{"id":"CGA-q2fj-2hf2-79wp","modified":"2026-09-07T01:46:42.101081309Z","published":"2026-06-11T17:23:52Z","upstream":["CVE-2026-48069","GHSA-99f4-grh7-6pcq"],"references":[{"type":"WEB","url":"https://github.com/grpc/grpc-node/releases/tag/%40grpc%2Fgrpc-js%401.10.12"},{"type":"WEB","url":"https://github.com/grpc/grpc-node/releases/tag/%40grpc%2Fgrpc-js%401.11.4"},{"type":"WEB","url":"https://github.com/grpc/grpc-node/releases/tag/%40grpc%2Fgrpc-js%401.12.7"},{"type":"WEB","url":"https://github.com/grpc/grpc-node/releases/tag/%40grpc%2Fgrpc-js%401.13.5"},{"type":"WEB","url":"https://github.com/grpc/grpc-node/releases/tag/%40grpc%2Fgrpc-js%401.14.4"},{"type":"WEB","url":"https://github.com/grpc/grpc-node/releases/tag/%40grpc%2Fgrpc-js%401.9.16"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48069.json"},{"type":"ADVISORY","url":"https://github.com/grpc/grpc-node/security/advisories/GHSA-99f4-grh7-6pcq"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48069"},{"type":"FIX","url":"https://github.com/grpc/grpc-node/commit/2375eadcc52ca2b1ef55288bcd6355168b02706c"},{"type":"FIX","url":"https://github.com/grpc/grpc-node/commit/2fe55fd76a8bb59eaab5f39e3552b5f84985a163"},{"type":"FIX","url":"https://github.com/grpc/grpc-node/commit/4091bd902105f8fb655741758aee71418c48b5d5"},{"type":"FIX","url":"https://github.com/grpc/grpc-node/commit/b3f16094473b5c8f38b0955eafa4a19507127346"},{"type":"FIX","url":"https://github.com/grpc/grpc-node/commit/b61c4d65953db85c2ae55b4b3cd98a4259dc87cb"},{"type":"FIX","url":"https://github.com/grpc/grpc-node/commit/b6dcfc3cee9ef390e5869ebea5a8c5ae187720b9"}],"affected":[{"package":{"name":"opentelemetry-auto-instrumentations-node","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentelemetry-auto-instrumentations-node?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.77.0-r0"}]}],"ecosystem_specific":{"components":[{"component_purl":"pkg:npm/%40grpc%2Fgrpc-js@1.14.3","latest_event_status":"fixed","latest_event_timestamp":"2026-06-12T04:27:07Z","component_name":"@grpc/grpc-js","component_version":"1.14.3","component_type":"npm","component_location":"/usr/share/opentelemetry-auto-instrumentations-node/node_modules/@grpc/grpc-js/package.json"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q2fj-2hf2-79wp.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}