{"data":{"readiness":"NO_EXPLOITED_EVIDENCE","fixPlan":[],"deadlines":{"early_warning_due":"2026-11-07T01:30:35.929Z","notification_due":"2026-11-09T01:30:35.929Z","final_report_due":null,"final_report_basis":"Not computable: runs 14 days from the time a corrective or mitigating measure is available (fix_available_at not supplied).","early_warning_hours_remaining":24,"notification_hours_remaining":72,"final_report_hours_remaining":null,"applies":false,"art14_in_force_at_awareness":true,"evaluated_at":"2026-11-06T01:30:38.377Z","legal_basis":{"regulation":"Regulation (EU) 2024/2847 (Cyber Resilience Act)","article":"Article 14(2)","source_url":"https://eur-lex.europa.eu/eli/reg/2024/2847/oj","applies_from":"2026-09-11","applies_from_basis":"Art. 71(2): Article 14 shall apply from 11 September 2026.","early_warning":"Art. 14(2)(a): early warning notification of an actively exploited vulnerability, without undue delay and in any event within 24 hours of the manufacturer becoming aware of it.","notification":"Art. 14(2)(b): vulnerability notification, without undue delay and in any event within 72 hours of the manufacturer becoming aware, unless the relevant information has already been provided.","final_report":"Art. 14(2)(c): final report no later than 14 days after a corrective or mitigating measure is available, unless the relevant information has already been provided.","severe_incident_final_report":"Art. 14(4)(c): for a severe incident the final report is due within one month after the submission of the incident notification under Art. 14(4)(b); this agent evaluates vulnerabilities only and computes no incident clock.","actively_exploited_definition":"Art. 3(42): a vulnerability for which there is reliable evidence that a malicious actor has exploited it in a system without permission of the system owner."}},"nextStep":{"code":"MONITOR_FEEDS","by":null,"detail":"No KEV or EUVD exploitation evidence for any matched advisory at the snapshot times below. Rerun when the SBOM or the feeds change; feeds lag disclosure."},"unresolved":[],"results":{"advisor":{"verdict":"fail","riskScore":90,"verdictReason":"4 declared packages with a high or critical known advisory: node-fetch, body-parser, connect-multiparty","status":"complete","missing":[],"topFindings":[{"rank":1,"id":"vulnerable:npm:node-fetch:package.json","package":"node-fetch","ecosystem":"npm","kind":"vulnerable","severity":"high","score":91,"confidence":"high","file":"package.json","line":22,"summary":"node-fetch@2.6.1 has 1 known advisory (GHSA-r683-j2x4-v87g).","fix":"Upgrade node-fetch (latest is 3.3.2) and re-check advisories."},{"rank":2,"id":"vulnerable:npm:body-parser:package.json","package":"body-parser","ecosystem":"npm","kind":"vulnerable","severity":"high","score":88,"confidence":"high","file":"package.json","line":17,"summary":"body-parser@1.18.3 has 3 known advisories (GHSA-27r3-jxmh-p828, GHSA-qwcr-r2fm-qrc7, GHSA-v422-hmwv-36x6).","fix":"Upgrade body-parser (latest is 2.4.0) and re-check advisories."},{"rank":3,"id":"vulnerable:npm:connect-multiparty:package.json","package":"connect-multiparty","ecosystem":"npm","kind":"vulnerable","severity":"high","score":88,"confidence":"high","file":"package.json","line":18,"summary":"connect-multiparty@2.2.0 has 1 known advisory (GHSA-w2xw-44r3-4v9g).","fix":"No newer release; replace connect-multiparty."},{"rank":4,"id":"vulnerable:npm:redis:package.json","package":"redis","ecosystem":"npm","kind":"vulnerable","severity":"high","score":88,"confidence":"high","file":"package.json","line":23,"summary":"redis@2.6.5 has 1 known advisory (GHSA-35q2-47q7-3pc3).","fix":"Upgrade redis (latest is 6.3.1) and re-check advisories."},{"rank":5,"id":"vulnerable:npm:express:package.json","package":"express","ecosystem":"npm","kind":"vulnerable","severity":"high","score":83,"confidence":"high","file":"package.json","line":20,"summary":"express@4.16.4 has 2 known advisories (GHSA-qw6h-vgh9-j6wx, GHSA-rv95-896h-c2vc).","fix":"Upgrade express (latest is 5.3.0) and re-check advisories."}],"nextStep":"Block the release until node-fetch is fixed: Upgrade node-fetch (latest is 3.3.2) and re-check advisories.","source":{"kind":"github","repo":"star7th/htq","commit":"c64ac96becf9d0003774094bc5ff192bec8c70be","treeEntries":12,"treeTruncated":false,"filesRead":6,"bytesRead":52035,"sourceFilesRead":4,"skippedBySize":[],"skippedByCap":0,"via":"api","license":"apache2.0","licenseSource":"manifest"},"ecosystems":[{"ecosystem":"npm","manifests":[{"path":"package.json","lockfile":"package-lock v1","runtimeMin":null,"declared":9}],"sourceFilesScanned":4}],"summary":{"declaredPackages":9,"flaggedPackages":11,"findings":19,"byCategory":{"underused":4,"outgrown":12,"replace":3},"byKind":{"vulnerable":6,"deprecated":2,"redundant-dependency":1,"undeclared":1,"unused":1,"dev-only-in-dependencies":1,"native-replacement":1,"trivial-use":1,"stale":3,"overlap":1,"behind-major":1},"high":8,"replacementsReviewed":4},"findings":[{"ecosystem":"npm","package":"node-fetch","manifest":"package.json","kind":"vulnerable","confidence":"high","summary":"node-fetch@2.6.1 has 1 known advisory (GHSA-r683-j2x4-v87g).","evidence":{"version":"2.6.1","versionSource":"lockfile","source":"osv","advisories":[{"id":"GHSA-r683-j2x4-v87g","cvss":8.8,"severity":"high","summary":"node-fetch forwards secure headers to untrusted sites"}],"total":1,"latestVersion":"3.3.2"},"action":"Upgrade node-fetch (latest is 3.3.2) and re-check advisories.","id":"vulnerable:npm:node-fetch:package.json","category":"outgrown","score":91,"severity":"high"},{"ecosystem":"npm","package":"body-parser","manifest":"package.json","kind":"vulnerable","confidence":"high","summary":"body-parser@1.18.3 has 3 known advisories (GHSA-27r3-jxmh-p828, GHSA-qwcr-r2fm-qrc7, GHSA-v422-hmwv-36x6).","evidence":{"version":"1.18.3","versionSource":"lockfile","source":"osv","advisories":[{"id":"GHSA-27r3-jxmh-p828","cvss":7.5,"severity":"high","summary":"body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body"},{"id":"GHSA-qwcr-r2fm-qrc7","cvss":7.5,"severity":"high","summary":"body-parser vulnerable to denial of service when url encoding is enabled"},{"id":"GHSA-v422-hmwv-36x6","cvss":3.7,"severity":"low","summary":"body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement"}],"total":3,"latestVersion":"2.4.0"},"action":"Upgrade body-parser (latest is 2.4.0) and re-check advisories.","id":"vulnerable:npm:body-parser:package.json","category":"outgrown","score":88,"severity":"high"},{"ecosystem":"npm","package":"connect-multiparty","manifest":"package.json","kind":"vulnerable","confidence":"high","summary":"connect-multiparty@2.2.0 has 1 known advisory (GHSA-w2xw-44r3-4v9g).","evidence":{"version":"2.2.0","versionSource":"lockfile","source":"osv","advisories":[{"id":"GHSA-w2xw-44r3-4v9g","cvss":7.8,"severity":"high","summary":"Connect-Multiparty allows arbitrary file upload"}],"total":1,"latestVersion":"2.2.0"},"action":"No newer release; replace connect-multiparty.","id":"vulnerable:npm:connect-multiparty:package.json","category":"outgrown","score":88,"severity":"high"},{"ecosystem":"npm","package":"redis","manifest":"package.json","kind":"vulnerable","confidence":"high","summary":"redis@2.6.5 has 1 known advisory (GHSA-35q2-47q7-3pc3).","evidence":{"version":"2.6.5","versionSource":"lockfile","source":"osv","advisories":[{"id":"GHSA-35q2-47q7-3pc3","cvss":7.5,"severity":"high","summary":"Node-Redis potential exponential regex in monitor mode"}],"total":1,"latestVersion":"6.3.1"},"action":"Upgrade redis (latest is 6.3.1) and re-check advisories.","id":"vulnerable:npm:redis:package.json","category":"outgrown","score":88,"severity":"high"},{"ecosystem":"npm","package":"express","manifest":"package.json","kind":"vulnerable","confidence":"high","summary":"express@4.16.4 has 2 known advisories (GHSA-qw6h-vgh9-j6wx, GHSA-rv95-896h-c2vc).","evidence":{"version":"4.16.4","versionSource":"lockfile","source":"osv","advisories":[{"id":"GHSA-qw6h-vgh9-j6wx","cvss":5,"severity":"medium","summary":"express vulnerable to XSS via response.redirect()"},{"id":"GHSA-rv95-896h-c2vc","cvss":6.1,"severity":"medium","summary":"Express.js Open Redirect in malformed URLs"}],"total":2,"latestVersion":"5.3.0"},"action":"Upgrade express (latest is 5.3.0) and re-check advisories.","id":"vulnerable:npm:express:package.json","category":"outgrown","score":83,"severity":"high"},{"ecosystem":"npm","package":"request","manifest":"package.json","kind":"vulnerable","confidence":"high","summary":"request@2.88.0 has 1 known advisory (GHSA-p8p7-x288-28g6).","evidence":{"version":"2.88.0","versionSource":"lockfile","source":"osv","advisories":[{"id":"GHSA-p8p7-x288-28g6","cvss":6.1,"severity":"medium","summary":"Server-Side Request Forgery in Request"}],"total":1,"latestVersion":"2.88.2"},"action":"Upgrade request (latest is 2.88.2) and re-check advisories.","id":"vulnerable:npm:request:package.json","category":"outgrown","score":83,"severity":"high"},{"ecosystem":"npm","package":"connect-multiparty","manifest":"package.json","kind":"deprecated","confidence":"high","summary":"connect-multiparty@2.2.0 is deprecated: This package is archived and no longer maintained. For support, visit https://github.com/expressjs/express/discussions","evidence":{"deprecatedReason":"This package is archived and no longer maintained. For support, visit https://github.com/expressjs/express/discussions","version":"2.2.0","latestVersion":"2.2.0","files":1,"prodFiles":1},"action":"Migrate off connect-multiparty.","migrationEffort":"low","id":"deprecated:npm:connect-multiparty:package.json","category":"outgrown","score":75,"severity":"high"},{"ecosystem":"npm","package":"request","manifest":"package.json","kind":"deprecated","confidence":"high","summary":"request@2.88.0 is deprecated: request has been deprecated, see https://github.com/request/request/issues/3142","evidence":{"deprecatedReason":"request has been deprecated, see https://github.com/request/request/issues/3142","version":"2.88.0","latestVersion":"2.88.2","files":2,"prodFiles":1},"action":"Migrate off request (candidates: undici, got, axios, ky, superagent).","migrationEffort":"low","citations":[{"title":"request/request#3142: Request is officially deprecated","url":"https://github.com/request/request/issues/3142"},{"title":"MDN: Fetch API","url":"https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API"}],"id":"deprecated:npm:request:package.json","category":"outgrown","score":75,"severity":"high"},{"ecosystem":"npm","package":"body-parser","manifest":"package.json","kind":"redundant-dependency","confidence":"high","summary":"body-parser: Express exposes json and urlencoded (4.16.0), raw and text (4.17.0) built in.","evidence":{"replacementsTable":"2026-11-04.1","applicability":"applies","symbols":1,"tableCovered":0,"tableUncovered":0,"needsReview":1},"action":"Use express built-in body parsers and drop body-parser.","migrationEffort":"low","citations":[{"title":"Express History.md (4.16.0 adds express.json and express.urlencoded; 4.17.0 adds raw and text)","url":"https://github.com/expressjs/express/blob/master/History.md"}],"id":"redundant-dependency:npm:body-parser:package.json","category":"replace","score":55,"severity":"medium"},{"ecosystem":"npm","package":"form-data","manifest":"package.json","kind":"undeclared","confidence":"medium","summary":"form-data is imported in 1 file but not declared; it is installed only through request.","evidence":{"files":["queue.js"],"symbols":["default"],"installedTransitively":true,"requiredBy":["request"]},"action":"Declare form-data in dependencies; replacing or removing the packages that bring it in would otherwise break these imports.","id":"undeclared:npm:form-data:package.json","category":"underused","score":55,"severity":"medium"},{"ecosystem":"npm","package":"multer","manifest":"package.json","kind":"unused","confidence":"high","summary":"multer is declared in dependencies but no source file, script or config references it.","evidence":{"sections":["dependencies"],"filesScanned":4,"scanComplete":true,"unresolvedDynamicImports":0,"alsoDeprecated":true,"knownAdvisories":8,"version":"1.2.1"},"action":"Remove multer from dependencies.","id":"unused:npm:multer:package.json","category":"underused","score":55,"severity":"medium"},{"ecosystem":"npm","package":"body-parser","manifest":"package.json","kind":"dev-only-in-dependencies","confidence":"high","summary":"body-parser is in dependencies but only tests or tooling use it (1 test, 0 tooling files).","evidence":{"filesByClass":{"prod":0,"test":1,"tooling":0},"typeOnly":false,"publishedPackage":true},"action":"Move body-parser to the development dependencies.","id":"dev-only-in-dependencies:npm:body-parser:package.json","category":"underused","score":45,"severity":"medium"},{"ecosystem":"npm","package":"node-fetch","manifest":"package.json","kind":"native-replacement","confidence":"medium","summary":"node-fetch: fetch, Headers, Request and Response are Node globals (stable since Node 21, available behind no flag since Node 18). (requires runtime >= 18; the repo does not declare its minimum runtime)","evidence":{"replacementsTable":"2026-11-04.1","applicability":"unknown-runtime","note":"requires runtime >= 18; the repo does not declare its minimum runtime","symbols":1,"tableCovered":1,"tableUncovered":0,"needsReview":0},"action":"Replace node-fetch with global fetch where every imported symbol is covered.","migrationEffort":"low","citations":[{"title":"Node.js globals (fetch, FormData, AbortController, atob, btoa)","url":"https://nodejs.org/api/globals.html"}],"id":"native-replacement:npm:node-fetch:package.json","category":"replace","score":45,"severity":"medium"},{"ecosystem":"npm","package":"request","manifest":"package.json","kind":"trivial-use","confidence":"high","summary":"request is imported in 2 files for 1 symbol (default) and weighs 202 KB unpacked.","evidence":{"files":2,"symbols":["default"],"unpackedSize":206894,"curatedReplacement":"npm:request"},"action":"Replace with global fetch.","migrationEffort":"low","citations":[{"title":"request/request#3142: Request is officially deprecated","url":"https://github.com/request/request/issues/3142"},{"title":"MDN: Fetch API","url":"https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API"}],"id":"trivial-use:npm:request:package.json","category":"underused","score":45,"severity":"medium"},{"ecosystem":"npm","package":"async-redis","manifest":"package.json","kind":"stale","confidence":"medium","summary":"async-redis's latest release (2.0.0) is 65 months old.","evidence":{"latestVersion":"2.0.0","latestPublishedAt":"2021-05-25T23:01:42Z","monthsSinceLatestRelease":65.4,"staleThresholdMonths":24},"action":"Check whether async-redis is still maintained; look for an actively maintained alternative.","migrationEffort":"low","id":"stale:npm:async-redis:package.json","category":"outgrown","score":35,"severity":"low"},{"ecosystem":"npm","package":"cookie-parser","manifest":"package.json","kind":"stale","confidence":"medium","summary":"cookie-parser's latest release (1.4.7) is 24 months old.","evidence":{"latestVersion":"1.4.7","latestPublishedAt":"2024-10-08T18:26:16Z","monthsSinceLatestRelease":24.9,"staleThresholdMonths":24},"action":"Check whether cookie-parser is still maintained; look for an actively maintained alternative.","migrationEffort":"low","id":"stale:npm:cookie-parser:package.json","category":"outgrown","score":35,"severity":"low"},{"ecosystem":"npm","package":"node-fetch","manifest":"package.json","kind":"stale","confidence":"medium","summary":"node-fetch's latest release (3.3.2) is 39 months old.","evidence":{"latestVersion":"3.3.2","latestPublishedAt":"2023-07-25T11:50:17Z","monthsSinceLatestRelease":39.4,"staleThresholdMonths":24},"action":"Check whether node-fetch is still maintained; look for an actively maintained alternative.","migrationEffort":"low","id":"stale:npm:node-fetch:package.json","category":"outgrown","score":35,"severity":"low"},{"ecosystem":"npm","package":"node-fetch+request","manifest":"package.json","kind":"overlap","confidence":"medium","summary":"2 HTTP client libraries are in use: node-fetch (2 files), request (2 files).","evidence":{"group":"http-client","packages":[{"name":"node-fetch","files":2,"symbols":1},{"name":"request","files":2,"symbols":1}]},"action":"Consolidate on one HTTP client library; start with the one used in the fewest files.","id":"overlap:npm:node-fetch+request:package.json","category":"replace","score":25,"severity":"low"},{"ecosystem":"npm","package":"redis","manifest":"package.json","kind":"behind-major","confidence":"high","summary":"redis@2.6.5 is 4 major versions behind 6.3.1.","evidence":{"version":"2.6.5","latestVersion":"6.3.1","majorsBehind":4},"action":"Review the changelog and upgrade redis.","id":"behind-major:npm:redis:package.json","category":"outgrown","score":20,"severity":"low"}],"replacements":[{"package":"connect-multiparty","ecosystem":"npm","manifest":"package.json","flaggedBy":["deprecated"],"files":1,"symbols":["default"],"migrationEffort":"low","current":{"version":"2.2.0","scorecard":3,"dependents":423,"monthsSinceLatestRelease":97.7,"unpackedSize":8691,"licenses":["MIT"]},"table":null,"alternatives":[],"candidates":[],"reviewedAlternative":null,"coverage":null},{"package":"request","ecosystem":"npm","manifest":"package.json","flaggedBy":["deprecated","trivial-use"],"files":2,"symbols":["default"],"migrationEffort":"low","current":{"version":"2.88.0","scorecard":3.4,"dependents":4587,"monthsSinceLatestRelease":80.8,"unpackedSize":206894,"licenses":["Apache-2.0"]},"table":{"entry":"npm:request","tableVersion":"2026-11-04.1","reason":"deprecated","summary":"request is deprecated by its maintainers and receives no fixes; the callback and stream API has no drop-in replacement.","applicability":"unknown-runtime","note":"requires runtime >= 18; the repo does not declare its minimum runtime","citations":[{"title":"request/request#3142: Request is officially deprecated","url":"https://github.com/request/request/issues/3142"},{"title":"MDN: Fetch API","url":"https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API"}]},"alternatives":[{"kind":"platform","name":"global fetch","applicability":"unknown-runtime"},{"kind":"package","name":"axios"},{"kind":"package","name":"got"},{"kind":"package","name":"undici"},{"kind":"package","name":"ky"}],"candidates":[{"name":"axios","source":"curated","score":84.9,"components":{"scorecard":0.77,"recency":1,"dependents":1,"size":0.177,"license":1},"licenseCompat":"compatible","version":"1.21.0","licenses":["MIT"],"scorecard":7.7,"monthsSinceLatestRelease":0.3,"dependents":174644,"unpackedSize":2215223},{"name":"got","source":"curated","score":70.1,"components":{"scorecard":0.55,"recency":1,"dependents":0.429,"size":0.502,"license":1},"licenseCompat":"compatible","version":"16.2.0","licenses":["MIT"],"scorecard":5.5,"monthsSinceLatestRelease":0.2,"dependents":138,"unpackedSize":495293},{"name":"undici","source":"curated","score":70.1,"components":{"scorecard":0.81,"recency":1,"dependents":0.2,"size":0.18,"license":1},"licenseCompat":"compatible","version":"8.12.4","licenses":["MIT"],"scorecard":8.1,"monthsSinceLatestRelease":0,"unpackedSize":2185656},{"name":"ky","source":"curated","score":69.4,"components":{"scorecard":0.47,"recency":1,"dependents":0.538,"size":0.459,"license":1},"licenseCompat":"compatible","version":"2.2.0","licenses":["MIT"],"scorecard":4.7,"monthsSinceLatestRelease":0.9,"dependents":486,"unpackedSize":602993}],"reviewedAlternative":"global fetch","coverage":{"status":"UNREVIEWED","symbols":[],"unaccounted":["default"],"decidedBy":"none"}},{"package":"body-parser","ecosystem":"npm","manifest":"package.json","flaggedBy":["redundant-dependency"],"files":1,"symbols":["default"],"migrationEffort":"low","current":{"version":"1.18.3","scorecard":7.4,"dependents":3544,"monthsSinceLatestRelease":0.5,"unpackedSize":55897,"licenses":["MIT"]},"table":{"entry":"npm:body-parser","tableVersion":"2026-11-04.1","reason":"redundant","summary":"Express exposes json and urlencoded (4.16.0), raw and text (4.17.0) built in.","applicability":"applies","citations":[{"title":"Express History.md (4.16.0 adds express.json and express.urlencoded; 4.17.0 adds raw and text)","url":"https://github.com/expressjs/express/blob/master/History.md"}]},"alternatives":[{"kind":"dependency","name":"express built-in body parsers","applicability":"applies"}],"candidates":[],"reviewedAlternative":"express built-in body parsers","coverage":{"status":"UNREVIEWED","symbols":[],"unaccounted":["default"],"decidedBy":"none"}},{"package":"node-fetch","ecosystem":"npm","manifest":"package.json","flaggedBy":["native-replacement"],"files":2,"symbols":["default"],"migrationEffort":"low","current":{"version":"2.6.1","scorecard":4.9,"dependents":7326,"monthsSinceLatestRelease":39.4,"unpackedSize":157766,"licenses":["MIT"]},"table":{"entry":"npm:node-fetch","tableVersion":"2026-11-04.1","reason":"native","summary":"fetch, Headers, Request and Response are Node globals (stable since Node 21, available behind no flag since Node 18).","applicability":"unknown-runtime","note":"requires runtime >= 18; the repo does not declare its minimum runtime","citations":[{"title":"Node.js globals (fetch, FormData, AbortController, atob, btoa)","url":"https://nodejs.org/api/globals.html"}]},"alternatives":[{"kind":"platform","name":"global fetch","applicability":"unknown-runtime"}],"candidates":[],"reviewedAlternative":"global fetch","coverage":{"status":"FULL_COVERAGE","symbols":[{"symbol":"default","covered":true,"replacement":"fetch","decidedBy":"table"}],"unaccounted":[],"decidedBy":"table"}}],"dependencies":[{"ecosystem":"npm","name":"async-redis","sections":["dependencies"],"manifest":"package.json","range":"^1.1.7","version":"1.1.7","versionSource":"lockfile","usage":{"files":2,"filesByClass":{"prod":1,"test":1,"tooling":0},"symbols":["createClient"],"symbolCount":1,"typeOnly":false,"referencedByTooling":false},"health":{"deprecated":false,"latestVersion":"2.0.0","monthsSinceLatestRelease":65.4,"licenses":["MIT"],"advisories":0,"unpackedSize":104783,"maintainers":1,"scorecard":3,"dependents":127}},{"ecosystem":"npm","name":"body-parser","sections":["dependencies"],"manifest":"package.json","range":"^1.18.3","version":"1.18.3","versionSource":"lockfile","usage":{"files":1,"filesByClass":{"prod":0,"test":1,"tooling":0},"symbols":["default"],"symbolCount":1,"typeOnly":false,"referencedByTooling":false},"health":{"deprecated":false,"latestVersion":"2.4.0","monthsSinceLatestRelease":0.5,"licenses":["MIT"],"advisories":3,"unpackedSize":55897,"maintainers":1,"scorecard":7.4,"dependents":3544}},{"ecosystem":"npm","name":"connect-multiparty","sections":["dependencies"],"manifest":"package.json","range":"^2.2.0","version":"2.2.0","versionSource":"lockfile","usage":{"files":1,"filesByClass":{"prod":1,"test":0,"tooling":0},"symbols":["default"],"symbolCount":1,"typeOnly":false,"referencedByTooling":false},"health":{"deprecated":true,"latestVersion":"2.2.0","monthsSinceLatestRelease":97.7,"licenses":["MIT"],"advisories":1,"unpackedSize":8691,"maintainers":2,"scorecard":3,"dependents":423}},{"ecosystem":"npm","name":"cookie-parser","sections":["dependencies"],"manifest":"package.json","range":"~1.4.3","version":"1.4.4","versionSource":"lockfile","usage":{"files":1,"filesByClass":{"prod":1,"test":0,"tooling":0},"symbols":["default"],"symbolCount":1,"typeOnly":false,"referencedByTooling":false},"health":{"deprecated":false,"latestVersion":"1.4.7","monthsSinceLatestRelease":24.9,"licenses":["MIT"],"advisories":0,"unpackedSize":11188,"maintainers":2,"scorecard":5.8,"dependents":188}},{"ecosystem":"npm","name":"express","sections":["dependencies"],"manifest":"package.json","range":"^4.16.4","version":"4.16.4","versionSource":"lockfile","usage":{"files":2,"filesByClass":{"prod":1,"test":1,"tooling":0},"symbols":["default"],"symbolCount":1,"typeOnly":false,"referencedByTooling":false},"health":{"deprecated":false,"latestVersion":"5.3.0","monthsSinceLatestRelease":0.9,"licenses":["MIT"],"advisories":2,"unpackedSize":206123,"maintainers":4,"scorecard":8.5,"dependents":1892}},{"ecosystem":"npm","name":"multer","sections":["dependencies"],"manifest":"package.json","range":"~1.2.0","version":"1.2.1","versionSource":"lockfile","usage":{"files":0,"filesByClass":{"prod":0,"test":0,"tooling":0},"symbols":[],"symbolCount":0,"typeOnly":false,"referencedByTooling":false},"health":{"deprecated":true,"latestVersion":"2.5.0","monthsSinceLatestRelease":0.5,"licenses":["MIT"],"advisories":8,"unpackedSize":null,"maintainers":3,"scorecard":null,"dependents":null}},{"ecosystem":"npm","name":"node-fetch","sections":["dependencies"],"manifest":"package.json","range":"^2.6.1","version":"2.6.1","versionSource":"lockfile","usage":{"files":2,"filesByClass":{"prod":1,"test":1,"tooling":0},"symbols":["default"],"symbolCount":1,"typeOnly":false,"referencedByTooling":false},"health":{"deprecated":false,"latestVersion":"3.3.2","monthsSinceLatestRelease":39.4,"licenses":["MIT"],"advisories":1,"unpackedSize":157766,"maintainers":4,"scorecard":4.9,"dependents":7326}},{"ecosystem":"npm","name":"redis","sections":["dependencies"],"manifest":"package.json","range":"~2.6.2","version":"2.6.5","versionSource":"lockfile","usage":{"files":2,"filesByClass":{"prod":1,"test":1,"tooling":0},"symbols":["createClient","default"],"symbolCount":2,"typeOnly":false,"referencedByTooling":false},"health":{"deprecated":false,"latestVersion":"6.3.1","monthsSinceLatestRelease":0.3,"licenses":["MIT"],"advisories":1,"unpackedSize":null,"maintainers":4,"scorecard":6.5,"dependents":409}},{"ecosystem":"npm","name":"request","sections":["dependencies"],"manifest":"package.json","range":"^2.88.0","version":"2.88.0","versionSource":"lockfile","usage":{"files":2,"filesByClass":{"prod":1,"test":1,"tooling":0},"symbols":["default"],"symbolCount":1,"typeOnly":false,"referencedByTooling":false},"health":{"deprecated":true,"latestVersion":"2.88.2","monthsSinceLatestRelease":80.8,"licenses":["Apache-2.0"],"advisories":1,"unpackedSize":206894,"maintainers":4,"scorecard":3.4,"dependents":4587}}],"coverage":{"complete":true,"notes":[],"sourceFilesScanned":4,"health":{"checked":9,"skipped":0},"upstreamCalls":{"github":8,"registries":76},"failures":[]},"sarif":{"$schema":"https://raw.githubusercontent.com/oasis-tcs/sarif-spec/main/sarif-2.1/schema/sarif-schema-2.1.0.json","version":"2.1.0","runs":[{"tool":{"driver":{"name":"writerslogic-dependency-advisor","version":"1.0.0","semanticVersion":"1.0.0","informationUri":"https://agents.writerslogic.com","rules":[{"id":"dep/vulnerable","name":"vulnerable","shortDescription":{"text":"Dependency has known security advisories"},"defaultConfiguration":{"level":"error"},"properties":{"tags":["security","dependencies","external/cwe/cwe-1395"],"security-severity":"8.0"}},{"id":"dep/deprecated","name":"deprecated","shortDescription":{"text":"Dependency is deprecated by its maintainers"},"defaultConfiguration":{"level":"warning"},"properties":{"tags":["security","dependencies","maintainability"],"security-severity":"5.5"}},{"id":"dep/redundant-dependency","name":"redundant-dependency","shortDescription":{"text":"Dependency is redundant with another already in use"},"defaultConfiguration":{"level":"note"},"properties":{"tags":["security","dependencies","maintainability"],"security-severity":"3.0"}},{"id":"dep/undeclared","name":"undeclared","shortDescription":{"text":"Imported package is not declared"},"defaultConfiguration":{"level":"note"},"properties":{"tags":["security","dependencies","maintainability"],"security-severity":"3.0"}},{"id":"dep/unused","name":"unused","shortDescription":{"text":"Declared dependency is never imported"},"defaultConfiguration":{"level":"note"},"properties":{"tags":["security","dependencies","maintainability"],"security-severity":"3.0"}},{"id":"dep/dev-only-in-dependencies","name":"dev-only-in-dependencies","shortDescription":{"text":"Dev-only package declared as a runtime dependency"},"defaultConfiguration":{"level":"note"},"properties":{"tags":["security","dependencies","maintainability"],"security-severity":"3.0"}},{"id":"dep/native-replacement","name":"native-replacement","shortDescription":{"text":"Platform feature replaces this dependency"},"defaultConfiguration":{"level":"note"},"properties":{"tags":["security","dependencies","maintainability"],"security-severity":"3.0"}},{"id":"dep/trivial-use","name":"trivial-use","shortDescription":{"text":"Large dependency used trivially"},"defaultConfiguration":{"level":"note"},"properties":{"tags":["security","dependencies","maintainability"],"security-severity":"3.0"}},{"id":"dep/stale","name":"stale","shortDescription":{"text":"Dependency has not been released recently"},"defaultConfiguration":{"level":"note"},"properties":{"tags":["security","dependencies","maintainability"],"security-severity":"0.5"}},{"id":"dep/overlap","name":"overlap","shortDescription":{"text":"Dependency overlaps another declared dependency"},"defaultConfiguration":{"level":"note"},"properties":{"tags":["security","dependencies","maintainability"],"security-severity":"0.5"}},{"id":"dep/behind-major","name":"behind-major","shortDescription":{"text":"Dependency is behind by major versions"},"defaultConfiguration":{"level":"note"},"properties":{"tags":["security","dependencies","maintainability"],"security-severity":"0.5"}}]}},"results":[{"ruleId":"dep/vulnerable","ruleIndex":0,"level":"error","message":{"text":"node-fetch@2.6.1 has 1 known advisory (GHSA-r683-j2x4-v87g). Fix: Upgrade node-fetch (latest is 3.3.2) and re-check advisories."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"package.json","uriBaseId":"%SRCROOT%"},"region":{"startLine":22}}}],"partialFingerprints":{"primaryLocationLineHash/v1":"vulnerable:npm:node-fetch:package.json"},"properties":{"severity":"high","package":"node-fetch","ecosystem":"npm","score":91,"confidence":"high"}},{"ruleId":"dep/vulnerable","ruleIndex":0,"level":"error","message":{"text":"body-parser@1.18.3 has 3 known advisories (GHSA-27r3-jxmh-p828, GHSA-qwcr-r2fm-qrc7, GHSA-v422-hmwv-36x6). Fix: Upgrade body-parser (latest is 2.4.0) and re-check advisories."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"package.json","uriBaseId":"%SRCROOT%"},"region":{"startLine":17}}}],"partialFingerprints":{"primaryLocationLineHash/v1":"vulnerable:npm:body-parser:package.json"},"properties":{"severity":"high","package":"body-parser","ecosystem":"npm","score":88,"confidence":"high"}},{"ruleId":"dep/vulnerable","ruleIndex":0,"level":"error","message":{"text":"connect-multiparty@2.2.0 has 1 known advisory (GHSA-w2xw-44r3-4v9g). Fix: No newer release; replace connect-multiparty."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"package.json","uriBaseId":"%SRCROOT%"},"region":{"startLine":18}}}],"partialFingerprints":{"primaryLocationLineHash/v1":"vulnerable:npm:connect-multiparty:package.json"},"properties":{"severity":"high","package":"connect-multiparty","ecosystem":"npm","score":88,"confidence":"high"}},{"ruleId":"dep/vulnerable","ruleIndex":0,"level":"error","message":{"text":"redis@2.6.5 has 1 known advisory (GHSA-35q2-47q7-3pc3). Fix: Upgrade redis (latest is 6.3.1) and re-check advisories."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"package.json","uriBaseId":"%SRCROOT%"},"region":{"startLine":23}}}],"partialFingerprints":{"primaryLocationLineHash/v1":"vulnerable:npm:redis:package.json"},"properties":{"severity":"high","package":"redis","ecosystem":"npm","score":88,"confidence":"high"}},{"ruleId":"dep/vulnerable","ruleIndex":0,"level":"warning","message":{"text":"express@4.16.4 has 2 known advisories (GHSA-qw6h-vgh9-j6wx, GHSA-rv95-896h-c2vc). Fix: Upgrade express (latest is 5.3.0) and re-check advisories."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"package.json","uriBaseId":"%SRCROOT%"},"region":{"startLine":20}}}],"partialFingerprints":{"primaryLocationLineHash/v1":"vulnerable:npm:express:package.json"},"properties":{"severity":"medium","package":"express","ecosystem":"npm","score":83,"confidence":"high"}},{"ruleId":"dep/vulnerable","ruleIndex":0,"level":"warning","message":{"text":"request@2.88.0 has 1 known advisory (GHSA-p8p7-x288-28g6). Fix: Upgrade request (latest is 2.88.2) and re-check advisories."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"package.json","uriBaseId":"%SRCROOT%"},"region":{"startLine":24}}}],"partialFingerprints":{"primaryLocationLineHash/v1":"vulnerable:npm:request:package.json"},"properties":{"severity":"medium","package":"request","ecosystem":"npm","score":83,"confidence":"high"}},{"ruleId":"dep/deprecated","ruleIndex":1,"level":"warning","message":{"text":"connect-multiparty@2.2.0 is deprecated: This package is archived and no longer maintained. For support, visit https://github.com/expressjs/express/discussions Fix: Migrate off connect-multiparty."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"package.json","uriBaseId":"%SRCROOT%"},"region":{"startLine":18}}}],"partialFingerprints":{"primaryLocationLineHash/v1":"deprecated:npm:connect-multiparty:package.json"},"properties":{"severity":"medium","package":"connect-multiparty","ecosystem":"npm","score":75,"confidence":"high"}},{"ruleId":"dep/deprecated","ruleIndex":1,"level":"warning","message":{"text":"request@2.88.0 is deprecated: request has been deprecated, see https://github.com/request/request/issues/3142 Fix: Migrate off request (candidates: undici, got, axios, ky, superagent)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"package.json","uriBaseId":"%SRCROOT%"},"region":{"startLine":24}}}],"partialFingerprints":{"primaryLocationLineHash/v1":"deprecated:npm:request:package.json"},"properties":{"severity":"medium","package":"request","ecosystem":"npm","score":75,"confidence":"high"}},{"ruleId":"dep/redundant-dependency","ruleIndex":2,"level":"note","message":{"text":"body-parser: Express exposes json and urlencoded (4.16.0), raw and text (4.17.0) built in. Fix: Use express built-in body parsers and drop body-parser."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"package.json","uriBaseId":"%SRCROOT%"},"region":{"startLine":17}}}],"partialFingerprints":{"primaryLocationLineHash/v1":"redundant-dependency:npm:body-parser:package.json"},"properties":{"severity":"low","package":"body-parser","ecosystem":"npm","score":55,"confidence":"high"}},{"ruleId":"dep/undeclared","ruleIndex":3,"level":"note","message":{"text":"form-data is imported in 1 file but not declared; it is installed only through request. Fix: Declare form-data in dependencies; replacing or removing the packages that bring it in would otherwise break these imports."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"package.json","uriBaseId":"%SRCROOT%"},"region":{"startLine":1}}}],"partialFingerprints":{"primaryLocationLineHash/v1":"undeclared:npm:form-data:package.json"},"properties":{"severity":"low","package":"form-data","ecosystem":"npm","score":55,"confidence":"medium"}},{"ruleId":"dep/unused","ruleIndex":4,"level":"note","message":{"text":"multer is declared in dependencies but no source file, script or config references it. Fix: Remove multer from dependencies."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"package.json","uriBaseId":"%SRCROOT%"},"region":{"startLine":21}}}],"partialFingerprints":{"primaryLocationLineHash/v1":"unused:npm:multer:package.json"},"properties":{"severity":"low","package":"multer","ecosystem":"npm","score":55,"confidence":"high"}},{"ruleId":"dep/dev-only-in-dependencies","ruleIndex":5,"level":"note","message":{"text":"body-parser is in dependencies but only tests or tooling use it (1 test, 0 tooling files). Fix: Move body-parser to the development dependencies."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"package.json","uriBaseId":"%SRCROOT%"},"region":{"startLine":17}}}],"partialFingerprints":{"primaryLocationLineHash/v1":"dev-only-in-dependencies:npm:body-parser:package.json"},"properties":{"severity":"low","package":"body-parser","ecosystem":"npm","score":45,"confidence":"high"}},{"ruleId":"dep/native-replacement","ruleIndex":6,"level":"note","message":{"text":"node-fetch: fetch, Headers, Request and Response are Node globals (stable since Node 21, available behind no flag since Node 18). (requires runtime >= 18; the repo does not declare its minimum runtime) Fix: Replace node-fetch with global fetch where every imported symbol is covered."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"package.json","uriBaseId":"%SRCROOT%"},"region":{"startLine":22}}}],"partialFingerprints":{"primaryLocationLineHash/v1":"native-replacement:npm:node-fetch:package.json"},"properties":{"severity":"low","package":"node-fetch","ecosystem":"npm","score":45,"confidence":"medium"}},{"ruleId":"dep/trivial-use","ruleIndex":7,"level":"note","message":{"text":"request is imported in 2 files for 1 symbol (default) and weighs 202 KB unpacked. Fix: Replace with global fetch."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"package.json","uriBaseId":"%SRCROOT%"},"region":{"startLine":24}}}],"partialFingerprints":{"primaryLocationLineHash/v1":"trivial-use:npm:request:package.json"},"properties":{"severity":"low","package":"request","ecosystem":"npm","score":45,"confidence":"high"}},{"ruleId":"dep/stale","ruleIndex":8,"level":"note","message":{"text":"async-redis's latest release (2.0.0) is 65 months old. Fix: Check whether async-redis is still maintained; look for an actively maintained alternative."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"package.json","uriBaseId":"%SRCROOT%"},"region":{"startLine":16}}}],"partialFingerprints":{"primaryLocationLineHash/v1":"stale:npm:async-redis:package.json"},"properties":{"severity":"informational","package":"async-redis","ecosystem":"npm","score":35,"confidence":"medium"}},{"ruleId":"dep/stale","ruleIndex":8,"level":"note","message":{"text":"cookie-parser's latest release (1.4.7) is 24 months old. Fix: Check whether cookie-parser is still maintained; look for an actively maintained alternative."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"package.json","uriBaseId":"%SRCROOT%"},"region":{"startLine":19}}}],"partialFingerprints":{"primaryLocationLineHash/v1":"stale:npm:cookie-parser:package.json"},"properties":{"severity":"informational","package":"cookie-parser","ecosystem":"npm","score":35,"confidence":"medium"}},{"ruleId":"dep/stale","ruleIndex":8,"level":"note","message":{"text":"node-fetch's latest release (3.3.2) is 39 months old. Fix: Check whether node-fetch is still maintained; look for an actively maintained alternative."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"package.json","uriBaseId":"%SRCROOT%"},"region":{"startLine":22}}}],"partialFingerprints":{"primaryLocationLineHash/v1":"stale:npm:node-fetch:package.json"},"properties":{"severity":"informational","package":"node-fetch","ecosystem":"npm","score":35,"confidence":"medium"}},{"ruleId":"dep/overlap","ruleIndex":9,"level":"note","message":{"text":"2 HTTP client libraries are in use: node-fetch (2 files), request (2 files). Fix: Consolidate on one HTTP client library; start with the one used in the fewest files."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"package.json","uriBaseId":"%SRCROOT%"},"region":{"startLine":1}}}],"partialFingerprints":{"primaryLocationLineHash/v1":"overlap:npm:node-fetch+request:package.json"},"properties":{"severity":"informational","package":"node-fetch+request","ecosystem":"npm","score":25,"confidence":"medium"}},{"ruleId":"dep/behind-major","ruleIndex":10,"level":"note","message":{"text":"redis@2.6.5 is 4 major versions behind 6.3.1. Fix: Review the changelog and upgrade redis."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"package.json","uriBaseId":"%SRCROOT%"},"region":{"startLine":23}}}],"partialFingerprints":{"primaryLocationLineHash/v1":"behind-major:npm:redis:package.json"},"properties":{"severity":"informational","package":"redis","ecosystem":"npm","score":20,"confidence":"high"}}]}]},"llmCalls":0,"decidedBy":{"findings":"code","replacementCoverage":{"table":1,"model":0,"unreviewed":2}},"versions":{"replacementsTable":"2026-11-04.1"},"thresholds":{"trivialMaxSymbols":2,"trivialMaxFiles":2,"trivialMinSizeBytes":200000,"effortLowFiles":2,"effortMediumFiles":8,"heavyUseFiles":5,"staleMonths":24,"majorsBehind":2},"wouldChangeVerdict":["Re-run with mode \"auto\" and an available model to review symbols the curated table does not decide."]},"cra":{"deterministic":true,"verdict":"NO_EXPLOITED_EVIDENCE","confidence":{"score":0.9,"label":"high"},"exposure":{"article":"Art. 64(2)","max_administrative_fine_eur":15000000,"max_turnover_percent":2.5,"note":"Ceiling for non-compliance with Art. 13 and 14 (whichever is higher for an undertaking); not an estimate of any penalty."},"next_step":{"code":"MONITOR_FEEDS","by":null,"detail":"No KEV or EUVD exploitation evidence for any matched advisory at the snapshot times below. Rerun when the SBOM or the feeds change; feeds lag disclosure."},"top_evidence":[],"summary":"All 9 entries were checked; none has an OSV-matched advisory listed in CISA KEV or ENISA EUVD at the snapshot times.","not_legal_advice":"Not legal advice. This report lists feed evidence and arithmetic on the timestamps you supply. Whether a vulnerability is 'actively exploited' under Art. 3(42), when the manufacturer 'became aware', and what must be notified are determinations for the manufacturer and its counsel.","product":{"name":"htq","version":null},"sbom":{"format":"purl-list","spec_version":null,"sha256":"ff7d233db3e297da33d2c556464067c141ba5f1f9c78d00b700d25b520c7bfbb","bytes":245,"entries":9,"evaluated":9,"skipped":[]},"awareness":{"time":"2026-11-06T01:30:35.929Z","source":"evaluation_time","attested":false,"note":"awareness_time defaulted to the evaluation time."},"deadlines":{"early_warning_due":"2026-11-07T01:30:35.929Z","notification_due":"2026-11-09T01:30:35.929Z","final_report_due":null,"final_report_basis":"Not computable: runs 14 days from the time a corrective or mitigating measure is available (fix_available_at not supplied).","early_warning_hours_remaining":24,"notification_hours_remaining":72,"final_report_hours_remaining":null,"applies":false,"art14_in_force_at_awareness":true,"evaluated_at":"2026-11-06T01:30:38.377Z","legal_basis":{"regulation":"Regulation (EU) 2024/2847 (Cyber Resilience Act)","article":"Article 14(2)","source_url":"https://eur-lex.europa.eu/eli/reg/2024/2847/oj","applies_from":"2026-09-11","applies_from_basis":"Art. 71(2): Article 14 shall apply from 11 September 2026.","early_warning":"Art. 14(2)(a): early warning notification of an actively exploited vulnerability, without undue delay and in any event within 24 hours of the manufacturer becoming aware of it.","notification":"Art. 14(2)(b): vulnerability notification, without undue delay and in any event within 72 hours of the manufacturer becoming aware, unless the relevant information has already been provided.","final_report":"Art. 14(2)(c): final report no later than 14 days after a corrective or mitigating measure is available, unless the relevant information has already been provided.","severe_incident_final_report":"Art. 14(4)(c): for a severe incident the final report is due within one month after the submission of the incident notification under Art. 14(4)(b); this agent evaluates vulnerabilities only and computes no incident clock.","actively_exploited_definition":"Art. 3(42): a vulnerability for which there is reliable evidence that a malicious actor has exploited it in a system without permission of the system owner."}},"counts":{"EXPLOITED_REPORTABLE_CANDIDATE":0,"KNOWN_VULN_NOT_EXPLOITED":7,"NO_MATCH":2,"INSUFFICIENT_EVIDENCE":0},"exploited_vulnerabilities":[],"exploited_vulnerabilities_truncated":false,"components":[{"purl":"pkg:npm/async-redis@1.1.7","ref":"purls[0]","verdict":"NO_MATCH","affected_range_match":"OSV_NOT_AFFECTED","advisory_count":0,"advisories":[],"advisories_truncated":false,"advisories_without_cve":0,"exploited_cves":[],"kev":false,"kev_date_added":null,"euvd_exploited":false,"epss":null,"evidence_gaps":[]},{"purl":"pkg:npm/body-parser@1.18.3","ref":"purls[1]","verdict":"KNOWN_VULN_NOT_EXPLOITED","affected_range_match":"OSV_AFFECTED","advisory_count":3,"advisories":[{"id":"GHSA-27r3-jxmh-p828","cve_ids":["CVE-2026-111181"],"summary":"body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","fixed_versions":["2.4.0","1.20.9"],"exploited":false,"url":"https://osv.dev/vulnerability/GHSA-27r3-jxmh-p828"},{"id":"GHSA-qwcr-r2fm-qrc7","cve_ids":["CVE-2024-45590"],"summary":"body-parser vulnerable to denial of service when url encoding is enabled","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","fixed_versions":["1.20.3"],"exploited":false,"url":"https://osv.dev/vulnerability/GHSA-qwcr-r2fm-qrc7"},{"id":"GHSA-v422-hmwv-36x6","cve_ids":["CVE-2026-12590"],"summary":"body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement","cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","fixed_versions":["1.20.6","2.3.0"],"exploited":false,"url":"https://osv.dev/vulnerability/GHSA-v422-hmwv-36x6"}],"advisories_truncated":false,"advisories_without_cve":0,"exploited_cves":[],"kev":false,"kev_date_added":null,"euvd_exploited":false,"epss":0.00824,"evidence_gaps":[]},{"purl":"pkg:npm/connect-multiparty@2.2.0","ref":"purls[2]","verdict":"KNOWN_VULN_NOT_EXPLOITED","affected_range_match":"OSV_AFFECTED","advisory_count":1,"advisories":[{"id":"GHSA-w2xw-44r3-4v9g","cve_ids":["CVE-2022-29623"],"summary":"Connect-Multiparty allows arbitrary file upload","cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","fixed_versions":[],"exploited":false,"url":"https://osv.dev/vulnerability/GHSA-w2xw-44r3-4v9g"}],"advisories_truncated":false,"advisories_without_cve":0,"exploited_cves":[],"kev":false,"kev_date_added":null,"euvd_exploited":false,"epss":0.01384,"evidence_gaps":[]},{"purl":"pkg:npm/cookie-parser@1.4.4","ref":"purls[3]","verdict":"NO_MATCH","affected_range_match":"OSV_NOT_AFFECTED","advisory_count":0,"advisories":[],"advisories_truncated":false,"advisories_without_cve":0,"exploited_cves":[],"kev":false,"kev_date_added":null,"euvd_exploited":false,"epss":null,"evidence_gaps":[]},{"purl":"pkg:npm/express@4.16.4","ref":"purls[4]","verdict":"KNOWN_VULN_NOT_EXPLOITED","affected_range_match":"OSV_AFFECTED","advisory_count":2,"advisories":[{"id":"GHSA-qw6h-vgh9-j6wx","cve_ids":["CVE-2024-43796"],"summary":"express vulnerable to XSS via response.redirect()","cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","fixed_versions":["4.20.0","5.0.0"],"exploited":false,"url":"https://osv.dev/vulnerability/GHSA-qw6h-vgh9-j6wx"},{"id":"GHSA-rv95-896h-c2vc","cve_ids":["CVE-2024-29041"],"summary":"Express.js Open Redirect in malformed URLs","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","fixed_versions":["4.19.2","5.0.0-beta.3"],"exploited":false,"url":"https://osv.dev/vulnerability/GHSA-rv95-896h-c2vc"}],"advisories_truncated":false,"advisories_without_cve":0,"exploited_cves":[],"kev":false,"kev_date_added":null,"euvd_exploited":false,"epss":0.00786,"evidence_gaps":[]},{"purl":"pkg:npm/multer@1.2.1","ref":"purls[5]","verdict":"KNOWN_VULN_NOT_EXPLOITED","affected_range_match":"OSV_AFFECTED","advisory_count":8,"advisories":[{"id":"GHSA-44fp-w29j-9vj5","cve_ids":["CVE-2025-47935"],"summary":"Multer vulnerable to Denial of Service via memory leaks from unclosed streams","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","fixed_versions":["2.0.0"],"exploited":false,"url":"https://osv.dev/vulnerability/GHSA-44fp-w29j-9vj5"},{"id":"GHSA-535w-7cp7-47q4","cve_ids":["CVE-2026-82333"],"summary":"multer vulnerable to Denial of Service via oversized array index in field names","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","fixed_versions":["2.3.0"],"exploited":false,"url":"https://osv.dev/vulnerability/GHSA-535w-7cp7-47q4"},{"id":"GHSA-5528-5vmv-3xc2","cve_ids":["CVE-2026-3520"],"summary":"Multer Vulnerable to Denial of Service via Uncontrolled Recursion","cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","fixed_versions":["2.1.1"],"exploited":false,"url":"https://osv.dev/vulnerability/GHSA-5528-5vmv-3xc2"},{"id":"GHSA-72gw-mp4g-v24j","cve_ids":["CVE-2026-5079"],"summary":"Multer vulnerable to Denial of Service via deeply nested field names","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","fixed_versions":["2.2.0","3.0.0-alpha.2"],"exploited":false,"url":"https://osv.dev/vulnerability/GHSA-72gw-mp4g-v24j"},{"id":"GHSA-qvfw-j98x-7q72","cve_ids":["CVE-2026-77063"],"summary":"multer vulnerable to file size limit bypass via async fileFilter race condition","cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","fixed_versions":["2.3.0"],"exploited":false,"url":"https://osv.dev/vulnerability/GHSA-qvfw-j98x-7q72"},{"id":"GHSA-v52c-386h-88mc","cve_ids":["CVE-2026-2359"],"summary":"Multer vulnerable to Denial of Service via resource exhaustion","cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","fixed_versions":["2.1.0"],"exploited":false,"url":"https://osv.dev/vulnerability/GHSA-v52c-386h-88mc"},{"id":"GHSA-wc9g-mqfw-jrwm","cve_ids":["CVE-2026-77078"],"summary":"multer vulnerable to Denial of Service via crafted multipart field names","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","fixed_versions":["2.3.0"],"exploited":false,"url":"https://osv.dev/vulnerability/GHSA-wc9g-mqfw-jrwm"},{"id":"GHSA-xf7r-hgr6-v32p","cve_ids":["CVE-2026-3304"],"summary":"Multer vulnerable to Denial of Service via incomplete cleanup","cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","fixed_versions":["2.1.0"],"exploited":false,"url":"https://osv.dev/vulnerability/GHSA-xf7r-hgr6-v32p"}],"advisories_truncated":false,"advisories_without_cve":0,"exploited_cves":[],"kev":false,"kev_date_added":null,"euvd_exploited":false,"epss":0.00818,"evidence_gaps":[]},{"purl":"pkg:npm/node-fetch@2.6.1","ref":"purls[6]","verdict":"KNOWN_VULN_NOT_EXPLOITED","affected_range_match":"OSV_AFFECTED","advisory_count":1,"advisories":[{"id":"GHSA-r683-j2x4-v87g","cve_ids":["CVE-2022-0235"],"summary":"node-fetch forwards secure headers to untrusted sites","cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","fixed_versions":["3.1.1","2.6.7"],"exploited":false,"url":"https://osv.dev/vulnerability/GHSA-r683-j2x4-v87g"}],"advisories_truncated":false,"advisories_without_cve":0,"exploited_cves":[],"kev":false,"kev_date_added":null,"euvd_exploited":false,"epss":0.01653,"evidence_gaps":[]},{"purl":"pkg:npm/redis@2.6.5","ref":"purls[7]","verdict":"KNOWN_VULN_NOT_EXPLOITED","affected_range_match":"OSV_AFFECTED","advisory_count":1,"advisories":[{"id":"GHSA-35q2-47q7-3pc3","cve_ids":["CVE-2021-29469"],"summary":"Node-Redis potential exponential regex in monitor mode","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","fixed_versions":["3.1.1"],"exploited":false,"url":"https://osv.dev/vulnerability/GHSA-35q2-47q7-3pc3"}],"advisories_truncated":false,"advisories_without_cve":0,"exploited_cves":[],"kev":false,"kev_date_added":null,"euvd_exploited":false,"epss":0.01629,"evidence_gaps":[]},{"purl":"pkg:npm/request@2.88.0","ref":"purls[8]","verdict":"KNOWN_VULN_NOT_EXPLOITED","affected_range_match":"OSV_AFFECTED","advisory_count":1,"advisories":[{"id":"GHSA-p8p7-x288-28g6","cve_ids":["CVE-2023-28155"],"summary":"Server-Side Request Forgery in Request","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","fixed_versions":[],"exploited":false,"url":"https://osv.dev/vulnerability/GHSA-p8p7-x288-28g6"}],"advisories_truncated":false,"advisories_without_cve":0,"exploited_cves":[],"kev":false,"kev_date_added":null,"euvd_exploited":false,"epss":0.00719,"evidence_gaps":[]}],"art14_draft_fields":[],"feed_snapshots":{"osv":{"queried_at":"2026-11-06T01:30:36.225Z","components_queried":9},"cisa_kev":{"catalog_version":"2026.11.04","date_released":"2026-11-04T20:00:05.774Z","entries":1768},"first_epss":{"score_date":"2026-11-05","cves_scored":17},"enisa_euvd":{"cves_checked":17,"cves_with_exploitation_record":0}},"sources":[{"name":"osv.dev","role":"Version-aware advisory matching (querybatch by purl and version) and advisory records","status":"ok","url":"https://api.osv.dev/v1/querybatch","requests":18,"sha256":"cdd8735c93d55fe1e6d6d22ae30bbb3cabd12dd0938a7cd56686f6f1be81ab7a","digest_basis":"sha256 over the lines '<url>\\t<sha256>' of every request in order","fetched_at":"2026-11-06T01:30:36.596Z","errors":[],"failed_requests":0},{"name":"cisa-kev","role":"Known Exploited Vulnerabilities catalog","status":"ok","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","requests":1,"sha256":"273b7e449828f0af92e012bf03270a6a6c3deb21dc7a50b46ebe0447ea196bff","digest_basis":"response body","fetched_at":"2026-11-06T01:30:36.008Z","errors":[],"failed_requests":0},{"name":"first-epss","role":"Exploit Prediction Scoring System scores","status":"ok","url":"https://api.first.org/data/v1/epss?limit=100&cve=CVE-2021-29469,CVE-2022-0235,CVE-2022-29623,CVE-2023-28155,CVE-2024-29041,CVE-2024-43796,CVE-2024-45590,CVE-2025-47935,CVE-2026-111181,CVE-2026-12590,CVE-2026-2359,CVE-2026-3304,CVE-2026-3520,CVE-2026-5079,CVE-2026-77063,CVE-2026-77078,CVE-2026-82333","requests":1,"sha256":"1c54dfc4f244dedaebee3811c2d5c335512cf0f97b236501812996034ad01a08","digest_basis":"response body","fetched_at":"2026-11-06T01:30:36.895Z","errors":[],"failed_requests":0},{"name":"enisa-euvd","role":"ENISA EUVD exploited-vulnerability search","status":"ok","url":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-3520","requests":17,"sha256":"6c989577ca1ccae9fd472a52e286cf0e67e3b27b99cdc36cc025908d2f2a9640","digest_basis":"sha256 over the lines '<url>\\t<sha256>' of every request in order","fetched_at":"2026-11-06T01:30:38.377Z","errors":[],"failed_requests":0}],"coverage":{"complete":true,"missing":[],"upstream_calls":37,"deadline_ms":45000,"elapsed_ms":2448},"awareness_record":null,"would_change_verdict":["A new KEV or EUVD entry for an advisory matched to a component.","Versioned purls for skipped entries.","A rerun after missing feeds recover (see coverage.missing)."]}},"steps":{"advisor":{"id":"advisor","agentId":"dependency-advisor","attempts":1,"status":"ok","ms":2116,"inputSha256":"c30a61927aede25f53ef6dec45b095294f3d6826c540454eddbcd33e36d046df","outputSha256":"2f64012aa205f47bceaa4220a525c2cfddff1bcf54f1f53209dcac481e786bb5","partial":false},"purls":{"id":"purls","attempts":0,"status":"ok","ms":0,"outputSha256":"c9be27e39ca485c355f33047d36dcfd26e231fc39c4332983dff95e5ff48a0f6","reads":{"advisor":"2f64012aa205f47bceaa4220a525c2cfddff1bcf54f1f53209dcac481e786bb5"},"partial":false},"cra":{"id":"cra","agentId":"cra-exploit-clock","attempts":1,"status":"ok","ms":2448,"inputSha256":"0525805d54eb312219d15bf760b90c4480f8587775c4ef857fdbef34a46e998b","outputSha256":"18450b147f3ad01511f05f2735b7bfc514b27dfb8263fdeba88ff29334432688","reads":{"purls":"c9be27e39ca485c355f33047d36dcfd26e231fc39c4332983dff95e5ff48a0f6"},"partial":false}},"partial":false,"missing":[],"deterministic":true},"_provenance":{"version":"writerslogic-provenance/1","issuer":"did:web:agents.writerslogic.com","verify":{"endpoint":"POST /api/v1/verify-provenance","did":"did:web:agents.writerslogic.com"},"manifest":{"format":"application/json","instance_id":"xmp:iid:dc7ef82f-41f0-4c0c-8ffb-b4b5e095b2d0","claim_generator_info":[{"name":"WritersLogic x402 Agent Hub","version":"2.0.0"}],"title":"EU CRA Readiness Check","assertions":[{"label":"c2pa.actions.v2","data":{"actions":[{"action":"c2pa.created","when":"2026-11-06T01:30:38.377Z","softwareAgent":{"name":"writerslogic-agent-hub/cra-readiness","version":"2.0.0"},"digitalSourceType":"http://cv.iptc.org/newscodes/digitalsourcetype/algorithmicMedia","parameters":{"endpoint":"POST /api/v1/pipelines/cra-readiness","inputDigest":{"alg":"sha256","hash":"4abea584f587ba02703fe80fcb699f75a4f118f2d4c7ca3f7b637f404070cf08","canonicalization":"JCS"}}}]}},{"label":"c2pa.hash.data","data":{"alg":"sha256","hash":"182ea8227f6a5e9f9c992902abd55ef467721f3b3885820db29960947f154455","name":"jcs-canonical-json(data)"}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.github.com/repos/star7th/htq/commits/HEAD","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.github.com/repos/star7th/htq/commits/HEAD","date":"2026-11-06T01:30:34.072Z"},"hash":{"alg":"sha256","hash":"4bd55e22578cbe3b02e15b73bcb3d6f24c81e015ed9b9cfaddb1ca41f760e631","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.github.com/repos/star7th/htq/git/trees/c64ac96becf9d0003774094bc5ff192bec8c70be?recursive=1","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.github.com/repos/star7th/htq/git/trees/c64ac96becf9d0003774094bc5ff192bec8c70be?recursive=1","date":"2026-11-06T01:30:34.246Z"},"hash":{"alg":"sha256","hash":"e43c95e9a6f0f020ba2a4c998d85d9a0c0820581d639df1b4ce4be1cdbd89d20","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/package.json","format":"text/plain","relationship":"inputTo","dc":{"source":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/package.json","date":"2026-11-06T01:30:34.355Z"},"hash":{"alg":"sha256","hash":"49a697a13dcb6037bcd30929f6db6ede495891f6fa6b9b43a172f0ec8d8c6c96","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/htq.js","format":"text/plain","relationship":"inputTo","dc":{"source":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/htq.js","date":"2026-11-06T01:30:34.356Z"},"hash":{"alg":"sha256","hash":"f6f0a6629d95887419be1b3d20386de5ab75b78ad778c7cf57fd79bca82a07af","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/api.js","format":"text/plain","relationship":"inputTo","dc":{"source":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/api.js","date":"2026-11-06T01:30:34.359Z"},"hash":{"alg":"sha256","hash":"2517602d0013ce7fc676e35478bf24f784db7fdd63eb5dedb07fe730d49b9f01","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/package-lock.json","format":"text/plain","relationship":"inputTo","dc":{"source":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/package-lock.json","date":"2026-11-06T01:30:34.362Z"},"hash":{"alg":"sha256","hash":"cae9f93afe0eb691f0d9993ef3965dd0ee874941d9d752720351b08029dbd2ac","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/queue.js","format":"text/plain","relationship":"inputTo","dc":{"source":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/queue.js","date":"2026-11-06T01:30:34.365Z"},"hash":{"alg":"sha256","hash":"4c097347995d89c5897719c006e70464ca1f0bcf069f9fa71ab5ad80166b7b5f","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/devTest.js","format":"text/plain","relationship":"inputTo","dc":{"source":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/devTest.js","date":"2026-11-06T01:30:34.365Z"},"hash":{"alg":"sha256","hash":"8bdbba07149f6755f29a6836f01f0cb0ac14aad8a19196ea2c1eb0fb261b784b","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/express","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/express","date":"2026-11-06T01:30:34.717Z"},"hash":{"alg":"sha256","hash":"e002acff3c8a32b90d5d8a17ee2d267cf03c07ff5b1198a65cb45685bfea0733","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/body-parser","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/body-parser","date":"2026-11-06T01:30:34.720Z"},"hash":{"alg":"sha256","hash":"ab0f9d9e14ffd679ee17ac3f7a2fd118d48862a800e3f2fe9df1b1205b971eb1","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/async-redis","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/async-redis","date":"2026-11-06T01:30:34.720Z"},"hash":{"alg":"sha256","hash":"98fbf9af8643fd79cd96b8db2ed7bc78271308710972d12fe2085b575910ff91","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/cookie-parser","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/cookie-parser","date":"2026-11-06T01:30:34.720Z"},"hash":{"alg":"sha256","hash":"c17744552f5edb0fa36fa74e027082bb0db6539d16ef69c72d3b616a59fab257","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/connect-multiparty","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/connect-multiparty","date":"2026-11-06T01:30:34.720Z"},"hash":{"alg":"sha256","hash":"e444b757240c18510202e5eb0cfde1a6867534012a09a4e36dc2fab750ed81ce","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/node-fetch","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/node-fetch","date":"2026-11-06T01:30:34.725Z"},"hash":{"alg":"sha256","hash":"fe46670a3637bbb902ee8abfbfc160787cd30a7cac113d68e1570091cba441b7","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/express/versions/4.16.4","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/express/versions/4.16.4","date":"2026-11-06T01:30:34.751Z"},"hash":{"alg":"sha256","hash":"313a6160db07ad06de12e618ed6799a7d6ae59b12241400d6dfae8764488ff12","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/async-redis/versions/1.1.7","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/async-redis/versions/1.1.7","date":"2026-11-06T01:30:34.758Z"},"hash":{"alg":"sha256","hash":"82a68a7d6903d60160cdc32c6c7677fee77bb041432e9f790890c0aed32cc39d","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/body-parser/versions/1.18.3","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/body-parser/versions/1.18.3","date":"2026-11-06T01:30:34.766Z"},"hash":{"alg":"sha256","hash":"908030dcdff25fb33c07ca19d2ecd6df7673e350e4914fb2d36c9ef540037f7f","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/cookie-parser/versions/1.4.4","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/cookie-parser/versions/1.4.4","date":"2026-11-06T01:30:34.796Z"},"hash":{"alg":"sha256","hash":"ba379a0e7084aaed7d3ad109e0713ee29bc797c81870470923dca361c7c3116b","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/connect-multiparty/versions/2.2.0","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/connect-multiparty/versions/2.2.0","date":"2026-11-06T01:30:34.802Z"},"hash":{"alg":"sha256","hash":"3410abf3a69a261d931c9d5a9955bd490704f1e53133f3ec4bc22a56fd21d348","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/async-redis/1.1.7","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/async-redis/1.1.7","date":"2026-11-06T01:30:34.803Z"},"hash":{"alg":"sha256","hash":"41ac78fa143250b21aa9e7664b0631300668b2cf72815a48074e71d7c107ef87","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/express/4.16.4","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/express/4.16.4","date":"2026-11-06T01:30:34.818Z"},"hash":{"alg":"sha256","hash":"0987d6364d11f75a4392624edfa6b77a7ae8198d89fceea05bc2d3aaba6fd2c9","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/body-parser/1.18.3","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/body-parser/1.18.3","date":"2026-11-06T01:30:34.826Z"},"hash":{"alg":"sha256","hash":"c6e9569aa1868ffeb94a1daff37e5ad594086097d01a9efa6eb3edc133710153","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/cookie-parser/1.4.4","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/cookie-parser/1.4.4","date":"2026-11-06T01:30:34.838Z"},"hash":{"alg":"sha256","hash":"fdd76831befdd10e9fcb4563b706960b2a7bee1813f6c81b73dc91d42bfc8bd7","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/node-fetch/versions/2.6.1","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/node-fetch/versions/2.6.1","date":"2026-11-06T01:30:34.838Z"},"hash":{"alg":"sha256","hash":"215f28cff05c1363a2ddb9ff9498274819516512f2ce185925700f206611c32d","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/redis","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/redis","date":"2026-11-06T01:30:34.859Z"},"hash":{"alg":"sha256","hash":"041ef9f49a6fbd712a7903afeada2c958628eb1b1430af81e65fd8fa0078d89c","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/request","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/request","date":"2026-11-06T01:30:34.867Z"},"hash":{"alg":"sha256","hash":"aca73075a9461205e636423047e5b05f772db825dc70c8efc15e9ff35156b4c8","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/connect-multiparty/2.2.0","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/connect-multiparty/2.2.0","date":"2026-11-06T01:30:34.875Z"},"hash":{"alg":"sha256","hash":"ad9e0e5f511690d997d2f75f46eb92194220f6c02bc5ceb9861fe725ae0bef13","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/multer","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/multer","date":"2026-11-06T01:30:34.877Z"},"hash":{"alg":"sha256","hash":"01974b2a88d181f07b53d8af3b42035ab40a9cf58bf4e949d054e9862588d06b","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/node-fetch/2.6.1","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/node-fetch/2.6.1","date":"2026-11-06T01:30:34.878Z"},"hash":{"alg":"sha256","hash":"0ac4e536ea4bb42c4cb22df1ecad5030491e75c792b4966044ee29daeb36290d","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/redis/versions/2.6.5","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/redis/versions/2.6.5","date":"2026-11-06T01:30:34.901Z"},"hash":{"alg":"sha256","hash":"fa953d5100fbc1ecc70da3fccfba939370343fbbb6abca684f8b215dcecbdd41","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/request/versions/2.88.0","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/request/versions/2.88.0","date":"2026-11-06T01:30:34.909Z"},"hash":{"alg":"sha256","hash":"48da28d5c9699a7a4f31e88daa10a79aa520a79f3b14c24600c8a4e3f31bb850","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/multer/versions/1.2.1","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/multer/versions/1.2.1","date":"2026-11-06T01:30:34.931Z"},"hash":{"alg":"sha256","hash":"44ab8a4ab518a5368baaf2b0e069f6fcbc6ad8942a2b4f94d9bb4d7c036375ec","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/redis/2.6.5","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/redis/2.6.5","date":"2026-11-06T01:30:34.943Z"},"hash":{"alg":"sha256","hash":"6589dab9c50553bccffe7bba310c7dee2c86bbfb031b76cf979c8b0472ff1eea","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/multer/1.2.1","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/multer/1.2.1","date":"2026-11-06T01:30:34.953Z"},"hash":{"alg":"sha256","hash":"324ec51f740a8f92ee4d0399d7454efd225877911395db94fc1386eeef19cf71","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/request/2.88.0","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/request/2.88.0","date":"2026-11-06T01:30:34.957Z"},"hash":{"alg":"sha256","hash":"e98ef3d760dabb0e435af83da630fd88c1c09ecd4c671f55b66748dcc314d9e6","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.osv.dev/v1/querybatch","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.osv.dev/v1/querybatch","date":"2026-11-06T01:30:35.402Z"},"hash":{"alg":"sha256","hash":"5596dfe48b242ad6434045f0312eb61c36b6730ab22541050b8380ed7457c4f7","basis":"decoded-text"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-35q2-47q7-3pc3","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-35q2-47q7-3pc3","date":"2026-11-06T01:30:35.450Z"},"hash":{"alg":"sha256","hash":"9a5e389e27af67ea4d0e3537ff39fe1823ad43f9b740488361ca5bb5c554d315","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-qw6h-vgh9-j6wx","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-qw6h-vgh9-j6wx","date":"2026-11-06T01:30:35.454Z"},"hash":{"alg":"sha256","hash":"95f5d551985869715ba483152a1a804478a70bbfb569f3b9565dc6eb519b0a4c","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-w2xw-44r3-4v9g","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-w2xw-44r3-4v9g","date":"2026-11-06T01:30:35.456Z"},"hash":{"alg":"sha256","hash":"b9de3c8962767649e623b135e6821456fe6990b8bd0c12f9934b09927a07cc82","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-27r3-jxmh-p828","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-27r3-jxmh-p828","date":"2026-11-06T01:30:35.456Z"},"hash":{"alg":"sha256","hash":"cde7275135ab8befa57350e66f9b43f326396f34f91a4978d67a030960e71fc3","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-r683-j2x4-v87g","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-r683-j2x4-v87g","date":"2026-11-06T01:30:35.456Z"},"hash":{"alg":"sha256","hash":"49ed303a6f820771336f94f4f9fba42a6a4360dfbe0a1e30390d9836b4ff022b","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-p8p7-x288-28g6","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-p8p7-x288-28g6","date":"2026-11-06T01:30:35.456Z"},"hash":{"alg":"sha256","hash":"e098312a6ff725d2636370e3eb68a8544cdc49da1bd88de48e81ab20b23a4171","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-44fp-w29j-9vj5","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-44fp-w29j-9vj5","date":"2026-11-06T01:30:35.489Z"},"hash":{"alg":"sha256","hash":"25bff1415ffad264831bf968f37c608047ed7d9f3020d5783f64faf813e651bd","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-qwcr-r2fm-qrc7","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-qwcr-r2fm-qrc7","date":"2026-11-06T01:30:35.493Z"},"hash":{"alg":"sha256","hash":"f373828b1623dee06223bf8e1165400624d6ecaf0f38438ba1de499371a9db67","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-rv95-896h-c2vc","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-rv95-896h-c2vc","date":"2026-11-06T01:30:35.499Z"},"hash":{"alg":"sha256","hash":"0b1c4a4d88c3e0389c4e17b82fa31e958e4143fc56189063ba69a23f97080591","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-535w-7cp7-47q4","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-535w-7cp7-47q4","date":"2026-11-06T01:30:35.527Z"},"hash":{"alg":"sha256","hash":"cfde161bf04ab0fce53b6a764e33bc0e8b2ca3956186a3331eaef25546624399","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-v422-hmwv-36x6","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-v422-hmwv-36x6","date":"2026-11-06T01:30:35.553Z"},"hash":{"alg":"sha256","hash":"d9a8732f6a31f4882875106ff906c309575ac091a816d357e28a15d67a083a91","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-5528-5vmv-3xc2","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-5528-5vmv-3xc2","date":"2026-11-06T01:30:35.573Z"},"hash":{"alg":"sha256","hash":"abc1d39967f086fe70dae5708e15dc64111f1c91710a93ec72c08556a118efdd","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/body-parser/versions/1.18.3:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/body-parser/versions/1.18.3:dependents","date":"2026-11-06T01:30:35.615Z"},"hash":{"alg":"sha256","hash":"dd5bd0e55f8560d9ce0091d21fb777e589ccb46e83014c8f4cf9b675719cb121","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/request/versions/2.88.0:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/request/versions/2.88.0:dependents","date":"2026-11-06T01:30:35.617Z"},"hash":{"alg":"sha256","hash":"338adcb94f1d8cf1b8fc6c0beffef2f18ed159a5d9bbff5d20342d993b9a6de5","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/connect-multiparty/versions/2.2.0:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/connect-multiparty/versions/2.2.0:dependents","date":"2026-11-06T01:30:35.622Z"},"hash":{"alg":"sha256","hash":"0776605ddd876d51ddb129fd7e396c53ec424afdc35a984e65e5b18bc3d613b7","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Frequest%2Frequest","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Frequest%2Frequest","date":"2026-11-06T01:30:35.623Z"},"hash":{"alg":"sha256","hash":"6f515083fc403ba175e0e134acb693fb78dcde49c127e9b9614e9a2ea3a5b78d","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fconnect-multiparty","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fconnect-multiparty","date":"2026-11-06T01:30:35.623Z"},"hash":{"alg":"sha256","hash":"29714eb1c187f4c7ed99b0af15dbbd2260ac3f3312fcf0f70fc3e767934c16cb","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fbody-parser","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fbody-parser","date":"2026-11-06T01:30:35.625Z"},"hash":{"alg":"sha256","hash":"ff9a50facddf46527792d3bc88230030f3734c7aef6ff9888b095369f70a5555","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/node-fetch/versions/2.6.1:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/node-fetch/versions/2.6.1:dependents","date":"2026-11-06T01:30:35.669Z"},"hash":{"alg":"sha256","hash":"826a9197895d7aac9ab75932c68bb68573fe02973e70dbd22df9ac22e497379e","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/redis/versions/2.6.5:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/redis/versions/2.6.5:dependents","date":"2026-11-06T01:30:35.669Z"},"hash":{"alg":"sha256","hash":"05d3bf4dc5fdee5edcd655d58d0f6ca05ab23010c17d5006989fe699ce8d213c","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/express/versions/4.16.4:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/express/versions/4.16.4:dependents","date":"2026-11-06T01:30:35.671Z"},"hash":{"alg":"sha256","hash":"db3ed9bd5943b26da6d3ff03897f375073ed95ba3c1f944ce7699fdd58465d87","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fexpress","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fexpress","date":"2026-11-06T01:30:35.673Z"},"hash":{"alg":"sha256","hash":"e3663f98f9aa6eb3523a455c8f1e1720a4273ce613338875489ad2b0484652ce","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Fbitinn%2Fnode-fetch","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Fbitinn%2Fnode-fetch","date":"2026-11-06T01:30:35.675Z"},"hash":{"alg":"sha256","hash":"731202eaa335171b1475f25ade344c0bb09d63184d4413c6ab14be211d449d92","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Fnoderedis%2Fnode_redis","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Fnoderedis%2Fnode_redis","date":"2026-11-06T01:30:35.676Z"},"hash":{"alg":"sha256","hash":"95d3b04d76d56b223c72f9faaa00f3e3e07bd89879e7afd5adbe6136445063a2","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/cookie-parser/versions/1.4.4:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/cookie-parser/versions/1.4.4:dependents","date":"2026-11-06T01:30:35.714Z"},"hash":{"alg":"sha256","hash":"7c37d54c51cf5196fe48f2c4fc49b944f48430dac7cf1bde97f57c69d959fb83","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/async-redis/versions/1.1.7:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/async-redis/versions/1.1.7:dependents","date":"2026-11-06T01:30:35.717Z"},"hash":{"alg":"sha256","hash":"c4083cc9b3e0f9599b176a4243916c8a79be7ce4f04521ced91cd2409ebf6d92","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fcookie-parser","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fcookie-parser","date":"2026-11-06T01:30:35.723Z"},"hash":{"alg":"sha256","hash":"86aae815febaff863ca9e46fbea94a31b969152b0339427b6e9351a9480c9a30","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Fmoaxaca%2Fasync-redis","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Fmoaxaca%2Fasync-redis","date":"2026-11-06T01:30:35.725Z"},"hash":{"alg":"sha256","hash":"769d6cc43136f18306666c5fef93e5de6c7de2443dced4274935d0a1132f9495","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/undici","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/undici","date":"2026-11-06T01:30:35.768Z"},"hash":{"alg":"sha256","hash":"60472d5c38c2fd8fbee2878c66b0132bdb9442efc26656823f1a336b5e29e90a","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/ky","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/ky","date":"2026-11-06T01:30:35.768Z"},"hash":{"alg":"sha256","hash":"68b1019a08d8b859b05947dd4a56034e5e4c56e94fc4b648ade358d741b47ee1","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/axios","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/axios","date":"2026-11-06T01:30:35.769Z"},"hash":{"alg":"sha256","hash":"c696a05ebb0a533a02a2148a84e44678c6bca9338df07f6cb0d88edadc819f1a","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/got","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/got","date":"2026-11-06T01:30:35.769Z"},"hash":{"alg":"sha256","hash":"920311b28c1d51e2689a15147bdef1db0192510af48bc6887ee212ce0662ce4f","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/undici/versions/8.12.4","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/undici/versions/8.12.4","date":"2026-11-06T01:30:35.804Z"},"hash":{"alg":"sha256","hash":"9af1bda7bafed70b33ff53fe952c1f20b1c5ac0f9a1f1de3e1650781d6cc1824","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/ky/versions/2.2.0","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/ky/versions/2.2.0","date":"2026-11-06T01:30:35.806Z"},"hash":{"alg":"sha256","hash":"834715f354b4406a911692c24899ceebe3398d6489c8e1bf4dfad1125346937e","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/axios/versions/1.21.0","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/axios/versions/1.21.0","date":"2026-11-06T01:30:35.821Z"},"hash":{"alg":"sha256","hash":"56cd1b16b353cf8f1a78f9fbd5d749dbff10a4006173d91473bde5b53d66dd22","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/axios/1.21.0","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/axios/1.21.0","date":"2026-11-06T01:30:35.842Z"},"hash":{"alg":"sha256","hash":"397df8d76614228b6c4f6e2bf5ad1ce1695540f757f7a488e7be1e1feab2f56f","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/undici/8.12.4","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/undici/8.12.4","date":"2026-11-06T01:30:35.842Z"},"hash":{"alg":"sha256","hash":"88bd44a27cfb78fbe186286c9f1e0ab649b6170b4c68aec6c6481c3b8d5478bd","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/got/versions/16.2.0","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/got/versions/16.2.0","date":"2026-11-06T01:30:35.851Z"},"hash":{"alg":"sha256","hash":"ae5e05e41ed53937f6bd6c37df5fa03784ac2c4f494156de67b3161059c2b9ff","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/ky/2.2.0","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/ky/2.2.0","date":"2026-11-06T01:30:35.852Z"},"hash":{"alg":"sha256","hash":"d2711510fd0e4947171beeca1144703812c7506bd3e1a5710e4fe018a8543b46","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/got/16.2.0","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/got/16.2.0","date":"2026-11-06T01:30:35.877Z"},"hash":{"alg":"sha256","hash":"b8cc2d8f9702755356503c0f299de9a7b7b3dc3f7e535b4abdf02aec8a2a9f4b","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/axios/versions/1.21.0:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/axios/versions/1.21.0:dependents","date":"2026-11-06T01:30:35.881Z"},"hash":{"alg":"sha256","hash":"5dd6fe90961fcb82070bf33b1b59533a778a84251ae0401a4b1f0a11fb72110a","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Faxios%2Faxios","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Faxios%2Faxios","date":"2026-11-06T01:30:35.888Z"},"hash":{"alg":"sha256","hash":"0ac114195d5cc964d98e088a4b311490949927d894174aa52b6ed1181dd9e0e9","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Fsindresorhus%2Fky","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Fsindresorhus%2Fky","date":"2026-11-06T01:30:35.894Z"},"hash":{"alg":"sha256","hash":"2dab04ab99e6975f73d631aa3931485ad1a64e6386e0afcf116421fa08607528","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Fnodejs%2Fundici","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Fnodejs%2Fundici","date":"2026-11-06T01:30:35.911Z"},"hash":{"alg":"sha256","hash":"bf5f676d1d2398e15582d1ef45ee662341ab1c4438f6ac86071c314683c91033","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/ky/versions/2.2.0:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/ky/versions/2.2.0:dependents","date":"2026-11-06T01:30:35.917Z"},"hash":{"alg":"sha256","hash":"1762ee58cc62849437dcd3c55770d7aaf47a789d12dff21ec40351805a26c2ac","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Fsindresorhus%2Fgot","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Fsindresorhus%2Fgot","date":"2026-11-06T01:30:35.925Z"},"hash":{"alg":"sha256","hash":"a1e437fef325a6057fce9e56428040ceafa05ad072c74f72092a0ae4fd0a60e6","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/got/versions/16.2.0:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/got/versions/16.2.0:dependents","date":"2026-11-06T01:30:35.929Z"},"hash":{"alg":"sha256","hash":"f9ac2ef7eb3defe25f8e2f58773d1bfdcf67b84e478e927c37950b44cc8dc435","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","format":"application/json","relationship":"inputTo","dc":{"source":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2026-11-06T01:30:36.008Z"},"hash":{"alg":"sha256","hash":"273b7e449828f0af92e012bf03270a6a6c3deb21dc7a50b46ebe0447ea196bff","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.osv.dev/v1/querybatch","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.osv.dev/v1/querybatch","date":"2026-11-06T01:30:36.225Z"},"hash":{"alg":"sha256","hash":"772ad1532eed5e38c3b441d4d7d5b5d06dc70403bced0347046106c7917dd9af","basis":"decoded-text"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.osv.dev/v1/vulns/GHSA-rv95-896h-c2vc","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.osv.dev/v1/vulns/GHSA-rv95-896h-c2vc","date":"2026-11-06T01:30:36.333Z"},"hash":{"alg":"sha256","hash":"57352a912f751d98dc80d6eb32ea4ea7bebf697e5fa0287255e67a4bf4e714c7","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.osv.dev/v1/vulns/GHSA-r683-j2x4-v87g","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.osv.dev/v1/vulns/GHSA-r683-j2x4-v87g","date":"2026-11-06T01:30:36.337Z"},"hash":{"alg":"sha256","hash":"566bd68ccba80dbbccb27843d8d48b880cf4fcd2472dee33a9f653ea0391a8e9","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.osv.dev/v1/vulns/GHSA-qw6h-vgh9-j6wx","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.osv.dev/v1/vulns/GHSA-qw6h-vgh9-j6wx","date":"2026-11-06T01:30:36.343Z"},"hash":{"alg":"sha256","hash":"4275bf6bdc2d5796874d7e5bcd03afa011e9f8d127fe17902660b3a6c4f51bbc","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.osv.dev/v1/vulns/GHSA-p8p7-x288-28g6","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.osv.dev/v1/vulns/GHSA-p8p7-x288-28g6","date":"2026-11-06T01:30:36.344Z"},"hash":{"alg":"sha256","hash":"aa2fd6b2184afac3c6d5ac8ac585216c5881d2d65c6c4d819593d85be08ae640","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.osv.dev/v1/vulns/GHSA-35q2-47q7-3pc3","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.osv.dev/v1/vulns/GHSA-35q2-47q7-3pc3","date":"2026-11-06T01:30:36.353Z"},"hash":{"alg":"sha256","hash":"c62722366d1c0627c1d806a5ec511e2b2b20f3b387343d2f82caf0492d4522a3","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.osv.dev/v1/vulns/GHSA-w2xw-44r3-4v9g","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.osv.dev/v1/vulns/GHSA-w2xw-44r3-4v9g","date":"2026-11-06T01:30:36.380Z"},"hash":{"alg":"sha256","hash":"058eecd33c55f6590e19044b50d0b6b731363aafa96ebd77eb50b8f41f4d66c4","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.osv.dev/v1/vulns/GHSA-qwcr-r2fm-qrc7","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.osv.dev/v1/vulns/GHSA-qwcr-r2fm-qrc7","date":"2026-11-06T01:30:36.436Z"},"hash":{"alg":"sha256","hash":"29898a2b8169ec609fe3c3fd89a5b353d9ea05996e54aad917d5242919cbe41a","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.osv.dev/v1/vulns/GHSA-27r3-jxmh-p828","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.osv.dev/v1/vulns/GHSA-27r3-jxmh-p828","date":"2026-11-06T01:30:36.438Z"},"hash":{"alg":"sha256","hash":"06bf92188179ffff3c847a980b8d4f43b9f3df3164ae81b38f1b71b43f7ea6f9","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.osv.dev/v1/vulns/GHSA-v422-hmwv-36x6","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.osv.dev/v1/vulns/GHSA-v422-hmwv-36x6","date":"2026-11-06T01:30:36.443Z"},"hash":{"alg":"sha256","hash":"8a938f77fad9c9f1abde722911a3bfff762ce4fbe35a250fffa549a60ca54d4e","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.osv.dev/v1/vulns/GHSA-44fp-w29j-9vj5","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.osv.dev/v1/vulns/GHSA-44fp-w29j-9vj5","date":"2026-11-06T01:30:36.454Z"},"hash":{"alg":"sha256","hash":"63a3614d454b7079652bf2bf75143e79cf164efff87888842c5d60f8a25e8f0a","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.osv.dev/v1/vulns/GHSA-535w-7cp7-47q4","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.osv.dev/v1/vulns/GHSA-535w-7cp7-47q4","date":"2026-11-06T01:30:36.468Z"},"hash":{"alg":"sha256","hash":"64330bd89ab40c5089bafcabecf3a19be571d9712d58ca04b2d9b94305b66b7b","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.osv.dev/v1/vulns/GHSA-5528-5vmv-3xc2","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.osv.dev/v1/vulns/GHSA-5528-5vmv-3xc2","date":"2026-11-06T01:30:36.480Z"},"hash":{"alg":"sha256","hash":"47484f6766dc464378f16a44aea6168af8fb33cf494cdeabd1f579ab66a88ecb","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.osv.dev/v1/vulns/GHSA-72gw-mp4g-v24j","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.osv.dev/v1/vulns/GHSA-72gw-mp4g-v24j","date":"2026-11-06T01:30:36.546Z"},"hash":{"alg":"sha256","hash":"cf64ed71e639caada047af8b2b422df8f92e9d1c3b99719930b31a742e11b134","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.osv.dev/v1/vulns/GHSA-qvfw-j98x-7q72","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.osv.dev/v1/vulns/GHSA-qvfw-j98x-7q72","date":"2026-11-06T01:30:36.546Z"},"hash":{"alg":"sha256","hash":"4ae7cf7006fca9d366b44e2e17256899deb74b043c7780ee70ca5cc60203ea11","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.osv.dev/v1/vulns/GHSA-xf7r-hgr6-v32p","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.osv.dev/v1/vulns/GHSA-xf7r-hgr6-v32p","date":"2026-11-06T01:30:36.563Z"},"hash":{"alg":"sha256","hash":"5085ea2a1d44436b0094aec83766cc8336a20a646ad45eefa257aa1af782a8e4","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.osv.dev/v1/vulns/GHSA-wc9g-mqfw-jrwm","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.osv.dev/v1/vulns/GHSA-wc9g-mqfw-jrwm","date":"2026-11-06T01:30:36.573Z"},"hash":{"alg":"sha256","hash":"5ba759e1b02606d891e8e7219c08c1a1890ee5086fa6efc7891b0ca8862e8adc","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.osv.dev/v1/vulns/GHSA-v52c-386h-88mc","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.osv.dev/v1/vulns/GHSA-v52c-386h-88mc","date":"2026-11-06T01:30:36.596Z"},"hash":{"alg":"sha256","hash":"7cf572747357e6488aaffa6a2b5f2acecfb132861864d2756b1bcdcc46349ef9","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.first.org/data/v1/epss?limit=100&cve=CVE-2021-29469,CVE-2022-0235,CVE-2022-29623,CVE-2023-28155,CVE-2024-29041,CVE-2024-43796,CVE-2024-45590,CVE-2025-47935,CVE-2026-111181,CVE-2026-12590,CVE-2026-2359,CVE-2026-3304,CVE-2026-3520,CVE-2026-5079,CVE-2026-77063,CVE-2026-77078,CVE-2026-82333","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.first.org/data/v1/epss?limit=100&cve=CVE-2021-29469,CVE-2022-0235,CVE-2022-29623,CVE-2023-28155,CVE-2024-29041,CVE-2024-43796,CVE-2024-45590,CVE-2025-47935,CVE-2026-111181,CVE-2026-12590,CVE-2026-2359,CVE-2026-3304,CVE-2026-3520,CVE-2026-5079,CVE-2026-77063,CVE-2026-77078,CVE-2026-82333","date":"2026-11-06T01:30:36.895Z"},"hash":{"alg":"sha256","hash":"1c54dfc4f244dedaebee3811c2d5c335512cf0f97b236501812996034ad01a08","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-3520","format":"application/json","relationship":"inputTo","dc":{"source":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-3520","date":"2026-11-06T01:30:37.665Z"},"hash":{"alg":"sha256","hash":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2024-45590","format":"application/json","relationship":"inputTo","dc":{"source":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2024-45590","date":"2026-11-06T01:30:37.704Z"},"hash":{"alg":"sha256","hash":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2022-29623","format":"application/json","relationship":"inputTo","dc":{"source":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2022-29623","date":"2026-11-06T01:30:37.723Z"},"hash":{"alg":"sha256","hash":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2025-47935","format":"application/json","relationship":"inputTo","dc":{"source":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2025-47935","date":"2026-11-06T01:30:37.765Z"},"hash":{"alg":"sha256","hash":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2022-0235","format":"application/json","relationship":"inputTo","dc":{"source":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2022-0235","date":"2026-11-06T01:30:37.768Z"},"hash":{"alg":"sha256","hash":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2021-29469","format":"application/json","relationship":"inputTo","dc":{"source":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2021-29469","date":"2026-11-06T01:30:37.836Z"},"hash":{"alg":"sha256","hash":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2024-29041","format":"application/json","relationship":"inputTo","dc":{"source":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2024-29041","date":"2026-11-06T01:30:37.920Z"},"hash":{"alg":"sha256","hash":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-2359","format":"application/json","relationship":"inputTo","dc":{"source":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-2359","date":"2026-11-06T01:30:37.973Z"},"hash":{"alg":"sha256","hash":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-3304","format":"application/json","relationship":"inputTo","dc":{"source":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-3304","date":"2026-11-06T01:30:37.995Z"},"hash":{"alg":"sha256","hash":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2023-28155","format":"application/json","relationship":"inputTo","dc":{"source":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2023-28155","date":"2026-11-06T01:30:38.081Z"},"hash":{"alg":"sha256","hash":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-77078","format":"application/json","relationship":"inputTo","dc":{"source":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-77078","date":"2026-11-06T01:30:38.107Z"},"hash":{"alg":"sha256","hash":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2024-43796","format":"application/json","relationship":"inputTo","dc":{"source":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2024-43796","date":"2026-11-06T01:30:38.177Z"},"hash":{"alg":"sha256","hash":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-12590","format":"application/json","relationship":"inputTo","dc":{"source":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-12590","date":"2026-11-06T01:30:38.261Z"},"hash":{"alg":"sha256","hash":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-111181","format":"application/json","relationship":"inputTo","dc":{"source":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-111181","date":"2026-11-06T01:30:38.265Z"},"hash":{"alg":"sha256","hash":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-82333","format":"application/json","relationship":"inputTo","dc":{"source":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-82333","date":"2026-11-06T01:30:38.318Z"},"hash":{"alg":"sha256","hash":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-5079","format":"application/json","relationship":"inputTo","dc":{"source":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-5079","date":"2026-11-06T01:30:38.331Z"},"hash":{"alg":"sha256","hash":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-77063","format":"application/json","relationship":"inputTo","dc":{"source":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-77063","date":"2026-11-06T01:30:38.377Z"},"hash":{"alg":"sha256","hash":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96","basis":"body"}}}]},"credential":{"@context":["https://www.w3.org/ns/credentials/v2"],"id":"urn:uuid:a0c5705d-19c0-454f-8bb9-e100e74e02a4","type":["VerifiableCredential","AgentOutputCredential"],"issuer":"did:web:agents.writerslogic.com","validFrom":"2026-11-06T01:30:38.377Z","credentialSubject":{"id":"urn:sha256:182ea8227f6a5e9f9c992902abd55ef467721f3b3885820db29960947f154455","agent":"cra-readiness","endpoint":"POST /api/v1/pipelines/cra-readiness","outputDigest":{"alg":"sha256","value":"182ea8227f6a5e9f9c992902abd55ef467721f3b3885820db29960947f154455","canonicalization":"JCS"},"inputDigest":{"alg":"sha256","value":"4abea584f587ba02703fe80fcb699f75a4f118f2d4c7ca3f7b637f404070cf08","canonicalization":"JCS"},"manifestDigest":{"alg":"sha256","value":"49271c6b952840a962ec8386538ee48cf754b3534cb200261d432922793378ca","canonicalization":"JCS"},"ingredients":[{"url":"https://api.github.com/repos/star7th/htq/commits/HEAD","sha256":"4bd55e22578cbe3b02e15b73bcb3d6f24c81e015ed9b9cfaddb1ca41f760e631"},{"url":"https://api.github.com/repos/star7th/htq/git/trees/c64ac96becf9d0003774094bc5ff192bec8c70be?recursive=1","sha256":"e43c95e9a6f0f020ba2a4c998d85d9a0c0820581d639df1b4ce4be1cdbd89d20"},{"url":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/package.json","sha256":"49a697a13dcb6037bcd30929f6db6ede495891f6fa6b9b43a172f0ec8d8c6c96"},{"url":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/htq.js","sha256":"f6f0a6629d95887419be1b3d20386de5ab75b78ad778c7cf57fd79bca82a07af"},{"url":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/api.js","sha256":"2517602d0013ce7fc676e35478bf24f784db7fdd63eb5dedb07fe730d49b9f01"},{"url":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/package-lock.json","sha256":"cae9f93afe0eb691f0d9993ef3965dd0ee874941d9d752720351b08029dbd2ac"},{"url":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/queue.js","sha256":"4c097347995d89c5897719c006e70464ca1f0bcf069f9fa71ab5ad80166b7b5f"},{"url":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/devTest.js","sha256":"8bdbba07149f6755f29a6836f01f0cb0ac14aad8a19196ea2c1eb0fb261b784b"},{"url":"https://api.deps.dev/v3/systems/npm/packages/express","sha256":"e002acff3c8a32b90d5d8a17ee2d267cf03c07ff5b1198a65cb45685bfea0733"},{"url":"https://api.deps.dev/v3/systems/npm/packages/body-parser","sha256":"ab0f9d9e14ffd679ee17ac3f7a2fd118d48862a800e3f2fe9df1b1205b971eb1"},{"url":"https://api.deps.dev/v3/systems/npm/packages/async-redis","sha256":"98fbf9af8643fd79cd96b8db2ed7bc78271308710972d12fe2085b575910ff91"},{"url":"https://api.deps.dev/v3/systems/npm/packages/cookie-parser","sha256":"c17744552f5edb0fa36fa74e027082bb0db6539d16ef69c72d3b616a59fab257"},{"url":"https://api.deps.dev/v3/systems/npm/packages/connect-multiparty","sha256":"e444b757240c18510202e5eb0cfde1a6867534012a09a4e36dc2fab750ed81ce"},{"url":"https://api.deps.dev/v3/systems/npm/packages/node-fetch","sha256":"fe46670a3637bbb902ee8abfbfc160787cd30a7cac113d68e1570091cba441b7"},{"url":"https://api.deps.dev/v3/systems/npm/packages/express/versions/4.16.4","sha256":"313a6160db07ad06de12e618ed6799a7d6ae59b12241400d6dfae8764488ff12"},{"url":"https://api.deps.dev/v3/systems/npm/packages/async-redis/versions/1.1.7","sha256":"82a68a7d6903d60160cdc32c6c7677fee77bb041432e9f790890c0aed32cc39d"},{"url":"https://api.deps.dev/v3/systems/npm/packages/body-parser/versions/1.18.3","sha256":"908030dcdff25fb33c07ca19d2ecd6df7673e350e4914fb2d36c9ef540037f7f"},{"url":"https://api.deps.dev/v3/systems/npm/packages/cookie-parser/versions/1.4.4","sha256":"ba379a0e7084aaed7d3ad109e0713ee29bc797c81870470923dca361c7c3116b"},{"url":"https://api.deps.dev/v3/systems/npm/packages/connect-multiparty/versions/2.2.0","sha256":"3410abf3a69a261d931c9d5a9955bd490704f1e53133f3ec4bc22a56fd21d348"},{"url":"https://registry.npmjs.org/async-redis/1.1.7","sha256":"41ac78fa143250b21aa9e7664b0631300668b2cf72815a48074e71d7c107ef87"},{"url":"https://registry.npmjs.org/express/4.16.4","sha256":"0987d6364d11f75a4392624edfa6b77a7ae8198d89fceea05bc2d3aaba6fd2c9"},{"url":"https://registry.npmjs.org/body-parser/1.18.3","sha256":"c6e9569aa1868ffeb94a1daff37e5ad594086097d01a9efa6eb3edc133710153"},{"url":"https://registry.npmjs.org/cookie-parser/1.4.4","sha256":"fdd76831befdd10e9fcb4563b706960b2a7bee1813f6c81b73dc91d42bfc8bd7"},{"url":"https://api.deps.dev/v3/systems/npm/packages/node-fetch/versions/2.6.1","sha256":"215f28cff05c1363a2ddb9ff9498274819516512f2ce185925700f206611c32d"},{"url":"https://api.deps.dev/v3/systems/npm/packages/redis","sha256":"041ef9f49a6fbd712a7903afeada2c958628eb1b1430af81e65fd8fa0078d89c"},{"url":"https://api.deps.dev/v3/systems/npm/packages/request","sha256":"aca73075a9461205e636423047e5b05f772db825dc70c8efc15e9ff35156b4c8"},{"url":"https://registry.npmjs.org/connect-multiparty/2.2.0","sha256":"ad9e0e5f511690d997d2f75f46eb92194220f6c02bc5ceb9861fe725ae0bef13"},{"url":"https://api.deps.dev/v3/systems/npm/packages/multer","sha256":"01974b2a88d181f07b53d8af3b42035ab40a9cf58bf4e949d054e9862588d06b"},{"url":"https://registry.npmjs.org/node-fetch/2.6.1","sha256":"0ac4e536ea4bb42c4cb22df1ecad5030491e75c792b4966044ee29daeb36290d"},{"url":"https://api.deps.dev/v3/systems/npm/packages/redis/versions/2.6.5","sha256":"fa953d5100fbc1ecc70da3fccfba939370343fbbb6abca684f8b215dcecbdd41"},{"url":"https://api.deps.dev/v3/systems/npm/packages/request/versions/2.88.0","sha256":"48da28d5c9699a7a4f31e88daa10a79aa520a79f3b14c24600c8a4e3f31bb850"},{"url":"https://api.deps.dev/v3/systems/npm/packages/multer/versions/1.2.1","sha256":"44ab8a4ab518a5368baaf2b0e069f6fcbc6ad8942a2b4f94d9bb4d7c036375ec"},{"url":"https://registry.npmjs.org/redis/2.6.5","sha256":"6589dab9c50553bccffe7bba310c7dee2c86bbfb031b76cf979c8b0472ff1eea"},{"url":"https://registry.npmjs.org/multer/1.2.1","sha256":"324ec51f740a8f92ee4d0399d7454efd225877911395db94fc1386eeef19cf71"},{"url":"https://registry.npmjs.org/request/2.88.0","sha256":"e98ef3d760dabb0e435af83da630fd88c1c09ecd4c671f55b66748dcc314d9e6"},{"url":"https://api.osv.dev/v1/querybatch","sha256":"5596dfe48b242ad6434045f0312eb61c36b6730ab22541050b8380ed7457c4f7"},{"url":"https://api.deps.dev/v3/advisories/GHSA-35q2-47q7-3pc3","sha256":"9a5e389e27af67ea4d0e3537ff39fe1823ad43f9b740488361ca5bb5c554d315"},{"url":"https://api.deps.dev/v3/advisories/GHSA-qw6h-vgh9-j6wx","sha256":"95f5d551985869715ba483152a1a804478a70bbfb569f3b9565dc6eb519b0a4c"},{"url":"https://api.deps.dev/v3/advisories/GHSA-w2xw-44r3-4v9g","sha256":"b9de3c8962767649e623b135e6821456fe6990b8bd0c12f9934b09927a07cc82"},{"url":"https://api.deps.dev/v3/advisories/GHSA-27r3-jxmh-p828","sha256":"cde7275135ab8befa57350e66f9b43f326396f34f91a4978d67a030960e71fc3"},{"url":"https://api.deps.dev/v3/advisories/GHSA-r683-j2x4-v87g","sha256":"49ed303a6f820771336f94f4f9fba42a6a4360dfbe0a1e30390d9836b4ff022b"},{"url":"https://api.deps.dev/v3/advisories/GHSA-p8p7-x288-28g6","sha256":"e098312a6ff725d2636370e3eb68a8544cdc49da1bd88de48e81ab20b23a4171"},{"url":"https://api.deps.dev/v3/advisories/GHSA-44fp-w29j-9vj5","sha256":"25bff1415ffad264831bf968f37c608047ed7d9f3020d5783f64faf813e651bd"},{"url":"https://api.deps.dev/v3/advisories/GHSA-qwcr-r2fm-qrc7","sha256":"f373828b1623dee06223bf8e1165400624d6ecaf0f38438ba1de499371a9db67"},{"url":"https://api.deps.dev/v3/advisories/GHSA-rv95-896h-c2vc","sha256":"0b1c4a4d88c3e0389c4e17b82fa31e958e4143fc56189063ba69a23f97080591"},{"url":"https://api.deps.dev/v3/advisories/GHSA-535w-7cp7-47q4","sha256":"cfde161bf04ab0fce53b6a764e33bc0e8b2ca3956186a3331eaef25546624399"},{"url":"https://api.deps.dev/v3/advisories/GHSA-v422-hmwv-36x6","sha256":"d9a8732f6a31f4882875106ff906c309575ac091a816d357e28a15d67a083a91"},{"url":"https://api.deps.dev/v3/advisories/GHSA-5528-5vmv-3xc2","sha256":"abc1d39967f086fe70dae5708e15dc64111f1c91710a93ec72c08556a118efdd"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/body-parser/versions/1.18.3:dependents","sha256":"dd5bd0e55f8560d9ce0091d21fb777e589ccb46e83014c8f4cf9b675719cb121"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/request/versions/2.88.0:dependents","sha256":"338adcb94f1d8cf1b8fc6c0beffef2f18ed159a5d9bbff5d20342d993b9a6de5"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/connect-multiparty/versions/2.2.0:dependents","sha256":"0776605ddd876d51ddb129fd7e396c53ec424afdc35a984e65e5b18bc3d613b7"},{"url":"https://api.deps.dev/v3/projects/github.com%2Frequest%2Frequest","sha256":"6f515083fc403ba175e0e134acb693fb78dcde49c127e9b9614e9a2ea3a5b78d"},{"url":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fconnect-multiparty","sha256":"29714eb1c187f4c7ed99b0af15dbbd2260ac3f3312fcf0f70fc3e767934c16cb"},{"url":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fbody-parser","sha256":"ff9a50facddf46527792d3bc88230030f3734c7aef6ff9888b095369f70a5555"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/node-fetch/versions/2.6.1:dependents","sha256":"826a9197895d7aac9ab75932c68bb68573fe02973e70dbd22df9ac22e497379e"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/redis/versions/2.6.5:dependents","sha256":"05d3bf4dc5fdee5edcd655d58d0f6ca05ab23010c17d5006989fe699ce8d213c"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/express/versions/4.16.4:dependents","sha256":"db3ed9bd5943b26da6d3ff03897f375073ed95ba3c1f944ce7699fdd58465d87"},{"url":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fexpress","sha256":"e3663f98f9aa6eb3523a455c8f1e1720a4273ce613338875489ad2b0484652ce"},{"url":"https://api.deps.dev/v3/projects/github.com%2Fbitinn%2Fnode-fetch","sha256":"731202eaa335171b1475f25ade344c0bb09d63184d4413c6ab14be211d449d92"},{"url":"https://api.deps.dev/v3/projects/github.com%2Fnoderedis%2Fnode_redis","sha256":"95d3b04d76d56b223c72f9faaa00f3e3e07bd89879e7afd5adbe6136445063a2"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/cookie-parser/versions/1.4.4:dependents","sha256":"7c37d54c51cf5196fe48f2c4fc49b944f48430dac7cf1bde97f57c69d959fb83"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/async-redis/versions/1.1.7:dependents","sha256":"c4083cc9b3e0f9599b176a4243916c8a79be7ce4f04521ced91cd2409ebf6d92"},{"url":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fcookie-parser","sha256":"86aae815febaff863ca9e46fbea94a31b969152b0339427b6e9351a9480c9a30"},{"url":"https://api.deps.dev/v3/projects/github.com%2Fmoaxaca%2Fasync-redis","sha256":"769d6cc43136f18306666c5fef93e5de6c7de2443dced4274935d0a1132f9495"},{"url":"https://api.deps.dev/v3/systems/npm/packages/undici","sha256":"60472d5c38c2fd8fbee2878c66b0132bdb9442efc26656823f1a336b5e29e90a"},{"url":"https://api.deps.dev/v3/systems/npm/packages/ky","sha256":"68b1019a08d8b859b05947dd4a56034e5e4c56e94fc4b648ade358d741b47ee1"},{"url":"https://api.deps.dev/v3/systems/npm/packages/axios","sha256":"c696a05ebb0a533a02a2148a84e44678c6bca9338df07f6cb0d88edadc819f1a"},{"url":"https://api.deps.dev/v3/systems/npm/packages/got","sha256":"920311b28c1d51e2689a15147bdef1db0192510af48bc6887ee212ce0662ce4f"},{"url":"https://api.deps.dev/v3/systems/npm/packages/undici/versions/8.12.4","sha256":"9af1bda7bafed70b33ff53fe952c1f20b1c5ac0f9a1f1de3e1650781d6cc1824"},{"url":"https://api.deps.dev/v3/systems/npm/packages/ky/versions/2.2.0","sha256":"834715f354b4406a911692c24899ceebe3398d6489c8e1bf4dfad1125346937e"},{"url":"https://api.deps.dev/v3/systems/npm/packages/axios/versions/1.21.0","sha256":"56cd1b16b353cf8f1a78f9fbd5d749dbff10a4006173d91473bde5b53d66dd22"},{"url":"https://registry.npmjs.org/axios/1.21.0","sha256":"397df8d76614228b6c4f6e2bf5ad1ce1695540f757f7a488e7be1e1feab2f56f"},{"url":"https://registry.npmjs.org/undici/8.12.4","sha256":"88bd44a27cfb78fbe186286c9f1e0ab649b6170b4c68aec6c6481c3b8d5478bd"},{"url":"https://api.deps.dev/v3/systems/npm/packages/got/versions/16.2.0","sha256":"ae5e05e41ed53937f6bd6c37df5fa03784ac2c4f494156de67b3161059c2b9ff"},{"url":"https://registry.npmjs.org/ky/2.2.0","sha256":"d2711510fd0e4947171beeca1144703812c7506bd3e1a5710e4fe018a8543b46"},{"url":"https://registry.npmjs.org/got/16.2.0","sha256":"b8cc2d8f9702755356503c0f299de9a7b7b3dc3f7e535b4abdf02aec8a2a9f4b"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/axios/versions/1.21.0:dependents","sha256":"5dd6fe90961fcb82070bf33b1b59533a778a84251ae0401a4b1f0a11fb72110a"},{"url":"https://api.deps.dev/v3/projects/github.com%2Faxios%2Faxios","sha256":"0ac114195d5cc964d98e088a4b311490949927d894174aa52b6ed1181dd9e0e9"},{"url":"https://api.deps.dev/v3/projects/github.com%2Fsindresorhus%2Fky","sha256":"2dab04ab99e6975f73d631aa3931485ad1a64e6386e0afcf116421fa08607528"},{"url":"https://api.deps.dev/v3/projects/github.com%2Fnodejs%2Fundici","sha256":"bf5f676d1d2398e15582d1ef45ee662341ab1c4438f6ac86071c314683c91033"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/ky/versions/2.2.0:dependents","sha256":"1762ee58cc62849437dcd3c55770d7aaf47a789d12dff21ec40351805a26c2ac"},{"url":"https://api.deps.dev/v3/projects/github.com%2Fsindresorhus%2Fgot","sha256":"a1e437fef325a6057fce9e56428040ceafa05ad072c74f72092a0ae4fd0a60e6"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/got/versions/16.2.0:dependents","sha256":"f9ac2ef7eb3defe25f8e2f58773d1bfdcf67b84e478e927c37950b44cc8dc435"},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","sha256":"273b7e449828f0af92e012bf03270a6a6c3deb21dc7a50b46ebe0447ea196bff"},{"url":"https://api.osv.dev/v1/querybatch","sha256":"772ad1532eed5e38c3b441d4d7d5b5d06dc70403bced0347046106c7917dd9af"},{"url":"https://api.osv.dev/v1/vulns/GHSA-rv95-896h-c2vc","sha256":"57352a912f751d98dc80d6eb32ea4ea7bebf697e5fa0287255e67a4bf4e714c7"},{"url":"https://api.osv.dev/v1/vulns/GHSA-r683-j2x4-v87g","sha256":"566bd68ccba80dbbccb27843d8d48b880cf4fcd2472dee33a9f653ea0391a8e9"},{"url":"https://api.osv.dev/v1/vulns/GHSA-qw6h-vgh9-j6wx","sha256":"4275bf6bdc2d5796874d7e5bcd03afa011e9f8d127fe17902660b3a6c4f51bbc"},{"url":"https://api.osv.dev/v1/vulns/GHSA-p8p7-x288-28g6","sha256":"aa2fd6b2184afac3c6d5ac8ac585216c5881d2d65c6c4d819593d85be08ae640"},{"url":"https://api.osv.dev/v1/vulns/GHSA-35q2-47q7-3pc3","sha256":"c62722366d1c0627c1d806a5ec511e2b2b20f3b387343d2f82caf0492d4522a3"},{"url":"https://api.osv.dev/v1/vulns/GHSA-w2xw-44r3-4v9g","sha256":"058eecd33c55f6590e19044b50d0b6b731363aafa96ebd77eb50b8f41f4d66c4"},{"url":"https://api.osv.dev/v1/vulns/GHSA-qwcr-r2fm-qrc7","sha256":"29898a2b8169ec609fe3c3fd89a5b353d9ea05996e54aad917d5242919cbe41a"},{"url":"https://api.osv.dev/v1/vulns/GHSA-27r3-jxmh-p828","sha256":"06bf92188179ffff3c847a980b8d4f43b9f3df3164ae81b38f1b71b43f7ea6f9"},{"url":"https://api.osv.dev/v1/vulns/GHSA-v422-hmwv-36x6","sha256":"8a938f77fad9c9f1abde722911a3bfff762ce4fbe35a250fffa549a60ca54d4e"},{"url":"https://api.osv.dev/v1/vulns/GHSA-44fp-w29j-9vj5","sha256":"63a3614d454b7079652bf2bf75143e79cf164efff87888842c5d60f8a25e8f0a"},{"url":"https://api.osv.dev/v1/vulns/GHSA-535w-7cp7-47q4","sha256":"64330bd89ab40c5089bafcabecf3a19be571d9712d58ca04b2d9b94305b66b7b"},{"url":"https://api.osv.dev/v1/vulns/GHSA-5528-5vmv-3xc2","sha256":"47484f6766dc464378f16a44aea6168af8fb33cf494cdeabd1f579ab66a88ecb"},{"url":"https://api.osv.dev/v1/vulns/GHSA-72gw-mp4g-v24j","sha256":"cf64ed71e639caada047af8b2b422df8f92e9d1c3b99719930b31a742e11b134"},{"url":"https://api.osv.dev/v1/vulns/GHSA-qvfw-j98x-7q72","sha256":"4ae7cf7006fca9d366b44e2e17256899deb74b043c7780ee70ca5cc60203ea11"},{"url":"https://api.osv.dev/v1/vulns/GHSA-xf7r-hgr6-v32p","sha256":"5085ea2a1d44436b0094aec83766cc8336a20a646ad45eefa257aa1af782a8e4"},{"url":"https://api.osv.dev/v1/vulns/GHSA-wc9g-mqfw-jrwm","sha256":"5ba759e1b02606d891e8e7219c08c1a1890ee5086fa6efc7891b0ca8862e8adc"},{"url":"https://api.osv.dev/v1/vulns/GHSA-v52c-386h-88mc","sha256":"7cf572747357e6488aaffa6a2b5f2acecfb132861864d2756b1bcdcc46349ef9"},{"url":"https://api.first.org/data/v1/epss?limit=100&cve=CVE-2021-29469,CVE-2022-0235,CVE-2022-29623,CVE-2023-28155,CVE-2024-29041,CVE-2024-43796,CVE-2024-45590,CVE-2025-47935,CVE-2026-111181,CVE-2026-12590,CVE-2026-2359,CVE-2026-3304,CVE-2026-3520,CVE-2026-5079,CVE-2026-77063,CVE-2026-77078,CVE-2026-82333","sha256":"1c54dfc4f244dedaebee3811c2d5c335512cf0f97b236501812996034ad01a08"},{"url":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-3520","sha256":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96"},{"url":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2024-45590","sha256":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96"},{"url":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2022-29623","sha256":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96"},{"url":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2025-47935","sha256":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96"},{"url":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2022-0235","sha256":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96"},{"url":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2021-29469","sha256":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96"},{"url":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2024-29041","sha256":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96"},{"url":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-2359","sha256":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96"},{"url":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-3304","sha256":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96"},{"url":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2023-28155","sha256":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96"},{"url":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-77078","sha256":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96"},{"url":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2024-43796","sha256":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96"},{"url":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-12590","sha256":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96"},{"url":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-111181","sha256":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96"},{"url":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-82333","sha256":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96"},{"url":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-5079","sha256":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96"},{"url":"https://euvdservices.enisa.europa.eu/api/search?exploited=true&size=5&text=CVE-2026-77063","sha256":"4bf7c8639bc34bbbae5aef4aba3c724f9a425cbdc0416ab6384f7745ae1acb96"}],"payment":{"scheme":"api-key","network":"eip155:8453","payer":"sample"}},"proof":{"type":"DataIntegrityProof","cryptosuite":"eddsa-jcs-2022","created":"2026-11-06T01:30:38.377Z","verificationMethod":"did:web:agents.writerslogic.com#key-1","proofPurpose":"assertionMethod","proofValue":"z3No9XZB79FNwriUcjY9HzyhoVpqBFLArVGUY8vM7Uc4kpBtinT4uYoUy73wPSusx6odQbobVjYYo587UwtmjY7Y"}},"ethSignature":{"type":"EIP-191","signer":"did:pkh:eip155:8453:0x3DBd42560cA7a7E448A2c7DfC9E785526189411f","address":"0x3DBd42560cA7a7E448A2c7DfC9E785526189411f","message":"writerslogic-provenance:ac661a608da98ab7c230d7f838f2e6c1ef14568e931875836f0fb8b95d516479","signature":"0x626dde5129d635404e66889df6df34a92eb46bddc8a076a7e99d019ba378c9ad7481577e9500abd20d4ae7cf50cf707bf0af77b0282a2712544363ca187773851c"}}}