{ "SchemaVersion": 2, "Trivy": { "Version": "0.72.0" }, "ReportID": "01a16662-a246-7695-b060-cfdd8a4c1f3f", "CreatedAt": "2026-10-23T01:31:42.534434153Z", "ArtifactName": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz", "ArtifactType": "filesystem", "Results": [ { "Target": "Node.js", "Class": "lang-pkgs", "Type": "node-pkg", "Packages": [ { "ID": "@hapi/hoek@8.5.1", "Name": "@hapi/hoek", "Identifier": { "PURL": "pkg:npm/%40hapi/hoek@8.5.1", "UID": "ecf699c5f6cd442f" }, "Version": "8.5.1", "Licenses": [ "BSD-3-Clause" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/joi/node_modules/hoek/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "accepts@1.3.8", "Name": "accepts", "Identifier": { "PURL": "pkg:npm/accepts@1.3.8", "UID": "e83e2aecdb1aa57f" }, "Version": "1.3.8", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/accepts/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ajv@8.20.0", "Name": "ajv", "Identifier": { "PURL": "pkg:npm/ajv@8.20.0", "UID": "cffc3cdc5afbae2c" }, "Version": "8.20.0", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/ajv/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ansi-html-community@0.0.8", "Name": "ansi-html-community", "Identifier": { "PURL": "pkg:npm/ansi-html-community@0.0.8", "UID": "a199ca1c73c7f1" }, "Version": "0.0.8", "Licenses": [ "Apache-2.0" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/ansi-html-community/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ansi-regex@2.1.1", "Name": "ansi-regex", "Identifier": { "PURL": "pkg:npm/ansi-regex@2.1.1", "UID": "80c499254f4d85ef" }, "Version": "2.1.1", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/ansi-regex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ansi-styles@2.2.1", "Name": "ansi-styles", "Identifier": { "PURL": "pkg:npm/ansi-styles@2.2.1", "UID": "951fcff8772794" }, "Version": "2.2.1", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/ansi-styles/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "aqb@2.1.0", "Name": "aqb", "Identifier": { "PURL": "pkg:npm/aqb@2.1.0", "UID": "c65c6ee823ce3f70" }, "Version": "2.1.0", "Licenses": [ "Apache-2.0" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/aqb/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "argparse@2.0.1", "Name": "argparse", "Identifier": { "PURL": "pkg:npm/argparse@2.0.1", "UID": "7a21248b8d0c0e39" }, "Version": "2.0.1", "Licenses": [ "Python-2.0" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/argparse/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "assertion-error@1.1.0", "Name": "assertion-error", "Identifier": { "PURL": "pkg:npm/assertion-error@1.1.0", "UID": "ce0e5c45aebd4a6e" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/assertion-error/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "babel-code-frame@6.26.0", "Name": "babel-code-frame", "Identifier": { "PURL": "pkg:npm/babel-code-frame@6.26.0", "UID": "8e477264110ae06b" }, "Version": "6.26.0", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/babel-code-frame/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "balanced-match@4.0.4", "Name": "balanced-match", "Identifier": { "PURL": "pkg:npm/balanced-match@4.0.4", "UID": "6d1ec0579fa0a687" }, "Version": "4.0.4", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/balanced-match/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "benchmark@1.0.0", "Name": "benchmark", "Identifier": { "PURL": "pkg:npm/benchmark@1.0.0", "UID": "5fe6511328a23f9c" }, "Version": "1.0.0", "Licenses": [ "ISC" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/fast-uri/benchmark/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "brace-expansion@5.0.12", "Name": "brace-expansion", "Identifier": { "PURL": "pkg:npm/brace-expansion@5.0.12", "UID": "45d0e60fcba2244b" }, "Version": "5.0.12", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/brace-expansion/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "call-bind-apply-helpers@1.0.2", "Name": "call-bind-apply-helpers", "Identifier": { "PURL": "pkg:npm/call-bind-apply-helpers@1.0.2", "UID": "d994060dd2a6eb61" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/call-bind-apply-helpers/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "call-bound@1.0.4", "Name": "call-bound", "Identifier": { "PURL": "pkg:npm/call-bound@1.0.4", "UID": "898dcc4eb07279bf" }, "Version": "1.0.4", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/call-bound/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "chai@3.5.0", "Name": "chai", "Identifier": { "PURL": "pkg:npm/chai@3.5.0", "UID": "638c0e64761ab271" }, "Version": "3.5.0", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/chai/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "chalk@1.1.3", "Name": "chalk", "Identifier": { "PURL": "pkg:npm/chalk@1.1.3", "UID": "6e80ab94ea1df7f6" }, "Version": "1.1.3", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/chalk/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "content-disposition@0.5.4", "Name": "content-disposition", "Identifier": { "PURL": "pkg:npm/content-disposition@0.5.4", "UID": "28069b342a54361d" }, "Version": "0.5.4", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/content-disposition/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "content-type@1.0.5", "Name": "content-type", "Identifier": { "PURL": "pkg:npm/content-type@1.0.5", "UID": "8c32731550977391" }, "Version": "1.0.5", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/content-type/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "dedent@0.7.0", "Name": "dedent", "Identifier": { "PURL": "pkg:npm/dedent@0.7.0", "UID": "2b6cfb4bae1d9b95" }, "Version": "0.7.0", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/dedent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "deep-eql@0.1.3", "Name": "deep-eql", "Identifier": { "PURL": "pkg:npm/deep-eql@0.1.3", "UID": "5fd0dd954c6a8da5" }, "Version": "0.1.3", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/deep-eql/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "depd@1.1.2", "Name": "depd", "Identifier": { "PURL": "pkg:npm/depd@1.1.2", "UID": "3ba9229774e5d408" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/depd/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "diff@8.0.4", "Name": "diff", "Identifier": { "PURL": "pkg:npm/diff@8.0.4", "UID": "3e25e719fa1b4f7e" }, "Version": "8.0.4", "Licenses": [ "BSD-3-Clause" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/diff/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "dunder-proto@1.0.1", "Name": "dunder-proto", "Identifier": { "PURL": "pkg:npm/dunder-proto@1.0.1", "UID": "c2d8dfc6022c557b" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/dunder-proto/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "error-stack-parser@2.1.4", "Name": "error-stack-parser", "Identifier": { "PURL": "pkg:npm/error-stack-parser@2.1.4", "UID": "f753f2a7bfe1de33" }, "Version": "2.1.4", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/error-stack-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "es-define-property@1.0.1", "Name": "es-define-property", "Identifier": { "PURL": "pkg:npm/es-define-property@1.0.1", "UID": "d97c0f4c2e874a7b" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/es-define-property/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "es-errors@1.3.0", "Name": "es-errors", "Identifier": { "PURL": "pkg:npm/es-errors@1.3.0", "UID": "db02a3fefda984a6" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/es-errors/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "es-object-atoms@1.1.2", "Name": "es-object-atoms", "Identifier": { "PURL": "pkg:npm/es-object-atoms@1.1.2", "UID": "7ba40526a0daffd6" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/es-object-atoms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "escape-string-regexp@1.0.5", "Name": "escape-string-regexp", "Identifier": { "PURL": "pkg:npm/escape-string-regexp@1.0.5", "UID": "b996581642056ff4" }, "Version": "1.0.5", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/escape-string-regexp/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "esutils@2.0.3", "Name": "esutils", "Identifier": { "PURL": "pkg:npm/esutils@2.0.3", "UID": "4c6038f065e2ef03" }, "Version": "2.0.3", "Licenses": [ "BSD-2-Clause" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/esutils/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "extendible@0.1.1", "Name": "extendible", "Identifier": { "PURL": "pkg:npm/extendible@0.1.1", "UID": "c34b64dad96730f8" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/extendible/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "fast-deep-equal@3.1.3", "Name": "fast-deep-equal", "Identifier": { "PURL": "pkg:npm/fast-deep-equal@3.1.3", "UID": "90e3ae340b68fc9d" }, "Version": "3.1.3", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/fast-deep-equal/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "fast-uri@3.1.8", "Name": "fast-uri", "Identifier": { "PURL": "pkg:npm/fast-uri@3.1.8", "UID": "bfca623d162c777" }, "Version": "3.1.8", "Licenses": [ "BSD-3-Clause" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/fast-uri/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "function-bind@1.1.2", "Name": "function-bind", "Identifier": { "PURL": "pkg:npm/function-bind@1.1.2", "UID": "157833ffe3460d60" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/function-bind/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "get-intrinsic@1.3.0", "Name": "get-intrinsic", "Identifier": { "PURL": "pkg:npm/get-intrinsic@1.3.0", "UID": "dad664da2978ffa7" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/get-intrinsic/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "get-proto@1.0.1", "Name": "get-proto", "Identifier": { "PURL": "pkg:npm/get-proto@1.0.1", "UID": "2a642f09f432fe6e" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/get-proto/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "gopd@1.2.0", "Name": "gopd", "Identifier": { "PURL": "pkg:npm/gopd@1.2.0", "UID": "ba9c239a60f16a76" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/gopd/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "graphql@0.6.2", "Name": "graphql", "Identifier": { "PURL": "pkg:npm/graphql@0.6.2", "UID": "56f3a84431581e36" }, "Version": "0.6.2", "Licenses": [ "BSD-3-Clause" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/graphql/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "graphql-sync@0.6.2-sync", "Name": "graphql-sync", "Identifier": { "PURL": "pkg:npm/graphql-sync@0.6.2-sync", "UID": "ce5ed8dc9f3e4b82" }, "Version": "0.6.2-sync", "Licenses": [ "BSD-3-Clause" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/graphql-sync/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "has-ansi@2.0.0", "Name": "has-ansi", "Identifier": { "PURL": "pkg:npm/has-ansi@2.0.0", "UID": "72fc974cd61446ae" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/has-ansi/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "has-symbols@1.1.0", "Name": "has-symbols", "Identifier": { "PURL": "pkg:npm/has-symbols@1.1.0", "UID": "a0e6e09131636a1" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/has-symbols/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "hasown@2.0.4", "Name": "hasown", "Identifier": { "PURL": "pkg:npm/hasown@2.0.4", "UID": "4d500fb97c478ad6" }, "Version": "2.0.4", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/hasown/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "highlight.js@10.7.3", "Name": "highlight.js", "Identifier": { "PURL": "pkg:npm/highlight.js@10.7.3", "UID": "74b578414f231bf1" }, "Version": "10.7.3", "Licenses": [ "BSD-3-Clause" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/highlight.js/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "http-errors@1.8.1", "Name": "http-errors", "Identifier": { "PURL": "pkg:npm/http-errors@1.8.1", "UID": "d2b1bf3b3b4ca2ab" }, "Version": "1.8.1", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/http-errors/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "i@0.3.7", "Name": "i", "Identifier": { "PURL": "pkg:npm/i@0.3.7", "UID": "fc7ce91bbe26cf80" }, "Version": "0.3.7", "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/i/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "iconv-lite@0.6.3", "Name": "iconv-lite", "Identifier": { "PURL": "pkg:npm/iconv-lite@0.6.3", "UID": "7aabe2c7af3b127d" }, "Version": "0.6.3", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/iconv-lite/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "inherits@2.0.4", "Name": "inherits", "Identifier": { "PURL": "pkg:npm/inherits@2.0.4", "UID": "5eec789b2f099117" }, "Version": "2.0.4", "Licenses": [ "ISC" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/inherits/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "isemail@3.2.0", "Name": "isemail", "Identifier": { "PURL": "pkg:npm/isemail@3.2.0", "UID": "3e5e8fd489a24707" }, "Version": "3.2.0", "Licenses": [ "BSD-3-Clause" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/joi/node_modules/isemail/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "iterall@1.0.2", "Name": "iterall", "Identifier": { "PURL": "pkg:npm/iterall@1.0.2", "UID": "32bee6d3d98aac9f" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/iterall/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "joi@14.3.1", "Name": "joi", "Identifier": { "PURL": "pkg:npm/joi@14.3.1", "UID": "ad2b9855323de75f" }, "Version": "14.3.1", "Licenses": [ "BSD-3-Clause" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/joi/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "joi-to-json-schema@4.0.1", "Name": "joi-to-json-schema", "Identifier": { "PURL": "pkg:npm/joi-to-json-schema@4.0.1", "UID": "3bcd3aa2c0c562a2" }, "Version": "4.0.1", "Licenses": [ "Apache-2.0" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/joi-to-json-schema/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "js-tokens@3.0.2", "Name": "js-tokens", "Identifier": { "PURL": "pkg:npm/js-tokens@3.0.2", "UID": "46a0d8bb7d56cb6" }, "Version": "3.0.2", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/js-tokens/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "js-yaml@4.3.2", "Name": "js-yaml", "Identifier": { "PURL": "pkg:npm/js-yaml@4.3.2", "UID": "849be9c0dfe8306" }, "Version": "4.3.2", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/js-yaml/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "json-schema-traverse@1.0.0", "Name": "json-schema-traverse", "Identifier": { "PURL": "pkg:npm/json-schema-traverse@1.0.0", "UID": "65c7fcbef2c6aa76" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/json-schema-traverse/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lodash@4.18.1", "Name": "lodash", "Identifier": { "PURL": "pkg:npm/lodash@4.18.1", "UID": "2ec8a12971581971" }, "Version": "4.18.1", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/lodash/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "math-intrinsics@1.1.0", "Name": "math-intrinsics", "Identifier": { "PURL": "pkg:npm/math-intrinsics@1.1.0", "UID": "65a23f1f17e73adc" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/math-intrinsics/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "media-typer@0.3.0", "Name": "media-typer", "Identifier": { "PURL": "pkg:npm/media-typer@0.3.0", "UID": "2d227e301a49f4cb" }, "Version": "0.3.0", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/media-typer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mime-db@1.52.0", "Name": "mime-db", "Identifier": { "PURL": "pkg:npm/mime-db@1.52.0", "UID": "49ce48e8fa1aad0d" }, "Version": "1.52.0", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/mime-db/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mime-types@2.1.35", "Name": "mime-types", "Identifier": { "PURL": "pkg:npm/mime-types@2.1.35", "UID": "73e54985b05e1511" }, "Version": "2.1.35", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/mime-types/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minimatch@10.2.5", "Name": "minimatch", "Identifier": { "PURL": "pkg:npm/minimatch@10.2.5", "UID": "51448d95a82eee27" }, "Version": "10.2.5", "Licenses": [ "BlueOak-1.0.0" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/minimatch/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.1.3", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.1.3", "UID": "45ec096e3a300f8a" }, "Version": "2.1.3", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "negotiator@0.6.3", "Name": "negotiator", "Identifier": { "PURL": "pkg:npm/negotiator@0.6.3", "UID": "96d9fc491e867261" }, "Version": "0.6.3", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/negotiator/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "netmask@2.1.1", "Name": "netmask", "Identifier": { "PURL": "pkg:npm/netmask@2.1.1", "UID": "63bb123fa8d1cbb" }, "Version": "2.1.1", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/netmask/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "object-inspect@1.13.4", "Name": "object-inspect", "Identifier": { "PURL": "pkg:npm/object-inspect@1.13.4", "UID": "72edb3ff7a966fb6" }, "Version": "1.13.4", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/object-inspect/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "punycode@2.3.0", "Name": "punycode", "Identifier": { "PURL": "pkg:npm/punycode@2.3.0", "UID": "8ba03114a42bdf9f" }, "Version": "2.3.0", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/joi/node_modules/punycode/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "qs@6.16.0", "Name": "qs", "Identifier": { "PURL": "pkg:npm/qs@6.16.0", "UID": "ffe0312fcd1c9f19" }, "Version": "6.16.0", "Licenses": [ "BSD-3-Clause" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/qs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "range-parser@1.2.1", "Name": "range-parser", "Identifier": { "PURL": "pkg:npm/range-parser@1.2.1", "UID": "79fd0ecea6927fd4" }, "Version": "1.2.1", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/range-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "require-from-string@2.0.2", "Name": "require-from-string", "Identifier": { "PURL": "pkg:npm/require-from-string@2.0.2", "UID": "acf2ec4346fe0bae" }, "Version": "2.0.2", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/require-from-string/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "safe-buffer@5.2.1", "Name": "safe-buffer", "Identifier": { "PURL": "pkg:npm/safe-buffer@5.2.1", "UID": "bd0963f1669b4b1" }, "Version": "5.2.1", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/safe-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "safer-buffer@2.1.2", "Name": "safer-buffer", "Identifier": { "PURL": "pkg:npm/safer-buffer@2.1.2", "UID": "e313a5c05583d544" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/safer-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "semver@7.8.4", "Name": "semver", "Identifier": { "PURL": "pkg:npm/semver@7.8.4", "UID": "a6b9e2265e501010" }, "Version": "7.8.4", "Licenses": [ "ISC" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/semver/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "setprototypeof@1.2.0", "Name": "setprototypeof", "Identifier": { "PURL": "pkg:npm/setprototypeof@1.2.0", "UID": "9ed2d415cf271166" }, "Version": "1.2.0", "Licenses": [ "ISC" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/setprototypeof/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "side-channel@1.1.1", "Name": "side-channel", "Identifier": { "PURL": "pkg:npm/side-channel@1.1.1", "UID": "11877c56aded91a8" }, "Version": "1.1.1", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/side-channel/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "side-channel-list@1.0.1", "Name": "side-channel-list", "Identifier": { "PURL": "pkg:npm/side-channel-list@1.0.1", "UID": "aa74f8ae5a196d01" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/side-channel-list/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "side-channel-map@1.0.1", "Name": "side-channel-map", "Identifier": { "PURL": "pkg:npm/side-channel-map@1.0.1", "UID": "275ff3da19d33674" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/side-channel-map/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "side-channel-weakmap@1.0.2", "Name": "side-channel-weakmap", "Identifier": { "PURL": "pkg:npm/side-channel-weakmap@1.0.2", "UID": "629ae8cc9c8d6e53" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/side-channel-weakmap/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "stackframe@1.3.4", "Name": "stackframe", "Identifier": { "PURL": "pkg:npm/stackframe@1.3.4", "UID": "950b2b14c9f5f915" }, "Version": "1.3.4", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/stackframe/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "statuses@1.5.0", "Name": "statuses", "Identifier": { "PURL": "pkg:npm/statuses@1.5.0", "UID": "af535f16145f6af0" }, "Version": "1.5.0", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/statuses/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "strip-ansi@3.0.1", "Name": "strip-ansi", "Identifier": { "PURL": "pkg:npm/strip-ansi@3.0.1", "UID": "b0a7d085c4bbc4c9" }, "Version": "3.0.1", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/strip-ansi/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "supports-color@2.0.0", "Name": "supports-color", "Identifier": { "PURL": "pkg:npm/supports-color@2.0.0", "UID": "a325a35285c255cc" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/supports-color/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "timezone@1.0.23", "Name": "timezone", "Identifier": { "PURL": "pkg:npm/timezone@1.0.23", "UID": "657a131f70189db0" }, "Version": "1.0.23", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/timezone/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "toidentifier@1.0.1", "Name": "toidentifier", "Identifier": { "PURL": "pkg:npm/toidentifier@1.0.1", "UID": "4003ab36a275cfdd" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/toidentifier/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "topo@3.0.3", "Name": "topo", "Identifier": { "PURL": "pkg:npm/topo@3.0.3", "UID": "aafc76f8f4d60df" }, "Version": "3.0.3", "Licenses": [ "BSD-3-Clause" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/joi/node_modules/topo/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "type-detect@0.1.1", "Name": "type-detect", "Identifier": { "PURL": "pkg:npm/type-detect@0.1.1", "UID": "81272ae1d3e4c04c" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/deep-eql/node_modules/type-detect/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "type-detect@1.0.0", "Name": "type-detect", "Identifier": { "PURL": "pkg:npm/type-detect@1.0.0", "UID": "e75b70b0dabdbdfa" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/type-detect/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "type-is@1.6.18", "Name": "type-is", "Identifier": { "PURL": "pkg:npm/type-is@1.6.18", "UID": "e92ce87a58e3bfdb" }, "Version": "1.6.18", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/type-is/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "vary@1.1.2", "Name": "vary", "Identifier": { "PURL": "pkg:npm/vary@1.1.2", "UID": "465645cf19621c04" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "FilePath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/vary/package.json", "AnalyzedBy": "node-pkg" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2026-48038", "VendorIDs": [ "GHSA-q7cg-457f-vx79" ], "PkgID": "joi@14.3.1", "PkgName": "joi", "PkgPath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/joi/package.json", "PkgIdentifier": { "PURL": "pkg:npm/joi@14.3.1", "UID": "ad2b9855323de75f" }, "InstalledVersion": "14.3.1", "FixedVersion": "18.2.1, 17.13.4", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48038", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:7f5fe6a86ab672ddacc6a26b5d01f7ce08d228ca4c4831928bbfa8d693515109", "Title": "joi: joi: Denial of Service via uncaught RangeError on deeply nested input through recursive link() schemas", "Description": "joi is a schema description language and data validator for JavaScript. Prior to 17.13.4 and 18.2.1, denial of service is possible via an untrapped exception in services validating user-supplied JSON or object input with recursive link() schemas. When validate() is called without try/catch in a request handler, deeply nested input can trigger an unhandled RangeError and potentially crash the process; lower-impact paths using validateAsync() or try/catch produce a RangeError instead of a structured ValidationError. This issue is fixed in versions 17.13.4 and 18.2.1.", "Severity": "MEDIUM", "CweIDs": [ "CWE-248" ], "VendorSeverity": { "ghsa": 2, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "V3Score": 5.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-48038", "https://advisory.echohq.com/cve/CVE-2026-48038", "https://github.com/advisories/GHSA-q7cg-457f-vx79", "https://github.com/hapijs/joi", "https://github.com/hapijs/joi/commit/2392713d3e9dd91ba752ac0c96e0eaf3d24b9a11", "https://github.com/hapijs/joi/commit/97bd51de94d595a2d8949eb3bec0dbdd2f8a7a74", "https://github.com/hapijs/joi/commit/fc146a628ab9cc250854407722d9f8738c9548e7", "https://github.com/hapijs/joi/pull/3113", "https://github.com/hapijs/joi/security/advisories/GHSA-q7cg-457f-vx79", "https://nvd.nist.gov/vuln/detail/CVE-2026-48038", "https://www.cve.org/CVERecord?id=CVE-2026-48038" ], "PublishedDate": "2026-07-14T20:17:05.563Z", "LastModifiedDate": "2026-07-15T20:22:55.353Z" }, { "VulnerabilityID": "CVE-2026-90771", "VendorIDs": [ "GHSA-wr44-6hxh-3jwq" ], "PkgID": "joi@14.3.1", "PkgName": "joi", "PkgPath": "arangodb3e-client-linux-3.12.13-nightly.20261023_arm64.tar.gz/arangodb3e-client-linux-3.12.13-nightly.20261023_arm64/usr/share/arangodb3/js/node/node_modules/joi/package.json", "PkgIdentifier": { "PURL": "pkg:npm/joi@14.3.1", "UID": "ad2b9855323de75f" }, "InstalledVersion": "14.3.1", "FixedVersion": "17.13.8, 18.2.9", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-90771", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:f225b9180faa4a88390e8ff707a40df9c0010d6b7a5b80c0d4b72288ee484831", "Title": "joi: joi: Prototype Pollution via custom messages", "Description": "joi before versions 17.13.8 and 18.2.9 contains a prototype pollution vulnerability in the messages compilation function that accepts __proto__ as an error code. Attackers can supply __proto__ keys in custom messages to replace the returned object's prototype, breaking downstream code relying on Object.prototype methods.", "Severity": "MEDIUM", "CweIDs": [ "CWE-1321" ], "VendorSeverity": { "ghsa": 2, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", "V3Score": 3.7, "V40Score": 6.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-90771", "https://advisory.echohq.com/cve/CVE-2026-90771", "https://github.com/hapijs/joi", "https://github.com/hapijs/joi/blob/v18.2.8/lib/messages.js", "https://github.com/hapijs/joi/commit/1d2001cad9971327a62c9fd8eb1afec20cd784d2", "https://github.com/hapijs/joi/commit/5b8333c9177e08b4ef4ed02903c2d657084e7afb", "https://github.com/hapijs/joi/issues/3150", "https://github.com/hapijs/joi/pull/3151", "https://github.com/hapijs/joi/pull/3153", "https://github.com/hapijs/joi/releases/tag/v17.13.8", "https://github.com/hapijs/joi/releases/tag/v18.2.9", "https://nvd.nist.gov/vuln/detail/CVE-2026-90771", "https://www.cve.org/CVERecord?id=CVE-2026-90771", "https://www.vulncheck.com/advisories/joi-before-17.13.8-and-18.2.9-prototype-pollution-via-messages" ], "PublishedDate": "2026-09-13T11:17:01.613Z", "LastModifiedDate": "2026-09-24T20:44:42.207Z" } ], "Secrets": [] } ] }