{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "axios on Chainguard: fixes",
 "home_page_url": "https://patchwire.jonathanross.dev/products/axios--axios/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/axios--axios/chainguard.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101899/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101899/",
   "title": "CVE-2026-101899 · axios · fixed in Chainguard (awx 24.6.1-r66 and 48 more)",
   "content_text": "Fixed versions: awx 24.6.1-r66, commercial-gitlab-rails-ee-19.1 19.1.7-r3, commercial-gitlab-rails-ee-19.2 19.2.7-r1, commercial-gitlab-rails-ee-19.3 19.3.3-r1, commercial-gitlab-rails-ee-19.4 19.4.1-r1, commercial-gitlab-rails-ee-fips-19.1 19.1.9-r0, commercial-gitlab-rails-ee-fips-19.2 19.2.7-r1, commercial-gitlab-rails-ee-fips-19.3 19.3.3-r1, commercial-gitlab-rails-ee-fips-19.4 19.4.1-r1, gitlab-rails-ce-19.0 19.0.10-r0, gitlab-rails-ce-19.1 19.1.8-r8, gitlab-rails-ce-19.2 19.2.7-r6, gitlab-rails-ce-19.3 19.3.3-r5, gitlab-rails-ce-19.4 19.4.1-r3, gitlab-rails-ce-fips-19.0 19.0.9-r2, gitlab-rails-ce-fips-19.1 19.1.8-r8, gitlab-rails-ce-fips-19.2 19.2.7-r5, gitlab-rails-ce-fips-19.3 19.3.3-r3, gitlab-rails-ce-fips-19.4 19.4.1-r5, kibana-8.19 8.19.22-r4, kibana-8.19-bitnami 8.19.22-r4, kibana-9.2 9.2.8-r25, kubeflow-centraldashboard 2.0.0-r5, lambda-nodejs22 4.0.2-r4, lambda-nodejs24 4.0.2-r4, langfuse-3 3.225.11-r2, langfuse-3-worker 3.225.11-r2, langfuse-4 4.49.0-r0, langfuse-4-worker 4.49.0-r0, langfuse-fips-3 3.225.11-r2, langfuse-fips-3-worker 3.225.11-r2, langfuse-fips-4 4.49.0-r0, langfuse-fips-4-worker 4.49.0-r0, lerna 10.0.1-r8, librechat 0.8.7-r16, nextcloud-server-33 33.0.9-r1, nextcloud-server-34 34.0.4-r2, nextcloud-server-35 35.0.0-r1, opensearch-dashboards-2 2.19.6-r21, opensearch-dashboards-2-fips 2.19.6-r10, opensearch-dashboards-3 3.8.0-r8, opensearch-dashboards-3-fips 3.8.0-r5, prism 5.16.0-r13, redisinsight 3.8.0-r8, semaphore 2.19.12-r3, wazuh-dashboard 4.14.8-r3, wazuh-dashboard-fips 4.14.8-r3, wazuh-dashboard-plugins 4.14.8-r3, wazuh-dashboard-plugins-fips 4.14.8-r3.",
   "date_published": "2026-10-13T15:49:51Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101909/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101909/",
   "title": "CVE-2026-101909 · axios · fixed in Chainguard (awx 24.6.1-r66 and 48 more)",
   "content_text": "Fixed versions: awx 24.6.1-r66, azurite 3.37.0-r4, commercial-gitlab-rails-ee-19.1 19.1.7-r3, commercial-gitlab-rails-ee-19.2 19.2.7-r1, commercial-gitlab-rails-ee-19.3 19.3.3-r1, commercial-gitlab-rails-ee-19.4 19.4.1-r1, commercial-gitlab-rails-ee-fips-19.1 19.1.9-r0, commercial-gitlab-rails-ee-fips-19.2 19.2.7-r1, commercial-gitlab-rails-ee-fips-19.3 19.3.3-r1, commercial-gitlab-rails-ee-fips-19.4 19.4.1-r1, gitlab-rails-ce-19.0 19.0.10-r0, gitlab-rails-ce-19.1 19.1.9-r0, gitlab-rails-ce-19.2 19.2.7-r6, gitlab-rails-ce-19.3 19.3.3-r5, gitlab-rails-ce-19.4 19.4.1-r6, gitlab-rails-ce-fips-19.1 19.1.8-r9, gitlab-rails-ce-fips-19.2 19.2.7-r5, gitlab-rails-ce-fips-19.3 19.3.3-r5, gitlab-rails-ce-fips-19.4 19.4.1-r5, kibana-8.19 8.19.22-r4, kibana-8.19-bitnami 8.19.22-r4, kibana-9.2 9.2.8-r25, kubeflow-centraldashboard 2.0.0-r5, lambda-nodejs22 4.0.2-r4, lambda-nodejs24 4.0.2-r4, langfuse-3 3.225.11-r2, langfuse-3-worker 3.225.11-r2, langfuse-4 4.49.0-r0, langfuse-4-worker 4.49.0-r0, langfuse-fips-3 3.225.11-r2, langfuse-fips-3-worker 3.225.11-r2, langfuse-fips-4 4.49.0-r0, langfuse-fips-4-worker 4.49.0-r0, lerna 10.0.1-r8, librechat 0.8.7-r16, nextcloud-server-33 33.0.9-r1, nextcloud-server-34 34.0.4-r2, nextcloud-server-35 35.0.0-r1, opensearch-dashboards-2 2.19.6-r21, opensearch-dashboards-2-fips 2.19.6-r10, opensearch-dashboards-3 3.8.0-r8, opensearch-dashboards-3-fips 3.8.0-r5, prism 5.16.0-r13, redisinsight 3.8.0-r8, semaphore 2.19.12-r3, wazuh-dashboard 4.14.8-r3, wazuh-dashboard-fips 4.14.8-r3, wazuh-dashboard-plugins 4.14.8-r3, wazuh-dashboard-plugins-fips 4.14.8-r3.",
   "date_published": "2026-09-28T17:42:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101908/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101908/",
   "title": "CVE-2026-101908 · axios · fixed in Chainguard (awx 24.6.1-r66 and 51 more)",
   "content_text": "Fixed versions: awx 24.6.1-r66, commercial-gitlab-rails-ee-19.1 19.1.7-r3, commercial-gitlab-rails-ee-19.2 19.2.7-r1, commercial-gitlab-rails-ee-19.3 19.3.3-r1, commercial-gitlab-rails-ee-19.4 19.4.1-r1, commercial-gitlab-rails-ee-fips-19.1 19.1.9-r0, commercial-gitlab-rails-ee-fips-19.2 19.2.7-r1, commercial-gitlab-rails-ee-fips-19.3 19.3.3-r1, commercial-gitlab-rails-ee-fips-19.4 19.4.1-r1, gitlab-rails-ce-19.0 19.0.10-r0, gitlab-rails-ce-19.1 19.1.8-r8, gitlab-rails-ce-19.2 19.2.7-r6, gitlab-rails-ce-19.3 19.3.3-r5, gitlab-rails-ce-19.4 19.4.1-r3, gitlab-rails-ce-fips-18.10 18.10.8-r8, gitlab-rails-ce-fips-18.9 18.9.8-r8, gitlab-rails-ce-fips-19.0 19.0.9-r2, gitlab-rails-ce-fips-19.0 19.0.9-r3, gitlab-rails-ce-fips-19.1 19.1.8-r8, gitlab-rails-ce-fips-19.2 19.2.7-r5, gitlab-rails-ce-fips-19.3 19.3.3-r3, gitlab-rails-ce-fips-19.4 19.4.1-r5, kibana-8.19 8.19.22-r4, kibana-8.19-bitnami 8.19.22-r4, kibana-9.2 9.2.8-r25, kubeflow-centraldashboard 2.0.0-r5, lambda-nodejs22 4.0.2-r4, lambda-nodejs24 4.0.2-r4, langfuse-3 3.225.11-r2, langfuse-3-worker 3.225.11-r2, langfuse-4 4.49.0-r0, langfuse-4-worker 4.49.0-r0, langfuse-fips-3 3.225.11-r2, langfuse-fips-3-worker 3.225.11-r2, langfuse-fips-4 4.49.0-r0, langfuse-fips-4-worker 4.49.0-r0, lerna 10.0.1-r8, librechat 0.8.7-r16, nextcloud-server-33 33.0.9-r1, nextcloud-server-34 34.0.4-r2, nextcloud-server-35 35.0.0-r1, opensearch-dashboards-2 2.19.6-r21, opensearch-dashboards-2-fips 2.19.6-r10, opensearch-dashboards-3 3.8.0-r8, opensearch-dashboards-3-fips 3.8.0-r5, prism 5.16.0-r13, redisinsight 3.8.0-r8, semaphore 2.19.12-r3, wazuh-dashboard 4.14.8-r3, wazuh-dashboard-fips 4.14.8-r3, wazuh-dashboard-plugins 4.14.8-r3, wazuh-dashboard-plugins-fips 4.14.8-r3.",
   "date_published": "2026-09-28T17:38:55Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101907/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101907/",
   "title": "CVE-2026-101907 · axios · fixed in Chainguard (awx 24.6.1-r66 and 46 more)",
   "content_text": "Fixed versions: awx 24.6.1-r66, commercial-gitlab-rails-ee-19.1 19.1.7-r3, commercial-gitlab-rails-ee-19.2 19.2.7-r1, commercial-gitlab-rails-ee-19.3 19.3.3-r1, commercial-gitlab-rails-ee-19.4 19.4.1-r1, commercial-gitlab-rails-ee-fips-19.1 19.1.9-r0, commercial-gitlab-rails-ee-fips-19.2 19.2.7-r1, commercial-gitlab-rails-ee-fips-19.3 19.3.3-r1, commercial-gitlab-rails-ee-fips-19.4 19.4.1-r1, gitlab-rails-ce-19.1 19.1.8-r8, gitlab-rails-ce-19.2 19.2.7-r6, gitlab-rails-ce-19.3 19.3.3-r5, gitlab-rails-ce-19.4 19.4.1-r3, gitlab-rails-ce-fips-19.1 19.1.8-r8, gitlab-rails-ce-fips-19.2 19.2.7-r5, gitlab-rails-ce-fips-19.3 19.3.3-r3, gitlab-rails-ce-fips-19.4 19.4.1-r5, kibana-8.19 8.19.22-r4, kibana-8.19-bitnami 8.19.22-r4, kibana-9.2 9.2.8-r25, kubeflow-centraldashboard 2.0.0-r5, lambda-nodejs22 4.0.2-r4, lambda-nodejs24 4.0.2-r4, langfuse-3 3.225.11-r2, langfuse-3-worker 3.225.11-r2, langfuse-4 4.49.0-r0, langfuse-4-worker 4.49.0-r0, langfuse-fips-3 3.225.11-r2, langfuse-fips-3-worker 3.225.11-r2, langfuse-fips-4 4.49.0-r0, langfuse-fips-4-worker 4.49.0-r0, lerna 10.0.1-r8, librechat 0.8.7-r16, nextcloud-server-33 33.0.9-r1, nextcloud-server-34 34.0.4-r2, nextcloud-server-35 35.0.0-r1, opensearch-dashboards-2 2.19.6-r21, opensearch-dashboards-2-fips 2.19.6-r10, opensearch-dashboards-3 3.8.0-r8, opensearch-dashboards-3-fips 3.8.0-r5, prism 5.16.0-r13, redisinsight 3.8.0-r8, semaphore 2.19.12-r3, wazuh-dashboard 4.14.8-r3, wazuh-dashboard-fips 4.14.8-r3, wazuh-dashboard-plugins 4.14.8-r3, wazuh-dashboard-plugins-fips 4.14.8-r3.",
   "date_published": "2026-09-28T17:36:03Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101906/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101906/",
   "title": "CVE-2026-101906 · axios · fixed in Chainguard (awx 24.6.1-r66 and 48 more)",
   "content_text": "Fixed versions: awx 24.6.1-r66, commercial-gitlab-rails-ee-19.1 19.1.7-r3, commercial-gitlab-rails-ee-19.2 19.2.7-r1, commercial-gitlab-rails-ee-19.3 19.3.3-r1, commercial-gitlab-rails-ee-19.4 19.4.1-r1, commercial-gitlab-rails-ee-fips-19.1 19.1.9-r0, commercial-gitlab-rails-ee-fips-19.2 19.2.7-r1, commercial-gitlab-rails-ee-fips-19.3 19.3.3-r1, commercial-gitlab-rails-ee-fips-19.4 19.4.1-r1, gitlab-rails-ce-19.0 19.0.10-r0, gitlab-rails-ce-19.1 19.1.8-r8, gitlab-rails-ce-19.2 19.2.7-r6, gitlab-rails-ce-19.3 19.3.3-r5, gitlab-rails-ce-19.4 19.4.1-r3, gitlab-rails-ce-fips-19.0 19.0.9-r2, gitlab-rails-ce-fips-19.1 19.1.8-r8, gitlab-rails-ce-fips-19.2 19.2.7-r5, gitlab-rails-ce-fips-19.3 19.3.3-r3, gitlab-rails-ce-fips-19.4 19.4.1-r5, kibana-8.19 8.19.22-r4, kibana-8.19-bitnami 8.19.22-r4, kibana-9.2 9.2.8-r25, kubeflow-centraldashboard 2.0.0-r5, lambda-nodejs22 4.0.2-r4, lambda-nodejs24 4.0.2-r4, langfuse-3 3.225.11-r2, langfuse-3-worker 3.225.11-r2, langfuse-4 4.49.0-r0, langfuse-4-worker 4.49.0-r0, langfuse-fips-3 3.225.11-r2, langfuse-fips-3-worker 3.225.11-r2, langfuse-fips-4 4.49.0-r0, langfuse-fips-4-worker 4.49.0-r0, lerna 10.0.1-r8, librechat 0.8.7-r16, nextcloud-server-33 33.0.9-r1, nextcloud-server-34 34.0.4-r2, nextcloud-server-35 35.0.0-r1, opensearch-dashboards-2 2.19.6-r21, opensearch-dashboards-2-fips 2.19.6-r10, opensearch-dashboards-3 3.8.0-r8, opensearch-dashboards-3-fips 3.8.0-r5, prism 5.16.0-r13, redisinsight 3.8.0-r8, semaphore 2.19.12-r3, wazuh-dashboard 4.14.8-r3, wazuh-dashboard-fips 4.14.8-r3, wazuh-dashboard-plugins 4.14.8-r3, wazuh-dashboard-plugins-fips 4.14.8-r3.",
   "date_published": "2026-09-28T17:32:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101905/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101905/",
   "title": "CVE-2026-101905 · axios · fixed in Chainguard (awx 24.6.1-r66 and 47 more)",
   "content_text": "Fixed versions: awx 24.6.1-r66, commercial-gitlab-rails-ee-19.1 19.1.7-r3, commercial-gitlab-rails-ee-19.2 19.2.7-r1, commercial-gitlab-rails-ee-19.3 19.3.3-r1, commercial-gitlab-rails-ee-19.4 19.4.1-r1, commercial-gitlab-rails-ee-fips-19.1 19.1.9-r0, commercial-gitlab-rails-ee-fips-19.2 19.2.7-r1, commercial-gitlab-rails-ee-fips-19.3 19.3.3-r1, commercial-gitlab-rails-ee-fips-19.4 19.4.1-r1, gitlab-rails-ce-19.0 19.0.10-r0, gitlab-rails-ce-19.1 19.1.8-r8, gitlab-rails-ce-19.2 19.2.7-r6, gitlab-rails-ce-19.3 19.3.3-r5, gitlab-rails-ce-19.4 19.4.1-r3, gitlab-rails-ce-fips-19.1 19.1.8-r8, gitlab-rails-ce-fips-19.2 19.2.7-r5, gitlab-rails-ce-fips-19.3 19.3.3-r3, gitlab-rails-ce-fips-19.4 19.4.1-r5, kibana-8.19 8.19.22-r4, kibana-8.19-bitnami 8.19.22-r4, kibana-9.2 9.2.8-r25, kubeflow-centraldashboard 2.0.0-r5, lambda-nodejs22 4.0.2-r4, lambda-nodejs24 4.0.2-r4, langfuse-3 3.225.11-r2, langfuse-3-worker 3.225.11-r2, langfuse-4 4.49.0-r0, langfuse-4-worker 4.49.0-r0, langfuse-fips-3 3.225.11-r2, langfuse-fips-3-worker 3.225.11-r2, langfuse-fips-4 4.49.0-r0, langfuse-fips-4-worker 4.49.0-r0, lerna 10.0.1-r8, librechat 0.8.7-r16, nextcloud-server-33 33.0.9-r1, nextcloud-server-34 34.0.4-r2, nextcloud-server-35 35.0.0-r1, opensearch-dashboards-2 2.19.6-r21, opensearch-dashboards-2-fips 2.19.6-r10, opensearch-dashboards-3 3.8.0-r8, opensearch-dashboards-3-fips 3.8.0-r5, prism 5.16.0-r13, redisinsight 3.8.0-r8, semaphore 2.19.12-r3, wazuh-dashboard 4.14.8-r3, wazuh-dashboard-fips 4.14.8-r3, wazuh-dashboard-plugins 4.14.8-r3, wazuh-dashboard-plugins-fips 4.14.8-r3.",
   "date_published": "2026-09-28T17:31:00Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101904/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101904/",
   "title": "CVE-2026-101904 · axios · fixed in Chainguard (awx 24.6.1-r66 and 51 more)",
   "content_text": "Fixed versions: awx 24.6.1-r66, commercial-gitlab-rails-ee-19.1 19.1.7-r3, commercial-gitlab-rails-ee-19.2 19.2.7-r1, commercial-gitlab-rails-ee-19.3 19.3.3-r1, commercial-gitlab-rails-ee-19.4 19.4.1-r1, commercial-gitlab-rails-ee-fips-19.1 19.1.9-r0, commercial-gitlab-rails-ee-fips-19.2 19.2.7-r1, commercial-gitlab-rails-ee-fips-19.3 19.3.3-r1, commercial-gitlab-rails-ee-fips-19.4 19.4.1-r1, gitlab-rails-ce-19.0 19.0.10-r0, gitlab-rails-ce-19.1 19.1.8-r8, gitlab-rails-ce-19.2 19.2.7-r6, gitlab-rails-ce-19.3 19.3.3-r5, gitlab-rails-ce-19.4 19.4.1-r3, gitlab-rails-ce-fips-18.10 18.10.8-r8, gitlab-rails-ce-fips-18.9 18.9.8-r8, gitlab-rails-ce-fips-19.0 19.0.9-r2, gitlab-rails-ce-fips-19.0 19.0.9-r3, gitlab-rails-ce-fips-19.1 19.1.8-r8, gitlab-rails-ce-fips-19.2 19.2.7-r5, gitlab-rails-ce-fips-19.3 19.3.3-r3, gitlab-rails-ce-fips-19.4 19.4.1-r5, kibana-8.19 8.19.22-r4, kibana-8.19-bitnami 8.19.22-r4, kibana-9.2 9.2.8-r25, kubeflow-centraldashboard 2.0.0-r5, lambda-nodejs22 4.0.2-r4, lambda-nodejs24 4.0.2-r4, langfuse-3 3.225.11-r2, langfuse-3-worker 3.225.11-r2, langfuse-4 4.49.0-r0, langfuse-4-worker 4.49.0-r0, langfuse-fips-3 3.225.11-r2, langfuse-fips-3-worker 3.225.11-r2, langfuse-fips-4 4.49.0-r0, langfuse-fips-4-worker 4.49.0-r0, lerna 10.0.1-r8, librechat 0.8.7-r16, nextcloud-server-33 33.0.9-r1, nextcloud-server-34 34.0.4-r2, nextcloud-server-35 35.0.0-r1, opensearch-dashboards-2 2.19.6-r21, opensearch-dashboards-2-fips 2.19.6-r10, opensearch-dashboards-3 3.8.0-r8, opensearch-dashboards-3-fips 3.8.0-r5, prism 5.16.0-r13, redisinsight 3.8.0-r8, semaphore 2.19.12-r3, wazuh-dashboard 4.14.8-r3, wazuh-dashboard-fips 4.14.8-r3, wazuh-dashboard-plugins 4.14.8-r3, wazuh-dashboard-plugins-fips 4.14.8-r3.",
   "date_published": "2026-09-28T17:29:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101903/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101903/",
   "title": "CVE-2026-101903 · axios · fixed in Chainguard (awx 24.6.1-r66 and 46 more)",
   "content_text": "Fixed versions: awx 24.6.1-r66, commercial-gitlab-rails-ee-19.1 19.1.7-r3, commercial-gitlab-rails-ee-19.2 19.2.7-r1, commercial-gitlab-rails-ee-19.3 19.3.3-r1, commercial-gitlab-rails-ee-19.4 19.4.1-r1, commercial-gitlab-rails-ee-fips-19.1 19.1.9-r0, commercial-gitlab-rails-ee-fips-19.2 19.2.7-r1, commercial-gitlab-rails-ee-fips-19.3 19.3.3-r1, commercial-gitlab-rails-ee-fips-19.4 19.4.1-r1, gitlab-rails-ce-19.1 19.1.8-r8, gitlab-rails-ce-19.2 19.2.7-r6, gitlab-rails-ce-19.3 19.3.3-r5, gitlab-rails-ce-19.4 19.4.1-r3, gitlab-rails-ce-fips-19.1 19.1.8-r8, gitlab-rails-ce-fips-19.2 19.2.7-r5, gitlab-rails-ce-fips-19.3 19.3.3-r3, gitlab-rails-ce-fips-19.4 19.4.1-r5, kibana-8.19 8.19.22-r4, kibana-8.19-bitnami 8.19.22-r4, kibana-9.2 9.2.8-r25, kubeflow-centraldashboard 2.0.0-r5, lambda-nodejs22 4.0.2-r4, lambda-nodejs24 4.0.2-r4, langfuse-3 3.225.11-r2, langfuse-3-worker 3.225.11-r2, langfuse-4 4.49.0-r0, langfuse-4-worker 4.49.0-r0, langfuse-fips-3 3.225.11-r2, langfuse-fips-3-worker 3.225.11-r2, langfuse-fips-4 4.49.0-r0, langfuse-fips-4-worker 4.49.0-r0, lerna 10.0.1-r8, librechat 0.8.7-r16, nextcloud-server-33 33.0.9-r1, nextcloud-server-34 34.0.4-r2, nextcloud-server-35 35.0.0-r1, opensearch-dashboards-2 2.19.6-r21, opensearch-dashboards-2-fips 2.19.6-r10, opensearch-dashboards-3 3.8.0-r8, opensearch-dashboards-3-fips 3.8.0-r5, prism 5.16.0-r13, redisinsight 3.8.0-r8, semaphore 2.19.12-r3, wazuh-dashboard 4.14.8-r3, wazuh-dashboard-fips 4.14.8-r3, wazuh-dashboard-plugins 4.14.8-r3, wazuh-dashboard-plugins-fips 4.14.8-r3.",
   "date_published": "2026-09-28T17:25:04Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101902/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101902/",
   "title": "CVE-2026-101902 · axios · fixed in Chainguard (awx 24.6.1-r66 and 52 more)",
   "content_text": "Fixed versions: awx 24.6.1-r66, azurite 3.37.0-r4, commercial-gitlab-rails-ee-19.1 19.1.7-r3, commercial-gitlab-rails-ee-19.2 19.2.7-r1, commercial-gitlab-rails-ee-19.3 19.3.3-r1, commercial-gitlab-rails-ee-19.4 19.4.1-r1, commercial-gitlab-rails-ee-fips-19.1 19.1.9-r0, commercial-gitlab-rails-ee-fips-19.2 19.2.7-r1, commercial-gitlab-rails-ee-fips-19.3 19.3.3-r1, commercial-gitlab-rails-ee-fips-19.4 19.4.1-r1, gitlab-rails-ce-19.0 19.0.10-r0, gitlab-rails-ce-19.1 19.1.9-r0, gitlab-rails-ce-19.2 19.2.7-r6, gitlab-rails-ce-19.3 19.3.3-r5, gitlab-rails-ce-19.4 19.4.1-r6, gitlab-rails-ce-fips-18.10 18.10.8-r8, gitlab-rails-ce-fips-18.9 18.9.8-r8, gitlab-rails-ce-fips-19.0 19.0.9-r2, gitlab-rails-ce-fips-19.0 19.0.9-r3, gitlab-rails-ce-fips-19.1 19.1.8-r9, gitlab-rails-ce-fips-19.2 19.2.7-r5, gitlab-rails-ce-fips-19.3 19.3.3-r5, gitlab-rails-ce-fips-19.4 19.4.1-r5, kibana-8.19 8.19.22-r4, kibana-8.19-bitnami 8.19.22-r4, kibana-9.2 9.2.8-r25, kubeflow-centraldashboard 2.0.0-r5, lambda-nodejs22 4.0.2-r4, lambda-nodejs24 4.0.2-r4, langfuse-3 3.225.11-r2, langfuse-3-worker 3.225.11-r2, langfuse-4 4.49.0-r0, langfuse-4-worker 4.49.0-r0, langfuse-fips-3 3.225.11-r2, langfuse-fips-3-worker 3.225.11-r2, langfuse-fips-4 4.49.0-r0, langfuse-fips-4-worker 4.49.0-r0, lerna 10.0.1-r8, librechat 0.8.7-r16, nextcloud-server-33 33.0.9-r1, nextcloud-server-34 34.0.4-r2, nextcloud-server-35 35.0.0-r1, opensearch-dashboards-2 2.19.6-r21, opensearch-dashboards-2-fips 2.19.6-r10, opensearch-dashboards-3 3.8.0-r8, opensearch-dashboards-3-fips 3.8.0-r5, prism 5.16.0-r13, redisinsight 3.8.0-r8, semaphore 2.19.12-r3, wazuh-dashboard 4.14.8-r3, wazuh-dashboard-fips 4.14.8-r3, wazuh-dashboard-plugins 4.14.8-r3, wazuh-dashboard-plugins-fips 4.14.8-r3.",
   "date_published": "2026-09-28T17:22:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101901/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101901/",
   "title": "CVE-2026-101901 · axios · fixed in Chainguard (awx 24.6.1-r66 and 48 more)",
   "content_text": "Fixed versions: awx 24.6.1-r66, commercial-gitlab-rails-ee-19.1 19.1.7-r3, commercial-gitlab-rails-ee-19.2 19.2.7-r1, commercial-gitlab-rails-ee-19.3 19.3.3-r1, commercial-gitlab-rails-ee-19.4 19.4.1-r1, commercial-gitlab-rails-ee-fips-19.1 19.1.9-r0, commercial-gitlab-rails-ee-fips-19.2 19.2.7-r1, commercial-gitlab-rails-ee-fips-19.3 19.3.3-r1, commercial-gitlab-rails-ee-fips-19.4 19.4.1-r1, gitlab-rails-ce-19.0 19.0.10-r0, gitlab-rails-ce-19.1 19.1.8-r8, gitlab-rails-ce-19.2 19.2.7-r6, gitlab-rails-ce-19.3 19.3.3-r5, gitlab-rails-ce-19.4 19.4.1-r3, gitlab-rails-ce-fips-19.0 19.0.9-r2, gitlab-rails-ce-fips-19.1 19.1.8-r8, gitlab-rails-ce-fips-19.2 19.2.7-r5, gitlab-rails-ce-fips-19.3 19.3.3-r3, gitlab-rails-ce-fips-19.4 19.4.1-r5, kibana-8.19 8.19.22-r4, kibana-8.19-bitnami 8.19.22-r4, kibana-9.2 9.2.8-r25, kubeflow-centraldashboard 2.0.0-r5, lambda-nodejs22 4.0.2-r4, lambda-nodejs24 4.0.2-r4, langfuse-3 3.225.11-r2, langfuse-3-worker 3.225.11-r2, langfuse-4 4.49.0-r0, langfuse-4-worker 4.49.0-r0, langfuse-fips-3 3.225.11-r2, langfuse-fips-3-worker 3.225.11-r2, langfuse-fips-4 4.49.0-r0, langfuse-fips-4-worker 4.49.0-r0, lerna 10.0.1-r8, librechat 0.8.7-r16, nextcloud-server-33 33.0.9-r1, nextcloud-server-34 34.0.4-r2, nextcloud-server-35 35.0.0-r1, opensearch-dashboards-2 2.19.6-r21, opensearch-dashboards-2-fips 2.19.6-r10, opensearch-dashboards-3 3.8.0-r8, opensearch-dashboards-3-fips 3.8.0-r5, prism 5.16.0-r13, redisinsight 3.8.0-r8, semaphore 2.19.12-r3, wazuh-dashboard 4.14.8-r3, wazuh-dashboard-fips 4.14.8-r3, wazuh-dashboard-plugins 4.14.8-r3, wazuh-dashboard-plugins-fips 4.14.8-r3.",
   "date_published": "2026-09-28T17:16:21Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101900/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101900/",
   "title": "CVE-2026-101900 · axios · fixed in Chainguard (awx 24.6.1-r66 and 48 more)",
   "content_text": "Fixed versions: awx 24.6.1-r66, commercial-gitlab-rails-ee-19.1 19.1.7-r3, commercial-gitlab-rails-ee-19.2 19.2.7-r1, commercial-gitlab-rails-ee-19.3 19.3.3-r1, commercial-gitlab-rails-ee-19.4 19.4.1-r1, commercial-gitlab-rails-ee-fips-19.1 19.1.9-r0, commercial-gitlab-rails-ee-fips-19.2 19.2.7-r1, commercial-gitlab-rails-ee-fips-19.3 19.3.3-r1, commercial-gitlab-rails-ee-fips-19.4 19.4.1-r1, gitlab-rails-ce-19.0 19.0.10-r0, gitlab-rails-ce-19.1 19.1.8-r8, gitlab-rails-ce-19.2 19.2.7-r6, gitlab-rails-ce-19.3 19.3.3-r5, gitlab-rails-ce-19.4 19.4.1-r3, gitlab-rails-ce-fips-19.0 19.0.9-r2, gitlab-rails-ce-fips-19.1 19.1.8-r8, gitlab-rails-ce-fips-19.2 19.2.7-r5, gitlab-rails-ce-fips-19.3 19.3.3-r3, gitlab-rails-ce-fips-19.4 19.4.1-r5, kibana-8.19 8.19.22-r4, kibana-8.19-bitnami 8.19.22-r4, kibana-9.2 9.2.8-r25, kubeflow-centraldashboard 2.0.0-r5, lambda-nodejs22 4.0.2-r4, lambda-nodejs24 4.0.2-r4, langfuse-3 3.225.11-r2, langfuse-3-worker 3.225.11-r2, langfuse-4 4.49.0-r0, langfuse-4-worker 4.49.0-r0, langfuse-fips-3 3.225.11-r2, langfuse-fips-3-worker 3.225.11-r2, langfuse-fips-4 4.49.0-r0, langfuse-fips-4-worker 4.49.0-r0, lerna 10.0.1-r8, librechat 0.8.7-r16, nextcloud-server-33 33.0.9-r1, nextcloud-server-34 34.0.4-r2, nextcloud-server-35 35.0.0-r1, opensearch-dashboards-2 2.19.6-r21, opensearch-dashboards-2-fips 2.19.6-r10, opensearch-dashboards-3 3.8.0-r8, opensearch-dashboards-3-fips 3.8.0-r5, prism 5.16.0-r13, redisinsight 3.8.0-r8, semaphore 2.19.12-r3, wazuh-dashboard 4.14.8-r3, wazuh-dashboard-fips 4.14.8-r3, wazuh-dashboard-plugins 4.14.8-r3, wazuh-dashboard-plugins-fips 4.14.8-r3.",
   "date_published": "2026-09-28T17:14:07Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101898/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101898/",
   "title": "CVE-2026-101898 · axios · fixed in Chainguard (awx 24.6.1-r66 and 48 more)",
   "content_text": "Fixed versions: awx 24.6.1-r66, commercial-gitlab-rails-ee-19.1 19.1.7-r3, commercial-gitlab-rails-ee-19.2 19.2.7-r1, commercial-gitlab-rails-ee-19.3 19.3.3-r1, commercial-gitlab-rails-ee-19.4 19.4.1-r1, commercial-gitlab-rails-ee-fips-19.1 19.1.9-r0, commercial-gitlab-rails-ee-fips-19.2 19.2.7-r1, commercial-gitlab-rails-ee-fips-19.3 19.3.3-r1, commercial-gitlab-rails-ee-fips-19.4 19.4.1-r1, gitlab-rails-ce-19.0 19.0.10-r0, gitlab-rails-ce-19.1 19.1.8-r8, gitlab-rails-ce-19.2 19.2.7-r6, gitlab-rails-ce-19.3 19.3.3-r5, gitlab-rails-ce-19.4 19.4.1-r3, gitlab-rails-ce-fips-19.0 19.0.9-r2, gitlab-rails-ce-fips-19.1 19.1.8-r8, gitlab-rails-ce-fips-19.2 19.2.7-r5, gitlab-rails-ce-fips-19.3 19.3.3-r3, gitlab-rails-ce-fips-19.4 19.4.1-r5, kibana-8.19 8.19.22-r4, kibana-8.19-bitnami 8.19.22-r4, kibana-9.2 9.2.8-r25, kubeflow-centraldashboard 2.0.0-r5, lambda-nodejs22 4.0.2-r4, lambda-nodejs24 4.0.2-r4, langfuse-3 3.225.11-r2, langfuse-3-worker 3.225.11-r2, langfuse-4 4.49.0-r0, langfuse-4-worker 4.49.0-r0, langfuse-fips-3 3.225.11-r2, langfuse-fips-3-worker 3.225.11-r2, langfuse-fips-4 4.49.0-r0, langfuse-fips-4-worker 4.49.0-r0, lerna 10.0.1-r8, librechat 0.8.7-r16, nextcloud-server-33 33.0.9-r1, nextcloud-server-34 34.0.4-r2, nextcloud-server-35 35.0.0-r1, opensearch-dashboards-2 2.19.6-r21, opensearch-dashboards-2-fips 2.19.6-r10, opensearch-dashboards-3 3.8.0-r8, opensearch-dashboards-3-fips 3.8.0-r5, prism 5.16.0-r13, redisinsight 3.8.0-r8, semaphore 2.19.12-r3, wazuh-dashboard 4.14.8-r3, wazuh-dashboard-fips 4.14.8-r3, wazuh-dashboard-plugins 4.14.8-r3, wazuh-dashboard-plugins-fips 4.14.8-r3.",
   "date_published": "2026-09-28T17:10:16Z"
  }
 ]
}