{"id":"CVE-2026-42277","summary":"Onyx: IDOR in /chat/file/{file_id} allows any authenticated user to download other users files","details":"Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the GET /chat/file/{file_id} endpoint allows any authenticated user to download any other user's uploaded files by providing the file UUID. The endpoint verifies the caller is authenticated but never checks that the file belongs to them. An attacker who knows or obtains a file UUID can access confidential documents, chat attachments, and other files uploaded by any user in the system. This issue has been patched in versions 3.0.9, 3.1.6, and 3.2.6.","aliases":["GHSA-vg3h-35f7-7w6r"],"modified":"2026-07-15T01:48:53.611522846Z","published":"2026-05-08T03:51:11.520Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42277.json","cna_assigner":"GitHub_M","cwe_ids":["CWE-639"]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42277.json"},{"type":"ADVISORY","url":"https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-vg3h-35f7-7w6r"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42277"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/onyx-dot-app/onyx","events":[{"introduced":"0"},{"fixed":"90aecacbebe5f08e19a9b4ae1ee9b4737991d573"},{"introduced":"b9e84c42a8b796e1b94e553abf079ffddfbb444c"},{"fixed":"b51c9970aaa1c87b80c6653079405cc051ee4778"},{"introduced":"c4f8d5370b8369176a77f0788da3fc4b133fb2db"},{"fixed":"87f8e5d3cca6dd4d277d9dfff1e367ee0772540b"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:onyx:onyx:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"3.0.9"},{"introduced":"3.1.0"},{"fixed":"3.1.6"},{"introduced":"3.2.0"},{"fixed":"3.2.6"}]}}],"versions":["v3.0.8","v3.0.7","v3.1.5","v3.2.5","v3.2.4","v3.2.3","v3.2.2","v3.1.4","v3.2.1","v3.2.0-beta","v3.2.0","v3.1.3","v3.1.2","v3.0.6","v3.1.1","v3.1.0","v3.0.5","v3.0.4","v3.0.3","v3.0.2","craft-latest-3.0.1","v3.0.1","v3.0.0","nightly-latest-20260305","cli/v0.1.1","v3.0.0-cloud.5","cli/v0.1.0","nightly-latest-20260306","ods/v0.6.3","v3.0.0-cloud.4","nightly-latest-20260304","nightly-latest-20260303","v3.0.0-scim-testing","v3.0.0-cloud.3","nightly-latest-20260302","nightly-latest-20260301","nightly-latest-20260228","nightly-latest-20260227","v2.12.0-sharepoint-gov4","nightly-latest-20260226","v3.0.0-cloud.2","v3.0.0-cloud.1","ods/v0.6.2","nightly-latest-20260225","ods/v0.6.1","v2.12.0-sharepoint-gov2","nightly-latest-20260224","v3.0.0-beta","nightly-latest-20260223","v2.12.0-cloud.14","nightly-latest-20260222","nightly-latest-20260221","nightly-latest-20260220","ods/v0.6.0","v2.12.0-cloud.13","nightly-latest-20260219","nightly-latest-20260218","nightly-latest-20260217","nightly-latest-20260216","nightly-latest-20260215","nightly-latest-20260214","v2.12.0-cloud.12","v2.12.0-beta-test-captcha","v2.12.0-cloud.11","v2.12.0-cloud.10","nightly-latest-20260213","v2.12.0-cloud.9","nightly-latest-20260212","v2.12.0-cloud.8","ods/v0.5.3","ods/v0.5.2","nightly-latest-20260211","v2.12.0-cloud.7","v2.12.0-cloud.6","nightly-latest-20260210","v2.12.0-beta","ods/v0.5.1","v2.12.0-cloud.5","nightly-latest-20260209","nightly-latest-20260208","nightly-latest-20260207","nightly-latest-20260206","v2.12.0-cloud.4","v2.12.0-cloud.3","v2.12.0-cloud.2","ods/v0.5.0","nightly-latest-20260205","v2.12.0-cloud.1","nightly-latest-20260204","v2.12.0-cloud.0","nightly-latest-20260203","craft-latest","nightly-latest-20260202","v2.11.0-cloud.16","nightly-latest-20260131","nightly-latest-20260201","v2.11.0-cloud.15","v2.11.0-beta.15","nightly-latest-20260130","v2.11.0-cloud.14","v2.11.0-cloud.13","nightly-latest-20260129","v2.11.0-cloud.12","experimental-cc4a.21","v2.11.0-cloud.11","v2.11.0-cloud.10","ods/v0.4.1","v2.11.0-cloud.9","nightly-latest-20260128","v2.11.0-cloud.8","experimental-cc4a.20","v2.11.0-cloud.7","experimental-cc4a.19","v2.11.0-cloud.6","experimental-cc4a.18","v2.11.0-cloud.5","v2.11.0-cloud.0","v2.11.0-beta","v2.11.0-cloud.4","experimental-cc4a.16","nightly-latest-20260127","v2.11.0-cloud.3","v2.11.0-cloud.2","experimental-cc4a.15","v2.11.0-cloud.1","v2.10.0-beta.0","nightly-latest-20260120","nightly-latest-20260126","nightly-latest-20260125","nightly-latest-20260124","nightly-latest-20260123","ods/v0.4.0","nightly-latest-20260122","nightly-latest-20260121","v2.9.0","nightly-latest-20260119","nightly-latest-20260118","nightly-latest-20260117","v2.9.0-beta.1","nightly-latest-20260116","ods/v0.3.2","ods/v0.3.1","ods/v0.3.0","nightly-latest-20260115","nightly-latest-20260114","v2.8.0-cloud.10","nightly-latest-20260113","v2.9.0-beta.0","nightly-latest-20260112","nightly-latest-20260111","nightly-latest-20260110","nightly-latest-20260109","v2.8.0-cloud.7","nightly-latest-20260108","v2.8.0-cloud.6","v2.8.0","nightly-latest-20260107","ods/v0.2.1","v2.8.0-beta.1","v2.7.1","v2.8.0-cloud.5","v2.8.0-cloud.4","ods/v0.1.1","nightly-latest-20260106","v2.8.0-beta.0","v2.8.0-cloud.0","nightly-latest-20260105","v2.7.0-cloud.1","v2.7.0","nightly-latest-20260104","nightly-latest-20260103","v2.7.0-beta.5","v2.7.0-cloud.0","nightly-latest-20260102","nightly-latest-20260101","v2.7.0-beta.4","v2.7.0-beta.3","nightly-latest-20251231","v2.7.0-beta.2","v2.6.2-cloud.0","v2.6.2","v2.7.0-beta.1","v2.6.1-cloud.0","v2.6.1","nightly-latest-20251230","v2.7.0-beta.0","v2.6.0-cloud.0","v2.6.0","nightly-latest-20251229","v2.6.0-beta.19","nightly-latest-20251228","nightly-latest-20251227","v2.6.0-beta.18","v2.6.0-beta.17","nightly-latest-20251226","nightly-latest-20251225","v2.6.0-beta.16","v2.6.0-beta.15","v2.6.0-beta.14","nightly-latest-20251224","v2.6.0-beta.13","nightly-latest-20251223","v2.6.0-beta.12","v2.6.0-beta.11","nightly-latest-20251222","nightly-latest-20251221","nightly-latest-20251220","v2.6.0-beta.10","nightly-latest-20251219","v2.6.0-beta.9","v2.6.0-beta.8","v2.6.0-beta.7","nightly-latest-20251218","v2.6.0-beta.6","nightly-latest-20251217","v2.6.0-beta.4","v2.6.0-beta.5","nightly-latest-20251216","v2.6.0-beta.3","nightly-latest-20251215","nightly-latest-20251214","nightly-latest-20251213","nightly-latest-20251212","nightly-latest-20251211","nightly-latest-20251210","nightly-latest-20251209","nightly-latest-20251208","nightly-latest-20251207","ods/v0.1.0","nightly-latest-20251206","nightly-latest-20251205","ods/v0.0.2","v2.6.0-beta.2","nightly-latest-20251204","v2.6.0-beta.1","v2.6.0-beta.0","nightly-latest-20251203","v2.5.4","nightly-latest-20251202","nightly-latest-20251201","nightly-latest-20251130","nightly-latest-20251129","nightly-latest-20251128","nightly-latest-20251127","nightly-latest-20251126","v2.5.3","v2.5.2","v2.5.1","nightly-latest-20251125","v2.5.0","v2.5.0-cloud.0","nightly-latest-20251124","nightly-latest-20251123","nightly-latest-20251122","v2.4.5-cloud.0","nightly-latest-20251121.1","nightly-latest-20251121","v2.5.0-beta.0","v2.4.4-cloud.0","nightly-latest-20251119","v2.4.2","v2.4.0-cloud.4","v2.4.1","v2.4.0","nightly-latest-20251118","v2.4.0-cloud.3","nightly-latest-20251117","nightly-latest-20251116","nightly-latest-20251115","nightly-latest-20251114","v2.4.0-cloud.2","v2.4.0-cloud.1","nightly-latest-20251113","nightly-latest-20251112","v2.3.0-cloud.2","v2.4.0-beta.0","v2.3.0-beta.3","nightly-latest-20251108","nightly-latest-20251111","v2.4.0-cloud.0","nightly-latest-20251110","nightly-latest-20251109","v2.3.0-beta.0","v2.2.0","nightly-latest-20251104","nightly-latest-20251107","nightly-latest-20251106","v2.3.0-cloud.1","v2.3.0-cloud.0","v2.3.0-beta.2","nightly-latest-20251105","v2.3.0-beta.1","v2.2.1","nightly-latest-20251103","nightly-latest-20251102","nightly-latest-20251101","nightly-latest-20251031","v2.2.0-cloud.2","v2.2.0-beta.2","nightly-latest-20251030","nightly-latest-20251029","v2.1.0","v2.2.0-cloud.1","v2.2.0-beta.1","v2.2.0-cloud.0","v2.2.0-beta.0","nightly-latest-20251028","nightly-latest-20251027","nightly-latest-20251026","nightly-latest-20251025","v2.1.0-beta.2","v2.0.3","nightly-latest-20251023","v2.0.3-cloud.0","nightly-latest-20251024","nightly-latest-20251022","v2.0.2-cloud.0","nightly-latest-20251021","v2.1.0-beta.0","nightly-latest-20251018","nightly-latest-20251020","nightly-latest-20251019","nightly-latest-20251017","nightly-latest-20251016","nightly-latest-20251010","nightly-latest-20251015","nightly-latest-20251014","nightly-latest-20251013","nightly-latest-20251012","nightly-latest-20251011","nightly-latest-20251009","nightly-latest-20251008","v2.0.0-beta.0","v1.11.0-beta.0","v1.10.0","nightly-latest-20251007","nightly-latest-20251006","nightly-latest-20251005","nightly-latest-20251004","nightly-latest-20251003","nightly-latest-20251002","nightly-latest-20251001","v1.10.0-cloud.2","nightly-latest-20250930","v1.10.0-cloud.1","nightly-latest-20250929","nightly-latest-20250928","nightly-latest-20250927","v1.9.0-cloud.6","nightly-latest-20250926","v1.9.0-cloud.5","v1.9.0-cloud.4","nightly-latest-20250925","v1.10.0-beta.0","nightly-latest-20250924","v1.9.0-cloud.3","nightly-latest-20250921","nightly-latest-20250920","nightly-latest-20250923","nightly-latest-20250922","v1.9.0-cloud.2","nightly-latest-20250919","v1.9.0-cloud.1","nightly-latest-20250918","v1.9.0-cloud.0","v1.9.0-beta.0","nightly-latest-20250916","nightly-latest-20250917","v1.8.0-beta.1","v1.8.0","nightly-latest-20250915","nightly-latest-20250914","nightly-latest-20250913","nightly-latest-20250912","v1.8.0-cloud.4","nightly-latest-20250911","nightly-latest-20250909","v1.8.0-cloud.3","nightly-latest-20250910","v1.8.0-cloud.1","v1.8.0-cloud.0","v1.8.0-beta.0","nightly-latest-20250908","nightly-latest-20250907","nightly-latest-20250906","nightly-latest-20250905","v1.7.0-cloud.6","v1.7.0-cloud.5","v1.7.0-cloud.4","v1.7.0-cloud.3","nightly-latest-20250904","v1.7.0-cloud.2","v1.7.0-cloud.1","nightly-latest-20250903","nightly-latest-20250902","v1.7.0-beta.0","v1.7.0","v1.6.0-cloud.3","nightly-latest-20250901","v1.6.0-cloud.1","nightly-latest-20250831","nightly-latest-20250830","nightly-latest-20250829","nightly-latest-20250828","nightly-latest-20250827","nightly-latest-20250826","v1.6.0-beta.0","nightly-latest-20250825","v1.5.0-beta.0","v1.5.0","nightly-latest-20250824","nightly-latest-20250823","nightly-latest-20250822","v1.4.0-cloud.1","nightly-latest-20250821","nightly-latest-20250820","nightly-latest-20250819","nightly-latest-20250818","nightly-latest-20250817","nightly-latest-20250816","nightly-latest-20250815","nightly-latest-20250814","nightly-latest-20250813","nightly-latest-20250812","v1.4.0-beta.0","nightly-latest-20250811","v1.2.1-cloud.2","nightly-latest-20250810","nightly-latest-20250809","v1.3.0-beta","nightly-latest-20250805","v1.2.0-beta","v1.2.0","nightly-latest-20250808","v1.2.0-cloud.1","nightly-latest-20250807","onyx-stack-0.2.5","nightly-latest-20250806","onyx-stack-0.2.4","nightly-latest-20250804","nightly-latest-20250803","nightly-latest-20250802","nightly-latest-20250801","nightly-latest-20250731","nightly-latest-20250730","nightly-latest-20250729","nightly-latest-20250728","nightly-latest-20250727","nightly-latest-20250726","nightly-latest-20250725","v1.0.0-cloud.36","v1.0.0-cloud.35","nightly-latest-20250724","nightly-latest-20250723","v1.0.0-cloud.34","nightly-latest-20250722","nightly-latest-20250721","nightly-latest-20250720","nightly-latest-20250719","nightly-latest-20250718","v1.1.0-beta","nightly-latest-20250716","nightly-latest-20250717","nightly-latest-20250715","nightly-latest-20250714","nightly-latest-20250713","nightly-latest-20250712","nightly-latest-20250711","nightly-latest-20250710","v1.0.0-cloud.17","v1.0.0-cloud.16","v1.0.0-cloud.15","nightly-latest-20250709","v1.0.0-cloud.7","nightly-latest-20250707","nightly-latest-20250706","v1.0.0","nightly-latest-20250708","nightly-latest-20250705","nightly-latest-20250704","nightly-latest-20250703","nightly-latest-20250702","v1.0.0-cloud.5","nightly-latest-20250630","nightly-latest-20250701","v1.0.0-cloud.4","nightly-latest-20250629","v1.0.0-cloud.3","v1.0.0-cloud.2","v1.0.0-cloud.1","nightly-latest-20250628","nightly-latest-20250627","v0.29.0-cloud.24","nightly-latest-20250626","v0.29.0-cloud.23","v0.29.0-cloud.22","nightly-latest-20250625","v1.0.0-candidate","nightly-latest-20250624","v0.29.0-cloud.21","v0.29.0-cloud.20","v0.29.0-cloud.19","nightly-latest-20250623","nightly-latest-20250622","nightly-latest-20250621","nightly-latest-20250620","nightly-latest-20250619","nightly-latest-20250618","v0.29.0-cloud.17","nightly-latest-20250617","nightly-latest-20250616","nightly-latest-20250615","nightly-latest-20250614","nightly-latest-20250613","nightly-latest-20250612","v0.29.0-cloud.16","nightly-latest-20250611","v0.29.0-cloud.15","v0.29.0-cloud.14","nightly-latest-20250610","nightly-latest-20250609","nightly-latest-20250608","nightly-latest-20250607","nightly-latest-20250606","nightly-latest-20250605","nightly-latest-20250604","nightly-latest-20250603","v0.29.0-beta.1","v0.29.0","v0.24.0-cloud.64","nightly-latest-20250521","v0.29.0-cloud.13","v0.30.0-beta.1","v0.29.0-cloud.12","nightly-latest-20250602","nightly-latest-20250601","nightly-latest-20250531","v0.29.0-cloud.5","nightly-latest-20250530","v0.29.0-cloud.4","nightly-latest-20250529","nightly-latest-20250528","v0.29.0-cloud.2","nightly-latest-20250527","nightly-latest-20250526","nightly-latest-20250525","nightly-latest-20250503","nightly-latest-20250524","nightly-latest-20250523","v0.29.0-cloud.1","nightly-latest-20250522.1","v0.24.0-cloud.55","nightly-latest-20250509","nightly-latest-20250522","v0.24.0-cloud.63","nightly-latest-20250520","nightly-latest-20250519","nightly-latest-20250518","nightly-latest-20250517","v0.24.0-cloud.61","nightly-latest-20250516","nightly-latest-20250515","v0.24.0-cloud.60","nightly-latest-20250514","v0.24.0-cloud.58","nightly-latest-20250513","v0.24.0-cloud.56","nightly-latest-20250512","nightly-latest-20250511","nightly-latest-20250510","nightly-latest-20250508","nightly-latest-20250507","v0.28.0-beta.1","v0.28.0","nightly-latest-20250506","nightly-latest-20250505","nightly-latest-20250504","nightly-latest-20250502","highspot-special-tag-2","v0.24.0-cloud.51","v0.24.0-cloud.50","nightly-latest-20250501","highspot-special-tag","v0.24.0-cloud.49","nightly-latest-20250430","nightly-latest-20250429","nightly-latest-20250428","v0.28.0-candidate","nightly-latest-20250427","nightly-latest-20250426","v0.24.0-cloud.48","nightly-latest-20250425","nightly-latest-20250424","v0.24.0-cloud.47","nightly-latest-20250423","v0.24.0-cloud.46","v0.24.0-cloud.45","nightly-latest-20250422","v0.26.0-beta.2","v0.26.0","nightly-latest-20250421","nightly-latest-20250420","nightly-latest-20250419","nightly-latest-20250418","nightly-latest-20250417","nightly-latest-20250416","v0.27.0-beta.1","v0.27.0","nightly-latest-20250415","nightly-latest-20250414","nightly-latest-20250413","nightly-latest-20250412","v0.24.0-cloud.33","nightly-latest-20250411","nightly-latest-20250410","v0.24.0-cloud.32","nightly-latest-20250409","v0.24.0-cloud.31","nightly-latest-20250408","nightly-latest-20250320","nightly-latest-20250407","nightly-latest-20250406","nightly-latest-20250405","v0.24.0-cloud.30","nightly-latest-20250404","v0.24.0-cloud.29","v0.24.0-cloud.27","nightly-latest-20250403","v0.24.0-cloud.26","v0.24.0-cloud.25","nightly-latest-20250402","confluence-patch-04.1.2025","v0.24.0-cloud.24","v0.24.0-cloud.23","nightly-latest-20250331.1","nightly-latest-20250331","nightly-latest-20250330","nightly-latest-20250329","nightly-latest-20250328","v0.24.0-cloud.6","v0.24.0-cloud.5","nightly-latest-20250327","nightly-latest-20250326","nightly-latest-20250324","nightly-latest-20250325","nightly-latest-20250323","nightly-latest-20250322","nightly-latest-20250321-patch.1","nightly-latest-20250321","v0.24.0-cloud.1","nightly-latest-20250319","nightly-latest-20250318","nightly-latest-20250317","nightly-latest-20250316","nightly-latest-20250315","v0.25.0-beta.1","nightly-latest-20250314","nightly-latest-20250313","nightly-latest-20250312","nightly-latest-20250311","nightly-latest-20250310","nightly-latest-20250309","nightly-latest-20250308","nightly-latest-20250307","v0.23.0-cloud.4","nightly-latest-20250306","v0.23.0-beta.1","v0.23.0","v0.24.0-beta.1","nightly-latest-20250305","v0.23.0-cloud.3","nightly-latest-20250304","nightly-latest-20250303","nightly-latest-20250302","v0.23.0-cloud.1","nightly-latest-20250301","v0.23.0-cloud.0","v0.20.0-cloud.84","nightly-latest-20250228","nightly-latest-20250227","nightly-latest-20250226","v0.20.0-cloud.76","nightly-latest-20250225","v0.20.0-cloud.73","nightly-latest-20250224","nightly-latest-20250223","nightly-latest-20250222","nightly-latest-20250221","nightly-latest-20250220","nightly-latest-20250219","v0.20.0-cloud.57","nightly-latest-20250218","nightly-latest-20250217","nightly-latest-20250216","nightly-latest-20250215","v0.20.0-cloud.41","nightly-latest-20250214","v0.22.0-beta.1","v0.20.0-cloud.36","v0.20.0-cloud.35","nightly-latest-20250212-early","nightly-latest-20250213","v0.20.0-cloud.31","nightly-latest-20250212","v0.20.0-cloud.28","nightly-latest-20250211","v0.21.0-beta.1","v0.21.0","v0.19.0-cloud.62","nightly-latest-20250130","nightly-latest-20250210","nightly-latest-20250209","nightly-latest-20250208","nightly-latest-20250207","nightly-latest-20250205","nightly-latest-20250206","v0.20.0-cloud.6","v0.20.0-cloud.5","nightly-latest-20250204","v0.19.0-cloud.75","nightly-latest-20250203","v0.19.0-cloud.74","v0.19.0-cloud.73","nightly-latest-20250202","v0.19.0-cloud.71","nightly-latest-20250201","v0.19.0-cloud.68","v0.19.0-cloud.67","nightly-latest-20250131","v0.19.0-cloud.66","v0.19.0-cloud.65","nightly-latest-20250129","v0.19.0-cloud.59","v0.19.0-cloud.58","nightly-latest-20250128","nightly-latest-20250127","nightly-latest-20250126","v0.19.0-cloud.45","nightly-latest-20250125","nightly-latest-20250124","v0.19.0-cloud.39","v0.19.0-cloud.41","nightly-latest-20250123","nightly-latest-20250122","v0.20.0-beta.1","v0.20.0","nightly-latest-20250121","v0.19.0-cloud.26","nightly-latest-20250120","v0.19.0-cloud.18","nightly-latest-20250119","nightly-latest-20250118","v0.19.0-cloud.15","nightly-latest-20250117","nightly-latest-20250116","v0.19.0-cloud.13","v0.19.0-cloud.10","nightly-latest-20250115","nightly-latest-20250114","nightly-latest-20250113","nightly-latest-20250112","nightly-latest-20250111","nightly-latest-20241120","nightly-latest-20250110","v0.19.0-beta.1","v0.18.0-cloud.15","nightly-latest-20250109","v0.18.0-cloud.34","v0.18.0-cloud.31","nightly-latest-20250108","nightly-latest-20250107","v0.18.0-cloud.23","nightly-latest-20250106","v0.18.0-cloud.22","v0.18.0-cloud.20","v0.18.0-cloud.19","nightly-latest-20250105","v0.18.0-cloud.12","nightly-latest-20250104","nightly-latest-20250103","nightly-latest-20250102","v0.18.0-cloud.13","nightly-latest-20250101","v0.18.0-cloud.11","v0.18.0-cloud.10","nightly-latest-20241231","nightly-latest-20241230","v0.18.0-cloud.9","v0.18.0-cloud.8","v0.18.0-cloud.6","nightly-latest-20241229","nightly-latest-20241228","nightly-latest-20241227","nightly-latest-20241226","nightly-latest-20241225","nightly-latest-20241224","nightly-latest-20241223","v0.18.0-cloud.3","nightly-latest-20241222","nightly-latest-20241221","v0.18.0-cloud.1","nightly-latest-20241220","nightly-latest-20241219","nightly-latest-20241218","v0.18.0-beta.2","v0.15.0-cloud.beta.23","v0.18.0-beta.1","v0.18.0","nightly-latest-20241217","nightly-latest-20241216","v0.15.0-cloud.beta.21","nightly-latest-20241215","v0.15.0-cloud.beta.20","v0.15.0-cloud.beta.19","nightly-latest-20241213","v0.15.0-cloud.beta.17","v0.15.0-cloud.beta.15","v0.15.0-cloud.beta.13","nightly-latest-20241212","v0.15.0-cloud.beta.12","nightly-latest-20241211","v0.15.0-cloud.beta.8","v0.15.0-cloud.beta.7","v0.15.0-cloud.beta.4","v0.15.0-cloud.beta.2","nightly-latest-20241210","nightly-latest-20241209","v0.15.0-cloud.beta.1","teams-improvements","nightly-latest-20241208","nightly-latest-20241207","vespa-more-retries","nightly-latest-20241206","nightly-latest-20241205","nightly-latest-20241204","v0.16.0-beta.1","v0.15.0-beta.1","v0.14.0-cloud.beta.0","nightly-latest-20241127","nightly-latest-20241203","nightly-latest-20241202","nightly-latest-20241201","nightly-latest-20241130","nightly-latest-20241129","nightly-latest-20241128","nightly-latest-20241126","nightly-latest-20241125","nightly-latest-20241124","nightly-latest-20241123","nightly-latest-20241122","v0.13.0-cloud.beta.2","nightly-latest-20241121","v0.14.0-beta.1","nightly-latest-20241119","nightly-latest-20241118","nightly-latest-20241117","v0.12.0-cloud.beta.17","nightly-latest-20241116","nightly-latest-20241115","v0.13.0-beta.1","nightly-latest-20241112","nightly-latest-20241114","v0.12.0-cloud.beta.16","nightly-latest-20241113","nightly-latest-20241111","nightly-latest-20241110","nightly-latest-20241109","v0.12.0-cloud.beta.0","nightly-latest-20241108","nightly-latest-20241107","nightly-latest-20241106","v0.12.0-beta.1","nightly-latest-20241105","v0.11.0-cloud.beta.6","nightly-latest-20241104","v0.11.0-cloud.beta.5","nightly-latest-20241103","nightly-latest-20241102","nightly-latest-20241031","nightly-latest-20241101","v0.11.0-cloud.beta.1","nightly-latest-20241030","v0.11.0-beta.1","nightly-latest-20241029","nightly-latest-20241028","v0.10.0-cloud.beta.9","v0.10.0-cloud.beta.10","v0.10.0-cloud.beta.8","nightly-latest-20241027","v0.9.0","v0.10.0-cloud.beta.7","v0.10.0-cloud.beta.6","v0.10.0-beta.6","nightly-latest-20241026","v0.10.0-cloud.beta.5","nightly-latest-20241025","v0.10.0-beta.5","v0.10.0-beta.4","v0.10.0-beta.3","nightly-latest-20241024","v0.10.0-beta.2","v0.9.0-beta.6","nightly-latest-20241020","nightly-latest-20241023","notion-patch-20241022","nightly-latest-20241022","v0.10.0-beta.1","nightly-latest-20241021","nightly-latest-20241019","v0.9.0-beta.5","v0.9.0-beta.4","nightly-latest-20241018","v0.9.0-beta.3","v0.9.0-beta.2","nightly-latest-20241017","nightly-latest-20241016","v0.9.0-beta.1","nightly-latest-20241015","v0.7.8","v0.7.7","v0.7.6","nightly-latest-20241014","nightly-latest-20241011","nightly-latest-20241013","v0.7.5","nightly-latest-20241012","nightly-latest-20241010","v0.8.0-beta.1","nightly-latest-20241008","nightly-latest-20241009","experimental-1","nightly-latest-20241007","nightly-latest-20241006","nightly-latest-20241005","nightly-latest-20241004","nightly-latest-20241003","v0.7.0-beta.1","nightly-latest-20241001","nightly-latest-20241002","nightly-latest-20240930","nightly-latest-20240929","nightly-latest-20240928","nightly-latest-20240927","v0.6.0-beta.1","v0.5.26","v0.5.25","v0.5.24","v0.5.23","v0.5.22","v0.5.21","v0.5.20","v0.5.19","v0.5.18","v0.5.17","v0.5.16","v0.5.15","v0.5.14","v0.5.13","v0.5.11","v0.5.10","v0.5.9","v0.5.8","v0.5.7","v0.5.5","v0.5.6","v0.5.4","v0.5.3","v0.5.2","v0.5.1","v0.5.0","v0.4.28","v0.4.27","v0.4.26","v0.4.25","v0.4.23","v0.4.22","v0.4.21","v0.4.20","v0.4.19","v0.4.18","v0.4.17","v0.4.16","v0.4.15","v0.4.14","v0.4.13","v0.4.12","v0.4.11","v0.4.10","v0.4.9","v0.4.8","v0.4.7","v0.4.6","v0.4.5","0.4.5","v0.4.4","v0.4.3","v0.4.2","v0.4.1","v0.3.95","v0.3.94","v0.3.93","v0.3.92","v0.3.91","v0.3.90","v0.3.89","v0.3.88","v0.3.87","v0.3.86","v0.3.85","v0.3.82","v0.3.81","v0.3.80","v0.3.79","v0.3.78","v0.3.77","v0.3.76","v0.3.75","v0.3.74","v0.3.73","v0.3.72","v0.3.71","v0.3.70","v0.3.69","v0.3.68","v0.3.67","v0.3.66","v0.3.65","v0.3.62","v0.3.61","v0.3.60","v0.3.59","v0.3.58","v0.3.57","v0.3.56","v0.3.55","v0.3.54","v0.3.53","v0.3.52","v0.3.51","v0.3.50","v0.3.49","v0.3.48","v0.3.47","v0.3.46","v0.3.45","v0.3.44","v0.3.43","v0.3.42","v0.3.41","v0.3.40","v0.3.39","v0.3.38","v0.3.37","v0.3.36","v0.3.35","v0.3.34","v0.3.33","v0.3.32","v0.3.31","v0.3.30","v0.3.29","v0.3.26","v0.3.25","v0.3.24","v0.3.23","v0.3.22","v0.3.21","v0.3.20","v0.3.19","v0.3.18","v0.3.17","v0.3.16","v0.3.15","v0.3.14","v0.3.13","v0.3.12","v0.3.11","v0.3.10","v0.3.9","v0.3.8","v0.3.7","v0.3.6","v0.3.5","v0.3.4","v0.3.3","v0.3.2","v0.3.1","v0.3.0","v0.2.79","v0.2.78","v0.2.77","v0.2.76","v0.2.75","v0.2.74","v0.2.73","v0.2.72","v0.2.71","v0.2.70","v0.2.69","v0.2.68","v0.2.67","v0.2.66","v0.2.65","v0.2.64","v0.2.63","v0.2.62","v0.2.61","v0.2.60","v0.2.59","v0.2.58","v0.2.57","v0.2.56","v0.2.55","v0.2.54","v0.2.53","v0.2.52","v0.2.51","v0.2.50","v0.2.49","v0.2.48","v0.2.47","v0.2.46","v0.2.45","v0.2.44","v0.2.43","v0.2.41","v0.2.40","v0.2.39","v0.2.38","v0.2.37","v0.2.36","v0.2.35","v0.2.34","v0.2.33","v0.2.32","v0.2.31","v0.2.30","v0.2.29","v0.2.28","v0.2.27","v0.2.26","v0.2.25","v0.2.24","v0.2.23","v0.2.22","v0.2.21","v0.2.20","v0.2.19","v0.2.18","v0.2.17","v0.2.16","v0.2.15","v0.2.14","v0.2.13","v0.2.12","v0.2.11","v0.2.10","v0.2.9","v0.2.8","v0.2.7","v0.2.6","v0.2.5","v0.2.4","v0.2.3","v0.2.2","v0.2.1","v0.2.0","v0.1.9","v0.1.8","v0.1.7","v0.1.6","v0.1.5","v0.1.4","v0.1.3","v0.1.2","v0.1.1","v0.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-42277.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}]}