{ "SchemaVersion": 2, "Trivy": { "Version": "0.72.0" }, "ReportID": "01a03153-0eb2-70fb-89b4-c0338c0468db", "CreatedAt": "2026-08-24T01:12:01.970066421Z", "ArtifactName": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz", "ArtifactType": "filesystem", "Results": [ { "Target": "Node.js", "Class": "lang-pkgs", "Type": "node-pkg", "Packages": [ { "ID": "@hapi/hoek@8.5.1", "Name": "@hapi/hoek", "Identifier": { "PURL": "pkg:npm/%40hapi/hoek@8.5.1", "UID": "e0d7c59743a735ae" }, "Version": "8.5.1", "Licenses": [ "BSD-3-Clause" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/joi/node_modules/hoek/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "accepts@1.3.8", "Name": "accepts", "Identifier": { "PURL": "pkg:npm/accepts@1.3.8", "UID": "34ef5c1834382bfc" }, "Version": "1.3.8", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/accepts/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ajv@8.20.0", "Name": "ajv", "Identifier": { "PURL": "pkg:npm/ajv@8.20.0", "UID": "40b0f4f1b5d5ad63" }, "Version": "8.20.0", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/ajv/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ansi-html-community@0.0.8", "Name": "ansi-html-community", "Identifier": { "PURL": "pkg:npm/ansi-html-community@0.0.8", "UID": "66eb10a0ec7125b4" }, "Version": "0.0.8", "Licenses": [ "Apache-2.0" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/ansi-html-community/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ansi-regex@2.1.1", "Name": "ansi-regex", "Identifier": { "PURL": "pkg:npm/ansi-regex@2.1.1", "UID": "c8f7dd0b9280f972" }, "Version": "2.1.1", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/ansi-regex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ansi-styles@2.2.1", "Name": "ansi-styles", "Identifier": { "PURL": "pkg:npm/ansi-styles@2.2.1", "UID": "4689a6df02d4cbbf" }, "Version": "2.2.1", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/ansi-styles/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "aqb@2.1.0", "Name": "aqb", "Identifier": { "PURL": "pkg:npm/aqb@2.1.0", "UID": "18228f300f8cece" }, "Version": "2.1.0", "Licenses": [ "Apache-2.0" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/aqb/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "argparse@2.0.1", "Name": "argparse", "Identifier": { "PURL": "pkg:npm/argparse@2.0.1", "UID": "801014ebdf8c68c8" }, "Version": "2.0.1", "Licenses": [ "Python-2.0" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/argparse/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "assertion-error@1.1.0", "Name": "assertion-error", "Identifier": { "PURL": "pkg:npm/assertion-error@1.1.0", "UID": "40f08d38688d9e1" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/assertion-error/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "babel-code-frame@6.26.0", "Name": "babel-code-frame", "Identifier": { "PURL": "pkg:npm/babel-code-frame@6.26.0", "UID": "58395281386e9f19" }, "Version": "6.26.0", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/babel-code-frame/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "balanced-match@4.0.4", "Name": "balanced-match", "Identifier": { "PURL": "pkg:npm/balanced-match@4.0.4", "UID": "9945d36dca2f8e70" }, "Version": "4.0.4", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/balanced-match/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "benchmark@1.0.0", "Name": "benchmark", "Identifier": { "PURL": "pkg:npm/benchmark@1.0.0", "UID": "e91449fc4a034e90" }, "Version": "1.0.0", "Licenses": [ "ISC" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/fast-uri/benchmark/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "brace-expansion@5.0.9", "Name": "brace-expansion", "Identifier": { "PURL": "pkg:npm/brace-expansion@5.0.9", "UID": "575dead129e0dd44" }, "Version": "5.0.9", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/brace-expansion/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "call-bind-apply-helpers@1.0.2", "Name": "call-bind-apply-helpers", "Identifier": { "PURL": "pkg:npm/call-bind-apply-helpers@1.0.2", "UID": "a7d5084aac3eeba6" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/call-bind-apply-helpers/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "call-bound@1.0.4", "Name": "call-bound", "Identifier": { "PURL": "pkg:npm/call-bound@1.0.4", "UID": "f11b4a855cc23d23" }, "Version": "1.0.4", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/call-bound/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "chai@3.5.0", "Name": "chai", "Identifier": { "PURL": "pkg:npm/chai@3.5.0", "UID": "47f8fef1a2291ca0" }, "Version": "3.5.0", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/chai/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "chalk@1.1.3", "Name": "chalk", "Identifier": { "PURL": "pkg:npm/chalk@1.1.3", "UID": "d334b762713a7144" }, "Version": "1.1.3", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/chalk/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "content-disposition@0.5.4", "Name": "content-disposition", "Identifier": { "PURL": "pkg:npm/content-disposition@0.5.4", "UID": "e5d761150ff5a493" }, "Version": "0.5.4", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/content-disposition/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "content-type@1.0.5", "Name": "content-type", "Identifier": { "PURL": "pkg:npm/content-type@1.0.5", "UID": "4589eca6a13c2dee" }, "Version": "1.0.5", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/content-type/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "dedent@0.7.0", "Name": "dedent", "Identifier": { "PURL": "pkg:npm/dedent@0.7.0", "UID": "52090df338709498" }, "Version": "0.7.0", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/dedent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "deep-eql@0.1.3", "Name": "deep-eql", "Identifier": { "PURL": "pkg:npm/deep-eql@0.1.3", "UID": "673b80f877afc845" }, "Version": "0.1.3", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/deep-eql/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "depd@1.1.2", "Name": "depd", "Identifier": { "PURL": "pkg:npm/depd@1.1.2", "UID": "7a47603cd67f515d" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/depd/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "diff@8.0.4", "Name": "diff", "Identifier": { "PURL": "pkg:npm/diff@8.0.4", "UID": "90f307418028b2b6" }, "Version": "8.0.4", "Licenses": [ "BSD-3-Clause" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/diff/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "dunder-proto@1.0.1", "Name": "dunder-proto", "Identifier": { "PURL": "pkg:npm/dunder-proto@1.0.1", "UID": "6d18864037cbaaf4" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/dunder-proto/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "error-stack-parser@2.1.4", "Name": "error-stack-parser", "Identifier": { "PURL": "pkg:npm/error-stack-parser@2.1.4", "UID": "f63506dc9009e1ee" }, "Version": "2.1.4", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/error-stack-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "es-define-property@1.0.1", "Name": "es-define-property", "Identifier": { "PURL": "pkg:npm/es-define-property@1.0.1", "UID": "b1885a0fbf35786a" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/es-define-property/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "es-errors@1.3.0", "Name": "es-errors", "Identifier": { "PURL": "pkg:npm/es-errors@1.3.0", "UID": "45f533dcfab6c1f5" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/es-errors/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "es-object-atoms@1.1.2", "Name": "es-object-atoms", "Identifier": { "PURL": "pkg:npm/es-object-atoms@1.1.2", "UID": "57c9e2b31e67ff6e" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/es-object-atoms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "escape-string-regexp@1.0.5", "Name": "escape-string-regexp", "Identifier": { "PURL": "pkg:npm/escape-string-regexp@1.0.5", "UID": "7f453e49da354e76" }, "Version": "1.0.5", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/escape-string-regexp/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "esutils@2.0.3", "Name": "esutils", "Identifier": { "PURL": "pkg:npm/esutils@2.0.3", "UID": "93f41f9ef0d89517" }, "Version": "2.0.3", "Licenses": [ "BSD-2-Clause" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/esutils/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "extendible@0.1.1", "Name": "extendible", "Identifier": { "PURL": "pkg:npm/extendible@0.1.1", "UID": "380b6a412f76b5f1" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/extendible/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "fast-deep-equal@3.1.3", "Name": "fast-deep-equal", "Identifier": { "PURL": "pkg:npm/fast-deep-equal@3.1.3", "UID": "23c31fe59fdca885" }, "Version": "3.1.3", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/fast-deep-equal/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "fast-uri@3.1.5", "Name": "fast-uri", "Identifier": { "PURL": "pkg:npm/fast-uri@3.1.5", "UID": "238df7855f63998e" }, "Version": "3.1.5", "Licenses": [ "BSD-3-Clause" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/fast-uri/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "function-bind@1.1.2", "Name": "function-bind", "Identifier": { "PURL": "pkg:npm/function-bind@1.1.2", "UID": "c8e05fcc9ba1aa90" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/function-bind/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "get-intrinsic@1.3.0", "Name": "get-intrinsic", "Identifier": { "PURL": "pkg:npm/get-intrinsic@1.3.0", "UID": "79a836b7505b7180" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/get-intrinsic/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "get-proto@1.0.1", "Name": "get-proto", "Identifier": { "PURL": "pkg:npm/get-proto@1.0.1", "UID": "382171d0c397c1bf" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/get-proto/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "gopd@1.2.0", "Name": "gopd", "Identifier": { "PURL": "pkg:npm/gopd@1.2.0", "UID": "7a9bbfdd77b036e" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/gopd/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "graphql@0.6.2", "Name": "graphql", "Identifier": { "PURL": "pkg:npm/graphql@0.6.2", "UID": "f34592fa61d707fc" }, "Version": "0.6.2", "Licenses": [ "BSD-3-Clause" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/graphql/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "graphql-sync@0.6.2-sync", "Name": "graphql-sync", "Identifier": { "PURL": "pkg:npm/graphql-sync@0.6.2-sync", "UID": "22c814ac18544515" }, "Version": "0.6.2-sync", "Licenses": [ "BSD-3-Clause" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/graphql-sync/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "has-ansi@2.0.0", "Name": "has-ansi", "Identifier": { "PURL": "pkg:npm/has-ansi@2.0.0", "UID": "9dd380d0ed4b7a75" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/has-ansi/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "has-symbols@1.1.0", "Name": "has-symbols", "Identifier": { "PURL": "pkg:npm/has-symbols@1.1.0", "UID": "28fb204b8f49ec3" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/has-symbols/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "hasown@2.0.4", "Name": "hasown", "Identifier": { "PURL": "pkg:npm/hasown@2.0.4", "UID": "c328c1b35c272735" }, "Version": "2.0.4", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/hasown/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "highlight.js@10.7.3", "Name": "highlight.js", "Identifier": { "PURL": "pkg:npm/highlight.js@10.7.3", "UID": "947e076974f5b5b" }, "Version": "10.7.3", "Licenses": [ "BSD-3-Clause" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/highlight.js/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "http-errors@1.8.1", "Name": "http-errors", "Identifier": { "PURL": "pkg:npm/http-errors@1.8.1", "UID": "f825ea2ec25a5fa4" }, "Version": "1.8.1", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/http-errors/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "i@0.3.7", "Name": "i", "Identifier": { "PURL": "pkg:npm/i@0.3.7", "UID": "8c3a07187acd1a5e" }, "Version": "0.3.7", "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/i/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "iconv-lite@0.6.3", "Name": "iconv-lite", "Identifier": { "PURL": "pkg:npm/iconv-lite@0.6.3", "UID": "c94f72420b8d038e" }, "Version": "0.6.3", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/iconv-lite/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "inherits@2.0.4", "Name": "inherits", "Identifier": { "PURL": "pkg:npm/inherits@2.0.4", "UID": "679eea9b9966efa" }, "Version": "2.0.4", "Licenses": [ "ISC" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/inherits/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "isemail@3.2.0", "Name": "isemail", "Identifier": { "PURL": "pkg:npm/isemail@3.2.0", "UID": "b9b46039a99ec0e2" }, "Version": "3.2.0", "Licenses": [ "BSD-3-Clause" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/joi/node_modules/isemail/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "iterall@1.0.2", "Name": "iterall", "Identifier": { "PURL": "pkg:npm/iterall@1.0.2", "UID": "8e2b9a1b9d7d7865" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/iterall/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "joi@14.3.1", "Name": "joi", "Identifier": { "PURL": "pkg:npm/joi@14.3.1", "UID": "b0e8786625927635" }, "Version": "14.3.1", "Licenses": [ "BSD-3-Clause" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/joi/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "joi-to-json-schema@4.0.1", "Name": "joi-to-json-schema", "Identifier": { "PURL": "pkg:npm/joi-to-json-schema@4.0.1", "UID": "5dc71d2e0743d21a" }, "Version": "4.0.1", "Licenses": [ "Apache-2.0" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/joi-to-json-schema/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "js-tokens@3.0.2", "Name": "js-tokens", "Identifier": { "PURL": "pkg:npm/js-tokens@3.0.2", "UID": "5b6b348edb5313cd" }, "Version": "3.0.2", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/js-tokens/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "js-yaml@4.3.1", "Name": "js-yaml", "Identifier": { "PURL": "pkg:npm/js-yaml@4.3.1", "UID": "988d1d865fa2585e" }, "Version": "4.3.1", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/js-yaml/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "json-schema-traverse@1.0.0", "Name": "json-schema-traverse", "Identifier": { "PURL": "pkg:npm/json-schema-traverse@1.0.0", "UID": "51842d03e25bf86f" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/json-schema-traverse/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lodash@4.18.1", "Name": "lodash", "Identifier": { "PURL": "pkg:npm/lodash@4.18.1", "UID": "850fc440640ffd05" }, "Version": "4.18.1", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/lodash/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "math-intrinsics@1.1.0", "Name": "math-intrinsics", "Identifier": { "PURL": "pkg:npm/math-intrinsics@1.1.0", "UID": "bdada8fe1365b872" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/math-intrinsics/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "media-typer@0.3.0", "Name": "media-typer", "Identifier": { "PURL": "pkg:npm/media-typer@0.3.0", "UID": "d13aef9cd607a1cd" }, "Version": "0.3.0", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/media-typer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mime-db@1.52.0", "Name": "mime-db", "Identifier": { "PURL": "pkg:npm/mime-db@1.52.0", "UID": "5f535c155739ad0c" }, "Version": "1.52.0", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/mime-db/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mime-types@2.1.35", "Name": "mime-types", "Identifier": { "PURL": "pkg:npm/mime-types@2.1.35", "UID": "c2a60eefc3dbc9fc" }, "Version": "2.1.35", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/mime-types/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minimatch@10.2.5", "Name": "minimatch", "Identifier": { "PURL": "pkg:npm/minimatch@10.2.5", "UID": "5c96b4732f7ce02c" }, "Version": "10.2.5", "Licenses": [ "BlueOak-1.0.0" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/minimatch/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.1.3", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.1.3", "UID": "955bbe04df7b0e" }, "Version": "2.1.3", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "negotiator@0.6.3", "Name": "negotiator", "Identifier": { "PURL": "pkg:npm/negotiator@0.6.3", "UID": "6e993f8dc1569d34" }, "Version": "0.6.3", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/negotiator/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "netmask@2.1.1", "Name": "netmask", "Identifier": { "PURL": "pkg:npm/netmask@2.1.1", "UID": "cdfd82c8d6ad2f15" }, "Version": "2.1.1", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/netmask/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "object-inspect@1.13.4", "Name": "object-inspect", "Identifier": { "PURL": "pkg:npm/object-inspect@1.13.4", "UID": "2de15f0c7140a50f" }, "Version": "1.13.4", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/object-inspect/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "punycode@2.3.0", "Name": "punycode", "Identifier": { "PURL": "pkg:npm/punycode@2.3.0", "UID": "2eb53ad70d74fcaf" }, "Version": "2.3.0", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/joi/node_modules/punycode/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "qs@6.15.2", "Name": "qs", "Identifier": { "PURL": "pkg:npm/qs@6.15.2", "UID": "a2b49c1c1bb878df" }, "Version": "6.15.2", "Licenses": [ "BSD-3-Clause" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/qs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "range-parser@1.2.1", "Name": "range-parser", "Identifier": { "PURL": "pkg:npm/range-parser@1.2.1", "UID": "d131fbaee5b23ecd" }, "Version": "1.2.1", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/range-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "require-from-string@2.0.2", "Name": "require-from-string", "Identifier": { "PURL": "pkg:npm/require-from-string@2.0.2", "UID": "ada8cac4b852b4d3" }, "Version": "2.0.2", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/require-from-string/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "safe-buffer@5.2.1", "Name": "safe-buffer", "Identifier": { "PURL": "pkg:npm/safe-buffer@5.2.1", "UID": "fba311b7eb077751" }, "Version": "5.2.1", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/safe-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "safer-buffer@2.1.2", "Name": "safer-buffer", "Identifier": { "PURL": "pkg:npm/safer-buffer@2.1.2", "UID": "fd7e05e8fcbce698" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/safer-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "semver@7.8.4", "Name": "semver", "Identifier": { "PURL": "pkg:npm/semver@7.8.4", "UID": "13a061bb0977e179" }, "Version": "7.8.4", "Licenses": [ "ISC" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/semver/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "setprototypeof@1.2.0", "Name": "setprototypeof", "Identifier": { "PURL": "pkg:npm/setprototypeof@1.2.0", "UID": "1a59a3e2dc794a45" }, "Version": "1.2.0", "Licenses": [ "ISC" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/setprototypeof/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "side-channel@1.1.1", "Name": "side-channel", "Identifier": { "PURL": "pkg:npm/side-channel@1.1.1", "UID": "8c859809f55f201" }, "Version": "1.1.1", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/side-channel/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "side-channel-list@1.0.1", "Name": "side-channel-list", "Identifier": { "PURL": "pkg:npm/side-channel-list@1.0.1", "UID": "4e560bc1f2415991" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/side-channel-list/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "side-channel-map@1.0.1", "Name": "side-channel-map", "Identifier": { "PURL": "pkg:npm/side-channel-map@1.0.1", "UID": "9a5b7e5c07d90b48" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/side-channel-map/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "side-channel-weakmap@1.0.2", "Name": "side-channel-weakmap", "Identifier": { "PURL": "pkg:npm/side-channel-weakmap@1.0.2", "UID": "f49108e47f08a15d" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/side-channel-weakmap/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "stackframe@1.3.4", "Name": "stackframe", "Identifier": { "PURL": "pkg:npm/stackframe@1.3.4", "UID": "1f1fc5a3147f4788" }, "Version": "1.3.4", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/stackframe/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "statuses@1.5.0", "Name": "statuses", "Identifier": { "PURL": "pkg:npm/statuses@1.5.0", "UID": "bc2e6ccb82b79ab1" }, "Version": "1.5.0", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/statuses/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "strip-ansi@3.0.1", "Name": "strip-ansi", "Identifier": { "PURL": "pkg:npm/strip-ansi@3.0.1", "UID": "320b84c3358d4da7" }, "Version": "3.0.1", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/strip-ansi/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "supports-color@2.0.0", "Name": "supports-color", "Identifier": { "PURL": "pkg:npm/supports-color@2.0.0", "UID": "c86e1a899ae8ca76" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/supports-color/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "timezone@1.0.23", "Name": "timezone", "Identifier": { "PURL": "pkg:npm/timezone@1.0.23", "UID": "bc0daadc42ccdf59" }, "Version": "1.0.23", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/timezone/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "toidentifier@1.0.1", "Name": "toidentifier", "Identifier": { "PURL": "pkg:npm/toidentifier@1.0.1", "UID": "f50c7f67a9155b1b" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/toidentifier/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "topo@3.0.3", "Name": "topo", "Identifier": { "PURL": "pkg:npm/topo@3.0.3", "UID": "d1bf7582321485c1" }, "Version": "3.0.3", "Licenses": [ "BSD-3-Clause" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/joi/node_modules/topo/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "type-detect@0.1.1", "Name": "type-detect", "Identifier": { "PURL": "pkg:npm/type-detect@0.1.1", "UID": "ac9102ca863fa112" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/deep-eql/node_modules/type-detect/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "type-detect@1.0.0", "Name": "type-detect", "Identifier": { "PURL": "pkg:npm/type-detect@1.0.0", "UID": "61b49f7568cde1ae" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/type-detect/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "type-is@1.6.18", "Name": "type-is", "Identifier": { "PURL": "pkg:npm/type-is@1.6.18", "UID": "32f6b27f5c93b20b" }, "Version": "1.6.18", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/type-is/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "vary@1.1.2", "Name": "vary", "Identifier": { "PURL": "pkg:npm/vary@1.1.2", "UID": "5a4a227da7446577" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "FilePath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/vary/package.json", "AnalyzedBy": "node-pkg" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2026-48038", "VendorIDs": [ "GHSA-q7cg-457f-vx79" ], "PkgID": "joi@14.3.1", "PkgName": "joi", "PkgPath": "arangodb4e-client-linux-4.0.0-nightly.20260824_arm64.tar.gz/arangodb4e-client-linux-4.0.0-nightly.20260824_arm64/usr/share/arangodb4/js/node/node_modules/joi/package.json", "PkgIdentifier": { "PURL": "pkg:npm/joi@14.3.1", "UID": "b0e8786625927635" }, "InstalledVersion": "14.3.1", "FixedVersion": "18.2.1, 17.13.4", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48038", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:7f5fe6a86ab672ddacc6a26b5d01f7ce08d228ca4c4831928bbfa8d693515109", "Title": "joi: joi: Denial of Service via uncaught RangeError on deeply nested input through recursive link() schemas", "Description": "joi is a schema description language and data validator for JavaScript. Prior to 17.13.4 and 18.2.1, denial of service is possible via an untrapped exception in services validating user-supplied JSON or object input with recursive link() schemas. When validate() is called without try/catch in a request handler, deeply nested input can trigger an unhandled RangeError and potentially crash the process; lower-impact paths using validateAsync() or try/catch produce a RangeError instead of a structured ValidationError. This issue is fixed in versions 17.13.4 and 18.2.1.", "Severity": "MEDIUM", "CweIDs": [ "CWE-248" ], "VendorSeverity": { "ghsa": 2, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "V3Score": 5.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-48038", "https://github.com/hapijs/joi", "https://github.com/hapijs/joi/commit/2392713d3e9dd91ba752ac0c96e0eaf3d24b9a11", "https://github.com/hapijs/joi/commit/97bd51de94d595a2d8949eb3bec0dbdd2f8a7a74", "https://github.com/hapijs/joi/commit/fc146a628ab9cc250854407722d9f8738c9548e7", "https://github.com/hapijs/joi/pull/3113", "https://github.com/hapijs/joi/security/advisories/GHSA-q7cg-457f-vx79", "https://nvd.nist.gov/vuln/detail/CVE-2026-48038", "https://www.cve.org/CVERecord?id=CVE-2026-48038" ], "PublishedDate": "2026-07-14T20:17:05.563Z", "LastModifiedDate": "2026-07-15T20:22:55.353Z" } ], "Secrets": [] } ] }