From 443b3045470802269562c3c94376237c980a42c3 Mon Sep 17 00:00:00 2001 From: "Cheng-Chen, Chen" Date: Tue, 8 Sep 2026 09:31:54 +0800 Subject: [PATCH 1/3] fix: add SHA-256 release package verification Publish SHA-256 manifests inside the Linux compatibility archive while retaining legacy SHA-1 manifests, and verify both chains in release CI. --- .github/workflows/codeql-verification.yml | 7 ++++-- .github/workflows/security-release-gate.yml | 22 ++++++++-------- .github/workflows/validate.yml | 17 +++++++------ README.md | 2 +- docs/releases/node-agent-0.13.25.md | 11 ++++++++ scripts/package | 11 ++++++-- scripts/verify-package | 28 +++++++++++++++++++++ 7 files changed, 75 insertions(+), 23 deletions(-) create mode 100644 docs/releases/node-agent-0.13.25.md create mode 100644 scripts/verify-package diff --git a/.github/workflows/codeql-verification.yml b/.github/workflows/codeql-verification.yml index 780c3c4e..81d11e0c 100644 --- a/.github/workflows/codeql-verification.yml +++ b/.github/workflows/codeql-verification.yml @@ -38,7 +38,10 @@ jobs: set -euo pipefail test -z "$(git status --porcelain)" git merge-base --is-ancestor c8663d12dd253ef13258750dca056d4b1219fc10 HEAD - grep -Fq 'VERSION_OVERRIDE: v0.13.24' .github/workflows/validate.yml + grep -Fq 'VERSION_OVERRIDE: v0.13.25' .github/workflows/validate.yml + grep -Fq 'SHA256SUMS' scripts/package + grep -Fq 'bash scripts/verify-package "$linux_asset"' .github/workflows/validate.yml + grep -Fq 'bash scripts/verify-package dist/artifacts/node-agent-0.13.25.tar.gz' .github/workflows/security-release-gate.yml - name: Install the release Go toolchain uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 @@ -65,7 +68,7 @@ jobs: export GOFLAGS=-mod=vendor mkdir -p "$GITHUB_WORKSPACE/bin" CGO_ENABLED=0 go build -trimpath -tags 'netgo osusergo' \ - -ldflags='-w -s -X main.VERSION=v0.13.24' \ + -ldflags='-w -s -X main.VERSION=v0.13.25' \ -o "$GITHUB_WORKSPACE/bin/node-agent" ./ - name: Analyze without publishing temporary alerts diff --git a/.github/workflows/security-release-gate.yml b/.github/workflows/security-release-gate.yml index 9faf7015..70df00e7 100644 --- a/.github/workflows/security-release-gate.yml +++ b/.github/workflows/security-release-gate.yml @@ -19,9 +19,9 @@ jobs: timeout-minutes: 120 env: DAPPER_IMAGE: pasturestack/node-agent-dapper:${{ github.sha }} - RUNTIME_IMAGE: pasturestack/node-agent:v0.13.24 + RUNTIME_IMAGE: pasturestack/node-agent:v0.13.25 TRIVY_IMAGE: aquasec/trivy:0.74.0@sha256:62b1e65e8869bc4b4c6aa4fa2b21595256c7c2f6018a9d9ad61caf87187c1969 - VERSION_OVERRIDE: v0.13.24 + VERSION_OVERRIDE: v0.13.25 steps: - name: Check out candidate uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 @@ -38,6 +38,7 @@ jobs: mkdir -p evidence git rev-parse HEAD > evidence/source-revision.txt sha256sum Dockerfile.dapper package/Dockerfile tests/requirements.lock \ + scripts/package scripts/verify-package \ .github/workflows/codeql-verification.yml \ .github/workflows/security-release-gate.yml \ security/dapper.openvex.json \ @@ -49,19 +50,20 @@ jobs: set -euo pipefail CROSS=1 VERSION_OVERRIDE="$VERSION_OVERRIDE" make DAPPER_IMAGE="$DAPPER_IMAGE" ci make DAPPER_IMAGE="$DAPPER_IMAGE" IMAGE_NAME=pasturestack/node-agent \ - TAG=v0.13.24 VERSION_OVERRIDE="$VERSION_OVERRIDE" package-image - test -s dist/artifacts/node-agent-0.13.24.tar.gz - test -s dist/artifacts/node-agent-0.13.24-windows-amd64.zip + TAG=v0.13.25 VERSION_OVERRIDE="$VERSION_OVERRIDE" package-image + test -s dist/artifacts/node-agent-0.13.25.tar.gz + test -s dist/artifacts/node-agent-0.13.25-windows-amd64.zip test "$(cat dist/image)" = "$RUNTIME_IMAGE" - gzip -t dist/artifacts/node-agent-0.13.24.tar.gz - unzip -t dist/artifacts/node-agent-0.13.24-windows-amd64.zip - sha256sum dist/artifacts/node-agent-0.13.24.tar.gz \ - dist/artifacts/node-agent-0.13.24-windows-amd64.zip \ + gzip -t dist/artifacts/node-agent-0.13.25.tar.gz + bash scripts/verify-package dist/artifacts/node-agent-0.13.25.tar.gz + unzip -t dist/artifacts/node-agent-0.13.25-windows-amd64.zip + sha256sum dist/artifacts/node-agent-0.13.25.tar.gz \ + dist/artifacts/node-agent-0.13.25-windows-amd64.zip \ bin/node-agent > evidence/product-artifacts.sha256 docker image inspect "$RUNTIME_IMAGE" > evidence/runtime-image-inspect.json docker run --rm --entrypoint /usr/bin/node-agent "$RUNTIME_IMAGE" --version \ > evidence/runtime-version.txt - grep -Fxq 'node-agent version v0.13.24' evidence/runtime-version.txt + grep -Fxq 'node-agent version v0.13.25' evidence/runtime-version.txt - name: Verify reproducible Linux binary shell: bash diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml index 8b263ada..c1dea631 100644 --- a/.github/workflows/validate.yml +++ b/.github/workflows/validate.yml @@ -34,21 +34,22 @@ jobs: id: package env: CROSS: "1" - VERSION_OVERRIDE: v0.13.24 + VERSION_OVERRIDE: v0.13.25 run: | set -euo pipefail make ci - linux_asset="dist/artifacts/node-agent-0.13.24.tar.gz" - windows_asset="dist/artifacts/node-agent-0.13.24-windows-amd64.zip" + linux_asset="dist/artifacts/node-agent-0.13.25.tar.gz" + windows_asset="dist/artifacts/node-agent-0.13.25-windows-amd64.zip" test -s "$linux_asset" test -s "$windows_asset" gzip -t "$linux_asset" + bash scripts/verify-package "$linux_asset" unzip -t "$windows_asset" ( cd dist/artifacts sha256sum \ - node-agent-0.13.24.tar.gz \ - node-agent-0.13.24-windows-amd64.zip >SHA256SUMS + node-agent-0.13.25.tar.gz \ + node-agent-0.13.25-windows-amd64.zip >SHA256SUMS ) printf 'NODE_AGENT_VALIDATION_OK source=%s version=%s artifacts=linux,windows\n' \ "$GITHUB_SHA" "$VERSION_OVERRIDE" @@ -56,10 +57,10 @@ jobs: - name: Retain reviewed release candidate uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: - name: node-agent-0.13.24 + name: node-agent-0.13.25 path: | - dist/artifacts/node-agent-0.13.24.tar.gz - dist/artifacts/node-agent-0.13.24-windows-amd64.zip + dist/artifacts/node-agent-0.13.25.tar.gz + dist/artifacts/node-agent-0.13.25-windows-amd64.zip dist/artifacts/SHA256SUMS if-no-files-found: error retention-days: 30 diff --git a/README.md b/README.md index 61bfde00..8c4993a1 100644 --- a/README.md +++ b/README.md @@ -33,7 +33,7 @@ client 0.5, gopsutil v4.26, mapstructure v2.5, netlink v1.3, and netns v0.0.5. The retired AWS SDK v1, Aliyungo, root Docker module, GOPATH/Godeps, and Trash dependency paths are not part of the build. -For the reviewed `0.13.23` compatibility release, `VERSION_OVERRIDE=v0.13.23 CROSS=1 make package` produces the deterministic flat assets `node-agent-0.13.23.tar.gz` and `node-agent-0.13.23-windows-amd64.zip`. PastureStack Server serves both from its matching GitHub Release and verifies their SHA-256 entries before use; operators do not need an artifact mirror. The Windows ZIP uses the neutral `pasturestack/` include layout. A replacement Windows bootstrap image and upgrade/rollback tests are still required before Windows hosts are supported. +For the reviewed `0.13.25` compatibility release, `VERSION_OVERRIDE=v0.13.25 CROSS=1 make package` produces the deterministic flat assets `node-agent-0.13.25.tar.gz` and `node-agent-0.13.25-windows-amd64.zip`. The Linux archive carries both the legacy SHA-1 manifests and the current SHA-256 manifests required by the host installer. PastureStack Server serves both assets from its matching GitHub Release and verifies their outer SHA-256 entries before use; operators do not need an artifact mirror. The Windows ZIP uses the neutral `pasturestack/` include layout. A replacement Windows bootstrap image and upgrade/rollback tests are still required before Windows hosts are supported. The `host.port.check` event performs a read-only host-port preflight through the existing agent event channel. It reports Docker bindings from running and stopped containers and, on Linux, listening TCP/UDP sockets visible through the existing host `/proc` mount. Incomplete host socket inspection is reported as unknown; it is never presented as an available port. diff --git a/docs/releases/node-agent-0.13.25.md b/docs/releases/node-agent-0.13.25.md new file mode 100644 index 00000000..75ac3a8d --- /dev/null +++ b/docs/releases/node-agent-0.13.25.md @@ -0,0 +1,11 @@ +# Node Agent v0.13.25 + +This release corrects the Linux compatibility archive consumed by existing +PastureStack host installers. + +- Keep the legacy `SHA1SUMS` and `SHA1SUMSSUM` files for older hosts. +- Add `SHA256SUMS` and `SHA256SUMSSUM` for current hosts. +- Verify both checksum chains against the extracted release archive in CI. + +Runtime hardware inventory and Docker request behavior are unchanged from +v0.13.24. diff --git a/scripts/package b/scripts/package index 1f72be81..958450a0 100755 --- a/scripts/package +++ b/scripts/package @@ -35,9 +35,16 @@ cp -rf bin/node-agent build/${CONTENT}/bin pushd build >/dev/null -find "${CONTENT}" -type f ! -name SHA1SUMS ! -name SHA1SUMSSUM -print0 | sort -z | \ - xargs -0 sha1sum -b > "${CONTENT}/SHA1SUMS" +find "${CONTENT}" -type f \ + ! -name SHA1SUMS ! -name SHA1SUMSSUM \ + ! -name SHA256SUMS ! -name SHA256SUMSSUM \ + -print0 | sort -z | xargs -0 sha1sum -b > "${CONTENT}/SHA1SUMS" sha1sum "${CONTENT}/SHA1SUMS" > "${CONTENT}/SHA1SUMSSUM" +find "${CONTENT}" -type f \ + ! -name SHA1SUMS ! -name SHA1SUMSSUM \ + ! -name SHA256SUMS ! -name SHA256SUMSSUM \ + -print0 | sort -z | xargs -0 sha256sum -b > "${CONTENT}/SHA256SUMS" +sha256sum "${CONTENT}/SHA256SUMS" > "${CONTENT}/SHA256SUMSSUM" archive_tmp=$(mktemp "../dist/artifacts/.node-agent-${RELEASE_VERSION}.tar.gz.XXXXXX") trap 'rm -f "$archive_tmp"' EXIT diff --git a/scripts/verify-package b/scripts/verify-package new file mode 100644 index 00000000..c0118758 --- /dev/null +++ b/scripts/verify-package @@ -0,0 +1,28 @@ +#!/usr/bin/env bash +set -euo pipefail + +archive=${1:?Usage: scripts/verify-package ARCHIVE} +test -s "$archive" +gzip -t "$archive" + +workdir=$(mktemp -d) +trap 'rm -rf "$workdir"' EXIT +tar -xzf "$archive" -C "$workdir" + +mapfile -t roots < <(find "$workdir" -mindepth 1 -maxdepth 1 -type d -print) +test "${#roots[@]}" -eq 1 +root=${roots[0]} +test -z "$(find "$workdir" -mindepth 1 -maxdepth 1 ! -type d -print -quit)" +test -f "$root/apply.sh" +test -x "$root/bin/node-agent" + +( + cd "$workdir" + root_name=$(basename "$root") + sha1sum -c "$root_name/SHA1SUMSSUM" + sha1sum -c "$root_name/SHA1SUMS" + sha256sum -c "$root_name/SHA256SUMSSUM" + sha256sum -c "$root_name/SHA256SUMS" +) + +printf 'NODE_AGENT_PACKAGE_OK archive=%s checksums=sha1,sha256\n' "$archive" From aa19c6ff946968fcca293513d3eb685926f40921 Mon Sep 17 00:00:00 2001 From: "Cheng-Chen, Chen" Date: Tue, 8 Sep 2026 09:51:37 +0800 Subject: [PATCH 2/3] chore: refresh Dapper build-only OpenVEX Bind the existing header-only justification to the exact linux-libc-dev package and Critical/High identifiers observed in the current pinned Dapper build. --- .github/workflows/security-release-gate.yml | 2 +- docs/releases/node-agent-0.13.25.md | 2 + security/dapper.openvex.json | 2564 +++++++++++++++---- 3 files changed, 2104 insertions(+), 464 deletions(-) diff --git a/.github/workflows/security-release-gate.yml b/.github/workflows/security-release-gate.yml index 70df00e7..c5895363 100644 --- a/.github/workflows/security-release-gate.yml +++ b/.github/workflows/security-release-gate.yml @@ -143,7 +143,7 @@ jobs: and ((.impact_statement | length) > 0) ) ' security/dapper.openvex.json >/dev/null - grep -F $'linux-libc-dev:amd64\t7.0.0-29.29' evidence/dapper-dpkg.tsv >/dev/null + grep -F $'linux-libc-dev:amd64\t7.0.0-30.30' evidence/dapper-dpkg.tsv >/dev/null if grep -Eq '^linux-(image|modules)([-:]|[[:space:]])' evidence/dapper-dpkg.tsv; then printf 'Unexpected Linux kernel runtime package in Dapper image\n' >&2 exit 1 diff --git a/docs/releases/node-agent-0.13.25.md b/docs/releases/node-agent-0.13.25.md index 75ac3a8d..b060557b 100644 --- a/docs/releases/node-agent-0.13.25.md +++ b/docs/releases/node-agent-0.13.25.md @@ -6,6 +6,8 @@ PastureStack host installers. - Keep the legacy `SHA1SUMS` and `SHA1SUMSSUM` files for older hosts. - Add `SHA256SUMS` and `SHA256SUMSSUM` for current hosts. - Verify both checksum chains against the extracted release archive in CI. +- Refresh the transparent build-only `linux-libc-dev` OpenVEX review for the + exact Ubuntu snapshot package used by the disposable Dapper image. Runtime hardware inventory and Docker request behavior are unchanged from v0.13.24. diff --git a/security/dapper.openvex.json b/security/dapper.openvex.json index 54a7db59..b9b5e8a4 100644 --- a/security/dapper.openvex.json +++ b/security/dapper.openvex.json @@ -1,464 +1,2102 @@ -{ - "@context": "https://openvex.dev/ns/v0.2.0", - "@id": "https://github.com/PastureStack/node-agent/security/openvex/dapper/2026-08-14", - "author": "PastureStack contributors", - "timestamp": "2026-08-14T00:07:00+08:00", - "version": 1, - "statements": [ - { - "vulnerability": { - "name": "CVE-2025-40190" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-52908" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-52909" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-52910" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53145" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53148" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53153" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53159" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53170" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53171" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53172" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53173" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53178" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53182" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53183" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53185" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53192" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53193" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53196" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53198" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53235" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53239" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53240" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53250" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53254" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53256" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53259" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53262" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53264" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53266" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53269" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53270" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53275" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53276" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64531" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - } - ] +{ + "@context": "https://openvex.dev/ns/v0.2.0", + "@id": "https://github.com/PastureStack/node-agent/security/openvex/dapper/2026-09-08", + "author": "PastureStack contributors", + "timestamp": "2026-09-08T09:50:07+08:00", + "version": 2, + "statements": [ + { + "vulnerability": { + "name": "CVE-2025-10263" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2025-40190" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-52908" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-52909" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-52910" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53145" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53148" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53153" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53159" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53170" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53171" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53172" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53173" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53178" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53182" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53183" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53185" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53192" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53193" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53196" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53198" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53235" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53239" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53240" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53250" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53254" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53256" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53259" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53262" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53264" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53266" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53269" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53270" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53275" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53276" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53356" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53362" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53388" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53398" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53399" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-63801" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-63809" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-63815" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-63823" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64188" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64191" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64260" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64266" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64269" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64276" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64300" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64361" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64367" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64380" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64383" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64385" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64386" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64387" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64390" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64393" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64396" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64423" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64432" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64440" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64441" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64442" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64467" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64490" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64535" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64543" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64548" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64554" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64557" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64558" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64562" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64564" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64567" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64597" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64601" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68085" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68098" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68117" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68121" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68147" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68162" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68189" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68196" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68198" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68199" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68201" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68204" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68236" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68257" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68284" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68323" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68329" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68380" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68393" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68399" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68442" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68446" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68451" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68470" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72003" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72024" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72110" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72111" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72123" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72124" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72135" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72151" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72195" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72287" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72288" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72331" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72338" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72372" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72390" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72461" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72462" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72472" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72478" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74268" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74317" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74334" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74341" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74363" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74378" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74390" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74394" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74411" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74427" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74438" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74446" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74465" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74470" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74506" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74510" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74529" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74534" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74535" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80631" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80634" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80637" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80644" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80665" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80668" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80671" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80681" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80683" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80691" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80692" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80693" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80700" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80702" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80710" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80714" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80716" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80718" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80721" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80725" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + } + ] } From 4191b1410fb4ed06c065dbcae948340dffaa9702 Mon Sep 17 00:00:00 2001 From: "Cheng-Chen, Chen" Date: Tue, 8 Sep 2026 09:52:47 +0800 Subject: [PATCH 3/3] chore: normalize OpenVEX line endings --- security/dapper.openvex.json | 4202 +++++++++++++++++----------------- 1 file changed, 2101 insertions(+), 2101 deletions(-) diff --git a/security/dapper.openvex.json b/security/dapper.openvex.json index b9b5e8a4..7d10f8e9 100644 --- a/security/dapper.openvex.json +++ b/security/dapper.openvex.json @@ -1,2102 +1,2102 @@ -{ - "@context": "https://openvex.dev/ns/v0.2.0", - "@id": "https://github.com/PastureStack/node-agent/security/openvex/dapper/2026-09-08", - "author": "PastureStack contributors", - "timestamp": "2026-09-08T09:50:07+08:00", - "version": 2, - "statements": [ - { - "vulnerability": { - "name": "CVE-2025-10263" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2025-40190" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-52908" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-52909" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-52910" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53145" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53148" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53153" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53159" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53170" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53171" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53172" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53173" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53178" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53182" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53183" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53185" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53192" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53193" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53196" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53198" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53235" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53239" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53240" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53250" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53254" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53256" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53259" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53262" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53264" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53266" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53269" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53270" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53275" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53276" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53356" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53362" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53388" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53398" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-53399" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-63801" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-63809" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-63815" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-63823" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64188" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64191" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64260" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64266" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64269" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64276" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64300" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64361" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64367" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64380" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64383" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64385" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64386" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64387" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64390" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64393" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64396" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64423" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64432" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64440" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64441" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64442" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64467" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64490" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64535" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64543" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64548" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64554" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64557" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64558" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64562" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64564" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64567" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64597" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-64601" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68085" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68098" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68117" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68121" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68147" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68162" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68189" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68196" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68198" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68199" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68201" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68204" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68236" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68257" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68284" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68323" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68329" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68380" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68393" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68399" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68442" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68446" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68451" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-68470" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-72003" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-72024" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-72110" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-72111" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-72123" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-72124" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-72135" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-72151" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-72195" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-72287" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-72288" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-72331" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-72338" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-72372" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-72390" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-72461" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-72462" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-72472" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-72478" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-74268" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-74317" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-74334" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-74341" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-74363" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-74378" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-74390" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-74394" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-74411" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-74427" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-74438" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-74446" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-74465" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-74470" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-74506" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-74510" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-74529" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-74534" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-74535" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-80631" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-80634" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-80637" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-80644" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-80665" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-80668" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-80671" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-80681" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-80683" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-80691" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-80692" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-80693" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-80700" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-80702" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-80710" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-80714" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-80716" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-80718" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-80721" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - }, - { - "vulnerability": { - "name": "CVE-2026-80725" - }, - "products": [ - { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" - } - ], - "status": "not_affected", - "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." - } - ] +{ + "@context": "https://openvex.dev/ns/v0.2.0", + "@id": "https://github.com/PastureStack/node-agent/security/openvex/dapper/2026-09-08", + "author": "PastureStack contributors", + "timestamp": "2026-09-08T09:50:07+08:00", + "version": 2, + "statements": [ + { + "vulnerability": { + "name": "CVE-2025-10263" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2025-40190" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-52908" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-52909" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-52910" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53145" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53148" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53153" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53159" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53170" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53171" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53172" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53173" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53178" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53182" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53183" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53185" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53192" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53193" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53196" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53198" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53235" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53239" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53240" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53250" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53254" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53256" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53259" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53262" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53264" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53266" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53269" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53270" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53275" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53276" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53356" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53362" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53388" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53398" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-53399" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-63801" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-63809" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-63815" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-63823" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64188" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64191" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64260" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64266" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64269" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64276" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64300" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64361" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64367" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64380" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64383" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64385" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64386" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64387" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64390" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64393" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64396" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64423" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64432" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64440" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64441" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64442" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64467" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64490" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64535" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64543" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64548" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64554" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64557" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64558" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64562" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64564" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64567" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64597" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-64601" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68085" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68098" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68117" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68121" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68147" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68162" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68189" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68196" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68198" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68199" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68201" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68204" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68236" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68257" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68284" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68323" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68329" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68380" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68393" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68399" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68442" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68446" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68451" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-68470" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72003" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72024" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72110" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72111" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72123" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72124" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72135" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72151" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72195" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72287" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72288" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72331" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72338" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72372" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72390" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72461" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72462" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72472" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72478" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74268" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74317" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74334" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74341" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74363" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74378" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74390" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74394" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74411" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74427" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74438" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74446" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74465" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74470" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74506" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74510" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74529" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74534" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74535" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80631" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80634" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80637" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80644" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80665" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80668" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80671" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80681" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80683" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80691" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80692" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80693" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80700" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80702" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80710" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80714" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80716" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80718" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80721" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80725" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + } + ] }