tzpath.py"},{"path":"/usr/lib/python3.12/zoneinfo/_zoneinfo.py"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3446","versionConstraint":"< 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.16:*:*:*:*:*:*:*"],"package":{"name":"python3","version":"3.12.16-r0"},"namespace":"nvd:cpe"}},{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3446","versionConstraint":"< 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.16:*:*:*:*:*:*:*"],"package":{"name":"python3","version":"3.12.16-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-3446","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3446","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-3446","date":"2026-11-12","epss":0.00179,"percentile":0.07557}],"risk":0.09845000000000001,"urls":["https://github.com/python/cpython/commit/1f9958f909c1b41a4ffc0b613ef8ec8fa5e7c474","https://github.com/python/cpython/commit/4561f6418a691b3e89aef0901f53fe0dfb7f7c0e","https://github.com/python/cpython/commit/e31c55121620189a0d1a07b689762d8ca9c1b7fa","https://github.com/python/cpython/issues/145264","https://github.com/python/cpython/pull/145267","https://mail.python.org/archives/list/security-announce@python.org/thread/F5ZT5ICGJ6CKXVUJ34YBVY7WOZ5SHG53/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3446","description":"When calling base64.b64decode() or related functions the decoding process would stop after encountering the first padded quad regardless of whether there was more information to be processed. This can lead to data being accepted which may be processed differently by other implementations. Use \"validate=True\" to enable stricter processing of base64 data."},"relatedVulnerabilities":[]},{"artifact":{"id":"09327264ca577f0a","cpes":["cpe:2.3:a:python-software-foundation:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software_foundation:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software-foundation:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software_foundation:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python3:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.16-r0:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:apk/alpine/python3@3.12.16-r0?arch=x86_64&distro=alpine-3.23.8","type":"apk","version":"3.12.16-r0","language":"","licenses":["PSF-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/2to3"},{"path":"/usr/bin/2to3-3.12"},{"path":"/usr/bin/pydoc3"},{"path":"/usr/bin/pydoc3.12"},{"path":"/usr/bin/python"},{"path":"/usr/bin/python3"},{"path":"/usr/bin/python3.12"},{"path":"/usr/include"},{"path":"/usr/include/python3.12"},{"path":"/usr/include/python3.12/pyconfig.h"},{"path":"/usr/lib"},{"path":"/usr/lib/libpython3.12.so.1.0"},{"path":"/usr/lib/libpython3.so"},{"path":"/usr/lib/python3.12"},{"path":"/usr/lib/python3.12/EXTERNALLY-MANAGED"},{"path":"/usr/lib/python3.12/LICENSE.txt"},{"path":"/usr/lib/python3.12/__future__.py"},{"path":"/usr/lib/python3.12/__hello__.py"},{"path":"/usr/lib/python3.12/_aix_support.py"},{"path":"/usr/lib/python3.12/_collections_abc.py"},{"path":"/usr/lib/python3.12/_compat_pickle.py"},{"path":"/usr/lib/python3.12/_compression.py"},{"path":"/usr/lib/python3.12/_markupbase.py"},{"path":"/usr/lib/python3.12/_osx_support.py"},{"path":"/usr/lib/python3.12/_py_abc.py"},{"path":"/usr/lib/python3.12/_pydatetime.py"},{"path":"/usr/lib/python3.12/_pydecimal.py"},{"path":"/usr/lib/python3.12/_pyio.py"},{"path":"/usr/lib/python3.12/_pylong.py"},{"path":"/usr/lib/python3.12/_sitebuiltins.py"},{"path":"/usr/lib/python3.12/_strptime.py"},{"path":"/usr/lib/python3.12/_sysconfigdata__linux_x86_64-linux-musl.py"},{"path":"/usr/lib/python3.12/_threading_local.py"},{"path":"/usr/lib/python3.12/_weakrefset.py"},{"path":"/usr/lib/python3.12/abc.py"},{"path":"/usr/lib/python3.12/aifc.py"},{"path":"/usr/lib/python3.12/antigravity.py"},{"path":"/usr/lib/python3.12/argparse.py"},{"path":"/usr/lib/python3.12/ast.py"},{"path":"/usr/lib/python3.12/base64.py"},{"path":"/usr/lib/python3.12/bdb.py"},{"path":"/usr/lib/python3.12/bisect.py"},{"path":"/usr/lib/python3.12/bz2.py"},{"path":"/usr/lib/python3.12/cProfile.py"},{"path":"/usr/lib/python3.12/calendar.py"},{"path":"/usr/lib/python3.12/cgi.py"},{"path":"/usr/lib/python3.12/cgitb.py"},{"path":"/usr/lib/python3.12/chunk.py"},{"path":"/usr/lib/python3.12/cmd.py"},{"path":"/usr/lib/python3.12/code.py"},{"path":"/usr/lib/python3.12/codecs.py"},{"path":"/usr/lib/python3.12/codeop.py"},{"path":"/usr/lib/python3.12/colorsys.py"},{"path":"/usr/lib/python3.12/compileall.py"},{"path":"/usr/lib/python3.12/configparser.py"},{"path":"/usr/lib/python3.12/contextlib.py"},{"path":"/usr/lib/python3.12/contextvars.py"},{"path":"/usr/lib/python3.12/copy.py"},{"path":"/usr/lib/python3.12/copyreg.py"},{"path":"/usr/lib/python3.12/crypt.py"},{"path":"/usr/lib/python3.12/csv.py"},{"path":"/usr/lib/python3.12/dataclasses.py"},{"path":"/usr/lib/python3.12/datetime.py"},{"path":"/usr/lib/python3.12/decimal.py"},{"path":"/usr/lib/python3.12/difflib.py"},{"path":"/usr/lib/python3.12/dis.py"},{"path":"/usr/lib/python3.12/doctest.py"},{"path":"/usr/lib/python3.12/enum.py"},{"path":"/usr/lib/python3.12/filecmp.py"},{"path":"/usr/lib/python3.12/fileinput.py"},{"path":"/usr/lib/python3.12/fnmatch.py"},{"path":"/usr/lib/python3.12/fractions.py"},{"path":"/usr/lib/python3.12/ftplib.py"},{"path":"/usr/lib/python3.12/functools.py"},{"path":"/usr/lib/python3.12/genericpath.py"},{"path":"/usr/lib/python3.12/getopt.py"},{"path":"/usr/lib/python3.12/getpass.py"},{"path":"/usr/lib/python3.12/gettext.py"},{"path":"/usr/lib/python3.12/glob.py"},{"path":"/usr/lib/python3.12/graphlib.py"},{"path":"/usr/lib/python3.12/gzip.py"},{"path":"/usr/lib/python3.12/hashlib.py"},{"path":"/usr/lib/python3.12/heapq.py"},{"path":"/usr/lib/python3.12/hmac.py"},{"path":"/usr/lib/python3.12/imaplib.py"},{"path":"/usr/lib/python3.12/imghdr.py"},{"path":"/usr/lib/python3.12/inspect.py"},{"path":"/usr/lib/python3.12/io.py"},{"path":"/usr/lib/python3.12/ipaddress.py"},{"path":"/usr/lib/python3.12/keyword.py"},{"path":"/usr/lib/python3.12/linecache.py"},{"path":"/usr/lib/python3.12/locale.py"},{"path":"/usr/lib/python3.12/lzma.py"},{"path":"/usr/lib/python3.12/mailbox.py"},{"path":"/usr/lib/python3.12/mailcap.py"},{"path":"/usr/lib/python3.12/mimetypes.py"},{"path":"/usr/lib/python3.12/modulefinder.py"},{"path":"/usr/lib/python3.12/netrc.py"},{"path":"/usr/lib/python3.12/nntplib.py"},{"path":"/usr/lib/python3.12/ntpath.py"},{"path":"/usr/lib/python3.12/nturl2path.py"},{"path":"/usr/lib/python3.12/numbers.py"},{"path":"/usr/lib/python3.12/opcode.py"},{"path":"/usr/lib/python3.12/operator.py"},{"path":"/usr/lib/python3.12/optparse.py"},{"path":"/usr/lib/python3.12/os.py"},{"path":"/usr/lib/python3.12/pathlib.py"},{"path":"/usr/lib/python3.12/pdb.py"},{"path":"/usr/lib/python3.12/pickle.py"},{"path":"/usr/lib/python3.12/pickletools.py"},{"path":"/usr/lib/python3.12/pipes.py"},{"path":"/usr/lib/python3.12/pkgutil.py"},{"path":"/usr/lib/python3.12/platform.py"},{"path":"/usr/lib/python3.12/plistlib.py"},{"path":"/usr/lib/python3.12/poplib.py"},{"path":"/usr/lib/python3.12/posixpath.py"},{"path":"/usr/lib/python3.12/pprint.py"},{"path":"/usr/lib/python3.12/profile.py"},{"path":"/usr/lib/python3.12/pstats.py"},{"path":"/usr/lib/python3.12/pty.py"},{"path":"/usr/lib/python3.12/py_compile.py"},{"path":"/usr/lib/python3.12/pyclbr.py"},{"path":"/usr/lib/python3.12/pydoc.py"},{"path":"/usr/lib/python3.12/queue.py"},{"path":"/usr/lib/python3.12/quopri.py"},{"path":"/usr/lib/python3.12/random.py"},{"path":"/usr/lib/python3.12/reprlib.py"},{"path":"/usr/lib/python3.12/rlcompleter.py"},{"path":"/usr/lib/python3.12/runpy.py"},{"path":"/usr/lib/python3.12/sched.py"},{"path":"/usr/lib/python3.12/secrets.py"},{"path":"/usr/lib/python3.12/selectors.py"},{"path":"/usr/lib/python3.12/shelve.py"},{"path":"/usr/lib/python3.12/shlex.py"},{"path":"/usr/lib/python3.12/shutil.py"},{"path":"/usr/lib/python3.12/signal.py"},{"path":"/usr/lib/python3.12/site.py"},{"path":"/usr/lib/python3.12/smtplib.py"},{"path":"/usr/lib/python3.12/sndhdr.py"},{"path":"/usr/lib/python3.12/socket.py"},{"path":"/usr/lib/python3.12/socketserver.py"},{"path":"/usr/lib/python3.12/sre_compile.py"},{"path":"/usr/lib/python3.12/sre_constants.py"},{"path":"/usr/lib/python3.12/sre_parse.py"},{"path":"/usr/lib/python3.12/ssl.py"},{"path":"/usr/lib/python3.12/stat.py"},{"path":"/usr/lib/python3.12/statistics.py"},{"path":"/usr/lib/python3.12/string.py"},{"path":"/usr/lib/python3.12/stringprep.py"},{"path":"/usr/lib/python3.12/struct.py"},{"path":"/usr/lib/python3.12/subprocess.py"},{"path":"/usr/lib/python3.12/sunau.py"},{"path":"/usr/lib/python3.12/symtable.py"},{"path":"/usr/lib/python3.12/sysconfig.py"},{"path":"/usr/lib/python3.12/tabnanny.py"},{"path":"/usr/lib/python3.12/tarfile.py"},{"path":"/usr/lib/python3.12/telnetlib.py"},{"path":"/usr/lib/python3.12/tempfile.py"},{"path":"/usr/lib/python3.12/textwrap.py"},{"path":"/usr/lib/python3.12/this.py"},{"path":"/usr/lib/python3.12/threading.py"},{"path":"/usr/lib/python3.12/timeit.py"},{"path":"/usr/lib/python3.12/token.py"},{"path":"/usr/lib/python3.12/tokenize.py"},{"path":"/usr/lib/python3.12/trace.py"},{"path":"/usr/lib/python3.12/traceback.py"},{"path":"/usr/lib/python3.12/tracemalloc.py"},{"path":"/usr/lib/python3.12/tty.py"},{"path":"/usr/lib/python3.12/turtle.py"},{"path":"/usr/lib/python3.12/types.py"},{"path":"/usr/lib/python3.12/typing.py"},{"path":"/usr/lib/python3.12/uu.py"},{"path":"/usr/lib/python3.12/uuid.py"},{"path":"/usr/lib/python3.12/warnings.py"},{"path":"/usr/lib/python3.12/wave.py"},{"path":"/usr/lib/python3.12/weakref.py"},{"path":"/usr/lib/python3.12/webbrowser.py"},{"path":"/usr/lib/python3.12/xdrlib.py"},{"path":"/usr/lib/python3.12/zipapp.py"},{"path":"/usr/lib/python3.12/zipimport.py"},{"path":"/usr/lib/python3.12/__phello__"},{"path":"/usr/lib/python3.12/__phello__/__init__.py"},{"path":"/usr/lib/python3.12/__phello__/spam.py"},{"path":"/usr/lib/python3.12/asyncio"},{"path":"/usr/lib/python3.12/asyncio/__init__.py"},{"path":"/usr/lib/python3.12/asyncio/__main__.py"},{"path":"/usr/lib/python3.12/asyncio/base_events.py"},{"path":"/usr/lib/python3.12/asyncio/base_futures.py"},{"path":"/usr/lib/python3.12/asyncio/base_subprocess.py"},{"path":"/usr/lib/python3.12/asyncio/base_tasks.py"},{"path":"/usr/lib/python3.12/asyncio/constants.py"},{"path":"/usr/lib/python3.12/asyncio/coroutines.py"},{"path":"/usr/lib/python3.12/asyncio/events.py"},{"path":"/usr/lib/python3.12/asyncio/exceptions.py"},{"path":"/usr/lib/python3.12/asyncio/format_helpers.py"},{"path":"/usr/lib/python3.12/asyncio/futures.py"},{"path":"/usr/lib/python3.12/asyncio/locks.py"},{"path":"/usr/lib/python3.12/asyncio/log.py"},{"path":"/usr/lib/python3.12/asyncio/mixins.py"},{"path":"/usr/lib/python3.12/asyncio/proactor_events.py"},{"path":"/usr/lib/python3.12/asyncio/protocols.py"},{"path":"/usr/lib/python3.12/asyncio/queues.py"},{"path":"/usr/lib/python3.12/asyncio/runners.py"},{"path":"/usr/lib/python3.12/asyncio/selector_events.py"},{"path":"/usr/lib/python3.12/asyncio/sslproto.py"},{"path":"/usr/lib/python3.12/asyncio/staggered.py"},{"path":"/usr/lib/python3.12/asyncio/streams.py"},{"path":"/usr/lib/python3.12/asyncio/subprocess.py"},{"path":"/usr/lib/python3.12/asyncio/taskgroups.py"},{"path":"/usr/lib/python3.12/asyncio/tasks.py"},{"path":"/usr/lib/python3.12/asyncio/threads.py"},{"path":"/usr/lib/python3.12/asyncio/timeouts.py"},{"path":"/usr/lib/python3.12/asyncio/transports.py"},{"path":"/usr/lib/python3.12/asyncio/trsock.py"},{"path":"/usr/lib/python3.12/asyncio/unix_events.py"},{"path":"/usr/lib/python3.12/asyncio/windows_events.py"},{"path":"/usr/lib/python3.12/asyncio/windows_utils.py"},{"path":"/usr/lib/python3.12/collections"},{"path":"/usr/lib/python3.12/collections/__init__.py"},{"path":"/usr/lib/python3.12/collections/abc.py"},{"path":"/usr/lib/python3.12/concurrent"},{"path":"/usr/lib/python3.12/concurrent/__init__.py"},{"path":"/usr/lib/python3.12/concurrent/futures"},{"path":"/usr/lib/python3.12/concurrent/futures/__init__.py"},{"path":"/usr/lib/python3.12/concurrent/futures/_base.py"},{"path":"/usr/lib/python3.12/concurrent/futures/process.py"},{"path":"/usr/lib/python3.12/concurrent/futures/thread.py"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Makefile"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.bootstrap"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.local"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.stdlib"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/config.c.in"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/install-sh"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/makesetup"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/python-config.py"},{"path":"/usr/lib/python3.12/ctypes"},{"path":"/usr/lib/python3.12/ctypes/__init__.py"},{"path":"/usr/lib/python3.12/ctypes/_aix.py"},{"path":"/usr/lib/python3.12/ctypes/_endian.py"},{"path":"/usr/lib/python3.12/ctypes/util.py"},{"path":"/usr/lib/python3.12/ctypes/wintypes.py"},{"path":"/usr/lib/python3.12/ctypes/macholib"},{"path":"/usr/lib/python3.12/ctypes/macholib/README.ctypes"},{"path":"/usr/lib/python3.12/ctypes/macholib/__init__.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/dyld.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/dylib.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/fetch_macholib"},{"path":"/usr/lib/python3.12/ctypes/macholib/fetch_macholib.bat"},{"path":"/usr/lib/python3.12/ctypes/macholib/framework.py"},{"path":"/usr/lib/python3.12/curses"},{"path":"/usr/lib/python3.12/curses/__init__.py"},{"path":"/usr/lib/python3.12/curses/ascii.py"},{"path":"/usr/lib/python3.12/curses/has_key.py"},{"path":"/usr/lib/python3.12/curses/panel.py"},{"path":"/usr/lib/python3.12/curses/textpad.py"},{"path":"/usr/lib/python3.12/dbm"},{"path":"/usr/lib/python3.12/dbm/__init__.py"},{"path":"/usr/lib/python3.12/dbm/dumb.py"},{"path":"/usr/lib/python3.12/dbm/gnu.py"},{"path":"/usr/lib/python3.12/dbm/ndbm.py"},{"path":"/usr/lib/python3.12/email"},{"path":"/usr/lib/python3.12/email/__init__.py"},{"path":"/usr/lib/python3.12/email/_encoded_words.py"},{"path":"/usr/lib/python3.12/email/_header_value_parser.py"},{"path":"/usr/lib/python3.12/email/_parseaddr.py"},{"path":"/usr/lib/python3.12/email/_policybase.py"},{"path":"/usr/lib/python3.12/email/architecture.rst"},{"path":"/usr/lib/python3.12/email/base64mime.py"},{"path":"/usr/lib/python3.12/email/charset.py"},{"path":"/usr/lib/python3.12/email/contentmanager.py"},{"path":"/usr/lib/python3.12/email/encoders.py"},{"path":"/usr/lib/python3.12/email/errors.py"},{"path":"/usr/lib/python3.12/email/feedparser.py"},{"path":"/usr/lib/python3.12/email/generator.py"},{"path":"/usr/lib/python3.12/email/header.py"},{"path":"/usr/lib/python3.12/email/headerregistry.py"},{"path":"/usr/lib/python3.12/email/iterators.py"},{"path":"/usr/lib/python3.12/email/message.py"},{"path":"/usr/lib/python3.12/email/parser.py"},{"path":"/usr/lib/python3.12/email/policy.py"},{"path":"/usr/lib/python3.12/email/quoprimime.py"},{"path":"/usr/lib/python3.12/email/utils.py"},{"path":"/usr/lib/python3.12/email/mime"},{"path":"/usr/lib/python3.12/email/mime/__init__.py"},{"path":"/usr/lib/python3.12/email/mime/application.py"},{"path":"/usr/lib/python3.12/email/mime/audio.py"},{"path":"/usr/lib/python3.12/email/mime/base.py"},{"path":"/usr/lib/python3.12/email/mime/image.py"},{"path":"/usr/lib/python3.12/email/mime/message.py"},{"path":"/usr/lib/python3.12/email/mime/multipart.py"},{"path":"/usr/lib/python3.12/email/mime/nonmultipart.py"},{"path":"/usr/lib/python3.12/email/mime/text.py"},{"path":"/usr/lib/python3.12/encodings"},{"path":"/usr/lib/python3.12/encodings/__init__.py"},{"path":"/usr/lib/python3.12/encodings/aliases.py"},{"path":"/usr/lib/python3.12/encodings/ascii.py"},{"path":"/usr/lib/python3.12/encodings/base64_codec.py"},{"path":"/usr/lib/python3.12/encodings/big5.py"},{"path":"/usr/lib/python3.12/encodings/big5hkscs.py"},{"path":"/usr/lib/python3.12/encodings/bz2_codec.py"},{"path":"/usr/lib/python3.12/encodings/charmap.py"},{"path":"/usr/lib/python3.12/encodings/cp037.py"},{"path":"/usr/lib/python3.12/encodings/cp1006.py"},{"path":"/usr/lib/python3.12/encodings/cp1026.py"},{"path":"/usr/lib/python3.12/encodings/cp1125.py"},{"path":"/usr/lib/python3.12/encodings/cp1140.py"},{"path":"/usr/lib/python3.12/encodings/cp1250.py"},{"path":"/usr/lib/python3.12/encodings/cp1251.py"},{"path":"/usr/lib/python3.12/encodings/cp1252.py"},{"path":"/usr/lib/python3.12/encodings/cp1253.py"},{"path":"/usr/lib/python3.12/encodings/cp1254.py"},{"path":"/usr/lib/python3.12/encodings/cp1255.py"},{"path":"/usr/lib/python3.12/encodings/cp1256.py"},{"path":"/usr/lib/python3.12/encodings/cp1257.py"},{"path":"/usr/lib/python3.12/encodings/cp1258.py"},{"path":"/usr/lib/python3.12/encodings/cp273.py"},{"path":"/usr/lib/python3.12/encodings/cp424.py"},{"path":"/usr/lib/python3.12/encodings/cp437.py"},{"path":"/usr/lib/python3.12/encodings/cp500.py"},{"path":"/usr/lib/python3.12/encodings/cp720.py"},{"path":"/usr/lib/python3.12/encodings/cp737.py"},{"path":"/usr/lib/python3.12/encodings/cp775.py"},{"path":"/usr/lib/python3.12/encodings/cp850.py"},{"path":"/usr/lib/python3.12/encodings/cp852.py"},{"path":"/usr/lib/python3.12/encodings/cp855.py"},{"path":"/usr/lib/python3.12/encodings/cp856.py"},{"path":"/usr/lib/python3.12/encodings/cp857.py"},{"path":"/usr/lib/python3.12/encodings/cp858.py"},{"path":"/usr/lib/python3.12/encodings/cp860.py"},{"path":"/usr/lib/python3.12/encodings/cp861.py"},{"path":"/usr/lib/python3.12/encodings/cp862.py"},{"path":"/usr/lib/python3.12/encodings/cp863.py"},{"path":"/usr/lib/python3.12/encodings/cp864.py"},{"path":"/usr/lib/python3.12/encodings/cp865.py"},{"path":"/usr/lib/python3.12/encodings/cp866.py"},{"path":"/usr/lib/python3.12/encodings/cp869.py"},{"path":"/usr/lib/python3.12/encodings/cp874.py"},{"path":"/usr/lib/python3.12/encodings/cp875.py"},{"path":"/usr/lib/python3.12/encodings/cp932.py"},{"path":"/usr/lib/python3.12/encodings/cp949.py"},{"path":"/usr/lib/python3.12/encodings/cp950.py"},{"path":"/usr/lib/python3.12/encodings/euc_jis_2004.py"},{"path":"/usr/lib/python3.12/encodings/euc_jisx0213.py"},{"path":"/usr/lib/python3.12/encodings/euc_jp.py"},{"path":"/usr/lib/python3.12/encodings/euc_kr.py"},{"path":"/usr/lib/python3.12/encodings/gb18030.py"},{"path":"/usr/lib/python3.12/encodings/gb2312.py"},{"path":"/usr/lib/python3.12/encodings/gbk.py"},{"path":"/usr/lib/python3.12/encodings/hex_codec.py"},{"path":"/usr/lib/python3.12/encodings/hp_roman8.py"},{"path":"/usr/lib/python3.12/encodings/hz.py"},{"path":"/usr/lib/python3.12/encodings/idna.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_1.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_2.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_2004.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_3.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_ext.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_kr.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_1.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_10.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_11.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_13.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_14.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_15.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_16.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_2.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_3.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_4.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_5.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_6.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_7.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_8.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_9.py"},{"path":"/usr/lib/python3.12/encodings/johab.py"},{"path":"/usr/lib/python3.12/encodings/koi8_r.py"},{"path":"/usr/lib/python3.12/encodings/koi8_t.py"},{"path":"/usr/lib/python3.12/encodings/koi8_u.py"},{"path":"/usr/lib/python3.12/encodings/kz1048.py"},{"path":"/usr/lib/python3.12/encodings/latin_1.py"},{"path":"/usr/lib/python3.12/encodings/mac_arabic.py"},{"path":"/usr/lib/python3.12/encodings/mac_croatian.py"},{"path":"/usr/lib/python3.12/encodings/mac_cyrillic.py"},{"path":"/usr/lib/python3.12/encodings/mac_farsi.py"},{"path":"/usr/lib/python3.12/encodings/mac_greek.py"},{"path":"/usr/lib/python3.12/encodings/mac_iceland.py"},{"path":"/usr/lib/python3.12/encodings/mac_latin2.py"},{"path":"/usr/lib/python3.12/encodings/mac_roman.py"},{"path":"/usr/lib/python3.12/encodings/mac_romanian.py"},{"path":"/usr/lib/python3.12/encodings/mac_turkish.py"},{"path":"/usr/lib/python3.12/encodings/mbcs.py"},{"path":"/usr/lib/python3.12/encodings/oem.py"},{"path":"/usr/lib/python3.12/encodings/palmos.py"},{"path":"/usr/lib/python3.12/encodings/ptcp154.py"},{"path":"/usr/lib/python3.12/encodings/punycode.py"},{"path":"/usr/lib/python3.12/encodings/quopri_codec.py"},{"path":"/usr/lib/python3.12/encodings/raw_unicode_escape.py"},{"path":"/usr/lib/python3.12/encodings/rot_13.py"},{"path":"/usr/lib/python3.12/encodings/shift_jis.py"},{"path":"/usr/lib/python3.12/encodings/shift_jis_2004.py"},{"path":"/usr/lib/python3.12/encodings/shift_jisx0213.py"},{"path":"/usr/lib/python3.12/encodings/tis_620.py"},{"path":"/usr/lib/python3.12/encodings/undefined.py"},{"path":"/usr/lib/python3.12/encodings/unicode_escape.py"},{"path":"/usr/lib/python3.12/encodings/utf_16.py"},{"path":"/usr/lib/python3.12/encodings/utf_16_be.py"},{"path":"/usr/lib/python3.12/encodings/utf_16_le.py"},{"path":"/usr/lib/python3.12/encodings/utf_32.py"},{"path":"/usr/lib/python3.12/encodings/utf_32_be.py"},{"path":"/usr/lib/python3.12/encodings/utf_32_le.py"},{"path":"/usr/lib/python3.12/encodings/utf_7.py"},{"path":"/usr/lib/python3.12/encodings/utf_8.py"},{"path":"/usr/lib/python3.12/encodings/utf_8_sig.py"},{"path":"/usr/lib/python3.12/encodings/uu_codec.py"},{"path":"/usr/lib/python3.12/encodings/zlib_codec.py"},{"path":"/usr/lib/python3.12/ensurepip"},{"path":"/usr/lib/python3.12/ensurepip/__init__.py"},{"path":"/usr/lib/python3.12/ensurepip/__main__.py"},{"path":"/usr/lib/python3.12/ensurepip/_uninstall.py"},{"path":"/usr/lib/python3.12/ensurepip/_bundled"},{"path":"/usr/lib/python3.12/ensurepip/_bundled/pip-25.0.1-py3-none-any.whl"},{"path":"/usr/lib/python3.12/html"},{"path":"/usr/lib/python3.12/html/__init__.py"},{"path":"/usr/lib/python3.12/html/entities.py"},{"path":"/usr/lib/python3.12/html/parser.py"},{"path":"/usr/lib/python3.12/http"},{"path":"/usr/lib/python3.12/http/__init__.py"},{"path":"/usr/lib/python3.12/http/client.py"},{"path":"/usr/lib/python3.12/http/cookiejar.py"},{"path":"/usr/lib/python3.12/http/cookies.py"},{"path":"/usr/lib/python3.12/http/server.py"},{"path":"/usr/lib/python3.12/importlib"},{"path":"/usr/lib/python3.12/importlib/__init__.py"},{"path":"/usr/lib/python3.12/importlib/_abc.py"},{"path":"/usr/lib/python3.12/importlib/_bootstrap.py"},{"path":"/usr/lib/python3.12/importlib/_bootstrap_external.py"},{"path":"/usr/lib/python3.12/importlib/abc.py"},{"path":"/usr/lib/python3.12/importlib/machinery.py"},{"path":"/usr/lib/python3.12/importlib/readers.py"},{"path":"/usr/lib/python3.12/importlib/simple.py"},{"path":"/usr/lib/python3.12/importlib/util.py"},{"path":"/usr/lib/python3.12/importlib/metadata"},{"path":"/usr/lib/python3.12/importlib/metadata/__init__.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_adapters.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_collections.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_functools.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_itertools.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_meta.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_text.py"},{"path":"/usr/lib/python3.12/importlib/resources"},{"path":"/usr/lib/python3.12/importlib/resources/__init__.py"},{"path":"/usr/lib/python3.12/importlib/resources/_adapters.py"},{"path":"/usr/lib/python3.12/importlib/resources/_common.py"},{"path":"/usr/lib/python3.12/importlib/resources/_itertools.py"},{"path":"/usr/lib/python3.12/importlib/resources/_legacy.py"},{"path":"/usr/lib/python3.12/importlib/resources/abc.py"},{"path":"/usr/lib/python3.12/importlib/resources/readers.py"},{"path":"/usr/lib/python3.12/importlib/resources/simple.py"},{"path":"/usr/lib/python3.12/json"},{"path":"/usr/lib/python3.12/json/__init__.py"},{"path":"/usr/lib/python3.12/json/decoder.py"},{"path":"/usr/lib/python3.12/json/encoder.py"},{"path":"/usr/lib/python3.12/json/scanner.py"},{"path":"/usr/lib/python3.12/json/tool.py"},{"path":"/usr/lib/python3.12/lib-dynload"},{"path":"/usr/lib/python3.12/lib-dynload/_asyncio.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_bisect.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_blake2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_bz2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_cn.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_hk.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_iso2022.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_jp.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_kr.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_tw.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_contextvars.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_crypt.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_csv.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ctypes.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ctypes_test.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_curses.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_curses_panel.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_datetime.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_dbm.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_decimal.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_elementtree.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_hashlib.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_heapq.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_json.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_lsprof.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_lzma.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_md5.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_multibytecodec.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_multiprocessing.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_opcode.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_pickle.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_posixshmem.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_posixsubprocess.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_queue.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_random.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha1.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha3.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_socket.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sqlite3.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ssl.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_statistics.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_struct.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testbuffer.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testcapi.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testclinic.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testimportmultiple.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testinternalcapi.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testmultiphase.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testsinglephase.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxinterpchannels.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxsubinterpreters.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxtestfuzz.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_zoneinfo.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/array.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/audioop.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/binascii.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/cmath.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/fcntl.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/grp.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/math.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/mmap.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/ossaudiodev.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/pyexpat.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/readline.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/resource.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/select.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/spwd.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/syslog.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/termios.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/unicodedata.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxlimited.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxlimited_35.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxsubtype.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/zlib.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib2to3"},{"path":"/usr/lib/python3.12/lib2to3/Grammar.txt"},{"path":"/usr/lib/python3.12/lib2to3/Grammar3.12.16.final.0.pickle"},{"path":"/usr/lib/python3.12/lib2to3/PatternGrammar.txt"},{"path":"/usr/lib/python3.12/lib2to3/PatternGrammar3.12.16.final.0.pickle"},{"path":"/usr/lib/python3.12/lib2to3/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/__main__.py"},{"path":"/usr/lib/python3.12/lib2to3/btm_matcher.py"},{"path":"/usr/lib/python3.12/lib2to3/btm_utils.py"},{"path":"/usr/lib/python3.12/lib2to3/fixer_base.py"},{"path":"/usr/lib/python3.12/lib2to3/fixer_util.py"},{"path":"/usr/lib/python3.12/lib2to3/main.py"},{"path":"/usr/lib/python3.12/lib2to3/patcomp.py"},{"path":"/usr/lib/python3.12/lib2to3/pygram.py"},{"path":"/usr/lib/python3.12/lib2to3/pytree.py"},{"path":"/usr/lib/python3.12/lib2to3/refactor.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes"},{"path":"/usr/lib/python3.12/lib2to3/fixes/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_apply.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_asserts.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_basestring.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_buffer.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_dict.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_except.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_exec.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_execfile.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_exitfunc.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_filter.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_funcattrs.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_future.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_getcwdu.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_has_key.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_idioms.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_import.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_imports.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_imports2.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_input.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_intern.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_isinstance.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_itertools.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_itertools_imports.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_long.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_map.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_metaclass.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_methodattrs.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_ne.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_next.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_nonzero.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_numliterals.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_operator.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_paren.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_print.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_raise.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_raw_input.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_reduce.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_reload.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_renames.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_repr.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_set_literal.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_standarderror.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_sys_exc.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_throw.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_tuple_params.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_types.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_unicode.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_urllib.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_ws_comma.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_xrange.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_xreadlines.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_zip.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/conv.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/driver.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/grammar.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/literals.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/parse.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/pgen.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/token.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/tokenize.py"},{"path":"/usr/lib/python3.12/logging"},{"path":"/usr/lib/python3.12/logging/__init__.py"},{"path":"/usr/lib/python3.12/logging/config.py"},{"path":"/usr/lib/python3.12/logging/handlers.py"},{"path":"/usr/lib/python3.12/multiprocessing"},{"path":"/usr/lib/python3.12/multiprocessing/__init__.py"},{"path":"/usr/lib/python3.12/multiprocessing/connection.py"},{"path":"/usr/lib/python3.12/multiprocessing/context.py"},{"path":"/usr/lib/python3.12/multiprocessing/forkserver.py"},{"path":"/usr/lib/python3.12/multiprocessing/heap.py"},{"path":"/usr/lib/python3.12/multiprocessing/managers.py"},{"path":"/usr/lib/python3.12/multiprocessing/pool.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_fork.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_forkserver.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_spawn_posix.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_spawn_win32.py"},{"path":"/usr/lib/python3.12/multiprocessing/process.py"},{"path":"/usr/lib/python3.12/multiprocessing/queues.py"},{"path":"/usr/lib/python3.12/multiprocessing/reduction.py"},{"path":"/usr/lib/python3.12/multiprocessing/resource_sharer.py"},{"path":"/usr/lib/python3.12/multiprocessing/resource_tracker.py"},{"path":"/usr/lib/python3.12/multiprocessing/shared_memory.py"},{"path":"/usr/lib/python3.12/multiprocessing/sharedctypes.py"},{"path":"/usr/lib/python3.12/multiprocessing/spawn.py"},{"path":"/usr/lib/python3.12/multiprocessing/synchronize.py"},{"path":"/usr/lib/python3.12/multiprocessing/util.py"},{"path":"/usr/lib/python3.12/multiprocessing/dummy"},{"path":"/usr/lib/python3.12/multiprocessing/dummy/__init__.py"},{"path":"/usr/lib/python3.12/multiprocessing/dummy/connection.py"},{"path":"/usr/lib/python3.12/pydoc_data"},{"path":"/usr/lib/python3.12/pydoc_data/__init__.py"},{"path":"/usr/lib/python3.12/pydoc_data/_pydoc.css"},{"path":"/usr/lib/python3.12/pydoc_data/topics.py"},{"path":"/usr/lib/python3.12/re"},{"path":"/usr/lib/python3.12/re/__init__.py"},{"path":"/usr/lib/python3.12/re/_casefix.py"},{"path":"/usr/lib/python3.12/re/_compiler.py"},{"path":"/usr/lib/python3.12/re/_constants.py"},{"path":"/usr/lib/python3.12/re/_parser.py"},{"path":"/usr/lib/python3.12/site-packages"},{"path":"/usr/lib/python3.12/site-packages/README.txt"},{"path":"/usr/lib/python3.12/sqlite3"},{"path":"/usr/lib/python3.12/sqlite3/__init__.py"},{"path":"/usr/lib/python3.12/sqlite3/__main__.py"},{"path":"/usr/lib/python3.12/sqlite3/dbapi2.py"},{"path":"/usr/lib/python3.12/sqlite3/dump.py"},{"path":"/usr/lib/python3.12/tomllib"},{"path":"/usr/lib/python3.12/tomllib/__init__.py"},{"path":"/usr/lib/python3.12/tomllib/_parser.py"},{"path":"/usr/lib/python3.12/tomllib/_re.py"},{"path":"/usr/lib/python3.12/tomllib/_types.py"},{"path":"/usr/lib/python3.12/turtledemo"},{"path":"/usr/lib/python3.12/turtledemo/__init__.py"},{"path":"/usr/lib/python3.12/turtledemo/__main__.py"},{"path":"/usr/lib/python3.12/turtledemo/bytedesign.py"},{"path":"/usr/lib/python3.12/turtledemo/chaos.py"},{"path":"/usr/lib/python3.12/turtledemo/clock.py"},{"path":"/usr/lib/python3.12/turtledemo/colormixer.py"},{"path":"/usr/lib/python3.12/turtledemo/forest.py"},{"path":"/usr/lib/python3.12/turtledemo/fractalcurves.py"},{"path":"/usr/lib/python3.12/turtledemo/lindenmayer.py"},{"path":"/usr/lib/python3.12/turtledemo/minimal_hanoi.py"},{"path":"/usr/lib/python3.12/turtledemo/nim.py"},{"path":"/usr/lib/python3.12/turtledemo/paint.py"},{"path":"/usr/lib/python3.12/turtledemo/peace.py"},{"path":"/usr/lib/python3.12/turtledemo/penrose.py"},{"path":"/usr/lib/python3.12/turtledemo/planet_and_moon.py"},{"path":"/usr/lib/python3.12/turtledemo/rosette.py"},{"path":"/usr/lib/python3.12/turtledemo/round_dance.py"},{"path":"/usr/lib/python3.12/turtledemo/sorting_animate.py"},{"path":"/usr/lib/python3.12/turtledemo/tree.py"},{"path":"/usr/lib/python3.12/turtledemo/turtle.cfg"},{"path":"/usr/lib/python3.12/turtledemo/two_canvases.py"},{"path":"/usr/lib/python3.12/turtledemo/yinyang.py"},{"path":"/usr/lib/python3.12/unittest"},{"path":"/usr/lib/python3.12/unittest/__init__.py"},{"path":"/usr/lib/python3.12/unittest/__main__.py"},{"path":"/usr/lib/python3.12/unittest/_log.py"},{"path":"/usr/lib/python3.12/unittest/async_case.py"},{"path":"/usr/lib/python3.12/unittest/case.py"},{"path":"/usr/lib/python3.12/unittest/loader.py"},{"path":"/usr/lib/python3.12/unittest/main.py"},{"path":"/usr/lib/python3.12/unittest/mock.py"},{"path":"/usr/lib/python3.12/unittest/result.py"},{"path":"/usr/lib/python3.12/unittest/runner.py"},{"path":"/usr/lib/python3.12/unittest/signals.py"},{"path":"/usr/lib/python3.12/unittest/suite.py"},{"path":"/usr/lib/python3.12/unittest/util.py"},{"path":"/usr/lib/python3.12/urllib"},{"path":"/usr/lib/python3.12/urllib/__init__.py"},{"path":"/usr/lib/python3.12/urllib/error.py"},{"path":"/usr/lib/python3.12/urllib/parse.py"},{"path":"/usr/lib/python3.12/urllib/request.py"},{"path":"/usr/lib/python3.12/urllib/response.py"},{"path":"/usr/lib/python3.12/urllib/robotparser.py"},{"path":"/usr/lib/python3.12/venv"},{"path":"/usr/lib/python3.12/venv/__init__.py"},{"path":"/usr/lib/python3.12/venv/__main__.py"},{"path":"/usr/lib/python3.12/venv/scripts"},{"path":"/usr/lib/python3.12/venv/scripts/common"},{"path":"/usr/lib/python3.12/venv/scripts/common/Activate.ps1"},{"path":"/usr/lib/python3.12/venv/scripts/common/activate"},{"path":"/usr/lib/python3.12/venv/scripts/posix"},{"path":"/usr/lib/python3.12/venv/scripts/posix/activate.csh"},{"path":"/usr/lib/python3.12/venv/scripts/posix/activate.fish"},{"path":"/usr/lib/python3.12/wsgiref"},{"path":"/usr/lib/python3.12/wsgiref/__init__.py"},{"path":"/usr/lib/python3.12/wsgiref/handlers.py"},{"path":"/usr/lib/python3.12/wsgiref/headers.py"},{"path":"/usr/lib/python3.12/wsgiref/simple_server.py"},{"path":"/usr/lib/python3.12/wsgiref/types.py"},{"path":"/usr/lib/python3.12/wsgiref/util.py"},{"path":"/usr/lib/python3.12/wsgiref/validate.py"},{"path":"/usr/lib/python3.12/xml"},{"path":"/usr/lib/python3.12/xml/__init__.py"},{"path":"/usr/lib/python3.12/xml/dom"},{"path":"/usr/lib/python3.12/xml/dom/NodeFilter.py"},{"path":"/usr/lib/python3.12/xml/dom/__init__.py"},{"path":"/usr/lib/python3.12/xml/dom/domreg.py"},{"path":"/usr/lib/python3.12/xml/dom/expatbuilder.py"},{"path":"/usr/lib/python3.12/xml/dom/minicompat.py"},{"path":"/usr/lib/python3.12/xml/dom/minidom.py"},{"path":"/usr/lib/python3.12/xml/dom/pulldom.py"},{"path":"/usr/lib/python3.12/xml/dom/xmlbuilder.py"},{"path":"/usr/lib/python3.12/xml/etree"},{"path":"/usr/lib/python3.12/xml/etree/ElementInclude.py"},{"path":"/usr/lib/python3.12/xml/etree/ElementPath.py"},{"path":"/usr/lib/python3.12/xml/etree/ElementTree.py"},{"path":"/usr/lib/python3.12/xml/etree/__init__.py"},{"path":"/usr/lib/python3.12/xml/etree/cElementTree.py"},{"path":"/usr/lib/python3.12/xml/parsers"},{"path":"/usr/lib/python3.12/xml/parsers/__init__.py"},{"path":"/usr/lib/python3.12/xml/parsers/expat.py"},{"path":"/usr/lib/python3.12/xml/sax"},{"path":"/usr/lib/python3.12/xml/sax/__init__.py"},{"path":"/usr/lib/python3.12/xml/sax/_exceptions.py"},{"path":"/usr/lib/python3.12/xml/sax/expatreader.py"},{"path":"/usr/lib/python3.12/xml/sax/handler.py"},{"path":"/usr/lib/python3.12/xml/sax/saxutils.py"},{"path":"/usr/lib/python3.12/xml/sax/xmlreader.py"},{"path":"/usr/lib/python3.12/xmlrpc"},{"path":"/usr/lib/python3.12/xmlrpc/__init__.py"},{"path":"/usr/lib/python3.12/xmlrpc/client.py"},{"path":"/usr/lib/python3.12/xmlrpc/server.py"},{"path":"/usr/lib/python3.12/zipfile"},{"path":"/usr/lib/python3.12/zipfile/__init__.py"},{"path":"/usr/lib/python3.12/zipfile/__main__.py"},{"path":"/usr/lib/python3.12/zipfile/_path"},{"path":"/usr/lib/python3.12/zipfile/_path/__init__.py"},{"path":"/usr/lib/python3.12/zipfile/_path/glob.py"},{"path":"/usr/lib/python3.12/zoneinfo"},{"path":"/usr/lib/python3.12/zoneinfo/__init__.py"},{"path":"/usr/lib/python3.12/zoneinfo/_common.py"},{"path":"/usr/lib/python3.12/zoneinfo/_tzpath.py"},{"path":"/usr/lib/python3.12/zoneinfo/_zoneinfo.py"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6019","versionConstraint":"< 3.13.14||>= 3.14.0a1, < 3.14.5rc1||>= 3.15.0a1, < 3.15.0b1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.16:*:*:*:*:*:*:*"],"package":{"name":"python3","version":"3.12.16-r0"},"namespace":"nvd:cpe"}},{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6019","versionConstraint":"< 3.13.14||>= 3.14.0a1, < 3.14.5rc1||>= 3.15.0a1, < 3.15.0b1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.16:*:*:*:*:*:*:*"],"package":{"name":"python3","version":"3.12.16-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-6019","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6019","cwe":"CWE-150","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-6019","cwe":"CWE-116","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-6019","date":"2026-11-12","epss":0.00211,"percentile":0.11394}],"risk":0.09600499999999998,"urls":["https://github.com/python/cpython/commit/3c59b8b53fc75c7f9578d16fb8201ceb43e8f76c","https://github.com/python/cpython/commit/76b3923d688c0efc580658476c5f525ec8735104","https://github.com/python/cpython/commit/f795e042043dfe26c42e1971d4502c1cdc4c65b8","https://github.com/python/cpython/issues/90309","https://github.com/python/cpython/pull/148848","https://mail.python.org/archives/list/security-announce@python.org/thread/IVNWGV2BBNC3RHQAFS22UP4DY56SAXX3/","https://cert-portal.siemens.com/productcert/html/ssa-457936.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6019","description":"http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes \" for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence </script> inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value."},"relatedVulnerabilities":[]},{"artifact":{"id":"28d5db15190e922b","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.23.8&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119591","versionConstraint":"< 3.54.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119591","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119591","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119591","date":"2026-11-12","epss":0.00171,"percentile":0.06577}],"risk":0.0953325,"urls":["https://abraxaslabs.tech/research/sqlite-values-union","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/src/select.c#L7199","https://github.com/sqlite/sqlite/commit/eff50a067c55f972909e7780e506e91382d08de2","https://sqlite.org/bugs/info/2026-10-04T05:34:47Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/ab621a3e11ee4acc","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-stack-exhaustion-via-countofviewoptimization-in-values-clause"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119591","description":"SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to crash the host process via count(*) over a large multi-row VALUES clause. Attackers supplying SQL or a database file with a crafted view can trigger deeply nested TK_PLUS expressions whose recursive freeing in sqlite3ExprDeleteNN() exhausts the C stack, causing denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"24e8795a1c9ca901","cpes":["cpe:2.3:a:matias_aguirre_\\<matiasaguirre_project:python-social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:matias_aguirre_\\<matiasaguirre_project:python_social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:matias_aguirre_\\<matiasaguirreproject:python-social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:matias_aguirre_\\<matiasaguirreproject:python_social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:matias_aguirre_\\<matiasaguirre_project:social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:matias_aguirre_\\<matiasaguirre_project:social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:matias-aguirre-\\<matiasaguirre:python-social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:matias-aguirre-\\<matiasaguirre:python_social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:matias_aguirre_\\<matiasaguirre:python-social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:matias_aguirre_\\<matiasaguirre:python_social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:matias_aguirre_\\<matiasaguirreproject:social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:matias_aguirre_\\<matiasaguirreproject:social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-social-auth-core:python-social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-social-auth-core:python_social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_social_auth_core:python-social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_social_auth_core:python_social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:matias-aguirre-\\<matiasaguirre:social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:matias-aguirre-\\<matiasaguirre:social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:matias_aguirre_\\<matiasaguirre:social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:matias_aguirre_\\<matiasaguirre:social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-social-auth:python-social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-social-auth:python_social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_social_auth:python-social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_social_auth:python_social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-social-auth-core:social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-social-auth-core:social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_social_auth_core:social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_social_auth_core:social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:social-auth-core:python-social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:social-auth-core:python_social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:social_auth_core:python-social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:social_auth_core:python_social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-social:python-social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-social:python_social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_social:python-social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_social:python_social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-social-auth:social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-social-auth:social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_social_auth:social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_social_auth:social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:social-auth:python-social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:social-auth:python_social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:social_auth:python-social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:social_auth:python_social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:social-auth-core:social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:social-auth-core:social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:social_auth_core:social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:social_auth_core:social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-social:social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-social:social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python-social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python_social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_social:social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_social:social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:social:python-social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:social:python_social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:social-auth:social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:social-auth:social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:social_auth:social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:social_auth:social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python:social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python:social_auth_core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:social:social-auth-core:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:social:social_auth_core:5.2.0:*:*:*:*:*:*:*"],"name":"social-auth-core","purl":"pkg:pypi/social-auth-core@5.2.0","type":"python","version":"5.2.0","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/lsiopy/lib/python3.12/site-packages/social_auth_core-5.2.0.dist-info/METADATA","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lsiopy/lib/python3.12/site-packages/social_auth_core-5.2.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/lsiopy/lib/python3.12/site-packages/social_auth_core-5.2.0.dist-info/RECORD","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lsiopy/lib/python3.12/site-packages/social_auth_core-5.2.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/lsiopy/lib/python3.12/site-packages/social_auth_core-5.2.0.dist-info/top_level.txt","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lsiopy/lib/python3.12/site-packages/social_auth_core-5.2.0.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"6.2.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-h2r5-x5m7-3935","versionConstraint":"<=6.1.1 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"social-auth-core","version":"5.2.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-h2r5-x5m7-3935","fix":{"state":"fixed","versions":["6.2.0"],"available":[{"date":"2026-10-29","kind":"first-observed","version":"6.2.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115910","cwe":"CWE-345","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-115910","cwe":"CWE-384","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-115910","date":"2026-11-12","epss":0.00157,"percentile":0.04893}],"risk":0.09262999999999999,"urls":["https://github.com/python-social-auth/social-core/security/advisories/GHSA-h2r5-x5m7-3935","https://nvd.nist.gov/vuln/detail/CVE-2026-115910","https://github.com/python-social-auth/social-core/pull/2141","https://github.com/python-social-auth/social-core/commit/c2f2ae4663bef19ee8b07f2cf5a2344f9155d826","https://github.com/python-social-auth/social-core/releases/tag/6.2.0"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-h2r5-x5m7-3935","description":"Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim"},"relatedVulnerabilities":[{"id":"CVE-2026-115910","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115910","cwe":"CWE-345","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-115910","cwe":"CWE-384","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-115910","date":"2026-11-12","epss":0.00157,"percentile":0.04893}],"urls":["https://github.com/python-social-auth/social-core/commit/c2f2ae4663bef19ee8b07f2cf5a2344f9155d826","https://github.com/python-social-auth/social-core/pull/2141","https://github.com/python-social-auth/social-core/releases/tag/6.2.0","https://github.com/python-social-auth/social-core/security/advisories/GHSA-h2r5-x5m7-3935"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-115910","description":"Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in social_core/backends/open_id_connect.py uses get_and_store_nonce to place the OpenID Connect nonce in a shared OpenIdConnectAssociation table, and get_nonce and validate_claims verify only that the nonce exists and has not expired rather than binding it to the browser session and OAuth state that initiated the login. An attacker who obtains a victim's unused authorization code can start a separate login to obtain valid state for the attacker's browser, submit the victim's code with that state, and pass nonce validation because the victim nonce is globally available. With DEFAULT_USE_PKCE disabled in the default OpenIdConnectAuth configuration, the attacker can be logged in as the victim. This issue is fixed in version 6.2.0."}]},{"artifact":{"id":"09327264ca577f0a","cpes":["cpe:2.3:a:python-software-foundation:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software_foundation:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software-foundation:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software_foundation:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python3:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.16-r0:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:apk/alpine/python3@3.12.16-r0?arch=x86_64&distro=alpine-3.23.8","type":"apk","version":"3.12.16-r0","language":"","licenses":["PSF-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/2to3"},{"path":"/usr/bin/2to3-3.12"},{"path":"/usr/bin/pydoc3"},{"path":"/usr/bin/pydoc3.12"},{"path":"/usr/bin/python"},{"path":"/usr/bin/python3"},{"path":"/usr/bin/python3.12"},{"path":"/usr/include"},{"path":"/usr/include/python3.12"},{"path":"/usr/include/python3.12/pyconfig.h"},{"path":"/usr/lib"},{"path":"/usr/lib/libpython3.12.so.1.0"},{"path":"/usr/lib/libpython3.so"},{"path":"/usr/lib/python3.12"},{"path":"/usr/lib/python3.12/EXTERNALLY-MANAGED"},{"path":"/usr/lib/python3.12/LICENSE.txt"},{"path":"/usr/lib/python3.12/__future__.py"},{"path":"/usr/lib/python3.12/__hello__.py"},{"path":"/usr/lib/python3.12/_aix_support.py"},{"path":"/usr/lib/python3.12/_collections_abc.py"},{"path":"/usr/lib/python3.12/_compat_pickle.py"},{"path":"/usr/lib/python3.12/_compression.py"},{"path":"/usr/lib/python3.12/_markupbase.py"},{"path":"/usr/lib/python3.12/_osx_support.py"},{"path":"/usr/lib/python3.12/_py_abc.py"},{"path":"/usr/lib/python3.12/_pydatetime.py"},{"path":"/usr/lib/python3.12/_pydecimal.py"},{"path":"/usr/lib/python3.12/_pyio.py"},{"path":"/usr/lib/python3.12/_pylong.py"},{"path":"/usr/lib/python3.12/_sitebuiltins.py"},{"path":"/usr/lib/python3.12/_strptime.py"},{"path":"/usr/lib/python3.12/_sysconfigdata__linux_x86_64-linux-musl.py"},{"path":"/usr/lib/python3.12/_threading_local.py"},{"path":"/usr/lib/python3.12/_weakrefset.py"},{"path":"/usr/lib/python3.12/abc.py"},{"path":"/usr/lib/python3.12/aifc.py"},{"path":"/usr/lib/python3.12/antigravity.py"},{"path":"/usr/lib/python3.12/argparse.py"},{"path":"/usr/lib/python3.12/ast.py"},{"path":"/usr/lib/python3.12/base64.py"},{"path":"/usr/lib/python3.12/bdb.py"},{"path":"/usr/lib/python3.12/bisect.py"},{"path":"/usr/lib/python3.12/bz2.py"},{"path":"/usr/lib/python3.12/cProfile.py"},{"path":"/usr/lib/python3.12/calendar.py"},{"path":"/usr/lib/python3.12/cgi.py"},{"path":"/usr/lib/python3.12/cgitb.py"},{"path":"/usr/lib/python3.12/chunk.py"},{"path":"/usr/lib/python3.12/cmd.py"},{"path":"/usr/lib/python3.12/code.py"},{"path":"/usr/lib/python3.12/codecs.py"},{"path":"/usr/lib/python3.12/codeop.py"},{"path":"/usr/lib/python3.12/colorsys.py"},{"path":"/usr/lib/python3.12/compileall.py"},{"path":"/usr/lib/python3.12/configparser.py"},{"path":"/usr/lib/python3.12/contextlib.py"},{"path":"/usr/lib/python3.12/contextvars.py"},{"path":"/usr/lib/python3.12/copy.py"},{"path":"/usr/lib/python3.12/copyreg.py"},{"path":"/usr/lib/python3.12/crypt.py"},{"path":"/usr/lib/python3.12/csv.py"},{"path":"/usr/lib/python3.12/dataclasses.py"},{"path":"/usr/lib/python3.12/datetime.py"},{"path":"/usr/lib/python3.12/decimal.py"},{"path":"/usr/lib/python3.12/difflib.py"},{"path":"/usr/lib/python3.12/dis.py"},{"path":"/usr/lib/python3.12/doctest.py"},{"path":"/usr/lib/python3.12/enum.py"},{"path":"/usr/lib/python3.12/filecmp.py"},{"path":"/usr/lib/python3.12/fileinput.py"},{"path":"/usr/lib/python3.12/fnmatch.py"},{"path":"/usr/lib/python3.12/fractions.py"},{"path":"/usr/lib/python3.12/ftplib.py"},{"path":"/usr/lib/python3.12/functools.py"},{"path":"/usr/lib/python3.12/genericpath.py"},{"path":"/usr/lib/python3.12/getopt.py"},{"path":"/usr/lib/python3.12/getpass.py"},{"path":"/usr/lib/python3.12/gettext.py"},{"path":"/usr/lib/python3.12/glob.py"},{"path":"/usr/lib/python3.12/graphlib.py"},{"path":"/usr/lib/python3.12/gzip.py"},{"path":"/usr/lib/python3.12/hashlib.py"},{"path":"/usr/lib/python3.12/heapq.py"},{"path":"/usr/lib/python3.12/hmac.py"},{"path":"/usr/lib/python3.12/imaplib.py"},{"path":"/usr/lib/python3.12/imghdr.py"},{"path":"/usr/lib/python3.12/inspect.py"},{"path":"/usr/lib/python3.12/io.py"},{"path":"/usr/lib/python3.12/ipaddress.py"},{"path":"/usr/lib/python3.12/keyword.py"},{"path":"/usr/lib/python3.12/linecache.py"},{"path":"/usr/lib/python3.12/locale.py"},{"path":"/usr/lib/python3.12/lzma.py"},{"path":"/usr/lib/python3.12/mailbox.py"},{"path":"/usr/lib/python3.12/mailcap.py"},{"path":"/usr/lib/python3.12/mimetypes.py"},{"path":"/usr/lib/python3.12/modulefinder.py"},{"path":"/usr/lib/python3.12/netrc.py"},{"path":"/usr/lib/python3.12/nntplib.py"},{"path":"/usr/lib/python3.12/ntpath.py"},{"path":"/usr/lib/python3.12/nturl2path.py"},{"path":"/usr/lib/python3.12/numbers.py"},{"path":"/usr/lib/python3.12/opcode.py"},{"path":"/usr/lib/python3.12/operator.py"},{"path":"/usr/lib/python3.12/optparse.py"},{"path":"/usr/lib/python3.12/os.py"},{"path":"/usr/lib/python3.12/pathlib.py"},{"path":"/usr/lib/python3.12/pdb.py"},{"path":"/usr/lib/python3.12/pickle.py"},{"path":"/usr/lib/python3.12/pickletools.py"},{"path":"/usr/lib/python3.12/pipes.py"},{"path":"/usr/lib/python3.12/pkgutil.py"},{"path":"/usr/lib/python3.12/platform.py"},{"path":"/usr/lib/python3.12/plistlib.py"},{"path":"/usr/lib/python3.12/poplib.py"},{"path":"/usr/lib/python3.12/posixpath.py"},{"path":"/usr/lib/python3.12/pprint.py"},{"path":"/usr/lib/python3.12/profile.py"},{"path":"/usr/lib/python3.12/pstats.py"},{"path":"/usr/lib/python3.12/pty.py"},{"path":"/usr/lib/python3.12/py_compile.py"},{"path":"/usr/lib/python3.12/pyclbr.py"},{"path":"/usr/lib/python3.12/pydoc.py"},{"path":"/usr/lib/python3.12/queue.py"},{"path":"/usr/lib/python3.12/quopri.py"},{"path":"/usr/lib/python3.12/random.py"},{"path":"/usr/lib/python3.12/reprlib.py"},{"path":"/usr/lib/python3.12/rlcompleter.py"},{"path":"/usr/lib/python3.12/runpy.py"},{"path":"/usr/lib/python3.12/sched.py"},{"path":"/usr/lib/python3.12/secrets.py"},{"path":"/usr/lib/python3.12/selectors.py"},{"path":"/usr/lib/python3.12/shelve.py"},{"path":"/usr/lib/python3.12/shlex.py"},{"path":"/usr/lib/python3.12/shutil.py"},{"path":"/usr/lib/python3.12/signal.py"},{"path":"/usr/lib/python3.12/site.py"},{"path":"/usr/lib/python3.12/smtplib.py"},{"path":"/usr/lib/python3.12/sndhdr.py"},{"path":"/usr/lib/python3.12/socket.py"},{"path":"/usr/lib/python3.12/socketserver.py"},{"path":"/usr/lib/python3.12/sre_compile.py"},{"path":"/usr/lib/python3.12/sre_constants.py"},{"path":"/usr/lib/python3.12/sre_parse.py"},{"path":"/usr/lib/python3.12/ssl.py"},{"path":"/usr/lib/python3.12/stat.py"},{"path":"/usr/lib/python3.12/statistics.py"},{"path":"/usr/lib/python3.12/string.py"},{"path":"/usr/lib/python3.12/stringprep.py"},{"path":"/usr/lib/python3.12/struct.py"},{"path":"/usr/lib/python3.12/subprocess.py"},{"path":"/usr/lib/python3.12/sunau.py"},{"path":"/usr/lib/python3.12/symtable.py"},{"path":"/usr/lib/python3.12/sysconfig.py"},{"path":"/usr/lib/python3.12/tabnanny.py"},{"path":"/usr/lib/python3.12/tarfile.py"},{"path":"/usr/lib/python3.12/telnetlib.py"},{"path":"/usr/lib/python3.12/tempfile.py"},{"path":"/usr/lib/python3.12/textwrap.py"},{"path":"/usr/lib/python3.12/this.py"},{"path":"/usr/lib/python3.12/threading.py"},{"path":"/usr/lib/python3.12/timeit.py"},{"path":"/usr/lib/python3.12/token.py"},{"path":"/usr/lib/python3.12/tokenize.py"},{"path":"/usr/lib/python3.12/trace.py"},{"path":"/usr/lib/python3.12/traceback.py"},{"path":"/usr/lib/python3.12/tracemalloc.py"},{"path":"/usr/lib/python3.12/tty.py"},{"path":"/usr/lib/python3.12/turtle.py"},{"path":"/usr/lib/python3.12/types.py"},{"path":"/usr/lib/python3.12/typing.py"},{"path":"/usr/lib/python3.12/uu.py"},{"path":"/usr/lib/python3.12/uuid.py"},{"path":"/usr/lib/python3.12/warnings.py"},{"path":"/usr/lib/python3.12/wave.py"},{"path":"/usr/lib/python3.12/weakref.py"},{"path":"/usr/lib/python3.12/webbrowser.py"},{"path":"/usr/lib/python3.12/xdrlib.py"},{"path":"/usr/lib/python3.12/zipapp.py"},{"path":"/usr/lib/python3.12/zipimport.py"},{"path":"/usr/lib/python3.12/__phello__"},{"path":"/usr/lib/python3.12/__phello__/__init__.py"},{"path":"/usr/lib/python3.12/__phello__/spam.py"},{"path":"/usr/lib/python3.12/asyncio"},{"path":"/usr/lib/python3.12/asyncio/__init__.py"},{"path":"/usr/lib/python3.12/asyncio/__main__.py"},{"path":"/usr/lib/python3.12/asyncio/base_events.py"},{"path":"/usr/lib/python3.12/asyncio/base_futures.py"},{"path":"/usr/lib/python3.12/asyncio/base_subprocess.py"},{"path":"/usr/lib/python3.12/asyncio/base_tasks.py"},{"path":"/usr/lib/python3.12/asyncio/constants.py"},{"path":"/usr/lib/python3.12/asyncio/coroutines.py"},{"path":"/usr/lib/python3.12/asyncio/events.py"},{"path":"/usr/lib/python3.12/asyncio/exceptions.py"},{"path":"/usr/lib/python3.12/asyncio/format_helpers.py"},{"path":"/usr/lib/python3.12/asyncio/futures.py"},{"path":"/usr/lib/python3.12/asyncio/locks.py"},{"path":"/usr/lib/python3.12/asyncio/log.py"},{"path":"/usr/lib/python3.12/asyncio/mixins.py"},{"path":"/usr/lib/python3.12/asyncio/proactor_events.py"},{"path":"/usr/lib/python3.12/asyncio/protocols.py"},{"path":"/usr/lib/python3.12/asyncio/queues.py"},{"path":"/usr/lib/python3.12/asyncio/runners.py"},{"path":"/usr/lib/python3.12/asyncio/selector_events.py"},{"path":"/usr/lib/python3.12/asyncio/sslproto.py"},{"path":"/usr/lib/python3.12/asyncio/staggered.py"},{"path":"/usr/lib/python3.12/asyncio/streams.py"},{"path":"/usr/lib/python3.12/asyncio/subprocess.py"},{"path":"/usr/lib/python3.12/asyncio/taskgroups.py"},{"path":"/usr/lib/python3.12/asyncio/tasks.py"},{"path":"/usr/lib/python3.12/asyncio/threads.py"},{"path":"/usr/lib/python3.12/asyncio/timeouts.py"},{"path":"/usr/lib/python3.12/asyncio/transports.py"},{"path":"/usr/lib/python3.12/asyncio/trsock.py"},{"path":"/usr/lib/python3.12/asyncio/unix_events.py"},{"path":"/usr/lib/python3.12/asyncio/windows_events.py"},{"path":"/usr/lib/python3.12/asyncio/windows_utils.py"},{"path":"/usr/lib/python3.12/collections"},{"path":"/usr/lib/python3.12/collections/__init__.py"},{"path":"/usr/lib/python3.12/collections/abc.py"},{"path":"/usr/lib/python3.12/concurrent"},{"path":"/usr/lib/python3.12/concurrent/__init__.py"},{"path":"/usr/lib/python3.12/concurrent/futures"},{"path":"/usr/lib/python3.12/concurrent/futures/__init__.py"},{"path":"/usr/lib/python3.12/concurrent/futures/_base.py"},{"path":"/usr/lib/python3.12/concurrent/futures/process.py"},{"path":"/usr/lib/python3.12/concurrent/futures/thread.py"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Makefile"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.bootstrap"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.local"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.stdlib"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/config.c.in"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/install-sh"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/makesetup"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/python-config.py"},{"path":"/usr/lib/python3.12/ctypes"},{"path":"/usr/lib/python3.12/ctypes/__init__.py"},{"path":"/usr/lib/python3.12/ctypes/_aix.py"},{"path":"/usr/lib/python3.12/ctypes/_endian.py"},{"path":"/usr/lib/python3.12/ctypes/util.py"},{"path":"/usr/lib/python3.12/ctypes/wintypes.py"},{"path":"/usr/lib/python3.12/ctypes/macholib"},{"path":"/usr/lib/python3.12/ctypes/macholib/README.ctypes"},{"path":"/usr/lib/python3.12/ctypes/macholib/__init__.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/dyld.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/dylib.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/fetch_macholib"},{"path":"/usr/lib/python3.12/ctypes/macholib/fetch_macholib.bat"},{"path":"/usr/lib/python3.12/ctypes/macholib/framework.py"},{"path":"/usr/lib/python3.12/curses"},{"path":"/usr/lib/python3.12/curses/__init__.py"},{"path":"/usr/lib/python3.12/curses/ascii.py"},{"path":"/usr/lib/python3.12/curses/has_key.py"},{"path":"/usr/lib/python3.12/curses/panel.py"},{"path":"/usr/lib/python3.12/curses/textpad.py"},{"path":"/usr/lib/python3.12/dbm"},{"path":"/usr/lib/python3.12/dbm/__init__.py"},{"path":"/usr/lib/python3.12/dbm/dumb.py"},{"path":"/usr/lib/python3.12/dbm/gnu.py"},{"path":"/usr/lib/python3.12/dbm/ndbm.py"},{"path":"/usr/lib/python3.12/email"},{"path":"/usr/lib/python3.12/email/__init__.py"},{"path":"/usr/lib/python3.12/email/_encoded_words.py"},{"path":"/usr/lib/python3.12/email/_header_value_parser.py"},{"path":"/usr/lib/python3.12/email/_parseaddr.py"},{"path":"/usr/lib/python3.12/email/_policybase.py"},{"path":"/usr/lib/python3.12/email/architecture.rst"},{"path":"/usr/lib/python3.12/email/base64mime.py"},{"path":"/usr/lib/python3.12/email/charset.py"},{"path":"/usr/lib/python3.12/email/contentmanager.py"},{"path":"/usr/lib/python3.12/email/encoders.py"},{"path":"/usr/lib/python3.12/email/errors.py"},{"path":"/usr/lib/python3.12/email/feedparser.py"},{"path":"/usr/lib/python3.12/email/generator.py"},{"path":"/usr/lib/python3.12/email/header.py"},{"path":"/usr/lib/python3.12/email/headerregistry.py"},{"path":"/usr/lib/python3.12/email/iterators.py"},{"path":"/usr/lib/python3.12/email/message.py"},{"path":"/usr/lib/python3.12/email/parser.py"},{"path":"/usr/lib/python3.12/email/policy.py"},{"path":"/usr/lib/python3.12/email/quoprimime.py"},{"path":"/usr/lib/python3.12/email/utils.py"},{"path":"/usr/lib/python3.12/email/mime"},{"path":"/usr/lib/python3.12/email/mime/__init__.py"},{"path":"/usr/lib/python3.12/email/mime/application.py"},{"path":"/usr/lib/python3.12/email/mime/audio.py"},{"path":"/usr/lib/python3.12/email/mime/base.py"},{"path":"/usr/lib/python3.12/email/mime/image.py"},{"path":"/usr/lib/python3.12/email/mime/message.py"},{"path":"/usr/lib/python3.12/email/mime/multipart.py"},{"path":"/usr/lib/python3.12/email/mime/nonmultipart.py"},{"path":"/usr/lib/python3.12/email/mime/text.py"},{"path":"/usr/lib/python3.12/encodings"},{"path":"/usr/lib/python3.12/encodings/__init__.py"},{"path":"/usr/lib/python3.12/encodings/aliases.py"},{"path":"/usr/lib/python3.12/encodings/ascii.py"},{"path":"/usr/lib/python3.12/encodings/base64_codec.py"},{"path":"/usr/lib/python3.12/encodings/big5.py"},{"path":"/usr/lib/python3.12/encodings/big5hkscs.py"},{"path":"/usr/lib/python3.12/encodings/bz2_codec.py"},{"path":"/usr/lib/python3.12/encodings/charmap.py"},{"path":"/usr/lib/python3.12/encodings/cp037.py"},{"path":"/usr/lib/python3.12/encodings/cp1006.py"},{"path":"/usr/lib/python3.12/encodings/cp1026.py"},{"path":"/usr/lib/python3.12/encodings/cp1125.py"},{"path":"/usr/lib/python3.12/encodings/cp1140.py"},{"path":"/usr/lib/python3.12/encodings/cp1250.py"},{"path":"/usr/lib/python3.12/encodings/cp1251.py"},{"path":"/usr/lib/python3.12/encodings/cp1252.py"},{"path":"/usr/lib/python3.12/encodings/cp1253.py"},{"path":"/usr/lib/python3.12/encodings/cp1254.py"},{"path":"/usr/lib/python3.12/encodings/cp1255.py"},{"path":"/usr/lib/python3.12/encodings/cp1256.py"},{"path":"/usr/lib/python3.12/encodings/cp1257.py"},{"path":"/usr/lib/python3.12/encodings/cp1258.py"},{"path":"/usr/lib/python3.12/encodings/cp273.py"},{"path":"/usr/lib/python3.12/encodings/cp424.py"},{"path":"/usr/lib/python3.12/encodings/cp437.py"},{"path":"/usr/lib/python3.12/encodings/cp500.py"},{"path":"/usr/lib/python3.12/encodings/cp720.py"},{"path":"/usr/lib/python3.12/encodings/cp737.py"},{"path":"/usr/lib/python3.12/encodings/cp775.py"},{"path":"/usr/lib/python3.12/encodings/cp850.py"},{"path":"/usr/lib/python3.12/encodings/cp852.py"},{"path":"/usr/lib/python3.12/encodings/cp855.py"},{"path":"/usr/lib/python3.12/encodings/cp856.py"},{"path":"/usr/lib/python3.12/encodings/cp857.py"},{"path":"/usr/lib/python3.12/encodings/cp858.py"},{"path":"/usr/lib/python3.12/encodings/cp860.py"},{"path":"/usr/lib/python3.12/encodings/cp861.py"},{"path":"/usr/lib/python3.12/encodings/cp862.py"},{"path":"/usr/lib/python3.12/encodings/cp863.py"},{"path":"/usr/lib/python3.12/encodings/cp864.py"},{"path":"/usr/lib/python3.12/encodings/cp865.py"},{"path":"/usr/lib/python3.12/encodings/cp866.py"},{"path":"/usr/lib/python3.12/encodings/cp869.py"},{"path":"/usr/lib/python3.12/encodings/cp874.py"},{"path":"/usr/lib/python3.12/encodings/cp875.py"},{"path":"/usr/lib/python3.12/encodings/cp932.py"},{"path":"/usr/lib/python3.12/encodings/cp949.py"},{"path":"/usr/lib/python3.12/encodings/cp950.py"},{"path":"/usr/lib/python3.12/encodings/euc_jis_2004.py"},{"path":"/usr/lib/python3.12/encodings/euc_jisx0213.py"},{"path":"/usr/lib/python3.12/encodings/euc_jp.py"},{"path":"/usr/lib/python3.12/encodings/euc_kr.py"},{"path":"/usr/lib/python3.12/encodings/gb18030.py"},{"path":"/usr/lib/python3.12/encodings/gb2312.py"},{"path":"/usr/lib/python3.12/encodings/gbk.py"},{"path":"/usr/lib/python3.12/encodings/hex_codec.py"},{"path":"/usr/lib/python3.12/encodings/hp_roman8.py"},{"path":"/usr/lib/python3.12/encodings/hz.py"},{"path":"/usr/lib/python3.12/encodings/idna.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_1.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_2.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_2004.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_3.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_ext.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_kr.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_1.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_10.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_11.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_13.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_14.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_15.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_16.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_2.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_3.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_4.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_5.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_6.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_7.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_8.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_9.py"},{"path":"/usr/lib/python3.12/encodings/johab.py"},{"path":"/usr/lib/python3.12/encodings/koi8_r.py"},{"path":"/usr/lib/python3.12/encodings/koi8_t.py"},{"path":"/usr/lib/python3.12/encodings/koi8_u.py"},{"path":"/usr/lib/python3.12/encodings/kz1048.py"},{"path":"/usr/lib/python3.12/encodings/latin_1.py"},{"path":"/usr/lib/python3.12/encodings/mac_arabic.py"},{"path":"/usr/lib/python3.12/encodings/mac_croatian.py"},{"path":"/usr/lib/python3.12/encodings/mac_cyrillic.py"},{"path":"/usr/lib/python3.12/encodings/mac_farsi.py"},{"path":"/usr/lib/python3.12/encodings/mac_greek.py"},{"path":"/usr/lib/python3.12/encodings/mac_iceland.py"},{"path":"/usr/lib/python3.12/encodings/mac_latin2.py"},{"path":"/usr/lib/python3.12/encodings/mac_roman.py"},{"path":"/usr/lib/python3.12/encodings/mac_romanian.py"},{"path":"/usr/lib/python3.12/encodings/mac_turkish.py"},{"path":"/usr/lib/python3.12/encodings/mbcs.py"},{"path":"/usr/lib/python3.12/encodings/oem.py"},{"path":"/usr/lib/python3.12/encodings/palmos.py"},{"path":"/usr/lib/python3.12/encodings/ptcp154.py"},{"path":"/usr/lib/python3.12/encodings/punycode.py"},{"path":"/usr/lib/python3.12/encodings/quopri_codec.py"},{"path":"/usr/lib/python3.12/encodings/raw_unicode_escape.py"},{"path":"/usr/lib/python3.12/encodings/rot_13.py"},{"path":"/usr/lib/python3.12/encodings/shift_jis.py"},{"path":"/usr/lib/python3.12/encodings/shift_jis_2004.py"},{"path":"/usr/lib/python3.12/encodings/shift_jisx0213.py"},{"path":"/usr/lib/python3.12/encodings/tis_620.py"},{"path":"/usr/lib/python3.12/encodings/undefined.py"},{"path":"/usr/lib/python3.12/encodings/unicode_escape.py"},{"path":"/usr/lib/python3.12/encodings/utf_16.py"},{"path":"/usr/lib/python3.12/encodings/utf_16_be.py"},{"path":"/usr/lib/python3.12/encodings/utf_16_le.py"},{"path":"/usr/lib/python3.12/encodings/utf_32.py"},{"path":"/usr/lib/python3.12/encodings/utf_32_be.py"},{"path":"/usr/lib/python3.12/encodings/utf_32_le.py"},{"path":"/usr/lib/python3.12/encodings/utf_7.py"},{"path":"/usr/lib/python3.12/encodings/utf_8.py"},{"path":"/usr/lib/python3.12/encodings/utf_8_sig.py"},{"path":"/usr/lib/python3.12/encodings/uu_codec.py"},{"path":"/usr/lib/python3.12/encodings/zlib_codec.py"},{"path":"/usr/lib/python3.12/ensurepip"},{"path":"/usr/lib/python3.12/ensurepip/__init__.py"},{"path":"/usr/lib/python3.12/ensurepip/__main__.py"},{"path":"/usr/lib/python3.12/ensurepip/_uninstall.py"},{"path":"/usr/lib/python3.12/ensurepip/_bundled"},{"path":"/usr/lib/python3.12/ensurepip/_bundled/pip-25.0.1-py3-none-any.whl"},{"path":"/usr/lib/python3.12/html"},{"path":"/usr/lib/python3.12/html/__init__.py"},{"path":"/usr/lib/python3.12/html/entities.py"},{"path":"/usr/lib/python3.12/html/parser.py"},{"path":"/usr/lib/python3.12/http"},{"path":"/usr/lib/python3.12/http/__init__.py"},{"path":"/usr/lib/python3.12/http/client.py"},{"path":"/usr/lib/python3.12/http/cookiejar.py"},{"path":"/usr/lib/python3.12/http/cookies.py"},{"path":"/usr/lib/python3.12/http/server.py"},{"path":"/usr/lib/python3.12/importlib"},{"path":"/usr/lib/python3.12/importlib/__init__.py"},{"path":"/usr/lib/python3.12/importlib/_abc.py"},{"path":"/usr/lib/python3.12/importlib/_bootstrap.py"},{"path":"/usr/lib/python3.12/importlib/_bootstrap_external.py"},{"path":"/usr/lib/python3.12/importlib/abc.py"},{"path":"/usr/lib/python3.12/importlib/machinery.py"},{"path":"/usr/lib/python3.12/importlib/readers.py"},{"path":"/usr/lib/python3.12/importlib/simple.py"},{"path":"/usr/lib/python3.12/importlib/util.py"},{"path":"/usr/lib/python3.12/importlib/metadata"},{"path":"/usr/lib/python3.12/importlib/metadata/__init__.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_adapters.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_collections.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_functools.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_itertools.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_meta.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_text.py"},{"path":"/usr/lib/python3.12/importlib/resources"},{"path":"/usr/lib/python3.12/importlib/resources/__init__.py"},{"path":"/usr/lib/python3.12/importlib/resources/_adapters.py"},{"path":"/usr/lib/python3.12/importlib/resources/_common.py"},{"path":"/usr/lib/python3.12/importlib/resources/_itertools.py"},{"path":"/usr/lib/python3.12/importlib/resources/_legacy.py"},{"path":"/usr/lib/python3.12/importlib/resources/abc.py"},{"path":"/usr/lib/python3.12/importlib/resources/readers.py"},{"path":"/usr/lib/python3.12/importlib/resources/simple.py"},{"path":"/usr/lib/python3.12/json"},{"path":"/usr/lib/python3.12/json/__init__.py"},{"path":"/usr/lib/python3.12/json/decoder.py"},{"path":"/usr/lib/python3.12/json/encoder.py"},{"path":"/usr/lib/python3.12/json/scanner.py"},{"path":"/usr/lib/python3.12/json/tool.py"},{"path":"/usr/lib/python3.12/lib-dynload"},{"path":"/usr/lib/python3.12/lib-dynload/_asyncio.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_bisect.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_blake2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_bz2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_cn.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_hk.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_iso2022.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_jp.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_kr.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_tw.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_contextvars.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_crypt.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_csv.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ctypes.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ctypes_test.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_curses.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_curses_panel.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_datetime.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_dbm.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_decimal.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_elementtree.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_hashlib.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_heapq.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_json.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_lsprof.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_lzma.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_md5.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_multibytecodec.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_multiprocessing.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_opcode.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_pickle.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_posixshmem.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_posixsubprocess.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_queue.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_random.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha1.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha3.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_socket.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sqlite3.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ssl.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_statistics.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_struct.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testbuffer.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testcapi.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testclinic.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testimportmultiple.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testinternalcapi.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testmultiphase.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testsinglephase.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxinterpchannels.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxsubinterpreters.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxtestfuzz.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_zoneinfo.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/array.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/audioop.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/binascii.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/cmath.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/fcntl.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/grp.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/math.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/mmap.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/ossaudiodev.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/pyexpat.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/readline.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/resource.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/select.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/spwd.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/syslog.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/termios.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/unicodedata.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxlimited.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxlimited_35.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxsubtype.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/zlib.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib2to3"},{"path":"/usr/lib/python3.12/lib2to3/Grammar.txt"},{"path":"/usr/lib/python3.12/lib2to3/Grammar3.12.16.final.0.pickle"},{"path":"/usr/lib/python3.12/lib2to3/PatternGrammar.txt"},{"path":"/usr/lib/python3.12/lib2to3/PatternGrammar3.12.16.final.0.pickle"},{"path":"/usr/lib/python3.12/lib2to3/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/__main__.py"},{"path":"/usr/lib/python3.12/lib2to3/btm_matcher.py"},{"path":"/usr/lib/python3.12/lib2to3/btm_utils.py"},{"path":"/usr/lib/python3.12/lib2to3/fixer_base.py"},{"path":"/usr/lib/python3.12/lib2to3/fixer_util.py"},{"path":"/usr/lib/python3.12/lib2to3/main.py"},{"path":"/usr/lib/python3.12/lib2to3/patcomp.py"},{"path":"/usr/lib/python3.12/lib2to3/pygram.py"},{"path":"/usr/lib/python3.12/lib2to3/pytree.py"},{"path":"/usr/lib/python3.12/lib2to3/refactor.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes"},{"path":"/usr/lib/python3.12/lib2to3/fixes/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_apply.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_asserts.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_basestring.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_buffer.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_dict.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_except.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_exec.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_execfile.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_exitfunc.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_filter.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_funcattrs.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_future.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_getcwdu.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_has_key.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_idioms.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_import.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_imports.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_imports2.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_input.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_intern.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_isinstance.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_itertools.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_itertools_imports.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_long.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_map.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_metaclass.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_methodattrs.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_ne.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_next.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_nonzero.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_numliterals.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_operator.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_paren.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_print.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_raise.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_raw_input.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_reduce.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_reload.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_renames.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_repr.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_set_literal.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_standarderror.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_sys_exc.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_throw.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_tuple_params.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_types.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_unicode.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_urllib.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_ws_comma.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_xrange.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_xreadlines.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_zip.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/conv.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/driver.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/grammar.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/literals.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/parse.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/pgen.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/token.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/tokenize.py"},{"path":"/usr/lib/python3.12/logging"},{"path":"/usr/lib/python3.12/logging/__init__.py"},{"path":"/usr/lib/python3.12/logging/config.py"},{"path":"/usr/lib/python3.12/logging/handlers.py"},{"path":"/usr/lib/python3.12/multiprocessing"},{"path":"/usr/lib/python3.12/multiprocessing/__init__.py"},{"path":"/usr/lib/python3.12/multiprocessing/connection.py"},{"path":"/usr/lib/python3.12/multiprocessing/context.py"},{"path":"/usr/lib/python3.12/multiprocessing/forkserver.py"},{"path":"/usr/lib/python3.12/multiprocessing/heap.py"},{"path":"/usr/lib/python3.12/multiprocessing/managers.py"},{"path":"/usr/lib/python3.12/multiprocessing/pool.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_fork.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_forkserver.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_spawn_posix.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_spawn_win32.py"},{"path":"/usr/lib/python3.12/multiprocessing/process.py"},{"path":"/usr/lib/python3.12/multiprocessing/queues.py"},{"path":"/usr/lib/python3.12/multiprocessing/reduction.py"},{"path":"/usr/lib/python3.12/multiprocessing/resource_sharer.py"},{"path":"/usr/lib/python3.12/multiprocessing/resource_tracker.py"},{"path":"/usr/lib/python3.12/multiprocessing/shared_memory.py"},{"path":"/usr/lib/python3.12/multiprocessing/sharedctypes.py"},{"path":"/usr/lib/python3.12/multiprocessing/spawn.py"},{"path":"/usr/lib/python3.12/multiprocessing/synchronize.py"},{"path":"/usr/lib/python3.12/multiprocessing/util.py"},{"path":"/usr/lib/python3.12/multiprocessing/dummy"},{"path":"/usr/lib/python3.12/multiprocessing/dummy/__init__.py"},{"path":"/usr/lib/python3.12/multiprocessing/dummy/connection.py"},{"path":"/usr/lib/python3.12/pydoc_data"},{"path":"/usr/lib/python3.12/pydoc_data/__init__.py"},{"path":"/usr/lib/python3.12/pydoc_data/_pydoc.css"},{"path":"/usr/lib/python3.12/pydoc_data/topics.py"},{"path":"/usr/lib/python3.12/re"},{"path":"/usr/lib/python3.12/re/__init__.py"},{"path":"/usr/lib/python3.12/re/_casefix.py"},{"path":"/usr/lib/python3.12/re/_compiler.py"},{"path":"/usr/lib/python3.12/re/_constants.py"},{"path":"/usr/lib/python3.12/re/_parser.py"},{"path":"/usr/lib/python3.12/site-packages"},{"path":"/usr/lib/python3.12/site-packages/README.txt"},{"path":"/usr/lib/python3.12/sqlite3"},{"path":"/usr/lib/python3.12/sqlite3/__init__.py"},{"path":"/usr/lib/python3.12/sqlite3/__main__.py"},{"path":"/usr/lib/python3.12/sqlite3/dbapi2.py"},{"path":"/usr/lib/python3.12/sqlite3/dump.py"},{"path":"/usr/lib/python3.12/tomllib"},{"path":"/usr/lib/python3.12/tomllib/__init__.py"},{"path":"/usr/lib/python3.12/tomllib/_parser.py"},{"path":"/usr/lib/python3.12/tomllib/_re.py"},{"path":"/usr/lib/python3.12/tomllib/_types.py"},{"path":"/usr/lib/python3.12/turtledemo"},{"path":"/usr/lib/python3.12/turtledemo/__init__.py"},{"path":"/usr/lib/python3.12/turtledemo/__main__.py"},{"path":"/usr/lib/python3.12/turtledemo/bytedesign.py"},{"path":"/usr/lib/python3.12/turtledemo/chaos.py"},{"path":"/usr/lib/python3.12/turtledemo/clock.py"},{"path":"/usr/lib/python3.12/turtledemo/colormixer.py"},{"path":"/usr/lib/python3.12/turtledemo/forest.py"},{"path":"/usr/lib/python3.12/turtledemo/fractalcurves.py"},{"path":"/usr/lib/python3.12/turtledemo/lindenmayer.py"},{"path":"/usr/lib/python3.12/turtledemo/minimal_hanoi.py"},{"path":"/usr/lib/python3.12/turtledemo/nim.py"},{"path":"/usr/lib/python3.12/turtledemo/paint.py"},{"path":"/usr/lib/python3.12/turtledemo/peace.py"},{"path":"/usr/lib/python3.12/turtledemo/penrose.py"},{"path":"/usr/lib/python3.12/turtledemo/planet_and_moon.py"},{"path":"/usr/lib/python3.12/turtledemo/rosette.py"},{"path":"/usr/lib/python3.12/turtledemo/round_dance.py"},{"path":"/usr/lib/python3.12/turtledemo/sorting_animate.py"},{"path":"/usr/lib/python3.12/turtledemo/tree.py"},{"path":"/usr/lib/python3.12/turtledemo/turtle.cfg"},{"path":"/usr/lib/python3.12/turtledemo/two_canvases.py"},{"path":"/usr/lib/python3.12/turtledemo/yinyang.py"},{"path":"/usr/lib/python3.12/unittest"},{"path":"/usr/lib/python3.12/unittest/__init__.py"},{"path":"/usr/lib/python3.12/unittest/__main__.py"},{"path":"/usr/lib/python3.12/unittest/_log.py"},{"path":"/usr/lib/python3.12/unittest/async_case.py"},{"path":"/usr/lib/python3.12/unittest/case.py"},{"path":"/usr/lib/python3.12/unittest/loader.py"},{"path":"/usr/lib/python3.12/unittest/main.py"},{"path":"/usr/lib/python3.12/unittest/mock.py"},{"path":"/usr/lib/python3.12/unittest/result.py"},{"path":"/usr/lib/python3.12/unittest/runner.py"},{"path":"/usr/lib/python3.12/unittest/signals.py"},{"path":"/usr/lib/python3.12/unittest/suite.py"},{"path":"/usr/lib/python3.12/unittest/util.py"},{"path":"/usr/lib/python3.12/urllib"},{"path":"/usr/lib/python3.12/urllib/__init__.py"},{"path":"/usr/lib/python3.12/urllib/error.py"},{"path":"/usr/lib/python3.12/urllib/parse.py"},{"path":"/usr/lib/python3.12/urllib/request.py"},{"path":"/usr/lib/python3.12/urllib/response.py"},{"path":"/usr/lib/python3.12/urllib/robotparser.py"},{"path":"/usr/lib/python3.12/venv"},{"path":"/usr/lib/python3.12/venv/__init__.py"},{"path":"/usr/lib/python3.12/venv/__main__.py"},{"path":"/usr/lib/python3.12/venv/scripts"},{"path":"/usr/lib/python3.12/venv/scripts/common"},{"path":"/usr/lib/python3.12/venv/scripts/common/Activate.ps1"},{"path":"/usr/lib/python3.12/venv/scripts/common/activate"},{"path":"/usr/lib/python3.12/venv/scripts/posix"},{"path":"/usr/lib/python3.12/venv/scripts/posix/activate.csh"},{"path":"/usr/lib/python3.12/venv/scripts/posix/activate.fish"},{"path":"/usr/lib/python3.12/wsgiref"},{"path":"/usr/lib/python3.12/wsgiref/__init__.py"},{"path":"/usr/lib/python3.12/wsgiref/handlers.py"},{"path":"/usr/lib/python3.12/wsgiref/headers.py"},{"path":"/usr/lib/python3.12/wsgiref/simple_server.py"},{"path":"/usr/lib/python3.12/wsgiref/types.py"},{"path":"/usr/lib/python3.12/wsgiref/util.py"},{"path":"/usr/lib/python3.12/wsgiref/validate.py"},{"path":"/usr/lib/python3.12/xml"},{"path":"/usr/lib/python3.12/xml/__init__.py"},{"path":"/usr/lib/python3.12/xml/dom"},{"path":"/usr/lib/python3.12/xml/dom/NodeFilter.py"},{"path":"/usr/lib/python3.12/xml/dom/__init__.py"},{"path":"/usr/lib/python3.12/xml/dom/domreg.py"},{"path":"/usr/lib/python3.12/xml/dom/expatbuilder.py"},{"path":"/usr/lib/python3.12/xml/dom/minicompat.py"},{"path":"/usr/lib/python3.12/xml/dom/minidom.py"},{"path":"/usr/lib/python3.12/xml/dom/pulldom.py"},{"path":"/usr/lib/python3.12/xml/dom/xmlbuilder.py"},{"path":"/usr/lib/python3.12/xml/etree"},{"path":"/usr/lib/python3.12/xml/etree/ElementInclude.py"},{"path":"/usr/lib/python3.12/xml/etree/ElementPath.py"},{"path":"/usr/lib/python3.12/xml/etree/ElementTree.py"},{"path":"/usr/lib/python3.12/xml/etree/__init__.py"},{"path":"/usr/lib/python3.12/xml/etree/cElementTree.py"},{"path":"/usr/lib/python3.12/xml/parsers"},{"path":"/usr/lib/python3.12/xml/parsers/__init__.py"},{"path":"/usr/lib/python3.12/xml/parsers/expat.py"},{"path":"/usr/lib/python3.12/xml/sax"},{"path":"/usr/lib/python3.12/xml/sax/__init__.py"},{"path":"/usr/lib/python3.12/xml/sax/_exceptions.py"},{"path":"/usr/lib/python3.12/xml/sax/expatreader.py"},{"path":"/usr/lib/python3.12/xml/sax/handler.py"},{"path":"/usr/lib/python3.12/xml/sax/saxutils.py"},{"path":"/usr/lib/python3.12/xml/sax/xmlreader.py"},{"path":"/usr/lib/python3.12/xmlrpc"},{"path":"/usr/lib/python3.12/xmlrpc/__init__.py"},{"path":"/usr/lib/python3.12/xmlrpc/client.py"},{"path":"/usr/lib/python3.12/xmlrpc/server.py"},{"path":"/usr/lib/python3.12/zipfile"},{"path":"/usr/lib/python3.12/zipfile/__init__.py"},{"path":"/usr/lib/python3.12/zipfile/__main__.py"},{"path":"/usr/lib/python3.12/zipfile/_path"},{"path":"/usr/lib/python3.12/zipfile/_path/__init__.py"},{"path":"/usr/lib/python3.12/zipfile/_path/glob.py"},{"path":"/usr/lib/python3.12/zoneinfo"},{"path":"/usr/lib/python3.12/zoneinfo/__init__.py"},{"path":"/usr/lib/python3.12/zoneinfo/_common.py"},{"path":"/usr/lib/python3.12/zoneinfo/_tzpath.py"},{"path":"/usr/lib/python3.12/zoneinfo/_zoneinfo.py"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-103995","versionConstraint":"< 3.16.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.16:*:*:*:*:*:*:*"],"package":{"name":"python3","version":"3.12.16-r0"},"namespace":"nvd:cpe"}},{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-103995","versionConstraint":"< 3.16.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.16:*:*:*:*:*:*:*"],"package":{"name":"python3","version":"3.12.16-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-103995","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103995","cwe":"CWE-444","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-103995","date":"2026-11-12","epss":0.0036,"percentile":0.30181}],"risk":0.09,"urls":["https://github.com/python/cpython/commit/2eb2af805c156ca52b316bb4ced5e0ab3971d0ae","https://github.com/python/cpython/commit/9f52b443c002cccfb54bda0706a9276b6b4a109d","https://github.com/python/cpython/issues/150751","https://github.com/python/cpython/pull/150752"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103995","description":"Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents."},"relatedVulnerabilities":[]},{"artifact":{"id":"28d5db15190e922b","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.23.8&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119372","versionConstraint":"< 3.54.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119372","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119372","cwe":"CWE-416","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119372","date":"2026-11-12","epss":0.00147,"percentile":0.04011}],"risk":0.0819525,"urls":["https://abraxaslabs.tech/research/sqlite-fts3-snippet","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts3/fts3_snippet.c#L561","https://github.com/sqlite/sqlite/commit/a87bd2471a9c0606e78d3c3678bcd9cecaa0e731","https://sqlite.org/bugs/info/2026-08-17T09:18:24Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/e4635c4153","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-use-after-free-in-fts3-fts3bestsnippet-via-snippet"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119372","description":"SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PARENTHESIS contains a use-after-free vulnerability in fts3BestSnippet() caused by dangling cached position-list pointers. Attackers can run a full-text MATCH query combining OR and NEAR operators with snippet() to read freed heap memory and crash the process."},"relatedVulnerabilities":[]},{"artifact":{"id":"746a5398c68762fd","cpes":["cpe:2.3:a:coreutils:coreutils:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils:9.8-r1:*:*:*:*:*:*:*"],"name":"coreutils","purl":"pkg:apk/alpine/coreutils@9.8-r1?arch=x86_64&distro=alpine-3.23.8","type":"apk","version":"9.8-r1","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/base64"},{"path":"/bin/cat"},{"path":"/bin/chgrp"},{"path":"/bin/chmod"},{"path":"/bin/chown"},{"path":"/bin/coreutils"},{"path":"/bin/cp"},{"path":"/bin/date"},{"path":"/bin/dd"},{"path":"/bin/df"},{"path":"/bin/echo"},{"path":"/bin/false"},{"path":"/bin/link"},{"path":"/bin/ln"},{"path":"/bin/ls"},{"path":"/bin/mkdir"},{"path":"/bin/mknod"},{"path":"/bin/mktemp"},{"path":"/bin/mv"},{"path":"/bin/nice"},{"path":"/bin/printenv"},{"path":"/bin/pwd"},{"path":"/bin/rm"},{"path":"/bin/rmdir"},{"path":"/bin/sleep"},{"path":"/bin/stat"},{"path":"/bin/stty"},{"path":"/bin/sync"},{"path":"/bin/touch"},{"path":"/bin/true"},{"path":"/bin/uname"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/["},{"path":"/usr/bin/b2sum"},{"path":"/usr/bin/base32"},{"path":"/usr/bin/basename"},{"path":"/usr/bin/basenc"},{"path":"/usr/bin/chcon"},{"path":"/usr/bin/cksum"},{"path":"/usr/bin/comm"},{"path":"/usr/bin/csplit"},{"path":"/usr/bin/cut"},{"path":"/usr/bin/dir"},{"path":"/usr/bin/dircolors"},{"path":"/usr/bin/dirname"},{"path":"/usr/bin/du"},{"path":"/usr/bin/expand"},{"path":"/usr/bin/expr"},{"path":"/usr/bin/factor"},{"path":"/usr/bin/fold"},{"path":"/usr/bin/head"},{"path":"/usr/bin/hostid"},{"path":"/usr/bin/id"},{"path":"/usr/bin/install"},{"path":"/usr/bin/join"},{"path":"/usr/bin/logname"},{"path":"/usr/bin/md5sum"},{"path":"/usr/bin/mkfifo"},{"path":"/usr/bin/nl"},{"path":"/usr/bin/nohup"},{"path":"/usr/bin/nproc"},{"path":"/usr/bin/numfmt"},{"path":"/usr/bin/od"},{"path":"/usr/bin/paste"},{"path":"/usr/bin/pathchk"},{"path":"/usr/bin/pinky"},{"path":"/usr/bin/pr"},{"path":"/usr/bin/printf"},{"path":"/usr/bin/ptx"},{"path":"/usr/bin/readlink"},{"path":"/usr/bin/realpath"},{"path":"/usr/bin/runcon"},{"path":"/usr/bin/seq"},{"path":"/usr/bin/sha1sum"},{"path":"/usr/bin/sha224sum"},{"path":"/usr/bin/sha256sum"},{"path":"/usr/bin/sha384sum"},{"path":"/usr/bin/shred"},{"path":"/usr/bin/shuf"},{"path":"/usr/bin/sort"},{"path":"/usr/bin/split"},{"path":"/usr/bin/stdbuf"},{"path":"/usr/bin/sum"},{"path":"/usr/bin/tac"},{"path":"/usr/bin/tail"},{"path":"/usr/bin/tee"},{"path":"/usr/bin/test"},{"path":"/usr/bin/timeout"},{"path":"/usr/bin/tr"},{"path":"/usr/bin/truncate"},{"path":"/usr/bin/tsort"},{"path":"/usr/bin/tty"},{"path":"/usr/bin/unexpand"},{"path":"/usr/bin/uniq"},{"path":"/usr/bin/unlink"},{"path":"/usr/bin/users"},{"path":"/usr/bin/vdir"},{"path":"/usr/bin/wc"},{"path":"/usr/bin/who"},{"path":"/usr/bin/whoami"},{"path":"/usr/bin/yes"},{"path":"/usr/libexec"},{"path":"/usr/libexec/coreutils"},{"path":"/usr/libexec/coreutils/libstdbuf.so"},{"path":"/usr/sbin"},{"path":"/usr/sbin/chroot"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56391","versionConstraint":">= 9.5, <= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.8:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.8-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56391","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56391","cwe":"CWE-125","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56391","date":"2026-11-12","epss":0.00131,"percentile":0.02761}],"risk":0.06779249999999999,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56391","description":"GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."},"relatedVulnerabilities":[]},{"artifact":{"id":"80fc7e85cd2608c5","cpes":["cpe:2.3:a:coreutils-env:coreutils-env:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-env:coreutils_env:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils-env:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils_env:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-env:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_env:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-env:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_env:9.8-r1:*:*:*:*:*:*:*"],"name":"coreutils-env","purl":"pkg:apk/alpine/coreutils-env@9.8-r1?arch=x86_64&distro=alpine-3.23.8&upstream=coreutils","type":"apk","version":"9.8-r1","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/env"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56391","versionConstraint":">= 9.5, <= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.8:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.8-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56391","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56391","cwe":"CWE-125","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56391","date":"2026-11-12","epss":0.00131,"percentile":0.02761}],"risk":0.06779249999999999,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56391","description":"GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."},"relatedVulnerabilities":[]},{"artifact":{"id":"68b3fbeb4ac465f1","cpes":["cpe:2.3:a:coreutils-fmt:coreutils-fmt:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-fmt:coreutils_fmt:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils-fmt:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils_fmt:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-fmt:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_fmt:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-fmt:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_fmt:9.8-r1:*:*:*:*:*:*:*"],"name":"coreutils-fmt","purl":"pkg:apk/alpine/coreutils-fmt@9.8-r1?arch=x86_64&distro=alpine-3.23.8&upstream=coreutils","type":"apk","version":"9.8-r1","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/fmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56391","versionConstraint":">= 9.5, <= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.8:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.8-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56391","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56391","cwe":"CWE-125","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56391","date":"2026-11-12","epss":0.00131,"percentile":0.02761}],"risk":0.06779249999999999,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56391","description":"GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."},"relatedVulnerabilities":[]},{"artifact":{"id":"b7fbe9298b523216","cpes":["cpe:2.3:a:coreutils-sha512sum:coreutils-sha512sum:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-sha512sum:coreutils_sha512sum:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils-sha512sum:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils_sha512sum:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-sha512sum:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_sha512sum:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-sha512sum:9.8-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_sha512sum:9.8-r1:*:*:*:*:*:*:*"],"name":"coreutils-sha512sum","purl":"pkg:apk/alpine/coreutils-sha512sum@9.8-r1?arch=x86_64&distro=alpine-3.23.8&upstream=coreutils","type":"apk","version":"9.8-r1","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/sha512sum"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56391","versionConstraint":">= 9.5, <= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.8:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.8-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56391","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56391","cwe":"CWE-125","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56391","date":"2026-11-12","epss":0.00131,"percentile":0.02761}],"risk":0.06779249999999999,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56391","description":"GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."},"relatedVulnerabilities":[]},{"artifact":{"id":"28d5db15190e922b","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.23.8&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119377","versionConstraint":"< 3.54.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119377","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.5,"impactScore":1.5,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119377","cwe":"CWE-863","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119377","date":"2026-11-12","epss":0.00129,"percentile":0.02546}],"risk":0.03612,"urls":["https://abraxaslabs.tech/research/sqlite-fj-using-auth","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/src/resolve.c#L775","https://github.com/sqlite/sqlite/commit/5694c3bb2a6a40770ecd2f65910eea756734dfd8","https://github.com/sqlite/sqlite/commit/7ff247c5b9ead3ad8a69c26d3fd264878e127237","https://sqlite.org/bugs/info/2026-07-05T08:15:45Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/2cb22877683680c1","https://sqlite.org/src/info/bbd69ce274620008","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-authorizer-bypass-via-right-or-full-join-using"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119377","description":"SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3_set_authorizer() SQLITE_READ restrictions."},"relatedVulnerabilities":[]},{"artifact":{"id":"09327264ca577f0a","cpes":["cpe:2.3:a:python-software-foundation:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software_foundation:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software-foundation:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software_foundation:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python-software:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python_software:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python3:python:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python:python3:3.12.16-r0:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.16-r0:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:apk/alpine/python3@3.12.16-r0?arch=x86_64&distro=alpine-3.23.8","type":"apk","version":"3.12.16-r0","language":"","licenses":["PSF-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/2to3"},{"path":"/usr/bin/2to3-3.12"},{"path":"/usr/bin/pydoc3"},{"path":"/usr/bin/pydoc3.12"},{"path":"/usr/bin/python"},{"path":"/usr/bin/python3"},{"path":"/usr/bin/python3.12"},{"path":"/usr/include"},{"path":"/usr/include/python3.12"},{"path":"/usr/include/python3.12/pyconfig.h"},{"path":"/usr/lib"},{"path":"/usr/lib/libpython3.12.so.1.0"},{"path":"/usr/lib/libpython3.so"},{"path":"/usr/lib/python3.12"},{"path":"/usr/lib/python3.12/EXTERNALLY-MANAGED"},{"path":"/usr/lib/python3.12/LICENSE.txt"},{"path":"/usr/lib/python3.12/__future__.py"},{"path":"/usr/lib/python3.12/__hello__.py"},{"path":"/usr/lib/python3.12/_aix_support.py"},{"path":"/usr/lib/python3.12/_collections_abc.py"},{"path":"/usr/lib/python3.12/_compat_pickle.py"},{"path":"/usr/lib/python3.12/_compression.py"},{"path":"/usr/lib/python3.12/_markupbase.py"},{"path":"/usr/lib/python3.12/_osx_support.py"},{"path":"/usr/lib/python3.12/_py_abc.py"},{"path":"/usr/lib/python3.12/_pydatetime.py"},{"path":"/usr/lib/python3.12/_pydecimal.py"},{"path":"/usr/lib/python3.12/_pyio.py"},{"path":"/usr/lib/python3.12/_pylong.py"},{"path":"/usr/lib/python3.12/_sitebuiltins.py"},{"path":"/usr/lib/python3.12/_strptime.py"},{"path":"/usr/lib/python3.12/_sysconfigdata__linux_x86_64-linux-musl.py"},{"path":"/usr/lib/python3.12/_threading_local.py"},{"path":"/usr/lib/python3.12/_weakrefset.py"},{"path":"/usr/lib/python3.12/abc.py"},{"path":"/usr/lib/python3.12/aifc.py"},{"path":"/usr/lib/python3.12/antigravity.py"},{"path":"/usr/lib/python3.12/argparse.py"},{"path":"/usr/lib/python3.12/ast.py"},{"path":"/usr/lib/python3.12/base64.py"},{"path":"/usr/lib/python3.12/bdb.py"},{"path":"/usr/lib/python3.12/bisect.py"},{"path":"/usr/lib/python3.12/bz2.py"},{"path":"/usr/lib/python3.12/cProfile.py"},{"path":"/usr/lib/python3.12/calendar.py"},{"path":"/usr/lib/python3.12/cgi.py"},{"path":"/usr/lib/python3.12/cgitb.py"},{"path":"/usr/lib/python3.12/chunk.py"},{"path":"/usr/lib/python3.12/cmd.py"},{"path":"/usr/lib/python3.12/code.py"},{"path":"/usr/lib/python3.12/codecs.py"},{"path":"/usr/lib/python3.12/codeop.py"},{"path":"/usr/lib/python3.12/colorsys.py"},{"path":"/usr/lib/python3.12/compileall.py"},{"path":"/usr/lib/python3.12/configparser.py"},{"path":"/usr/lib/python3.12/contextlib.py"},{"path":"/usr/lib/python3.12/contextvars.py"},{"path":"/usr/lib/python3.12/copy.py"},{"path":"/usr/lib/python3.12/copyreg.py"},{"path":"/usr/lib/python3.12/crypt.py"},{"path":"/usr/lib/python3.12/csv.py"},{"path":"/usr/lib/python3.12/dataclasses.py"},{"path":"/usr/lib/python3.12/datetime.py"},{"path":"/usr/lib/python3.12/decimal.py"},{"path":"/usr/lib/python3.12/difflib.py"},{"path":"/usr/lib/python3.12/dis.py"},{"path":"/usr/lib/python3.12/doctest.py"},{"path":"/usr/lib/python3.12/enum.py"},{"path":"/usr/lib/python3.12/filecmp.py"},{"path":"/usr/lib/python3.12/fileinput.py"},{"path":"/usr/lib/python3.12/fnmatch.py"},{"path":"/usr/lib/python3.12/fractions.py"},{"path":"/usr/lib/python3.12/ftplib.py"},{"path":"/usr/lib/python3.12/functools.py"},{"path":"/usr/lib/python3.12/genericpath.py"},{"path":"/usr/lib/python3.12/getopt.py"},{"path":"/usr/lib/python3.12/getpass.py"},{"path":"/usr/lib/python3.12/gettext.py"},{"path":"/usr/lib/python3.12/glob.py"},{"path":"/usr/lib/python3.12/graphlib.py"},{"path":"/usr/lib/python3.12/gzip.py"},{"path":"/usr/lib/python3.12/hashlib.py"},{"path":"/usr/lib/python3.12/heapq.py"},{"path":"/usr/lib/python3.12/hmac.py"},{"path":"/usr/lib/python3.12/imaplib.py"},{"path":"/usr/lib/python3.12/imghdr.py"},{"path":"/usr/lib/python3.12/inspect.py"},{"path":"/usr/lib/python3.12/io.py"},{"path":"/usr/lib/python3.12/ipaddress.py"},{"path":"/usr/lib/python3.12/keyword.py"},{"path":"/usr/lib/python3.12/linecache.py"},{"path":"/usr/lib/python3.12/locale.py"},{"path":"/usr/lib/python3.12/lzma.py"},{"path":"/usr/lib/python3.12/mailbox.py"},{"path":"/usr/lib/python3.12/mailcap.py"},{"path":"/usr/lib/python3.12/mimetypes.py"},{"path":"/usr/lib/python3.12/modulefinder.py"},{"path":"/usr/lib/python3.12/netrc.py"},{"path":"/usr/lib/python3.12/nntplib.py"},{"path":"/usr/lib/python3.12/ntpath.py"},{"path":"/usr/lib/python3.12/nturl2path.py"},{"path":"/usr/lib/python3.12/numbers.py"},{"path":"/usr/lib/python3.12/opcode.py"},{"path":"/usr/lib/python3.12/operator.py"},{"path":"/usr/lib/python3.12/optparse.py"},{"path":"/usr/lib/python3.12/os.py"},{"path":"/usr/lib/python3.12/pathlib.py"},{"path":"/usr/lib/python3.12/pdb.py"},{"path":"/usr/lib/python3.12/pickle.py"},{"path":"/usr/lib/python3.12/pickletools.py"},{"path":"/usr/lib/python3.12/pipes.py"},{"path":"/usr/lib/python3.12/pkgutil.py"},{"path":"/usr/lib/python3.12/platform.py"},{"path":"/usr/lib/python3.12/plistlib.py"},{"path":"/usr/lib/python3.12/poplib.py"},{"path":"/usr/lib/python3.12/posixpath.py"},{"path":"/usr/lib/python3.12/pprint.py"},{"path":"/usr/lib/python3.12/profile.py"},{"path":"/usr/lib/python3.12/pstats.py"},{"path":"/usr/lib/python3.12/pty.py"},{"path":"/usr/lib/python3.12/py_compile.py"},{"path":"/usr/lib/python3.12/pyclbr.py"},{"path":"/usr/lib/python3.12/pydoc.py"},{"path":"/usr/lib/python3.12/queue.py"},{"path":"/usr/lib/python3.12/quopri.py"},{"path":"/usr/lib/python3.12/random.py"},{"path":"/usr/lib/python3.12/reprlib.py"},{"path":"/usr/lib/python3.12/rlcompleter.py"},{"path":"/usr/lib/python3.12/runpy.py"},{"path":"/usr/lib/python3.12/sched.py"},{"path":"/usr/lib/python3.12/secrets.py"},{"path":"/usr/lib/python3.12/selectors.py"},{"path":"/usr/lib/python3.12/shelve.py"},{"path":"/usr/lib/python3.12/shlex.py"},{"path":"/usr/lib/python3.12/shutil.py"},{"path":"/usr/lib/python3.12/signal.py"},{"path":"/usr/lib/python3.12/site.py"},{"path":"/usr/lib/python3.12/smtplib.py"},{"path":"/usr/lib/python3.12/sndhdr.py"},{"path":"/usr/lib/python3.12/socket.py"},{"path":"/usr/lib/python3.12/socketserver.py"},{"path":"/usr/lib/python3.12/sre_compile.py"},{"path":"/usr/lib/python3.12/sre_constants.py"},{"path":"/usr/lib/python3.12/sre_parse.py"},{"path":"/usr/lib/python3.12/ssl.py"},{"path":"/usr/lib/python3.12/stat.py"},{"path":"/usr/lib/python3.12/statistics.py"},{"path":"/usr/lib/python3.12/string.py"},{"path":"/usr/lib/python3.12/stringprep.py"},{"path":"/usr/lib/python3.12/struct.py"},{"path":"/usr/lib/python3.12/subprocess.py"},{"path":"/usr/lib/python3.12/sunau.py"},{"path":"/usr/lib/python3.12/symtable.py"},{"path":"/usr/lib/python3.12/sysconfig.py"},{"path":"/usr/lib/python3.12/tabnanny.py"},{"path":"/usr/lib/python3.12/tarfile.py"},{"path":"/usr/lib/python3.12/telnetlib.py"},{"path":"/usr/lib/python3.12/tempfile.py"},{"path":"/usr/lib/python3.12/textwrap.py"},{"path":"/usr/lib/python3.12/this.py"},{"path":"/usr/lib/python3.12/threading.py"},{"path":"/usr/lib/python3.12/timeit.py"},{"path":"/usr/lib/python3.12/token.py"},{"path":"/usr/lib/python3.12/tokenize.py"},{"path":"/usr/lib/python3.12/trace.py"},{"path":"/usr/lib/python3.12/traceback.py"},{"path":"/usr/lib/python3.12/tracemalloc.py"},{"path":"/usr/lib/python3.12/tty.py"},{"path":"/usr/lib/python3.12/turtle.py"},{"path":"/usr/lib/python3.12/types.py"},{"path":"/usr/lib/python3.12/typing.py"},{"path":"/usr/lib/python3.12/uu.py"},{"path":"/usr/lib/python3.12/uuid.py"},{"path":"/usr/lib/python3.12/warnings.py"},{"path":"/usr/lib/python3.12/wave.py"},{"path":"/usr/lib/python3.12/weakref.py"},{"path":"/usr/lib/python3.12/webbrowser.py"},{"path":"/usr/lib/python3.12/xdrlib.py"},{"path":"/usr/lib/python3.12/zipapp.py"},{"path":"/usr/lib/python3.12/zipimport.py"},{"path":"/usr/lib/python3.12/__phello__"},{"path":"/usr/lib/python3.12/__phello__/__init__.py"},{"path":"/usr/lib/python3.12/__phello__/spam.py"},{"path":"/usr/lib/python3.12/asyncio"},{"path":"/usr/lib/python3.12/asyncio/__init__.py"},{"path":"/usr/lib/python3.12/asyncio/__main__.py"},{"path":"/usr/lib/python3.12/asyncio/base_events.py"},{"path":"/usr/lib/python3.12/asyncio/base_futures.py"},{"path":"/usr/lib/python3.12/asyncio/base_subprocess.py"},{"path":"/usr/lib/python3.12/asyncio/base_tasks.py"},{"path":"/usr/lib/python3.12/asyncio/constants.py"},{"path":"/usr/lib/python3.12/asyncio/coroutines.py"},{"path":"/usr/lib/python3.12/asyncio/events.py"},{"path":"/usr/lib/python3.12/asyncio/exceptions.py"},{"path":"/usr/lib/python3.12/asyncio/format_helpers.py"},{"path":"/usr/lib/python3.12/asyncio/futures.py"},{"path":"/usr/lib/python3.12/asyncio/locks.py"},{"path":"/usr/lib/python3.12/asyncio/log.py"},{"path":"/usr/lib/python3.12/asyncio/mixins.py"},{"path":"/usr/lib/python3.12/asyncio/proactor_events.py"},{"path":"/usr/lib/python3.12/asyncio/protocols.py"},{"path":"/usr/lib/python3.12/asyncio/queues.py"},{"path":"/usr/lib/python3.12/asyncio/runners.py"},{"path":"/usr/lib/python3.12/asyncio/selector_events.py"},{"path":"/usr/lib/python3.12/asyncio/sslproto.py"},{"path":"/usr/lib/python3.12/asyncio/staggered.py"},{"path":"/usr/lib/python3.12/asyncio/streams.py"},{"path":"/usr/lib/python3.12/asyncio/subprocess.py"},{"path":"/usr/lib/python3.12/asyncio/taskgroups.py"},{"path":"/usr/lib/python3.12/asyncio/tasks.py"},{"path":"/usr/lib/python3.12/asyncio/threads.py"},{"path":"/usr/lib/python3.12/asyncio/timeouts.py"},{"path":"/usr/lib/python3.12/asyncio/transports.py"},{"path":"/usr/lib/python3.12/asyncio/trsock.py"},{"path":"/usr/lib/python3.12/asyncio/unix_events.py"},{"path":"/usr/lib/python3.12/asyncio/windows_events.py"},{"path":"/usr/lib/python3.12/asyncio/windows_utils.py"},{"path":"/usr/lib/python3.12/collections"},{"path":"/usr/lib/python3.12/collections/__init__.py"},{"path":"/usr/lib/python3.12/collections/abc.py"},{"path":"/usr/lib/python3.12/concurrent"},{"path":"/usr/lib/python3.12/concurrent/__init__.py"},{"path":"/usr/lib/python3.12/concurrent/futures"},{"path":"/usr/lib/python3.12/concurrent/futures/__init__.py"},{"path":"/usr/lib/python3.12/concurrent/futures/_base.py"},{"path":"/usr/lib/python3.12/concurrent/futures/process.py"},{"path":"/usr/lib/python3.12/concurrent/futures/thread.py"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Makefile"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.bootstrap"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.local"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/Setup.stdlib"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/config.c.in"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/install-sh"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/makesetup"},{"path":"/usr/lib/python3.12/config-3.12-x86_64-linux-musl/python-config.py"},{"path":"/usr/lib/python3.12/ctypes"},{"path":"/usr/lib/python3.12/ctypes/__init__.py"},{"path":"/usr/lib/python3.12/ctypes/_aix.py"},{"path":"/usr/lib/python3.12/ctypes/_endian.py"},{"path":"/usr/lib/python3.12/ctypes/util.py"},{"path":"/usr/lib/python3.12/ctypes/wintypes.py"},{"path":"/usr/lib/python3.12/ctypes/macholib"},{"path":"/usr/lib/python3.12/ctypes/macholib/README.ctypes"},{"path":"/usr/lib/python3.12/ctypes/macholib/__init__.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/dyld.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/dylib.py"},{"path":"/usr/lib/python3.12/ctypes/macholib/fetch_macholib"},{"path":"/usr/lib/python3.12/ctypes/macholib/fetch_macholib.bat"},{"path":"/usr/lib/python3.12/ctypes/macholib/framework.py"},{"path":"/usr/lib/python3.12/curses"},{"path":"/usr/lib/python3.12/curses/__init__.py"},{"path":"/usr/lib/python3.12/curses/ascii.py"},{"path":"/usr/lib/python3.12/curses/has_key.py"},{"path":"/usr/lib/python3.12/curses/panel.py"},{"path":"/usr/lib/python3.12/curses/textpad.py"},{"path":"/usr/lib/python3.12/dbm"},{"path":"/usr/lib/python3.12/dbm/__init__.py"},{"path":"/usr/lib/python3.12/dbm/dumb.py"},{"path":"/usr/lib/python3.12/dbm/gnu.py"},{"path":"/usr/lib/python3.12/dbm/ndbm.py"},{"path":"/usr/lib/python3.12/email"},{"path":"/usr/lib/python3.12/email/__init__.py"},{"path":"/usr/lib/python3.12/email/_encoded_words.py"},{"path":"/usr/lib/python3.12/email/_header_value_parser.py"},{"path":"/usr/lib/python3.12/email/_parseaddr.py"},{"path":"/usr/lib/python3.12/email/_policybase.py"},{"path":"/usr/lib/python3.12/email/architecture.rst"},{"path":"/usr/lib/python3.12/email/base64mime.py"},{"path":"/usr/lib/python3.12/email/charset.py"},{"path":"/usr/lib/python3.12/email/contentmanager.py"},{"path":"/usr/lib/python3.12/email/encoders.py"},{"path":"/usr/lib/python3.12/email/errors.py"},{"path":"/usr/lib/python3.12/email/feedparser.py"},{"path":"/usr/lib/python3.12/email/generator.py"},{"path":"/usr/lib/python3.12/email/header.py"},{"path":"/usr/lib/python3.12/email/headerregistry.py"},{"path":"/usr/lib/python3.12/email/iterators.py"},{"path":"/usr/lib/python3.12/email/message.py"},{"path":"/usr/lib/python3.12/email/parser.py"},{"path":"/usr/lib/python3.12/email/policy.py"},{"path":"/usr/lib/python3.12/email/quoprimime.py"},{"path":"/usr/lib/python3.12/email/utils.py"},{"path":"/usr/lib/python3.12/email/mime"},{"path":"/usr/lib/python3.12/email/mime/__init__.py"},{"path":"/usr/lib/python3.12/email/mime/application.py"},{"path":"/usr/lib/python3.12/email/mime/audio.py"},{"path":"/usr/lib/python3.12/email/mime/base.py"},{"path":"/usr/lib/python3.12/email/mime/image.py"},{"path":"/usr/lib/python3.12/email/mime/message.py"},{"path":"/usr/lib/python3.12/email/mime/multipart.py"},{"path":"/usr/lib/python3.12/email/mime/nonmultipart.py"},{"path":"/usr/lib/python3.12/email/mime/text.py"},{"path":"/usr/lib/python3.12/encodings"},{"path":"/usr/lib/python3.12/encodings/__init__.py"},{"path":"/usr/lib/python3.12/encodings/aliases.py"},{"path":"/usr/lib/python3.12/encodings/ascii.py"},{"path":"/usr/lib/python3.12/encodings/base64_codec.py"},{"path":"/usr/lib/python3.12/encodings/big5.py"},{"path":"/usr/lib/python3.12/encodings/big5hkscs.py"},{"path":"/usr/lib/python3.12/encodings/bz2_codec.py"},{"path":"/usr/lib/python3.12/encodings/charmap.py"},{"path":"/usr/lib/python3.12/encodings/cp037.py"},{"path":"/usr/lib/python3.12/encodings/cp1006.py"},{"path":"/usr/lib/python3.12/encodings/cp1026.py"},{"path":"/usr/lib/python3.12/encodings/cp1125.py"},{"path":"/usr/lib/python3.12/encodings/cp1140.py"},{"path":"/usr/lib/python3.12/encodings/cp1250.py"},{"path":"/usr/lib/python3.12/encodings/cp1251.py"},{"path":"/usr/lib/python3.12/encodings/cp1252.py"},{"path":"/usr/lib/python3.12/encodings/cp1253.py"},{"path":"/usr/lib/python3.12/encodings/cp1254.py"},{"path":"/usr/lib/python3.12/encodings/cp1255.py"},{"path":"/usr/lib/python3.12/encodings/cp1256.py"},{"path":"/usr/lib/python3.12/encodings/cp1257.py"},{"path":"/usr/lib/python3.12/encodings/cp1258.py"},{"path":"/usr/lib/python3.12/encodings/cp273.py"},{"path":"/usr/lib/python3.12/encodings/cp424.py"},{"path":"/usr/lib/python3.12/encodings/cp437.py"},{"path":"/usr/lib/python3.12/encodings/cp500.py"},{"path":"/usr/lib/python3.12/encodings/cp720.py"},{"path":"/usr/lib/python3.12/encodings/cp737.py"},{"path":"/usr/lib/python3.12/encodings/cp775.py"},{"path":"/usr/lib/python3.12/encodings/cp850.py"},{"path":"/usr/lib/python3.12/encodings/cp852.py"},{"path":"/usr/lib/python3.12/encodings/cp855.py"},{"path":"/usr/lib/python3.12/encodings/cp856.py"},{"path":"/usr/lib/python3.12/encodings/cp857.py"},{"path":"/usr/lib/python3.12/encodings/cp858.py"},{"path":"/usr/lib/python3.12/encodings/cp860.py"},{"path":"/usr/lib/python3.12/encodings/cp861.py"},{"path":"/usr/lib/python3.12/encodings/cp862.py"},{"path":"/usr/lib/python3.12/encodings/cp863.py"},{"path":"/usr/lib/python3.12/encodings/cp864.py"},{"path":"/usr/lib/python3.12/encodings/cp865.py"},{"path":"/usr/lib/python3.12/encodings/cp866.py"},{"path":"/usr/lib/python3.12/encodings/cp869.py"},{"path":"/usr/lib/python3.12/encodings/cp874.py"},{"path":"/usr/lib/python3.12/encodings/cp875.py"},{"path":"/usr/lib/python3.12/encodings/cp932.py"},{"path":"/usr/lib/python3.12/encodings/cp949.py"},{"path":"/usr/lib/python3.12/encodings/cp950.py"},{"path":"/usr/lib/python3.12/encodings/euc_jis_2004.py"},{"path":"/usr/lib/python3.12/encodings/euc_jisx0213.py"},{"path":"/usr/lib/python3.12/encodings/euc_jp.py"},{"path":"/usr/lib/python3.12/encodings/euc_kr.py"},{"path":"/usr/lib/python3.12/encodings/gb18030.py"},{"path":"/usr/lib/python3.12/encodings/gb2312.py"},{"path":"/usr/lib/python3.12/encodings/gbk.py"},{"path":"/usr/lib/python3.12/encodings/hex_codec.py"},{"path":"/usr/lib/python3.12/encodings/hp_roman8.py"},{"path":"/usr/lib/python3.12/encodings/hz.py"},{"path":"/usr/lib/python3.12/encodings/idna.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_1.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_2.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_2004.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_3.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_jp_ext.py"},{"path":"/usr/lib/python3.12/encodings/iso2022_kr.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_1.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_10.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_11.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_13.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_14.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_15.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_16.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_2.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_3.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_4.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_5.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_6.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_7.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_8.py"},{"path":"/usr/lib/python3.12/encodings/iso8859_9.py"},{"path":"/usr/lib/python3.12/encodings/johab.py"},{"path":"/usr/lib/python3.12/encodings/koi8_r.py"},{"path":"/usr/lib/python3.12/encodings/koi8_t.py"},{"path":"/usr/lib/python3.12/encodings/koi8_u.py"},{"path":"/usr/lib/python3.12/encodings/kz1048.py"},{"path":"/usr/lib/python3.12/encodings/latin_1.py"},{"path":"/usr/lib/python3.12/encodings/mac_arabic.py"},{"path":"/usr/lib/python3.12/encodings/mac_croatian.py"},{"path":"/usr/lib/python3.12/encodings/mac_cyrillic.py"},{"path":"/usr/lib/python3.12/encodings/mac_farsi.py"},{"path":"/usr/lib/python3.12/encodings/mac_greek.py"},{"path":"/usr/lib/python3.12/encodings/mac_iceland.py"},{"path":"/usr/lib/python3.12/encodings/mac_latin2.py"},{"path":"/usr/lib/python3.12/encodings/mac_roman.py"},{"path":"/usr/lib/python3.12/encodings/mac_romanian.py"},{"path":"/usr/lib/python3.12/encodings/mac_turkish.py"},{"path":"/usr/lib/python3.12/encodings/mbcs.py"},{"path":"/usr/lib/python3.12/encodings/oem.py"},{"path":"/usr/lib/python3.12/encodings/palmos.py"},{"path":"/usr/lib/python3.12/encodings/ptcp154.py"},{"path":"/usr/lib/python3.12/encodings/punycode.py"},{"path":"/usr/lib/python3.12/encodings/quopri_codec.py"},{"path":"/usr/lib/python3.12/encodings/raw_unicode_escape.py"},{"path":"/usr/lib/python3.12/encodings/rot_13.py"},{"path":"/usr/lib/python3.12/encodings/shift_jis.py"},{"path":"/usr/lib/python3.12/encodings/shift_jis_2004.py"},{"path":"/usr/lib/python3.12/encodings/shift_jisx0213.py"},{"path":"/usr/lib/python3.12/encodings/tis_620.py"},{"path":"/usr/lib/python3.12/encodings/undefined.py"},{"path":"/usr/lib/python3.12/encodings/unicode_escape.py"},{"path":"/usr/lib/python3.12/encodings/utf_16.py"},{"path":"/usr/lib/python3.12/encodings/utf_16_be.py"},{"path":"/usr/lib/python3.12/encodings/utf_16_le.py"},{"path":"/usr/lib/python3.12/encodings/utf_32.py"},{"path":"/usr/lib/python3.12/encodings/utf_32_be.py"},{"path":"/usr/lib/python3.12/encodings/utf_32_le.py"},{"path":"/usr/lib/python3.12/encodings/utf_7.py"},{"path":"/usr/lib/python3.12/encodings/utf_8.py"},{"path":"/usr/lib/python3.12/encodings/utf_8_sig.py"},{"path":"/usr/lib/python3.12/encodings/uu_codec.py"},{"path":"/usr/lib/python3.12/encodings/zlib_codec.py"},{"path":"/usr/lib/python3.12/ensurepip"},{"path":"/usr/lib/python3.12/ensurepip/__init__.py"},{"path":"/usr/lib/python3.12/ensurepip/__main__.py"},{"path":"/usr/lib/python3.12/ensurepip/_uninstall.py"},{"path":"/usr/lib/python3.12/ensurepip/_bundled"},{"path":"/usr/lib/python3.12/ensurepip/_bundled/pip-25.0.1-py3-none-any.whl"},{"path":"/usr/lib/python3.12/html"},{"path":"/usr/lib/python3.12/html/__init__.py"},{"path":"/usr/lib/python3.12/html/entities.py"},{"path":"/usr/lib/python3.12/html/parser.py"},{"path":"/usr/lib/python3.12/http"},{"path":"/usr/lib/python3.12/http/__init__.py"},{"path":"/usr/lib/python3.12/http/client.py"},{"path":"/usr/lib/python3.12/http/cookiejar.py"},{"path":"/usr/lib/python3.12/http/cookies.py"},{"path":"/usr/lib/python3.12/http/server.py"},{"path":"/usr/lib/python3.12/importlib"},{"path":"/usr/lib/python3.12/importlib/__init__.py"},{"path":"/usr/lib/python3.12/importlib/_abc.py"},{"path":"/usr/lib/python3.12/importlib/_bootstrap.py"},{"path":"/usr/lib/python3.12/importlib/_bootstrap_external.py"},{"path":"/usr/lib/python3.12/importlib/abc.py"},{"path":"/usr/lib/python3.12/importlib/machinery.py"},{"path":"/usr/lib/python3.12/importlib/readers.py"},{"path":"/usr/lib/python3.12/importlib/simple.py"},{"path":"/usr/lib/python3.12/importlib/util.py"},{"path":"/usr/lib/python3.12/importlib/metadata"},{"path":"/usr/lib/python3.12/importlib/metadata/__init__.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_adapters.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_collections.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_functools.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_itertools.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_meta.py"},{"path":"/usr/lib/python3.12/importlib/metadata/_text.py"},{"path":"/usr/lib/python3.12/importlib/resources"},{"path":"/usr/lib/python3.12/importlib/resources/__init__.py"},{"path":"/usr/lib/python3.12/importlib/resources/_adapters.py"},{"path":"/usr/lib/python3.12/importlib/resources/_common.py"},{"path":"/usr/lib/python3.12/importlib/resources/_itertools.py"},{"path":"/usr/lib/python3.12/importlib/resources/_legacy.py"},{"path":"/usr/lib/python3.12/importlib/resources/abc.py"},{"path":"/usr/lib/python3.12/importlib/resources/readers.py"},{"path":"/usr/lib/python3.12/importlib/resources/simple.py"},{"path":"/usr/lib/python3.12/json"},{"path":"/usr/lib/python3.12/json/__init__.py"},{"path":"/usr/lib/python3.12/json/decoder.py"},{"path":"/usr/lib/python3.12/json/encoder.py"},{"path":"/usr/lib/python3.12/json/scanner.py"},{"path":"/usr/lib/python3.12/json/tool.py"},{"path":"/usr/lib/python3.12/lib-dynload"},{"path":"/usr/lib/python3.12/lib-dynload/_asyncio.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_bisect.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_blake2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_bz2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_cn.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_hk.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_iso2022.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_jp.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_kr.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_codecs_tw.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_contextvars.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_crypt.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_csv.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ctypes.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ctypes_test.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_curses.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_curses_panel.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_datetime.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_dbm.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_decimal.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_elementtree.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_hashlib.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_heapq.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_json.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_lsprof.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_lzma.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_md5.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_multibytecodec.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_multiprocessing.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_opcode.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_pickle.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_posixshmem.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_posixsubprocess.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_queue.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_random.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha1.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha2.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sha3.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_socket.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_sqlite3.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_ssl.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_statistics.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_struct.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testbuffer.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testcapi.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testclinic.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testimportmultiple.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testinternalcapi.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testmultiphase.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_testsinglephase.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxinterpchannels.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxsubinterpreters.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_xxtestfuzz.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/_zoneinfo.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/array.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/audioop.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/binascii.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/cmath.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/fcntl.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/grp.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/math.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/mmap.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/ossaudiodev.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/pyexpat.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/readline.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/resource.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/select.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/spwd.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/syslog.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/termios.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/unicodedata.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxlimited.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxlimited_35.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/xxsubtype.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib-dynload/zlib.cpython-312-x86_64-linux-musl.so"},{"path":"/usr/lib/python3.12/lib2to3"},{"path":"/usr/lib/python3.12/lib2to3/Grammar.txt"},{"path":"/usr/lib/python3.12/lib2to3/Grammar3.12.16.final.0.pickle"},{"path":"/usr/lib/python3.12/lib2to3/PatternGrammar.txt"},{"path":"/usr/lib/python3.12/lib2to3/PatternGrammar3.12.16.final.0.pickle"},{"path":"/usr/lib/python3.12/lib2to3/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/__main__.py"},{"path":"/usr/lib/python3.12/lib2to3/btm_matcher.py"},{"path":"/usr/lib/python3.12/lib2to3/btm_utils.py"},{"path":"/usr/lib/python3.12/lib2to3/fixer_base.py"},{"path":"/usr/lib/python3.12/lib2to3/fixer_util.py"},{"path":"/usr/lib/python3.12/lib2to3/main.py"},{"path":"/usr/lib/python3.12/lib2to3/patcomp.py"},{"path":"/usr/lib/python3.12/lib2to3/pygram.py"},{"path":"/usr/lib/python3.12/lib2to3/pytree.py"},{"path":"/usr/lib/python3.12/lib2to3/refactor.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes"},{"path":"/usr/lib/python3.12/lib2to3/fixes/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_apply.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_asserts.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_basestring.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_buffer.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_dict.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_except.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_exec.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_execfile.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_exitfunc.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_filter.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_funcattrs.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_future.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_getcwdu.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_has_key.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_idioms.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_import.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_imports.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_imports2.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_input.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_intern.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_isinstance.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_itertools.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_itertools_imports.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_long.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_map.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_metaclass.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_methodattrs.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_ne.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_next.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_nonzero.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_numliterals.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_operator.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_paren.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_print.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_raise.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_raw_input.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_reduce.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_reload.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_renames.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_repr.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_set_literal.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_standarderror.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_sys_exc.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_throw.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_tuple_params.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_types.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_unicode.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_urllib.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_ws_comma.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_xrange.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_xreadlines.py"},{"path":"/usr/lib/python3.12/lib2to3/fixes/fix_zip.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/__init__.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/conv.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/driver.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/grammar.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/literals.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/parse.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/pgen.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/token.py"},{"path":"/usr/lib/python3.12/lib2to3/pgen2/tokenize.py"},{"path":"/usr/lib/python3.12/logging"},{"path":"/usr/lib/python3.12/logging/__init__.py"},{"path":"/usr/lib/python3.12/logging/config.py"},{"path":"/usr/lib/python3.12/logging/handlers.py"},{"path":"/usr/lib/python3.12/multiprocessing"},{"path":"/usr/lib/python3.12/multiprocessing/__init__.py"},{"path":"/usr/lib/python3.12/multiprocessing/connection.py"},{"path":"/usr/lib/python3.12/multiprocessing/context.py"},{"path":"/usr/lib/python3.12/multiprocessing/forkserver.py"},{"path":"/usr/lib/python3.12/multiprocessing/heap.py"},{"path":"/usr/lib/python3.12/multiprocessing/managers.py"},{"path":"/usr/lib/python3.12/multiprocessing/pool.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_fork.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_forkserver.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_spawn_posix.py"},{"path":"/usr/lib/python3.12/multiprocessing/popen_spawn_win32.py"},{"path":"/usr/lib/python3.12/multiprocessing/process.py"},{"path":"/usr/lib/python3.12/multiprocessing/queues.py"},{"path":"/usr/lib/python3.12/multiprocessing/reduction.py"},{"path":"/usr/lib/python3.12/multiprocessing/resource_sharer.py"},{"path":"/usr/lib/python3.12/multiprocessing/resource_tracker.py"},{"path":"/usr/lib/python3.12/multiprocessing/shared_memory.py"},{"path":"/usr/lib/python3.12/multiprocessing/sharedctypes.py"},{"path":"/usr/lib/python3.12/multiprocessing/spawn.py"},{"path":"/usr/lib/python3.12/multiprocessing/synchronize.py"},{"path":"/usr/lib/python3.12/multiprocessing/util.py"},{"path":"/usr/lib/python3.12/multiprocessing/dummy"},{"path":"/usr/lib/python3.12/multiprocessing/dummy/__init__.py"},{"path":"/usr/lib/python3.12/multiprocessing/dummy/connection.py"},{"path":"/usr/lib/python3.12/pydoc_data"},{"path":"/usr/lib/python3.12/pydoc_data/__init__.py"},{"path":"/usr/lib/python3.12/pydoc_data/_pydoc.css"},{"path":"/usr/lib/python3.12/pydoc_data/topics.py"},{"path":"/usr/lib/python3.12/re"},{"path":"/usr/lib/python3.12/re/__init__.py"},{"path":"/usr/lib/python3.12/re/_casefix.py"},{"path":"/usr/lib/python3.12/re/_compiler.py"},{"path":"/usr/lib/python3.12/re/_constants.py"},{"path":"/usr/lib/python3.12/re/_parser.py"},{"path":"/usr/lib/python3.12/site-packages"},{"path":"/usr/lib/python3.12/site-packages/README.txt"},{"path":"/usr/lib/python3.12/sqlite3"},{"path":"/usr/lib/python3.12/sqlite3/__init__.py"},{"path":"/usr/lib/python3.12/sqlite3/__main__.py"},{"path":"/usr/lib/python3.12/sqlite3/dbapi2.py"},{"path":"/usr/lib/python3.12/sqlite3/dump.py"},{"path":"/usr/lib/python3.12/tomllib"},{"path":"/usr/lib/python3.12/tomllib/__init__.py"},{"path":"/usr/lib/python3.12/tomllib/_parser.py"},{"path":"/usr/lib/python3.12/tomllib/_re.py"},{"path":"/usr/lib/python3.12/tomllib/_types.py"},{"path":"/usr/lib/python3.12/turtledemo"},{"path":"/usr/lib/python3.12/turtledemo/__init__.py"},{"path":"/usr/lib/python3.12/turtledemo/__main__.py"},{"path":"/usr/lib/python3.12/turtledemo/bytedesign.py"},{"path":"/usr/lib/python3.12/turtledemo/chaos.py"},{"path":"/usr/lib/python3.12/turtledemo/clock.py"},{"path":"/usr/lib/python3.12/turtledemo/colormixer.py"},{"path":"/usr/lib/python3.12/turtledemo/forest.py"},{"path":"/usr/lib/python3.12/turtledemo/fractalcurves.py"},{"path":"/usr/lib/python3.12/turtledemo/lindenmayer.py"},{"path":"/usr/lib/python3.12/turtledemo/minimal_hanoi.py"},{"path":"/usr/lib/python3.12/turtledemo/nim.py"},{"path":"/usr/lib/python3.12/turtledemo/paint.py"},{"path":"/usr/lib/python3.12/turtledemo/peace.py"},{"path":"/usr/lib/python3.12/turtledemo/penrose.py"},{"path":"/usr/lib/python3.12/turtledemo/planet_and_moon.py"},{"path":"/usr/lib/python3.12/turtledemo/rosette.py"},{"path":"/usr/lib/python3.12/turtledemo/round_dance.py"},{"path":"/usr/lib/python3.12/turtledemo/sorting_animate.py"},{"path":"/usr/lib/python3.12/turtledemo/tree.py"},{"path":"/usr/lib/python3.12/turtledemo/turtle.cfg"},{"path":"/usr/lib/python3.12/turtledemo/two_canvases.py"},{"path":"/usr/lib/python3.12/turtledemo/yinyang.py"},{"path":"/usr/lib/python3.12/unittest"},{"path":"/usr/lib/python3.12/unittest/__init__.py"},{"path":"/usr/lib/python3.12/unittest/__main__.py"},{"path":"/usr/lib/python3.12/unittest/_log.py"},{"path":"/usr/lib/python3.12/unittest/async_case.py"},{"path":"/usr/lib/python3.12/unittest/case.py"},{"path":"/usr/lib/python3.12/unittest/loader.py"},{"path":"/usr/lib/python3.12/unittest/main.py"},{"path":"/usr/lib/python3.12/unittest/mock.py"},{"path":"/usr/lib/python3.12/unittest/result.py"},{"path":"/usr/lib/python3.12/unittest/runner.py"},{"path":"/usr/lib/python3.12/unittest/signals.py"},{"path":"/usr/lib/python3.12/unittest/suite.py"},{"path":"/usr/lib/python3.12/unittest/util.py"},{"path":"/usr/lib/python3.12/urllib"},{"path":"/usr/lib/python3.12/urllib/__init__.py"},{"path":"/usr/lib/python3.12/urllib/error.py"},{"path":"/usr/lib/python3.12/urllib/parse.py"},{"path":"/usr/lib/python3.12/urllib/request.py"},{"path":"/usr/lib/python3.12/urllib/response.py"},{"path":"/usr/lib/python3.12/urllib/robotparser.py"},{"path":"/usr/lib/python3.12/venv"},{"path":"/usr/lib/python3.12/venv/__init__.py"},{"path":"/usr/lib/python3.12/venv/__main__.py"},{"path":"/usr/lib/python3.12/venv/scripts"},{"path":"/usr/lib/python3.12/venv/scripts/common"},{"path":"/usr/lib/python3.12/venv/scripts/common/Activate.ps1"},{"path":"/usr/lib/python3.12/venv/scripts/common/activate"},{"path":"/usr/lib/python3.12/venv/scripts/posix"},{"path":"/usr/lib/python3.12/venv/scripts/posix/activate.csh"},{"path":"/usr/lib/python3.12/venv/scripts/posix/activate.fish"},{"path":"/usr/lib/python3.12/wsgiref"},{"path":"/usr/lib/python3.12/wsgiref/__init__.py"},{"path":"/usr/lib/python3.12/wsgiref/handlers.py"},{"path":"/usr/lib/python3.12/wsgiref/headers.py"},{"path":"/usr/lib/python3.12/wsgiref/simple_server.py"},{"path":"/usr/lib/python3.12/wsgiref/types.py"},{"path":"/usr/lib/python3.12/wsgiref/util.py"},{"path":"/usr/lib/python3.12/wsgiref/validate.py"},{"path":"/usr/lib/python3.12/xml"},{"path":"/usr/lib/python3.12/xml/__init__.py"},{"path":"/usr/lib/python3.12/xml/dom"},{"path":"/usr/lib/python3.12/xml/dom/NodeFilter.py"},{"path":"/usr/lib/python3.12/xml/dom/__init__.py"},{"path":"/usr/lib/python3.12/xml/dom/domreg.py"},{"path":"/usr/lib/python3.12/xml/dom/expatbuilder.py"},{"path":"/usr/lib/python3.12/xml/dom/minicompat.py"},{"path":"/usr/lib/python3.12/xml/dom/minidom.py"},{"path":"/usr/lib/python3.12/xml/dom/pulldom.py"},{"path":"/usr/lib/python3.12/xml/dom/xmlbuilder.py"},{"path":"/usr/lib/python3.12/xml/etree"},{"path":"/usr/lib/python3.12/xml/etree/ElementInclude.py"},{"path":"/usr/lib/python3.12/xml/etree/ElementPath.py"},{"path":"/usr/lib/python3.12/xml/etree/ElementTree.py"},{"path":"/usr/lib/python3.12/xml/etree/__init__.py"},{"path":"/usr/lib/python3.12/xml/etree/cElementTree.py"},{"path":"/usr/lib/python3.12/xml/parsers"},{"path":"/usr/lib/python3.12/xml/parsers/__init__.py"},{"path":"/usr/lib/python3.12/xml/parsers/expat.py"},{"path":"/usr/lib/python3.12/xml/sax"},{"path":"/usr/lib/python3.12/xml/sax/__init__.py"},{"path":"/usr/lib/python3.12/xml/sax/_exceptions.py"},{"path":"/usr/lib/python3.12/xml/sax/expatreader.py"},{"path":"/usr/lib/python3.12/xml/sax/handler.py"},{"path":"/usr/lib/python3.12/xml/sax/saxutils.py"},{"path":"/usr/lib/python3.12/xml/sax/xmlreader.py"},{"path":"/usr/lib/python3.12/xmlrpc"},{"path":"/usr/lib/python3.12/xmlrpc/__init__.py"},{"path":"/usr/lib/python3.12/xmlrpc/client.py"},{"path":"/usr/lib/python3.12/xmlrpc/server.py"},{"path":"/usr/lib/python3.12/zipfile"},{"path":"/usr/lib/python3.12/zipfile/__init__.py"},{"path":"/usr/lib/python3.12/zipfile/__main__.py"},{"path":"/usr/lib/python3.12/zipfile/_path"},{"path":"/usr/lib/python3.12/zipfile/_path/__init__.py"},{"path":"/usr/lib/python3.12/zipfile/_path/glob.py"},{"path":"/usr/lib/python3.12/zoneinfo"},{"path":"/usr/lib/python3.12/zoneinfo/__init__.py"},{"path":"/usr/lib/python3.12/zoneinfo/_common.py"},{"path":"/usr/lib/python3.12/zoneinfo/_tzpath.py"},{"path":"/usr/lib/python3.12/zoneinfo/_zoneinfo.py"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3479","versionConstraint":"< 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.16:*:*:*:*:*:*:*"],"package":{"name":"python3","version":"3.12.16-r0"},"namespace":"nvd:cpe"}},{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3479","versionConstraint":"< 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.16:*:*:*:*:*:*:*"],"package":{"name":"python3","version":"3.12.16-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-3479","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":0},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3479","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-3479","date":"2026-11-12","epss":0.00253,"percentile":0.16964}],"risk":0.012650000000000002,"urls":["https://github.com/python/cpython/commit/5af6ce3e7b643a30a02d22245c1e3f4a8bc0a1fe","https://github.com/python/cpython/commit/bcdf231946b1da8bdfbab4c05539bb0cc964a1c7","https://github.com/python/cpython/commit/cf59bf76470f3d75ad47d80ffb8ce76b64b5e943","https://github.com/python/cpython/commit/d786d59a8f7196bb630100a869f28ad13436b59c","https://github.com/python/cpython/issues/146121","https://github.com/python/cpython/pull/146122","https://mail.python.org/archives/list/security-announce@python.org/thread/WYLLVQOOCKGK73JM7Z7ZSNOJC4N7BAWY/"],"severity":"Negligible","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3479","description":"DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open(). The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model.\n\npkgutil.get_data() did not validate the resource argument as documented, allowing path traversals."},"relatedVulnerabilities":[]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116304","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116304","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116304","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"},{"cve":"CVE-2026-116304","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116304"},"relatedVulnerabilities":[{"id":"CVE-2026-116304","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116304","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"},{"cve":"CVE-2026-116304","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116304/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116304","description":"Use after free in PostgreSQL coordination of anonymous RECORD type identifiers among parallel workers allows a database user to execute arbitrary code as the operating system user running the database, via causing one process to free a shared tuple descriptor while another process retains and later uses its address.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116306","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116306","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116306","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116306"},"relatedVulnerabilities":[{"id":"CVE-2026-116306","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116306","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116306/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116306","description":"Type confusion in PostgreSQL composite-value field assignment allows an object creator to execute arbitrary code as the operating system user running the database, via changing a composite type between deforming and reforming a value.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116307","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116307","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116307","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116307"},"relatedVulnerabilities":[{"id":"CVE-2026-116307","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116307","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116307/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116307","description":"Use after free in PostgreSQL plperl allows an object creator to execute arbitrary code as the operating system user running the database, via re-entering plperl and freeing a prepared query while an outer invocation is executing it.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116309","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116309","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116309","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116309"},"relatedVulnerabilities":[{"id":"CVE-2026-116309","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116309","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116309/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116309","description":"Type confusion in PostgreSQL plperl may allow an object creator to execute arbitrary code, via blessing a non-hash reference into PostgreSQL::InServer::ARRAY.  We have not confirmed or ruled out a way to control the pointer sufficiently to achieve security impact, but we are proceeding as though that is possible.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116313","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116313","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.2,"impactScore":5.9,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116313","cwe":"CWE-426","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116313"},"relatedVulnerabilities":[{"id":"CVE-2026-116313","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.2,"impactScore":5.9,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116313","cwe":"CWE-426","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116313/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116313","description":"Untrusted search path in PostgreSQL vacuumdb allows a database owner to execute arbitrary SQL as the database user running vacuumdb, via shadowing operators used in the --missing-stats-only catalog query.  The pg_upgrade documentation recommends an affected vacuumdb invocation.  Within major version 18, minor versions before PostgreSQL 18.7 are affected.  Versions before PostgreSQL 18 are unaffected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116314","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116314","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116314","cwe":"CWE-20","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116314"},"relatedVulnerabilities":[{"id":"CVE-2026-116314","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116314","cwe":"CWE-20","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116314/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116314","description":"Improper input validation in PostgreSQL pg_restore allows a non-plain archive provider to execute arbitrary code as the operating system user running pg_restore, via a crafted archive.  Note a contrast: crafted archive data may legitimately cause arbitrary SQL to execute at the restore destination, but it does not legitimately confer arbitrary code execution in the pg_restore OS process.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116315","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116315","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116315","cwe":"CWE-122","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116315"},"relatedVulnerabilities":[{"id":"CVE-2026-116315","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116315","cwe":"CWE-122","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116315/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116315","description":"Heap-based buffer overflow in PostgreSQL tsvector_delete() allows a database user to execute arbitrary code as the operating system user running the database, via a tsvector whose lexeme data uses a nonstandard but valid ordering that requires additional alignment padding in the result.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116316","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116316","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116316","cwe":"CWE-424","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116316"},"relatedVulnerabilities":[{"id":"CVE-2026-116316","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116316","cwe":"CWE-424","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116316/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116316","description":"Improper protection of alternate path in PostgreSQL security-restricted operations allows an object creator to execute arbitrary SQL as the operation's caller, via a domain, enum, or range type created in pg_temp.  The victim session must later run a query containing an unqualified type name, e.g. \"SELECT '1'::bigint\"; autovacuum and other common security-restricted operation users do not do so, so they are unaffected.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116317","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116317","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116317","cwe":"CWE-122","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116317"},"relatedVulnerabilities":[{"id":"CVE-2026-116317","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116317","cwe":"CWE-122","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116317/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116317","description":"Heap-based buffer overflow in PostgreSQL ts_rank_cd() may allow a database user to execute arbitrary code as the operating system user running the database, via an invalid tsvector containing duplicate positions.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116318","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116318","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116318","cwe":"CWE-89","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116318"},"relatedVulnerabilities":[{"id":"CVE-2026-116318","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116318","cwe":"CWE-89","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116318/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116318","description":"SQL injection in PostgreSQL pg_dump allows an object creator to execute arbitrary SQL as the user restoring the dump, via an inherited column having a child-local not-null constraint whose name requires quoting.  Within major version 18, minor versions before PostgreSQL 18.7 are affected.  Versions before PostgreSQL 18 are unaffected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116319","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116319","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116319","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116319"},"relatedVulnerabilities":[{"id":"CVE-2026-116319","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116319","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116319/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116319","description":"Use after free in PostgreSQL plperl allows an object creator to execute arbitrary code as the operating system user running the database, via reentrant return_next() calls.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116320","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116320","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116320","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116320"},"relatedVulnerabilities":[{"id":"CVE-2026-116320","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116320","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116320/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116320","description":"Use after free in PostgreSQL plperl allows an object creator to execute arbitrary code as the operating system user running the database, via dropping the final reference to a Perl array or hash while PostgreSQL is converting that object.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116323","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116323","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116323","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116323"},"relatedVulnerabilities":[{"id":"CVE-2026-116323","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116323","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116323/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116323","description":"Use after free in PostgreSQL pltcl allows an object creator to execute arbitrary code as the operating system user running the database, via a domain CHECK that re-enters the Tcl interpreter and frees or changes a string still used by the outer result conversion.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116325","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116325","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8,"impactScore":5.9,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116325","cwe":"CWE-89","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116325"},"relatedVulnerabilities":[{"id":"CVE-2026-116325","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8,"impactScore":5.9,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116325","cwe":"CWE-89","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116325/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116325","description":"SQL injection in PostgreSQL reindexdb allows an object creator to execute arbitrary SQL as the database user running reindexdb, via a crafted index name embedded in the parallel catalog query for --jobs with --index.  Within major versions 17-18, minor versions before PostgreSQL 18.7 and 17.12 are affected.  Versions before PostgreSQL 17 are unaffected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116326","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116326","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116326","cwe":"CWE-672","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116326"},"relatedVulnerabilities":[{"id":"CVE-2026-116326","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116326","cwe":"CWE-672","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116326/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116326","description":"Uncaught exceptions in PostgreSQL plperl allow an object creator to cause use of a stale sigjmp_buf, via a tied Perl object, or a Perl object whose overloaded conversion throws while plperl is handling another error.  We have not ruled out arbitrary code execution on some platform.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116328","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116328","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116328","cwe":"CWE-190","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116328"},"relatedVulnerabilities":[{"id":"CVE-2026-116328","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116328","cwe":"CWE-190","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116328/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116328","description":"Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database, via freeing an allocation larger than 1 GB and causing its block to be reused for smaller chunks whose back-pointer offset cannot represent that position.  Within major versions 16-18, minor versions before PostgreSQL 18.7, 17.12, and 16.16 are affected.  Versions before PostgreSQL 16 are unaffected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116329","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116329","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116329","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116329"},"relatedVulnerabilities":[{"id":"CVE-2026-116329","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116329","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116329/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116329","description":"Type confusion in PostgreSQL statistics import allows a table maintainer to execute arbitrary code as the operating system user running the database, via nested SET DATA TYPE during conversion of values to import.  Within major version 18, minor versions before PostgreSQL 18.7 are affected.  Versions before PostgreSQL 18 are unaffected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116330","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116330","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116330","cwe":"CWE-829","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116330"},"relatedVulnerabilities":[{"id":"CVE-2026-116330","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116330","cwe":"CWE-829","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116330/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116330","description":"Untrusted data inclusion in PostgreSQL pg_dump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql.  This is a gap in the fix for CVE-2025-8714.  restore.sql is undocumented.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116331","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116331","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116331","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116331"},"relatedVulnerabilities":[{"id":"CVE-2026-116331","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116331","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116331/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116331","description":"Type confusion in PostgreSQL min/max aggregate optimization allows an object creator to execute arbitrary code as the operating system user running the database, via a user-defined aggregate whose SORTOP option causes the planner to treat the aggregate's input and result as the same type when they differ.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116332","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116332","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116332","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116332"},"relatedVulnerabilities":[{"id":"CVE-2026-116332","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116332","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116332/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116332","description":"Use after free in PostgreSQL portal setup allows an object creator to execute arbitrary code as the operating system user running the database, via running user-defined code during planning or executor startup that closes the portal currently being prepared.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116335","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116335","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116335","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116335"},"relatedVulnerabilities":[{"id":"CVE-2026-116335","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116335","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116335/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116335","description":"Type confusion in PostgreSQL operator commutator and negator links allows an object creator to execute arbitrary code as the operating system user running the database, via linking operators having different result types or creating inconsistent reciprocal links.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116336","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116336","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116336","cwe":"CWE-672","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"},{"cve":"CVE-2026-116336","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116336"},"relatedVulnerabilities":[{"id":"CVE-2026-116336","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116336","cwe":"CWE-672","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"},{"cve":"CVE-2026-116336","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116336/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116336","description":"Operation on a dropped index in PostgreSQL REINDEX CONCURRENTLY allows an object creator to execute arbitrary code as the operating system user running the database, via an index expression that issues DROP INDEX.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120139","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120139","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120139","cwe":"CWE-190","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120139"},"relatedVulnerabilities":[{"id":"CVE-2026-120139","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120139","cwe":"CWE-190","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120139/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120139","description":"Integer wraparound in PostgreSQL in-memory tuple-size calculations allows a database user to execute arbitrary code as the operating system user running the database, via oversized tuple data.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120141","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120141","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120141","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120141"},"relatedVulnerabilities":[{"id":"CVE-2026-120141","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120141","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120141/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120141","description":"Type confusion in PostgreSQL materialized set-returning functions allows a database user to execute arbitrary code as the operating system user running the database, via returning rows having different dynamic RECORD return types.  json_populate_recordset() is one affected function.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120142","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120142","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120142","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120142"},"relatedVulnerabilities":[{"id":"CVE-2026-120142","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120142","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120142/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120142","description":"Type confusion in PostgreSQL anonymous RECORD types allows an object creator to execute arbitrary code as the operating system user running the database, via row types having dropped attributes in the same positions but with different widths or alignments.  Within major versions 17-18, minor versions before PostgreSQL 18.7 and 17.12 are affected.  Versions before PostgreSQL 17 are unaffected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120143","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120143","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120143","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120143"},"relatedVulnerabilities":[{"id":"CVE-2026-120143","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120143","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120143/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120143","description":"Use after free in PostgreSQL trigger functions allows an object creator to execute arbitrary code as the operating system user running the database, via a cursor over a transition table.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120144","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120144","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120144","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120144"},"relatedVulnerabilities":[{"id":"CVE-2026-120144","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120144","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120144/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120144","description":"Type confusion from incomplete PostgreSQL type-cache invalidation allows an object creator to execute arbitrary code as the operating system user running the database, via a composite type change while its cache entry is being populated.  Within major version 18, minor versions before PostgreSQL 18.7 are affected.  Versions before PostgreSQL 18 are unaffected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120145","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120145","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120145","cwe":"CWE-862","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120145"},"relatedVulnerabilities":[{"id":"CVE-2026-120145","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120145","cwe":"CWE-862","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120145/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120145","description":"Missing authorization in PostgreSQL logical replication allows a compromised publisher to execute arbitrary code as the operating system user running the superuser-owned subscription, via naming a system catalog as a replication target.  Only subscriptions owned by a superuser are vulnerable.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120147","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120147","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120147","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120147"},"relatedVulnerabilities":[{"id":"CVE-2026-120147","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120147","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120147/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120147","description":"Use after free in the PostgreSQL dblink extension allows an object creator to execute arbitrary code as the operating system user running the database, via type conversion code that re-enters dblink and closes a connection whose results an outer dblink call is reading.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120148","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120148","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120148","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120148"},"relatedVulnerabilities":[{"id":"CVE-2026-120148","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120148","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120148/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120148","description":"Type confusion in PostgreSQL extended statistics allows an object creator to execute arbitrary code as the operating system user running the database, via a statistics expression of an anonymous RECORD type whose backend-local type identifier denotes a different row type in another session.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120149","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120149","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120149","cwe":"CWE-122","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120149"},"relatedVulnerabilities":[{"id":"CVE-2026-120149","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120149","cwe":"CWE-122","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120149/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120149","description":"Heap-based buffer overflow in PostgreSQL foreign batch inserts allows a foreign server to execute arbitrary code, via reporting that it inserted more rows than the server supplied.  postgres_fdw can legitimately encounter this when a rule on the remote table expands an INSERT into additional rows.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120150","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120150","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120150","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120150"},"relatedVulnerabilities":[{"id":"CVE-2026-120150","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120150","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120150/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120150","description":"Use after free in PostgreSQL expanded-record domain checks allows an object creator to execute arbitrary code as the operating system user running the database, via repeated checks of a domain over a composite type that cause reuse of a dangling memory-context pointer.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120151","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120151","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120151","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120151"},"relatedVulnerabilities":[{"id":"CVE-2026-120151","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120151","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120151/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120151","description":"Type confusion in PostgreSQL plpgsql record-field assignment allows an object creator to execute arbitrary code as the operating system user running the database, via a reentrant domain CHECK that changes a RECORD variable's row type while a value is being cast.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120153","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120153","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.2,"impactScore":5.9,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120153","cwe":"CWE-89","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120153"},"relatedVulnerabilities":[{"id":"CVE-2026-120153","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.2,"impactScore":5.9,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120153","cwe":"CWE-89","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120153/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120153","description":"SQL injection in PostgreSQL extension-script substitutions allows an attacker with database-level CREATE privilege to execute arbitrary code as the bootstrap superuser, via a schema or owner name containing newlines or other special substrings.  This is similar to CVE-2023-39417, but it requires a non-bundled extension with a vulnerable script pattern.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-14661","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-14661","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-14661","cwe":"CWE-73","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-14661"},"relatedVulnerabilities":[{"id":"CVE-2026-14661","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-14661","cwe":"CWE-73","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-14661/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-14661","description":"External control of file name in PostgreSQL dblink and CREATE/ALTER SUBSCRIPTION allows a user to achieve persistent denial of service, via appending invalid data to a chosen file.  Specifically, the \"sslkeylogfile\" connection parameter appends data, in NSS keylog format, to a file of the user's choosing.  This \"sslkeylogfile\" mechanism cannot add arbitrary bytes.  Within major version 18, minor versions before PostgreSQL 18.7 are affected.  Versions before PostgreSQL 18 are also affected if libpq version 18 or later is installed and in use by the server."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-18447","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-18447","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18447","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-18447"},"relatedVulnerabilities":[{"id":"CVE-2026-18447","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18447","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-18447/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18447","description":"Type confusion in PostgreSQL SQL-language functions allows an object creator to execute arbitrary code as the operating system user running the database, via an output parameter of type \"any\".  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6460","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-6460","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6460","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-6460"},"relatedVulnerabilities":[{"id":"CVE-2026-6460","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6460","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-6460/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6460","description":"Type confusion in PostgreSQL allows an object creator to execute arbitrary code as the operating system user running the database, via ALTER ... SET DATA TYPE primarily.  Other DDL attack routes exist, such as \"ALTER TABLE ... ADD COLUMN; ROLLBACK; ALTER TABLE ... ADD COLUMN\".  The system had inadequate tracking of typed values, and values were not self-identifying.  Stale values could appear in data dictionary entries, PL/pgSQL variables, and many other parts of the system.  PostgreSQL Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6467","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-6467","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.2,"impactScore":5.9,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6467","cwe":"CWE-427","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-6467"},"relatedVulnerabilities":[{"id":"CVE-2026-6467","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.2,"impactScore":5.9,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6467","cwe":"CWE-427","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-6467/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6467","description":"Uncontrolled search path element in PostgreSQL CREATE EXTENSION allows an attacker with database-level CREATE privilege to execute arbitrary code as the bootstrap superuser, via ALTER SCHEMA ... RENAME or CREATE EXTENSION ... SCHEMA \"$user\".  ALTER EXTENSION was also affected.  A trusted-extension script located the wrong object and executed arbitrary SQL of the attacker's choice.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116304","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116304","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116304","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"},{"cve":"CVE-2026-116304","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116304"},"relatedVulnerabilities":[{"id":"CVE-2026-116304","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116304","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"},{"cve":"CVE-2026-116304","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116304/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116304","description":"Use after free in PostgreSQL coordination of anonymous RECORD type identifiers among parallel workers allows a database user to execute arbitrary code as the operating system user running the database, via causing one process to free a shared tuple descriptor while another process retains and later uses its address.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116306","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116306","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116306","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116306"},"relatedVulnerabilities":[{"id":"CVE-2026-116306","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116306","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116306/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116306","description":"Type confusion in PostgreSQL composite-value field assignment allows an object creator to execute arbitrary code as the operating system user running the database, via changing a composite type between deforming and reforming a value.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116307","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116307","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116307","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116307"},"relatedVulnerabilities":[{"id":"CVE-2026-116307","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116307","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116307/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116307","description":"Use after free in PostgreSQL plperl allows an object creator to execute arbitrary code as the operating system user running the database, via re-entering plperl and freeing a prepared query while an outer invocation is executing it.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116309","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116309","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116309","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116309"},"relatedVulnerabilities":[{"id":"CVE-2026-116309","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116309","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116309/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116309","description":"Type confusion in PostgreSQL plperl may allow an object creator to execute arbitrary code, via blessing a non-hash reference into PostgreSQL::InServer::ARRAY.  We have not confirmed or ruled out a way to control the pointer sufficiently to achieve security impact, but we are proceeding as though that is possible.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116313","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116313","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.2,"impactScore":5.9,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116313","cwe":"CWE-426","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116313"},"relatedVulnerabilities":[{"id":"CVE-2026-116313","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.2,"impactScore":5.9,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116313","cwe":"CWE-426","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116313/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116313","description":"Untrusted search path in PostgreSQL vacuumdb allows a database owner to execute arbitrary SQL as the database user running vacuumdb, via shadowing operators used in the --missing-stats-only catalog query.  The pg_upgrade documentation recommends an affected vacuumdb invocation.  Within major version 18, minor versions before PostgreSQL 18.7 are affected.  Versions before PostgreSQL 18 are unaffected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116314","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116314","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116314","cwe":"CWE-20","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116314"},"relatedVulnerabilities":[{"id":"CVE-2026-116314","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116314","cwe":"CWE-20","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116314/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116314","description":"Improper input validation in PostgreSQL pg_restore allows a non-plain archive provider to execute arbitrary code as the operating system user running pg_restore, via a crafted archive.  Note a contrast: crafted archive data may legitimately cause arbitrary SQL to execute at the restore destination, but it does not legitimately confer arbitrary code execution in the pg_restore OS process.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116315","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116315","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116315","cwe":"CWE-122","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116315"},"relatedVulnerabilities":[{"id":"CVE-2026-116315","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116315","cwe":"CWE-122","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116315/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116315","description":"Heap-based buffer overflow in PostgreSQL tsvector_delete() allows a database user to execute arbitrary code as the operating system user running the database, via a tsvector whose lexeme data uses a nonstandard but valid ordering that requires additional alignment padding in the result.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116316","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116316","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116316","cwe":"CWE-424","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116316"},"relatedVulnerabilities":[{"id":"CVE-2026-116316","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116316","cwe":"CWE-424","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116316/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116316","description":"Improper protection of alternate path in PostgreSQL security-restricted operations allows an object creator to execute arbitrary SQL as the operation's caller, via a domain, enum, or range type created in pg_temp.  The victim session must later run a query containing an unqualified type name, e.g. \"SELECT '1'::bigint\"; autovacuum and other common security-restricted operation users do not do so, so they are unaffected.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116317","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116317","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116317","cwe":"CWE-122","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116317"},"relatedVulnerabilities":[{"id":"CVE-2026-116317","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116317","cwe":"CWE-122","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116317/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116317","description":"Heap-based buffer overflow in PostgreSQL ts_rank_cd() may allow a database user to execute arbitrary code as the operating system user running the database, via an invalid tsvector containing duplicate positions.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116318","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116318","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116318","cwe":"CWE-89","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116318"},"relatedVulnerabilities":[{"id":"CVE-2026-116318","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116318","cwe":"CWE-89","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116318/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116318","description":"SQL injection in PostgreSQL pg_dump allows an object creator to execute arbitrary SQL as the user restoring the dump, via an inherited column having a child-local not-null constraint whose name requires quoting.  Within major version 18, minor versions before PostgreSQL 18.7 are affected.  Versions before PostgreSQL 18 are unaffected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116319","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116319","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116319","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116319"},"relatedVulnerabilities":[{"id":"CVE-2026-116319","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116319","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116319/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116319","description":"Use after free in PostgreSQL plperl allows an object creator to execute arbitrary code as the operating system user running the database, via reentrant return_next() calls.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116320","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116320","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116320","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116320"},"relatedVulnerabilities":[{"id":"CVE-2026-116320","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116320","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116320/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116320","description":"Use after free in PostgreSQL plperl allows an object creator to execute arbitrary code as the operating system user running the database, via dropping the final reference to a Perl array or hash while PostgreSQL is converting that object.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116323","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116323","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116323","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116323"},"relatedVulnerabilities":[{"id":"CVE-2026-116323","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116323","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116323/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116323","description":"Use after free in PostgreSQL pltcl allows an object creator to execute arbitrary code as the operating system user running the database, via a domain CHECK that re-enters the Tcl interpreter and frees or changes a string still used by the outer result conversion.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116325","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116325","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8,"impactScore":5.9,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116325","cwe":"CWE-89","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116325"},"relatedVulnerabilities":[{"id":"CVE-2026-116325","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8,"impactScore":5.9,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116325","cwe":"CWE-89","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116325/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116325","description":"SQL injection in PostgreSQL reindexdb allows an object creator to execute arbitrary SQL as the database user running reindexdb, via a crafted index name embedded in the parallel catalog query for --jobs with --index.  Within major versions 17-18, minor versions before PostgreSQL 18.7 and 17.12 are affected.  Versions before PostgreSQL 17 are unaffected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116326","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116326","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116326","cwe":"CWE-672","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116326"},"relatedVulnerabilities":[{"id":"CVE-2026-116326","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116326","cwe":"CWE-672","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116326/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116326","description":"Uncaught exceptions in PostgreSQL plperl allow an object creator to cause use of a stale sigjmp_buf, via a tied Perl object, or a Perl object whose overloaded conversion throws while plperl is handling another error.  We have not ruled out arbitrary code execution on some platform.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116328","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116328","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116328","cwe":"CWE-190","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116328"},"relatedVulnerabilities":[{"id":"CVE-2026-116328","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116328","cwe":"CWE-190","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116328/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116328","description":"Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database, via freeing an allocation larger than 1 GB and causing its block to be reused for smaller chunks whose back-pointer offset cannot represent that position.  Within major versions 16-18, minor versions before PostgreSQL 18.7, 17.12, and 16.16 are affected.  Versions before PostgreSQL 16 are unaffected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116329","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116329","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116329","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116329"},"relatedVulnerabilities":[{"id":"CVE-2026-116329","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116329","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116329/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116329","description":"Type confusion in PostgreSQL statistics import allows a table maintainer to execute arbitrary code as the operating system user running the database, via nested SET DATA TYPE during conversion of values to import.  Within major version 18, minor versions before PostgreSQL 18.7 are affected.  Versions before PostgreSQL 18 are unaffected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116330","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116330","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116330","cwe":"CWE-829","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116330"},"relatedVulnerabilities":[{"id":"CVE-2026-116330","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116330","cwe":"CWE-829","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116330/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116330","description":"Untrusted data inclusion in PostgreSQL pg_dump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql.  This is a gap in the fix for CVE-2025-8714.  restore.sql is undocumented.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116331","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116331","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116331","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116331"},"relatedVulnerabilities":[{"id":"CVE-2026-116331","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116331","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116331/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116331","description":"Type confusion in PostgreSQL min/max aggregate optimization allows an object creator to execute arbitrary code as the operating system user running the database, via a user-defined aggregate whose SORTOP option causes the planner to treat the aggregate's input and result as the same type when they differ.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116332","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116332","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116332","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116332"},"relatedVulnerabilities":[{"id":"CVE-2026-116332","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116332","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116332/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116332","description":"Use after free in PostgreSQL portal setup allows an object creator to execute arbitrary code as the operating system user running the database, via running user-defined code during planning or executor startup that closes the portal currently being prepared.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116335","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116335","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116335","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116335"},"relatedVulnerabilities":[{"id":"CVE-2026-116335","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116335","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116335/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116335","description":"Type confusion in PostgreSQL operator commutator and negator links allows an object creator to execute arbitrary code as the operating system user running the database, via linking operators having different result types or creating inconsistent reciprocal links.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116336","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116336","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116336","cwe":"CWE-672","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"},{"cve":"CVE-2026-116336","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116336"},"relatedVulnerabilities":[{"id":"CVE-2026-116336","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116336","cwe":"CWE-672","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"},{"cve":"CVE-2026-116336","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116336/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116336","description":"Operation on a dropped index in PostgreSQL REINDEX CONCURRENTLY allows an object creator to execute arbitrary code as the operating system user running the database, via an index expression that issues DROP INDEX.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120139","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120139","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120139","cwe":"CWE-190","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120139"},"relatedVulnerabilities":[{"id":"CVE-2026-120139","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120139","cwe":"CWE-190","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120139/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120139","description":"Integer wraparound in PostgreSQL in-memory tuple-size calculations allows a database user to execute arbitrary code as the operating system user running the database, via oversized tuple data.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120141","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120141","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120141","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120141"},"relatedVulnerabilities":[{"id":"CVE-2026-120141","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120141","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120141/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120141","description":"Type confusion in PostgreSQL materialized set-returning functions allows a database user to execute arbitrary code as the operating system user running the database, via returning rows having different dynamic RECORD return types.  json_populate_recordset() is one affected function.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120142","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120142","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120142","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120142"},"relatedVulnerabilities":[{"id":"CVE-2026-120142","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120142","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120142/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120142","description":"Type confusion in PostgreSQL anonymous RECORD types allows an object creator to execute arbitrary code as the operating system user running the database, via row types having dropped attributes in the same positions but with different widths or alignments.  Within major versions 17-18, minor versions before PostgreSQL 18.7 and 17.12 are affected.  Versions before PostgreSQL 17 are unaffected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120143","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120143","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120143","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120143"},"relatedVulnerabilities":[{"id":"CVE-2026-120143","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120143","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120143/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120143","description":"Use after free in PostgreSQL trigger functions allows an object creator to execute arbitrary code as the operating system user running the database, via a cursor over a transition table.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120144","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120144","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120144","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120144"},"relatedVulnerabilities":[{"id":"CVE-2026-120144","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120144","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120144/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120144","description":"Type confusion from incomplete PostgreSQL type-cache invalidation allows an object creator to execute arbitrary code as the operating system user running the database, via a composite type change while its cache entry is being populated.  Within major version 18, minor versions before PostgreSQL 18.7 are affected.  Versions before PostgreSQL 18 are unaffected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120145","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120145","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120145","cwe":"CWE-862","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120145"},"relatedVulnerabilities":[{"id":"CVE-2026-120145","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120145","cwe":"CWE-862","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120145/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120145","description":"Missing authorization in PostgreSQL logical replication allows a compromised publisher to execute arbitrary code as the operating system user running the superuser-owned subscription, via naming a system catalog as a replication target.  Only subscriptions owned by a superuser are vulnerable.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120147","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120147","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120147","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120147"},"relatedVulnerabilities":[{"id":"CVE-2026-120147","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120147","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120147/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120147","description":"Use after free in the PostgreSQL dblink extension allows an object creator to execute arbitrary code as the operating system user running the database, via type conversion code that re-enters dblink and closes a connection whose results an outer dblink call is reading.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120148","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120148","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120148","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120148"},"relatedVulnerabilities":[{"id":"CVE-2026-120148","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120148","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120148/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120148","description":"Type confusion in PostgreSQL extended statistics allows an object creator to execute arbitrary code as the operating system user running the database, via a statistics expression of an anonymous RECORD type whose backend-local type identifier denotes a different row type in another session.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120149","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120149","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120149","cwe":"CWE-122","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120149"},"relatedVulnerabilities":[{"id":"CVE-2026-120149","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120149","cwe":"CWE-122","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120149/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120149","description":"Heap-based buffer overflow in PostgreSQL foreign batch inserts allows a foreign server to execute arbitrary code, via reporting that it inserted more rows than the server supplied.  postgres_fdw can legitimately encounter this when a rule on the remote table expands an INSERT into additional rows.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120150","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120150","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120150","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120150"},"relatedVulnerabilities":[{"id":"CVE-2026-120150","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120150","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120150/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120150","description":"Use after free in PostgreSQL expanded-record domain checks allows an object creator to execute arbitrary code as the operating system user running the database, via repeated checks of a domain over a composite type that cause reuse of a dangling memory-context pointer.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120151","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120151","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120151","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120151"},"relatedVulnerabilities":[{"id":"CVE-2026-120151","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120151","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120151/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120151","description":"Type confusion in PostgreSQL plpgsql record-field assignment allows an object creator to execute arbitrary code as the operating system user running the database, via a reentrant domain CHECK that changes a RECORD variable's row type while a value is being cast.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120153","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120153","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.2,"impactScore":5.9,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120153","cwe":"CWE-89","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120153"},"relatedVulnerabilities":[{"id":"CVE-2026-120153","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.2,"impactScore":5.9,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120153","cwe":"CWE-89","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120153/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120153","description":"SQL injection in PostgreSQL extension-script substitutions allows an attacker with database-level CREATE privilege to execute arbitrary code as the bootstrap superuser, via a schema or owner name containing newlines or other special substrings.  This is similar to CVE-2023-39417, but it requires a non-bundled extension with a vulnerable script pattern.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-14661","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-14661","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-14661","cwe":"CWE-73","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-14661"},"relatedVulnerabilities":[{"id":"CVE-2026-14661","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-14661","cwe":"CWE-73","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-14661/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-14661","description":"External control of file name in PostgreSQL dblink and CREATE/ALTER SUBSCRIPTION allows a user to achieve persistent denial of service, via appending invalid data to a chosen file.  Specifically, the \"sslkeylogfile\" connection parameter appends data, in NSS keylog format, to a file of the user's choosing.  This \"sslkeylogfile\" mechanism cannot add arbitrary bytes.  Within major version 18, minor versions before PostgreSQL 18.7 are affected.  Versions before PostgreSQL 18 are also affected if libpq version 18 or later is installed and in use by the server."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-18447","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-18447","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18447","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-18447"},"relatedVulnerabilities":[{"id":"CVE-2026-18447","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18447","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-18447/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18447","description":"Type confusion in PostgreSQL SQL-language functions allows an object creator to execute arbitrary code as the operating system user running the database, via an output parameter of type \"any\".  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6460","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-6460","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6460","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-6460"},"relatedVulnerabilities":[{"id":"CVE-2026-6460","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6460","cwe":"CWE-843","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-6460/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6460","description":"Type confusion in PostgreSQL allows an object creator to execute arbitrary code as the operating system user running the database, via ALTER ... SET DATA TYPE primarily.  Other DDL attack routes exist, such as \"ALTER TABLE ... ADD COLUMN; ROLLBACK; ALTER TABLE ... ADD COLUMN\".  The system had inadequate tracking of typed values, and values were not self-identifying.  Stale values could appear in data dictionary entries, PL/pgSQL variables, and many other parts of the system.  PostgreSQL Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6467","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-6467","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.2,"impactScore":5.9,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6467","cwe":"CWE-427","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-6467"},"relatedVulnerabilities":[{"id":"CVE-2026-6467","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.2,"impactScore":5.9,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6467","cwe":"CWE-427","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-6467/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6467","description":"Uncontrolled search path element in PostgreSQL CREATE EXTENSION allows an attacker with database-level CREATE privilege to execute arbitrary code as the bootstrap superuser, via ALTER SCHEMA ... RENAME or CREATE EXTENSION ... SCHEMA \"$user\".  ALTER EXTENSION was also affected.  A trusted-extension script located the wrong object and executed arbitrary SQL of the attacker's choice.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116308","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116308","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116308","cwe":"CWE-126","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116308"},"relatedVulnerabilities":[{"id":"CVE-2026-116308","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116308","cwe":"CWE-126","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116308/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116308","description":"Buffer over-read in PostgreSQL dict_int allows a database user to disclose portions of server memory, via a zero-length token.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116310","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116310","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116310","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116310"},"relatedVulnerabilities":[{"id":"CVE-2026-116310","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116310","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116310/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116310","description":"Use after free in PostgreSQL COPY FROM error reporting allows a database user to disclose portions of server memory, via a longer input row following an ignored or nullified conversion error.  file_fdw reaches the same code path in affected version 18.  Within major versions 17-18, minor versions before PostgreSQL 18.7 and 17.12 are affected.  Versions before PostgreSQL 17 are unaffected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116311","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116311","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116311","cwe":"CWE-862","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116311"},"relatedVulnerabilities":[{"id":"CVE-2026-116311","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116311","cwe":"CWE-862","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116311/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116311","description":"Missing authorization in PostgreSQL DROP OWNED allows a role to remove itself from restrictive row level security policies, thereby reading or modifying rows that the policy was intended to deny, via queries after the DROP OWNED.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116312","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116312","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116312","cwe":"CWE-1250","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116312"},"relatedVulnerabilities":[{"id":"CVE-2026-116312","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116312","cwe":"CWE-1250","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116312/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116312","description":"Inconsistent transition-capture state in PostgreSQL MERGE allows a table data modifier to make an AFTER trigger process the wrong new row, via a partitioned table MERGE that performs an INSERT before an UPDATE.  Within major versions 15-18, minor versions before PostgreSQL 18.7, 17.12, 16.16, and 15.20 are affected.  Versions before PostgreSQL 15 are unaffected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116321","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116321","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116321","cwe":"CWE-170","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116321"},"relatedVulnerabilities":[{"id":"CVE-2026-116321","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116321","cwe":"CWE-170","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116321/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116321","description":"Improper null termination in PostgreSQL array element assignment allows a database user to disclose server memory, via changing the final byte of a fixed-length name value to a nonzero byte and passing it to code that treats the value as a C string.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116322","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116322","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116322","cwe":"CWE-667","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116322"},"relatedVulnerabilities":[{"id":"CVE-2026-116322","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116322","cwe":"CWE-667","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116322/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116322","description":"Improper locking in PostgreSQL startup processing allows an unauthenticated network client to trigger a server restart, via arranging for authentication_timeout to arrive while it holds a spinlock during cancel handling.  Within major version 18, minor versions before PostgreSQL 18.7 are affected.  Versions before PostgreSQL 18 are unaffected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116327","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116327","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116327","cwe":"CWE-862","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116327"},"relatedVulnerabilities":[{"id":"CVE-2026-116327","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116327","cwe":"CWE-862","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116327/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116327","description":"Exposure of sensitive information in PostgreSQL security_barrier processing allows a database user to infer values hidden by a security_barrier view, via applying a leaky function to a CASE test value or internal parameter that indirectly represents a protected column.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116333","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116333","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116333","cwe":"CWE-126","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116333"},"relatedVulnerabilities":[{"id":"CVE-2026-116333","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116333","cwe":"CWE-126","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116333/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116333","description":"Buffer over-read in PostgreSQL parallel B-tree scans allows an object creator to read attacker-chosen server-memory addresses, via a function incorrectly marked PARALLEL SAFE or STABLE to make participating workers build different scan-key arrays.  Within major versions 17-18, minor versions before PostgreSQL 18.7 and 17.12 are affected.  Versions before PostgreSQL 17 are unaffected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120146","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120146","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120146","cwe":"CWE-862","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120146"},"relatedVulnerabilities":[{"id":"CVE-2026-120146","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120146","cwe":"CWE-862","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120146/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120146","description":"Missing authorization in PostgreSQL REASSIGN OWNED allows a role granted INHERIT but not SET to transfer objects to the granted role.  It also allows reassignment of database ownership without the CREATEDB privilege.  The equivalent ALTER ... OWNER commands block this.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120152","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120152","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120152","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120152"},"relatedVulnerabilities":[{"id":"CVE-2026-120152","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120152","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120152/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120152","description":"Use after free in PostgreSQL pg_show_all_settings() allows a database user to retrieve memory contents, via loading a module while the function is scanning custom-variable placeholders that the module replaces and frees.  Within major versions 16-18, minor versions before PostgreSQL 18.7, 17.12, and 16.16 are affected.  Versions before PostgreSQL 16 are unaffected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120154","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120154","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120154","cwe":"CWE-424","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120154"},"relatedVulnerabilities":[{"id":"CVE-2026-120154","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120154","cwe":"CWE-424","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120154/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120154","description":"Improper protection in PostgreSQL INSERT ... ON CONFLICT allows an attacker having INSERT, UPDATE, and applicable SELECT privileges on the table to read every row despite row security policies, via iterated INSERT ... ON CONFLICT DO UPDATE.  Unlike CVE-2026-16237, this does not facilitate improper writes.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-16237","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-16237","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-16237","cwe":"CWE-424","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-16237"},"relatedVulnerabilities":[{"id":"CVE-2026-16237","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-16237","cwe":"CWE-424","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-16237/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-16237","description":"Improper protection in PostgreSQL INSERT ... ON CONFLICT on auto-updatable views allows an attacker having INSERT and UPDATE privileges on the view to read and modify every row in the view's base table, via iterated INSERT ... ON CONFLICT DO UPDATE.  This bypasses the view's WHERE condition, whether or not the view is a security_barrier view.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116308","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116308","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116308","cwe":"CWE-126","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116308"},"relatedVulnerabilities":[{"id":"CVE-2026-116308","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116308","cwe":"CWE-126","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116308/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116308","description":"Buffer over-read in PostgreSQL dict_int allows a database user to disclose portions of server memory, via a zero-length token.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116310","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116310","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116310","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116310"},"relatedVulnerabilities":[{"id":"CVE-2026-116310","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116310","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116310/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116310","description":"Use after free in PostgreSQL COPY FROM error reporting allows a database user to disclose portions of server memory, via a longer input row following an ignored or nullified conversion error.  file_fdw reaches the same code path in affected version 18.  Within major versions 17-18, minor versions before PostgreSQL 18.7 and 17.12 are affected.  Versions before PostgreSQL 17 are unaffected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116311","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116311","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116311","cwe":"CWE-862","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116311"},"relatedVulnerabilities":[{"id":"CVE-2026-116311","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116311","cwe":"CWE-862","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116311/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116311","description":"Missing authorization in PostgreSQL DROP OWNED allows a role to remove itself from restrictive row level security policies, thereby reading or modifying rows that the policy was intended to deny, via queries after the DROP OWNED.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116312","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116312","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116312","cwe":"CWE-1250","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116312"},"relatedVulnerabilities":[{"id":"CVE-2026-116312","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116312","cwe":"CWE-1250","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116312/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116312","description":"Inconsistent transition-capture state in PostgreSQL MERGE allows a table data modifier to make an AFTER trigger process the wrong new row, via a partitioned table MERGE that performs an INSERT before an UPDATE.  Within major versions 15-18, minor versions before PostgreSQL 18.7, 17.12, 16.16, and 15.20 are affected.  Versions before PostgreSQL 15 are unaffected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116321","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116321","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116321","cwe":"CWE-170","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116321"},"relatedVulnerabilities":[{"id":"CVE-2026-116321","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116321","cwe":"CWE-170","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116321/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116321","description":"Improper null termination in PostgreSQL array element assignment allows a database user to disclose server memory, via changing the final byte of a fixed-length name value to a nonzero byte and passing it to code that treats the value as a C string.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116322","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116322","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116322","cwe":"CWE-667","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116322"},"relatedVulnerabilities":[{"id":"CVE-2026-116322","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116322","cwe":"CWE-667","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116322/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116322","description":"Improper locking in PostgreSQL startup processing allows an unauthenticated network client to trigger a server restart, via arranging for authentication_timeout to arrive while it holds a spinlock during cancel handling.  Within major version 18, minor versions before PostgreSQL 18.7 are affected.  Versions before PostgreSQL 18 are unaffected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116327","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116327","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116327","cwe":"CWE-862","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116327"},"relatedVulnerabilities":[{"id":"CVE-2026-116327","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116327","cwe":"CWE-862","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116327/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116327","description":"Exposure of sensitive information in PostgreSQL security_barrier processing allows a database user to infer values hidden by a security_barrier view, via applying a leaky function to a CASE test value or internal parameter that indirectly represents a protected column.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116333","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116333","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116333","cwe":"CWE-126","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116333"},"relatedVulnerabilities":[{"id":"CVE-2026-116333","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116333","cwe":"CWE-126","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116333/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116333","description":"Buffer over-read in PostgreSQL parallel B-tree scans allows an object creator to read attacker-chosen server-memory addresses, via a function incorrectly marked PARALLEL SAFE or STABLE to make participating workers build different scan-key arrays.  Within major versions 17-18, minor versions before PostgreSQL 18.7 and 17.12 are affected.  Versions before PostgreSQL 17 are unaffected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120146","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120146","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120146","cwe":"CWE-862","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120146"},"relatedVulnerabilities":[{"id":"CVE-2026-120146","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120146","cwe":"CWE-862","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120146/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120146","description":"Missing authorization in PostgreSQL REASSIGN OWNED allows a role granted INHERIT but not SET to transfer objects to the granted role.  It also allows reassignment of database ownership without the CREATEDB privilege.  The equivalent ALTER ... OWNER commands block this.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120152","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120152","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120152","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120152"},"relatedVulnerabilities":[{"id":"CVE-2026-120152","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120152","cwe":"CWE-416","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120152/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120152","description":"Use after free in PostgreSQL pg_show_all_settings() allows a database user to retrieve memory contents, via loading a module while the function is scanning custom-variable placeholders that the module replaces and frees.  Within major versions 16-18, minor versions before PostgreSQL 18.7, 17.12, and 16.16 are affected.  Versions before PostgreSQL 16 are unaffected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120154","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-120154","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120154","cwe":"CWE-424","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-120154"},"relatedVulnerabilities":[{"id":"CVE-2026-120154","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120154","cwe":"CWE-424","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-120154/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120154","description":"Improper protection in PostgreSQL INSERT ... ON CONFLICT allows an attacker having INSERT, UPDATE, and applicable SELECT privileges on the table to read every row despite row security policies, via iterated INSERT ... ON CONFLICT DO UPDATE.  Unlike CVE-2026-16237, this does not facilitate improper writes.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-16237","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-16237","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-16237","cwe":"CWE-424","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-16237"},"relatedVulnerabilities":[{"id":"CVE-2026-16237","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-16237","cwe":"CWE-424","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-16237/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-16237","description":"Improper protection in PostgreSQL INSERT ... ON CONFLICT on auto-updatable views allows an attacker having INSERT and UPDATE privileges on the view to read and modify every row in the view's base table, via iterated INSERT ... ON CONFLICT DO UPDATE.  This bypasses the view's WHERE condition, whether or not the view is a security_barrier view.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116303","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116303","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116303","cwe":"CWE-862","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116303"},"relatedVulnerabilities":[{"id":"CVE-2026-116303","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116303","cwe":"CWE-862","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116303/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116303","description":"Missing authorization in PostgreSQL type conversion allows a database user to invoke a cast function despite lacking EXECUTE privilege on that function, via foreign keys, to_json(), and others.  A successful attack requires the attacker to search each database for access-restricted cast functions and identify confidentiality impact specific to each function implementation found.  There are few or no practical examples of an access-restricted cast function or of a cast function having confidentiality impact.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4d55f06d68277f75","cpes":["cpe:2.3:a:libpq:libpq:18.6-r0:*:*:*:*:*:*:*"],"name":"libpq","purl":"pkg:apk/alpine/libpq@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpq.so.5"},{"path":"/usr/lib/libpq.so.5.18"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-16240","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-16240","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-16240","cwe":"CWE-134","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-16240"},"relatedVulnerabilities":[{"id":"CVE-2026-16240","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-16240","cwe":"CWE-134","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-16240/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-16240","description":"Use of externally-controlled format string in PostgreSQL pg_basebackup allows an attacker having already compromised a server to achieve disclosure from pg_basebackup memory, via backup manifest bytes.  The vulnerability does not return the improperly-read bytes back to the attacker's server, so a successful attack would need separate implementation-specific secrets for that.  Integrity impact is unlikely; in particular, the applicable formatter does not support %n.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116303","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-116303","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116303","cwe":"CWE-862","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-116303"},"relatedVulnerabilities":[{"id":"CVE-2026-116303","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116303","cwe":"CWE-862","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-116303/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116303","description":"Missing authorization in PostgreSQL type conversion allows a database user to invoke a cast function despite lacking EXECUTE privilege on that function, via foreign keys, to_json(), and others.  A successful attack requires the attacker to search each database for access-restricted cast functions and identify confidentiality impact specific to each function implementation found.  There are few or no practical examples of an access-restricted cast function or of a cast function having confidentiality impact.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]},{"artifact":{"id":"4b4fa631ba604cbc","cpes":["cpe:2.3:a:postgresql18-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_client:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql18:postgresql_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql18_client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql-client:18.6-r0:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql_client:18.6-r0:*:*:*:*:*:*:*"],"name":"postgresql18-client","purl":"pkg:apk/alpine/postgresql18-client@18.6-r0?arch=x86_64&distro=alpine-3.23.8&upstream=postgresql18","type":"apk","version":"18.6-r0","language":"","licenses":["PostgreSQL"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/postgresql18"},{"path":"/usr/libexec/postgresql18/PG_VERSION"},{"path":"/usr/libexec/postgresql18/clusterdb"},{"path":"/usr/libexec/postgresql18/createdb"},{"path":"/usr/libexec/postgresql18/createuser"},{"path":"/usr/libexec/postgresql18/dropdb"},{"path":"/usr/libexec/postgresql18/dropuser"},{"path":"/usr/libexec/postgresql18/pg_amcheck"},{"path":"/usr/libexec/postgresql18/pg_basebackup"},{"path":"/usr/libexec/postgresql18/pg_dump"},{"path":"/usr/libexec/postgresql18/pg_dumpall"},{"path":"/usr/libexec/postgresql18/pg_isready"},{"path":"/usr/libexec/postgresql18/pg_receivewal"},{"path":"/usr/libexec/postgresql18/pg_recvlogical"},{"path":"/usr/libexec/postgresql18/pg_restore"},{"path":"/usr/libexec/postgresql18/pg_verifybackup"},{"path":"/usr/libexec/postgresql18/pgbench"},{"path":"/usr/libexec/postgresql18/psql"},{"path":"/usr/libexec/postgresql18/reindexdb"},{"path":"/usr/libexec/postgresql18/vacuumdb"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4b7664b31dd7b2c0e0a3c23377f2fe18bd84467985a661c5a978cc07cb031b5d","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"postgresql18"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"18.7-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-16240","versionConstraint":"< 18.7-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.23.8"},"package":{"name":"postgresql18","version":"18.6-r0"},"namespace":"alpine:distro:alpine:3.23"}}],"vulnerability":{"id":"CVE-2026-16240","fix":{"state":"fixed","versions":["18.7-r0"],"available":[{"date":"2026-11-13","kind":"first-observed","version":"18.7-r0"}]},"cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-16240","cwe":"CWE-134","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"risk":0,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.23","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-16240"},"relatedVulnerabilities":[{"id":"CVE-2026-16240","cvss":[{"type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-16240","cwe":"CWE-134","type":"Secondary","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"urls":["https://www.postgresql.org/support/security/CVE-2026-16240/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-16240","description":"Use of externally-controlled format string in PostgreSQL pg_basebackup allows an attacker having already compromised a server to achieve disclosure from pg_basebackup memory, via backup manifest bytes.  The vulnerability does not return the improperly-read bytes back to the attacker's server, so a successful attack would need separate implementation-specific secrets for that.  Integrity impact is unlikely; in particular, the applicable formatter does not support %n.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}]}],"grade":"F","score":"0.00","as_of":"2026-11-14T06:02:22.664Z","grype_db_version":"2026-11-13T15:40:34.000Z"}