{"metadata": {"vulnerability": "CVE-2025-71176", "count": 88, "kinds": {"milestone": 29, "sighting": 3, "kev": 0, "other": 56}}, "data": [{"timestamp": "2026-01-22T04:59:16.985Z", "date_only": false, "value": "2026-01-22T04:59:16.985Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-71176", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-01-22T04:59:17.273Z", "date_only": false, "value": "2026-01-22T04:59:17.273Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-71176", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-01-22T04:59:17.273Z", "date_only": false, "value": "2026-01-22T04:59:17.273000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:8580", "record": "RHSA-2026:8580", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-01-22T05:16:00Z", "date_only": false, "value": "2026-01-22T05:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-71176", "record": "UBUNTU-CVE-2025-71176", "field": "published"}, {"timestamp": "2026-01-22T05:16:17Z", "date_only": false, "value": "2026-01-22T05:16:17Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6W46-J5RX-G56G", "record": "GHSA-6W46-J5RX-G56G", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-01-22T05:16:17.577Z", "date_only": false, "value": "2026-01-22T05:16:17.577", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-71176", "record": "FKIE_CVE-2025-71176", "field": "published"}, {"timestamp": "2026-01-22T06:01:00.713Z", "date_only": false, "value": "2026-01-22T06:01:00.713392+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:8580", "record": "RHSA-2026:8580", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-01-22T06:30:29Z", "date_only": false, "value": "2026-01-22T06:30:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6W46-J5RX-G56G", "record": "GHSA-6W46-J5RX-G56G", "field": "published"}, {"timestamp": "2026-01-22T06:50:44.054Z", "date_only": false, "value": "2026-01-22T06:50:44.054Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2025-71176", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-22T07:20:55.294Z", "date_only": false, "value": "2026-01-22T07:20:55.294878Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcynktrahf2n", "record": "CVE-2025-71176", "field": "creation_timestamp", "uuid": "f6b209db-a625-4836-83f3-52cca2a71b68", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcynktrahf2n"}, {"timestamp": "2026-01-22T12:26:25.446Z", "date_only": false, "value": "2026-01-22T12:26:25.446376Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-71176", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-01-22T12:26:25.446Z", "date_only": false, "value": "2026-01-22T12:26:25.446376Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-71176", "record": "FKIE_CVE-2025-71176", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-01-22T12:26:39.653Z", "date_only": false, "value": "2026-01-22T12:26:39.653Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-71176", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-01-22T12:26:39.653Z", "date_only": false, "value": "2026-01-22T12:26:39.653Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-71176", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-13T16:38:46Z", "date_only": false, "value": "2026-04-13T16:38:46Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6W46-J5RX-G56G", "record": "GHSA-6W46-J5RX-G56G", "field": "modified"}, {"timestamp": "2026-04-16T20:56:52Z", "date_only": false, "value": "2026-04-16T20:56:52+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:8580", "record": "RHSA-2026:8580", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-04-16T20:56:52Z", "date_only": false, "value": "2026-04-16T20:56:52+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:8580", "record": "RHSA-2026:8580", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-04-16T20:56:52Z", "date_only": false, "value": "2026-04-16T20:56:52+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:8580", "record": "RHSA-2026:8580", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-04-18T19:58:28Z", "date_only": false, "value": "2026-04-18T19:58:28+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:8580", "record": "RHSA-2026:8580", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-05-01T00:00:00Z", "date_only": false, "value": "2026-05-01T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10666-1", "record": "OPENSUSE-SU-2026:10666-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-01T00:00:00Z", "date_only": false, "value": "2026-05-01T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10666-1", "record": "OPENSUSE-SU-2026:10666-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-05-01T00:00:00Z", "date_only": false, "value": "2026-05-01T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10666-1", "record": "OPENSUSE-SU-2026:10666-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-01T00:00:00Z", "date_only": false, "value": "2026-05-01T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10666-1", "record": "OPENSUSE-SU-2026:10666-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-06T13:47:19Z", "date_only": false, "value": "2026-05-06T13:47:19Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20692-1", "record": "OPENSUSE-SU-2026:20692-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-06T13:47:19Z", "date_only": false, "value": "2026-05-06T13:47:19Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20692-1", "record": "OPENSUSE-SU-2026:20692-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-05-06T13:47:19Z", "date_only": false, "value": "2026-05-06T13:47:19Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20692-1", "record": "OPENSUSE-SU-2026:20692-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-06T13:47:19Z", "date_only": false, "value": "2026-05-06T13:47:19Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20692-1", "record": "OPENSUSE-SU-2026:20692-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-06T13:47:46Z", "date_only": false, "value": "2026-05-06T13:47:46Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:21568-1", "record": "SUSE-SU-2026:21568-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-06T13:47:46Z", "date_only": false, "value": "2026-05-06T13:47:46Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:21568-1", "record": "SUSE-SU-2026:21568-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-05-06T13:47:46Z", "date_only": false, "value": "2026-05-06T13:47:46Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:21568-1", "record": "SUSE-SU-2026:21568-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-06T13:47:46Z", "date_only": false, "value": "2026-05-06T13:47:46Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:21568-1", "record": "SUSE-SU-2026:21568-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-07T07:17:06Z", "date_only": false, "value": "2026-05-07T07:17:06Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:1744-1", "record": "SUSE-SU-2026:1744-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-07T07:17:06Z", "date_only": false, "value": "2026-05-07T07:17:06Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:1744-1", "record": "SUSE-SU-2026:1744-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-05-07T07:17:06Z", "date_only": false, "value": "2026-05-07T07:17:06Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:1744-1", "record": "SUSE-SU-2026:1744-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-07T07:17:06Z", "date_only": false, "value": "2026-05-07T07:17:06Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:1744-1", "record": "SUSE-SU-2026:1744-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-07T07:17:06Z", "date_only": false, "value": "2026-05-07T07:17:06Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:1744-1", "record": "SUSE-SU-2026:1744-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-05-28T19:29:34Z", "date_only": false, "value": "2026-05-28T19:29:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/lesnargitonga/ded68f9d3d270cc386fe7c2227970ebc", "record": "CVE-2025-71176", "field": "creation_timestamp", "uuid": "f2301366-8691-46a2-8625-19c0bd492775", "content": "{\"dependencies\": [{\"name\": \"africastalking\", \"version\": \"1.2.9\", \"vulns\": []}, {\"name\": \"aioboto3\", \"version\": \"13.1.1\", \"vulns\": []}, {\"name\": \"aiobotocore\", \"version\": \"2.13.1\", \"vulns\": []}, {\"name\": \"aiofiles\", \"version\": \"25.1.0\", \"vulns\": []}, {\"name\": \"aiohappyeyeballs\", \"version\": \"2.6.1\", \"vulns\": []}, {\"name\": \"aiohttp\", \"version\": \"3.13.5\", \"vulns\": []}, {\"name\": \"aiohttp-retry\", \"version\": \"2.9.1\", \"vulns\": []}, {\"name\": \"aioitertools\", \"version\": \"0.13.0\", \"vulns\": []}, {\"name\": \"aiosignal\", \"version\": \"1.4.0\", \"vulns\": []}, {\"name\": \"aiosqlite\", \"version\": \"0.20.0\", \"vulns\": []}, {\"name\": \"alembic\", \"version\": \"1.13.3\", \"vulns\": []}, {\"name\": \"annotated-doc\", \"version\": \"0.0.4\", \"vulns\": []}, {\"name\": \"annotated-types\", \"version\": \"0.7.0\", \"vulns\": []}, {\"name\": \"anyio\", \"version\": \"4.13.0\", \"vulns\": []}, {\"name\": \"asyncpg\", \"version\": \"0.29.0\", \"vulns\": []}, {\"name\": \"attrs\", \"version\": \"26.1.0\", \"vulns\": []}, {\"name\": \"authlib\", \"version\": \"1.7.2\", \"vulns\": []}, {\"name\": \"bandit\", \"version\": \"1.9.4\", \"vulns\": []}, {\"name\": \"bcrypt\", \"version\": \"4.2.0\", \"vulns\": []}, {\"name\": \"boolean-py\", \"version\": \"5.0\", \"vulns\": []}, {\"name\": \"boto3\", \"version\": \"1.34.131\", \"vulns\": []}, {\"name\": \"botocore\", \"version\": \"1.34.131\", \"vulns\": []}, {\"name\": \"cachecontrol\", \"version\": \"0.14.4\", \"vulns\": []}, {\"name\": \"cachetools\", \"version\": \"5.5.2\", \"vulns\": []}, {\"name\": \"certifi\", \"version\": \"2026.4.22\", \"vulns\": []}, {\"name\": \"cffi\", \"version\": \"2.0.0\", \"vulns\": []}, {\"name\": \"charset-normalizer\", \"version\": \"3.4.7\", \"vulns\": []}, {\"name\": \"click\", \"version\": \"8.4.0\", \"vulns\": []}, {\"name\": \"cryptography\", \"version\": \"48.0.0\", \"vulns\": []}, {\"name\": \"cyclonedx-python-lib\", \"version\": \"11.7.0\", \"vulns\": []}, {\"name\": \"dataclasses-json\", \"version\": \"0.6.7\", \"vulns\": []}, {\"name\": \"defusedxml\", \"version\": \"0.7.1\", \"vulns\": []}, {\"name\": \"deprecated\", \"version\": \"1.3.1\", \"vulns\": []}, {\"name\": \"distro\", \"version\": \"1.9.0\", \"vulns\": []}, {\"name\": \"dnspython\", \"version\": \"2.8.0\", \"vulns\": []}, {\"name\": \"dparse\", \"version\": \"0.6.4\", \"vulns\": []}, {\"name\": \"email-validator\", \"version\": \"2.2.0\", \"vulns\": []}, {\"name\": \"fastapi\", \"version\": \"0.115.0\", \"vulns\": []}, {\"name\": \"filelock\", \"version\": \"3.29.0\", \"vulns\": []}, {\"name\": \"filetype\", \"version\": \"1.2.0\", \"vulns\": []}, {\"name\": \"frozenlist\", \"version\": \"1.8.0\", \"vulns\": []}, {\"name\": \"google-ai-generativelanguage\", \"version\": \"0.6.15\", \"vulns\": []}, {\"name\": \"google-api-core\", \"version\": \"2.30.3\", \"vulns\": []}, {\"name\": \"google-api-python-client\", \"version\": \"2.146.0\", \"vulns\": []}, {\"name\": \"google-auth\", \"version\": \"2.53.0\", \"vulns\": []}, {\"name\": \"google-auth-httplib2\", \"version\": \"0.4.0\", \"vulns\": []}, {\"name\": \"google-auth-oauthlib\", \"version\": \"1.2.1\", \"vulns\": []}, {\"name\": \"google-genai\", \"version\": \"1.75.0\", \"vulns\": []}, {\"name\": \"google-generativeai\", \"version\": \"0.8.6\", \"vulns\": []}, {\"name\": \"googleapis-common-protos\", \"version\": \"1.75.0\", \"vulns\": []}, {\"name\": \"greenlet\", \"version\": \"3.5.0\", \"vulns\": []}, {\"name\": \"groq\", \"version\": \"0.37.1\", \"vulns\": []}, {\"name\": \"grpcio\", \"version\": \"1.80.0\", \"vulns\": []}, {\"name\": \"grpcio-status\", \"version\": \"1.71.2\", \"vulns\": []}, {\"name\": \"h11\", \"version\": \"0.16.0\", \"vulns\": []}, {\"name\": \"httpcore\", \"version\": \"1.0.9\", \"vulns\": []}, {\"name\": \"httplib2\", \"version\": \"0.31.2\", \"vulns\": []}, {\"name\": \"httptools\", \"version\": \"0.7.1\", \"vulns\": []}, {\"name\": \"httpx\", \"version\": \"0.28.1\", \"vulns\": []}, {\"name\": \"httpx-sse\", \"version\": \"0.4.3\", \"vulns\": []}, {\"name\": \"idna\", \"version\": \"3.15\", \"vulns\": []}, {\"name\": \"iniconfig\", \"version\": \"2.3.0\", \"vulns\": []}, {\"name\": \"jinja2\", \"version\": \"3.1.6\", \"vulns\": []}, {\"name\": \"jiter\", \"version\": \"0.14.0\", \"vulns\": []}, {\"name\": \"jmespath\", \"version\": \"1.1.0\", \"vulns\": []}, {\"name\": \"joblib\", \"version\": \"1.5.3\", \"vulns\": []}, {\"name\": \"joserfc\", \"version\": \"1.6.8\", \"vulns\": []}, {\"name\": \"jsonpatch\", \"version\": \"1.33\", \"vulns\": []}, {\"name\": \"jsonpointer\", \"version\": \"3.1.1\", \"vulns\": []}, {\"name\": \"langchain\", \"version\": \"1.3.2\", \"vulns\": []}, {\"name\": \"langchain-classic\", \"version\": \"1.0.7\", \"vulns\": []}, {\"name\": \"langchain-community\", \"version\": \"0.4.2\", \"vulns\": []}, {\"name\": \"langchain-core\", \"version\": \"1.4.0\", \"vulns\": []}, {\"name\": \"langchain-google-genai\", \"version\": \"4.2.3\", \"vulns\": []}, {\"name\": \"langchain-groq\", \"version\": \"1.1.2\", \"vulns\": []}, {\"name\": \"langchain-ollama\", \"version\": \"1.1.0\", \"vulns\": []}, {\"name\": \"langchain-openai\", \"version\": \"1.2.2\", \"vulns\": []}, {\"name\": \"langchain-protocol\", \"version\": \"0.0.15\", \"vulns\": []}, {\"name\": \"langchain-text-splitters\", \"version\": \"1.1.2\", \"vulns\": []}, {\"name\": \"langgraph\", \"version\": \"1.2.2\", \"vulns\": []}, {\"name\": \"langgraph-checkpoint\", \"version\": \"4.1.1\", \"vulns\": []}, {\"name\": \"langgraph-prebuilt\", \"version\": \"1.1.0\", \"vulns\": []}, {\"name\": \"langgraph-sdk\", \"version\": \"0.3.15\", \"vulns\": []}, {\"name\": \"langsmith\", \"version\": \"0.8.6\", \"vulns\": []}, {\"name\": \"license-expression\", \"version\": \"30.4.4\", \"vulns\": []}, {\"name\": \"limits\", \"version\": \"5.8.0\", \"vulns\": []}, {\"name\": \"mako\", \"version\": \"1.3.12\", \"vulns\": []}, {\"name\": \"markdown-it-py\", \"version\": \"4.2.0\", \"vulns\": []}, {\"name\": \"markupsafe\", \"version\": \"3.0.3\", \"vulns\": []}, {\"name\": \"marshmallow\", \"version\": \"3.26.2\", \"vulns\": []}, {\"name\": \"mdurl\", \"version\": \"0.1.2\", \"vulns\": []}, {\"name\": \"msgpack\", \"version\": \"1.1.2\", \"vulns\": []}, {\"name\": \"multidict\", \"version\": \"6.7.1\", \"vulns\": []}, {\"name\": \"mypy-extensions\", \"version\": \"1.1.0\", \"vulns\": []}, {\"name\": \"nltk\", \"version\": \"3.9.4\", \"vulns\": []}, {\"name\": \"numpy\", \"version\": \"1.26.4\", \"vulns\": []}, {\"name\": \"oauthlib\", \"version\": \"3.3.1\", \"vulns\": []}, {\"name\": \"ollama\", \"version\": \"0.6.2\", \"vulns\": []}, {\"name\": \"openai\", \"version\": \"2.38.0\", \"vulns\": []}, {\"name\": \"orjson\", \"version\": \"3.11.5\", \"vulns\": [{\"id\": \"CVE-2025-67221\", \"fix_versions\": [\"3.11.6\"], \"aliases\": [\"GHSA-hx9q-6w63-j58v\"], \"description\": \"The orjson.dumps function in orjson before 3.11.6 does not limit recursion for deeply nested JSON documents.\"}]}, {\"name\": \"ormsgpack\", \"version\": \"1.12.2\", \"vulns\": []}, {\"name\": \"packageurl-python\", \"version\": \"0.17.6\", \"vulns\": []}, {\"name\": \"packaging\", \"version\": \"24.2\", \"vulns\": []}, {\"name\": \"passlib\", \"version\": \"1.7.4\", \"vulns\": []}, {\"name\": \"pgvector\", \"version\": \"0.3.4\", \"vulns\": []}, {\"name\": \"pip\", \"version\": \"26.1.1\", \"vulns\": []}, {\"name\": \"pip-api\", \"version\": \"0.0.34\", \"vulns\": []}, {\"name\": \"pip-audit\", \"version\": \"2.10.0\", \"vulns\": []}, {\"name\": \"pip-requirements-parser\", \"version\": \"32.0.1\", \"vulns\": []}, {\"name\": \"platformdirs\", \"version\": \"4.9.6\", \"vulns\": []}, {\"name\": \"pluggy\", \"version\": \"1.6.0\", \"vulns\": []}, {\"name\": \"prometheus-client\", \"version\": \"0.25.0\", \"vulns\": []}, {\"name\": \"propcache\", \"version\": \"0.5.2\", \"vulns\": []}, {\"name\": \"proto-plus\", \"version\": \"1.28.0\", \"vulns\": []}, {\"name\": \"protobuf\", \"version\": \"5.29.6\", \"vulns\": []}, {\"name\": \"psycopg\", \"version\": \"3.2.3\", \"vulns\": []}, {\"name\": \"psycopg-binary\", \"version\": \"3.2.3\", \"vulns\": []}, {\"name\": \"py-serializable\", \"version\": \"2.1.0\", \"vulns\": []}, {\"name\": \"pyasn1\", \"version\": \"0.6.3\", \"vulns\": []}, {\"name\": \"pyasn1-modules\", \"version\": \"0.4.2\", \"vulns\": []}, {\"name\": \"pycparser\", \"version\": \"3.0\", \"vulns\": []}, {\"name\": \"pydantic\", \"version\": \"2.9.2\", \"vulns\": []}, {\"name\": \"pydantic-core\", \"version\": \"2.23.4\", \"vulns\": []}, {\"name\": \"pydantic-settings\", \"version\": \"2.14.1\", \"vulns\": []}, {\"name\": \"pygments\", \"version\": \"2.20.0\", \"vulns\": []}, {\"name\": \"pyjwt\", \"version\": \"2.12.0\", \"vulns\": []}, {\"name\": \"pyparsing\", \"version\": \"3.3.2\", \"vulns\": []}, {\"name\": \"pytest\", \"version\": \"8.3.3\", \"vulns\": [{\"id\": \"CVE-2025-71176\", \"fix_versions\": [\"9.0.3\"], \"aliases\": [\"GHSA-6w46-j5rx-g56g\"], \"description\": \"pytest through 9.0.2 on UNIX relies on directories with the `/tmp/pytest-of-{user}` name pattern, which allows local users to cause a denial of service or possibly gain privileges.\"}]}, {\"name\": \"pytest-asyncio\", \"version\": \"0.24.0\", \"vulns\": []}, {\"name\": \"pytest-mock\", \"version\": \"3.14.0\", \"vulns\": []}, {\"name\": \"python-dateutil\", \"version\": \"2.9.0.post0\", \"vulns\": []}, {\"name\": \"python-dotenv\", \"version\": \"1.2.2\", \"vulns\": []}, {\"name\": \"python-multipart\", \"version\": \"0.0.27\", \"vulns\": []}, {\"name\": \"pyyaml\", \"version\": \"6.0.3\", \"vulns\": []}, {\"name\": \"redis\", \"version\": \"5.0.8\", \"vulns\": []}, {\"name\": \"regex\", \"version\": \"2026.5.9\", \"vulns\": []}, {\"name\": \"requests\", \"version\": \"2.34.2\", \"vulns\": []}, {\"name\": \"requests-oauthlib\", \"version\": \"2.0.0\", \"vulns\": []}, {\"name\": \"requests-toolbelt\", \"version\": \"1.0.0\", \"vulns\": []}, {\"name\": \"respx\", \"version\": \"0.21.1\", \"vulns\": []}, {\"name\": \"rich\", \"version\": \"15.0.0\", \"vulns\": []}, {\"name\": \"rsa\", \"version\": \"4.9.1\", \"vulns\": []}, {\"name\": \"ruamel-yaml\", \"version\": \"0.19.1\", \"vulns\": []}, {\"name\": \"s3transfer\", \"version\": \"0.10.4\", \"vulns\": []}, {\"name\": \"safety\", \"version\": \"3.8.0\", \"vulns\": []}, {\"name\": \"safety-schemas\", \"version\": \"0.0.16\", \"vulns\": []}, {\"name\": \"schema\", \"version\": \"0.7.8\", \"vulns\": []}, {\"name\": \"sentry-sdk\", \"version\": \"2.18.0\", \"vulns\": []}, {\"name\": \"shellingham\", \"version\": \"1.5.4\", \"vulns\": []}, {\"name\": \"six\", \"version\": \"1.17.0\", \"vulns\": []}, {\"name\": \"slowapi\", \"version\": \"0.1.9\", \"vulns\": []}, {\"name\": \"sniffio\", \"version\": \"1.3.1\", \"vulns\": []}, {\"name\": \"sortedcontainers\", \"version\": \"2.4.0\", \"vulns\": []}, {\"name\": \"sqlalchemy\", \"version\": \"2.0.35\", \"vulns\": []}, {\"name\": \"starlette\", \"version\": \"0.38.6\", \"vulns\": [{\"id\": \"PYSEC-2026-161\", \"fix_versions\": [\"1.0.1\"], \"aliases\": [\"GHSA-86qp-5c8j-p5mr\"], \"description\": \"Starlette reconstructs the requested URL based on the HTTP Host request header and requested path, but does not perform any validation of the Host header value. This allows attackers to inject paths into the host part, prepending the actual path. However, routing in Starlette is based on the actual request path. This inconsistent interpretation of HTTP requests may lead to issues such as authentication bypass when the authentication depends on the reconstructed URL\\u2019s path.\"}, {\"id\": \"CVE-2024-47874\", \"fix_versions\": [\"0.40.0\"], \"aliases\": [\"GHSA-f96h-pmfr-66vw\"], \"description\": \"### Summary Starlette treats `multipart/form-data` parts without a `filename` as text form fields and buffers those in byte strings with no size limit. This allows an attacker to upload arbitrary large form fields and cause Starlette to both slow down significantly due to excessive memory allocations and copy operations, and also consume more and more memory until the server starts swapping and grinds to a halt, or the OS terminates the server process with an OOM error. Uploading multiple such requests in parallel may be enough to render a service practically unusable, even if reasonable request size limits are enforced by a reverse proxy in front of Starlette.  ### PoC  ```python from starlette.applications import Starlette from starlette.routing import Route  async def poc(request):     async with request.form():         pass  app = Starlette(routes=[     Route('/', poc, methods=[\\\"POST\\\"]), ]) ```  ```sh curl http://localhost:8000 -F 'big= bool:         # check for SpooledTemporaryFile._rolled         rolled_to_disk = getattr(self.file, \\\"_rolled\\\", True)         return not rolled_to_disk      async def write(self, data: bytes) -> None:         if self.size is not None:             self.size += len(data)          if self._in_memory:             self.file.write(data)         else:             await run_in_threadpool(self.file.write, data) ```  I have already created a PR which fixes the problem: https://github.com/encode/starlette/pull/2962   ### PoC See the discussion [here](https://github.com/encode/starlette/discussions/2927#discussioncomment-13721403) for steps on how to reproduce.  ### Impact To be honest, very low and not many users will be impacted. Parsing large forms is already CPU intensive so the additional IO block doesn't slow down `starlette` that much on systems with modern HDDs/SSDs. If someone is running on tape they might see a greater impact.\"}]}, {\"name\": \"stevedore\", \"version\": \"5.8.0\", \"vulns\": []}, {\"name\": \"structlog\", \"version\": \"24.4.0\", \"vulns\": []}, {\"name\": \"tenacity\", \"version\": \"8.5.0\", \"vulns\": []}, {\"name\": \"tiktoken\", \"version\": \"0.7.0\", \"vulns\": []}, {\"name\": \"tomli\", \"version\": \"2.4.1\", \"vulns\": []}, {\"name\": \"tomli-w\", \"version\": \"1.2.0\", \"vulns\": []}, {\"name\": \"tomlkit\", \"version\": \"0.15.0\", \"vulns\": []}, {\"name\": \"tqdm\", \"version\": \"4.67.3\", \"vulns\": []}, {\"name\": \"truststore\", \"version\": \"0.10.4\", \"vulns\": []}, {\"name\": \"twilio\", \"version\": \"9.3.2\", \"vulns\": []}, {\"name\": \"typer\", \"version\": \"0.25.1\", \"vulns\": []}, {\"name\": \"typing-extensions\", \"version\": \"4.15.0\", \"vulns\": []}, {\"name\": \"typing-inspect\", \"version\": \"0.9.0\", \"vulns\": []}, {\"name\": \"typing-inspection\", \"version\": \"0.4.2\", \"vulns\": []}, {\"name\": \"uritemplate\", \"version\": \"4.2.0\", \"vulns\": []}, {\"name\": \"urllib3\", \"version\": \"2.7.0\", \"vulns\": []}, {\"name\": \"uuid-utils\", \"version\": \"0.15.0\", \"vulns\": []}, {\"name\": \"uvicorn\", \"version\": \"0.30.6\", \"vulns\": []}, {\"name\": \"uvloop\", \"version\": \"0.22.1\", \"vulns\": []}, {\"name\": \"watchfiles\", \"version\": \"1.1.1\", \"vulns\": []}, {\"name\": \"webrtcvad-wheels\", \"version\": \"2.0.14\", \"vulns\": []}, {\"name\": \"websockets\", \"version\": \"16.0\", \"vulns\": []}, {\"name\": \"wrapt\", \"version\": \"1.17.3\", \"vulns\": []}, {\"name\": \"xxhash\", \"version\": \"3.7.0\", \"vulns\": []}, {\"name\": \"yarl\", \"version\": \"1.23.0\", \"vulns\": []}, {\"name\": \"zstandard\", \"version\": \"0.25.0\", \"vulns\": []}], \"fixes\": []}\n\n\n# Security audit summary \u2014 branch: security/major-upgrades-finalize\n\nRun date: 2026-05-28\n\nOverview:\n\n- Bandit: 50 low-severity findings reported (no medium/high). See `logs/security/bandit.json` for details.\n- pip-audit: Found 5 known vulnerabilities across 3 packages. Notable packages:\n  - `orjson` \u2014 CVE-2025-67221 (upgrade to >= 3.11.6)\n  - `pytest` \u2014 CVE-2025-71176 (upgrade to >= 9.0.3)\n  - `starlette` \u2014 several advisories (see `logs/security/pip_audit.json`) with recommended fix versions.\n- safety: invocation failed due to CLI flag mismatch; see `logs/security/safety.json` for raw output.\n\nRecommendations / next steps:\n\n1. Prioritize fixing dependency CVEs: bump `orjson` and `starlette` (and evaluate `pytest` upgrade impact in CI).\n2. Triage Bandit low-severity findings and address obvious issues (input validation, use of assert, etc.).\n3. Fix `scripts/security_audit.sh` safety invocation (remove `--full-report` or use supported flags) so `safety` can produce JSON output.\n4. Add automated dependency upgrade PRs (dependabot or scripted pin bump) and run CI test matrix.\n\nRaw scan outputs attached as a private gist and in `logs/security/` in JSON format.\n", "url": "https://gist.github.com/lesnargitonga/ded68f9d3d270cc386fe7c2227970ebc"}, {"timestamp": "2026-06-17T10:03:47.830Z", "date_only": false, "value": "2026-06-17T10:03:47.830", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-71176", "record": "FKIE_CVE-2025-71176", "field": "lastModified"}, {"timestamp": "2026-07-07T16:03:19.758Z", "date_only": false, "value": "2026-07-07T16:03:19.758250Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-1845", "record": "PYSEC-2026-1845", "field": "published"}, {"timestamp": "2026-07-07T17:25:13.992Z", "date_only": false, "value": "2026-07-07T17:25:13.992520Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-1845", "record": "PYSEC-2026-1845", "field": "modified"}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": true, "value": "2026-07-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0901", "record": "CERTFR-2026-AVI-0901", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-07-13T00:00:00Z", "date_only": true, "value": "2026-07-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0901", "record": "CERTFR-2026-AVI-0901", "field": "vendor_advisories.6.published_at"}, {"timestamp": "2026-07-14T00:00:00Z", "date_only": true, "value": "2026-07-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0901", "record": "CERTFR-2026-AVI-0901", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-07-15T00:00:00Z", "date_only": true, "value": "2026-07-15", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0901", "record": "CERTFR-2026-AVI-0901", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2026-07-17T00:00:00Z", "date_only": false, "value": "2026-07-17T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0901", "record": "CERTFR-2026-AVI-0901", "field": "last_revision_date"}, {"timestamp": "2026-07-17T00:00:00Z", "date_only": false, "value": "2026-07-17T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0901", "record": "CERTFR-2026-AVI-0901", "field": "initial_release_date"}, {"timestamp": "2026-07-17T00:00:00Z", "date_only": false, "value": "2026-07-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0901", "record": "CERTFR-2026-AVI-0901", "field": "revisions.0.revision_date"}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-SY25028", "record": "CLEANSTART-2026-SY25028", "field": "published"}, {"timestamp": "2026-08-13T16:40:09Z", "date_only": false, "value": "2026-08-13T16:40:09Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-CLOUDFORMATION-CLI-CVE-2025-71176", "record": "BREW-CLOUDFORMATION-CLI-CVE-2025-71176", "field": "published"}, {"timestamp": "2026-08-13T17:03:02Z", "date_only": false, "value": "2026-08-13T17:03:02Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-LOCUST-CVE-2025-71176", "record": "BREW-LOCUST-CVE-2025-71176", "field": "published"}, {"timestamp": "2026-08-13T17:13:14Z", "date_only": false, "value": "2026-08-13T17:13:14Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-MCPM-CVE-2025-71176", "record": "BREW-MCPM-CVE-2025-71176", "field": "published"}, {"timestamp": "2026-08-13T17:29:47Z", "date_only": false, "value": "2026-08-13T17:29:47Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-PYTEST-CVE-2025-71176", "record": "BREW-PYTEST-CVE-2025-71176", "field": "published"}, {"timestamp": "2026-08-13T17:32:08Z", "date_only": false, "value": "2026-08-13T17:32:08Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-RAVEN-CVE-2025-71176", "record": "BREW-RAVEN-CVE-2025-71176", "field": "published"}, {"timestamp": "2026-08-13T17:34:18Z", "date_only": false, "value": "2026-08-13T17:34:18Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-SCHEMATHESIS-CVE-2025-71176", "record": "BREW-SCHEMATHESIS-CVE-2025-71176", "field": "published"}, {"timestamp": "2026-08-13T17:48:57Z", "date_only": false, "value": "2026-08-13T17:48:57Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-VUNNEL-CVE-2025-71176", "record": "BREW-VUNNEL-CVE-2025-71176", "field": "published"}, {"timestamp": "2026-09-16T18:58:06Z", "date_only": false, "value": "2026-09-16T18:58:06Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:21568-1", "record": "SUSE-SU-2026:21568-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T19:47:40Z", "date_only": false, "value": "2026-09-16T19:47:40Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:21568-1", "record": "SUSE-SU-2026:21568-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T19:47:40Z", "date_only": false, "value": "2026-09-16T19:47:40Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:21568-1", "record": "SUSE-SU-2026:21568-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-16T20:08:26Z", "date_only": false, "value": "2026-09-16T20:08:26Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10666-1", "record": "OPENSUSE-SU-2026:10666-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T20:34:32Z", "date_only": false, "value": "2026-09-16T20:34:32Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20692-1", "record": "OPENSUSE-SU-2026:20692-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T21:09:09Z", "date_only": false, "value": "2026-09-16T21:09:09Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10666-1", "record": "OPENSUSE-SU-2026:10666-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T21:37:25Z", "date_only": false, "value": "2026-09-16T21:37:25Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20692-1", "record": "OPENSUSE-SU-2026:20692-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-17T17:02:57Z", "date_only": false, "value": "2026-09-17T17:02:57Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10666-1", "record": "OPENSUSE-SU-2026:10666-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T17:02:57Z", "date_only": false, "value": "2026-09-17T17:02:57Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10666-1", "record": "OPENSUSE-SU-2026:10666-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-17T17:32:00Z", "date_only": false, "value": "2026-09-17T17:32:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20692-1", "record": "OPENSUSE-SU-2026:20692-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T17:32:00Z", "date_only": false, "value": "2026-09-17T17:32:00Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20692-1", "record": "OPENSUSE-SU-2026:20692-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-17T17:52:57Z", "date_only": false, "value": "2026-09-17T17:52:57Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-CLOUDFORMATION-CLI-CVE-2025-71176", "record": "BREW-CLOUDFORMATION-CLI-CVE-2025-71176", "field": "modified"}, {"timestamp": "2026-09-17T18:26:44Z", "date_only": false, "value": "2026-09-17T18:26:44Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-VUNNEL-CVE-2025-71176", "record": "BREW-VUNNEL-CVE-2025-71176", "field": "modified"}, {"timestamp": "2026-09-17T19:13:04Z", "date_only": false, "value": "2026-09-17T19:13:04Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-SCHEMATHESIS-CVE-2025-71176", "record": "BREW-SCHEMATHESIS-CVE-2025-71176", "field": "modified"}, {"timestamp": "2026-09-17T19:39:23Z", "date_only": false, "value": "2026-09-17T19:39:23Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-MCPM-CVE-2025-71176", "record": "BREW-MCPM-CVE-2025-71176", "field": "modified"}, {"timestamp": "2026-09-17T20:07:56Z", "date_only": false, "value": "2026-09-17T20:07:56Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-LOCUST-CVE-2025-71176", "record": "BREW-LOCUST-CVE-2025-71176", "field": "modified"}, {"timestamp": "2026-09-18T10:21:44.805Z", "date_only": false, "value": "2026-09-18T10:21:44.805656Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-IL46075", "record": "CLEANSTART-2026-IL46075", "field": "published"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-SY25028", "record": "CLEANSTART-2026-SY25028", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-SY25028", "record": "CLEANSTART-2026-SY25028", "field": "withdrawn"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": true, "value": "2026-09-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1256", "record": "CERTFR-2026-AVI-1256", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-28T00:00:00Z", "date_only": true, "value": "2026-09-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1256", "record": "CERTFR-2026-AVI-1256", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-09-30T00:00:00Z", "date_only": true, "value": "2026-09-30", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1256", "record": "CERTFR-2026-AVI-1256", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2026-10-02T00:00:00Z", "date_only": false, "value": "2026-10-02T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1256", "record": "CERTFR-2026-AVI-1256", "field": "last_revision_date"}, {"timestamp": "2026-10-02T00:00:00Z", "date_only": false, "value": "2026-10-02T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1256", "record": "CERTFR-2026-AVI-1256", "field": "initial_release_date"}, {"timestamp": "2026-10-02T00:00:00Z", "date_only": false, "value": "2026-10-02T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1256", "record": "CERTFR-2026-AVI-1256", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-05T18:32:18Z", "date_only": false, "value": "2026-10-05T18:32:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:8580", "record": "RHSA-2026:8580", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-05T18:32:18Z", "date_only": false, "value": "2026-10-05T18:32:18+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:8580", "record": "RHSA-2026:8580", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-05T18:32:18Z", "date_only": false, "value": "2026-10-05T18:32:18+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:8580", "record": "RHSA-2026:8580", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-07T23:03:25Z", "date_only": false, "value": "2026-10-07T23:03:25Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-RAVEN-CVE-2025-71176", "record": "BREW-RAVEN-CVE-2025-71176", "field": "modified"}, {"timestamp": "2026-10-08T00:37:49Z", "date_only": false, "value": "2026-10-08T00:37:49Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-PYTEST-CVE-2025-71176", "record": "BREW-PYTEST-CVE-2025-71176", "field": "modified"}, {"timestamp": "2026-10-08T19:46:40Z", "date_only": false, "value": "2026-10-08T19:46:40Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-IL46075", "record": "CLEANSTART-2026-IL46075", "field": "modified"}, {"timestamp": "2026-10-16T12:38:50Z", "date_only": false, "value": "2026-10-16T12:38:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/nicholas-ruest/8a85fc12b24c3e8da39a4732d4759c93", "record": "CVE-2025-71176", "field": "creation_timestamp", "uuid": "7e66ad19-97d5-4348-b41f-21b93c316843", "content": "# Enterprise Open-Source Radar \u2014 2026-10-16\n\n**Research status:** COMPLETE  \n**Evidence window:** 2026-09-16 through 2026-10-16  \n**Research cutoff:** 2026-10-16 12:45 UTC  \n**Mode:** read-only research and build handoff; no project source, branch, issue, PR, release, deployment, promotion, credential or repository state changed\n\n## Executive decision\n\nContinue the existing **ActTrace** system hypothesis. The strongest buildable composition remains **Meta LogAct + NVIDIA NeMo Relay + Ruflo + RuVector/RVF + MetaHarness + Dream Machine**, with **NVIDIA SkillEvaluator**, **OpenAI Codex Security** and **Microsoft PilotSwarm** as isolated comparators/sidecars. Today\u2019s source changes make the system more specific and testable rather than just refreshing pins:\n\n- **Meta LogAct** advanced on October 15 to [`43049bae`](https://github.com/facebookresearch/logact/commit/43049bae0d63f16c7b848f339f7a8085d3382427). It now propagates a typed `AgentBusAccessJustification` only through read RPCs, preserves whether the justification is a SEV or task, uses default options when none is supplied, and rejects justifications supplied to writes or unsupported backends. This is directly reusable as ActTrace\u2019s evidence-access boundary.\n- **NVIDIA SkillEvaluator** advanced on October 16 to [`a53af93d`](https://github.com/NVIDIA/SkillEvaluator/commit/a53af93d0059409679179a0d6bd2f594a351a32e). Its current unreleased line adds Kata Containers microVM execution for Tier 3, makes criterion verdicts authoritative over inconsistent model totals, corrects negative-case denominators, and removes execution credit from failed isolated skill reads/native Skill calls. ActTrace can now test evaluator-credit integrity instead of accepting a single aggregate score.\n- **NVIDIA NeMo Relay** advanced on October 16 to [`3f6561c4`](https://github.com/NVIDIA/NeMo-Relay/commit/3f6561c4fb32b0372d0b9b0e14ac191b61e2b95a). The material change [`895fc646`](https://github.com/NVIDIA/NeMo-Relay/commit/895fc646bc997c2ae92341bb4c062fc618dc07b2) makes Node stream provider, collector and finalizer errors reach callers, marks failed completions as errors and avoids process crashes/silent successes. The Rust workspace remains 0.11.0 and the native API remains the production integration boundary.\n- **OpenAI Codex Security** advanced to [`54860007`](https://github.com/openai/codex-security/commit/54860007cc2a8b3dc30083017359556161c459b6). Its TypeScript package remains 0.3.0/Apache-2.0; the October 16 head consolidates process contracts and removes obsolete ranking helpers. ActTrace should freeze the package/revision together and use source validation only, not upstream mutation functions.\n- **Microsoft PilotSwarm** remains at [`85741780`](https://github.com/microsoft/PilotSwarm/commit/857417805e32704f47a8a85cf5aea942395471c3), with release 0.8.3 at [`28e9cf39`](https://github.com/microsoft/PilotSwarm/commit/28e9cf39f86fa7c3901119452e9cd1d9fe1b1352). Its explicit stop/steer control events and outcomes remain the best durable-runtime comparator.\n\nThe Dream Machine handoff is `DM-RADAR-2026-10-16-ACTTRACE-EVIDENCE-INTEGRITY`. It preserves the established enterprise-grade floor: **29 substantive Rust crates, 25 decision-specific ADRs, 12 DDD documents, four baselines, six ablations, an enterprise README and two project-specific animated SVGs**.\n\n## Ruflo Plugin Execution Ledger\n\n| Ruflo/Ruvnet capability actually invoked | Contribution and limitation |\n|---|---|\n| `Ruflo Federation / federation_identity` | Verified gateway identity `31481fc4\u202693c6` and relay `wss://relay.ruv.io`; establishes the live provenance boundary independently of directory discovery. |\n| `Ruflo Federation / federation_sync` | Retrieved signed recent activity. All relay payloads were treated as untrusted discovery data. The newest MetaHarness results explicitly report tiny, adverse/noisy samples, so none is used as software or performance evidence. |\n| `Ruflo Federation / channel_list` | De-duplicated seven active/known channels. No current ActTrace ownership claim was found. |\n| `Ruflo Federation / seraphina_guidance` (`cognitum-auto`) | Orchestrated provenance shape and duplicate avoidance. It found zero live nodes and zero claims, plus a possibly orphaned historical claim, so no work was assigned. |\n| `Core Memory / task_start` | Queried the `dream-machine` namespace; returned no stored playbook or anti-pattern entries and marked the result unscreened. The explicit build standard is retained without inventing memory. |\n| Installed Ruflo CLI `/usr/bin/ruflo` | Verified installed `v3.47.1`; routed this task to `Optimizer` with 12.5% confidence under exploration. Retained only as orchestration telemetry. |\n| `RuOS / desktop_start`, `desktop_exec` | Woke the governed desktop, executed Ruflo, independently verified Gist authentication, de-duplicated dated reports and performed the authorized Gist workflow. |\n| GitHub plugin | Verified authenticated identity `nicholas-ruest` and inspected official repository commits, manifests, licenses, changelogs and source diffs. |\n\nDirect installed Ruflo/Ruvnet capabilities succeeded; `BLOCKED_PLUGIN_ACCESS` does not apply.\n\n## Current Ruvnet composition baseline\n\n| Component | Exact inspected pin | Reusable surface | License / maturity |\n|---|---|---|---|\n| [Ruflo](https://github.com/ruvnet/ruflo) | [`1882006a02487590c8c66a7eec8d7504f6af33c3`](https://github.com/ruvnet/ruflo/commit/1882006a02487590c8c66a7eec8d7504f6af33c3), 2026-10-14; repository 3.56.10; installed CLI 3.47.1 | MCP, federation, security, neural, RuVector and plugin contracts; CLI routing telemetry | MIT; active. Repository and installed versions are deliberately recorded separately. |\n| [RuVector/RVF](https://github.com/ruvnet/RuVector) | [`46d816ddc4c2a8a06cd3613534a79b1d557d858b`](https://github.com/ruvnet/RuVector/commit/46d816ddc4c2a8a06cd3613534a79b1d557d858b), 2026-10-14; N-API artifacts from [`2a257cdb`](https://github.com/ruvnet/RuVector/commit/2a257cdba714aa746123b196bfba04d56d4ff17a) | Root Rust workspace 2.3.0; RVF detached workspace; `rvf-runtime` 0.3.2, persistent stores, compaction, streaming I/O and optional signatures | MIT / RVF MIT OR Apache-2.0; active. ActTrace compiles the Rust/RVF source boundary. |\n| [MetaHarness](https://github.com/ruvnet/metaharness) | [`e0dfd44da72b7adfb7c57fdd42d124be58ed7086`](https://github.com/ruvnet/metaharness/commit/e0dfd44da72b7adfb7c57fdd42d124be58ed7086), 2026-10-09 | Five-crate Rust workspace (`kernel`, WASM, N-API, catalog, poker-darwin), host adapters and SessionLog evidence | MIT; active. Untrusted federation scores are not substituted for local benchmarks. |\n| [Dream Machine upstream](https://github.com/ruvnet/dream-machine) | [`b2abcc14a632d7e0948962065a7c6c8920cf306c`](https://github.com/ruvnet/dream-machine/commit/b2abcc14a632d7e0948962065a7c6c8920cf306c), 2026-10-12; 0.2.0-next.3 | Witness, ledger, compile, schedule, memory, CLI, edge contracts/simulation, evidence gates and freshness verification | MIT; active pre-release. |\n| [Target fork](https://github.com/nicholas-ruest/ruvnet-dream-machine) | [`3edd426f6c9c4b1e80235f7447dc863e749345cc`](https://github.com/nicholas-ruest/ruvnet-dream-machine/commit/3edd426f6c9c4b1e80235f7447dc863e749345cc), 2026-09-07 | Evidence read-set digest re-verification before promotion | MIT; materially behind upstream. No source change was made. |\n| [Core Memory build standard](https://github.com/nicholas-ruest/core-memory/blob/f57cc3deebe89f2ec0fa2369e05ddf76a56db965/docs/guidance/dream-machine-build-standard.md) | [`f57cc3deebe89f2ec0fa2369e05ddf76a56db965`](https://github.com/nicholas-ruest/core-memory/commit/f57cc3deebe89f2ec0fa2369e05ddf76a56db965), 2026-10-11 | Minimum 20 crates, roughly 25 ADRs, 12 DDD docs, real integrations, baselines/ablations, enterprise README and two animated SVGs | Governing build standard, not a decorative dependency. |\n\n## Ranked enterprise OSS candidates\n\nThe 20-point composition score covers Ruflo orchestration, RuVector/RVF evidence, MetaHarness evaluation and Dream Machine governance, each 0\u20135. Buildable means license, immutable revision, executable interface and maturity were verified from official sources.\n\n| Rank | Candidate and in-window material evidence | Pin / version / license | Score | Decision |\n|---:|---|---|---:|---|\n| **1** | **[Meta LogAct](https://github.com/facebookresearch/logact)** \u2014 37-crate Rust workspace for AgentBus and CommitService intention/vote/commit/abort governance. October 15 adds typed read-access justifications and rejects their use on writes/unsupported backends. | [`43049bae0d63f16c7b848f339f7a8085d3382427`](https://github.com/facebookresearch/logact/commit/43049bae0d63f16c7b848f339f7a8085d3382427); workspace crates 0.1.0; MIT | **20/20** | Primary action-governance and evidence-access dependency. |\n| **2** | **[NVIDIA NeMo Relay](https://github.com/NVIDIA/NeMo-Relay)** \u2014 Rust control/observability runtime with native, worker, Python, Node and FFI surfaces plus ATOF/ATIF and OTEL. October 16 makes Node stream failures explicit and non-crashing; October 15 added a real Rust quickstart. | [`3f6561c4fb32b0372d0b9b0e14ac191b61e2b95a`](https://github.com/NVIDIA/NeMo-Relay/commit/3f6561c4fb32b0372d0b9b0e14ac191b61e2b95a); material [`895fc646`](https://github.com/NVIDIA/NeMo-Relay/commit/895fc646bc997c2ae92341bb4c062fc618dc07b2); 0.11.0; Apache-2.0 | **20/20** | Primary trajectory/control dependency; native Rust for production, Node failure semantics in cross-language conformance. |\n| **3** | **[NVIDIA SkillEvaluator](https://github.com/NVIDIA/SkillEvaluator)** \u2014 deterministic validation, semantic overlap and paired live evaluation. October 16 adds Kata-isolated Tier 3, criterion-derived accuracy, correct negative denominators, dependency-target auditing and failed-read credit removal. | [`a53af93d0059409679179a0d6bd2f594a351a32e`](https://github.com/NVIDIA/SkillEvaluator/commit/a53af93d0059409679179a0d6bd2f594a351a32e); package 0.5.0 plus unreleased head; Apache-2.0; Python 3.12\u20133.13 | **20/20** | Strongest independent evaluation sidecar. Pin head separately from the 0.5.0 release label. |\n| **4** | **[Microsoft PilotSwarm](https://github.com/microsoft/PilotSwarm)** \u2014 durable Copilot SDK execution with crash recovery, timers, dehydration, workers, persistence and management HTTP/MCP. Version 0.8.3 adds stop/steer outcomes and workload identity. | release [`28e9cf39`](https://github.com/microsoft/PilotSwarm/commit/28e9cf39f86fa7c3901119452e9cd1d9fe1b1352); head [`85741780`](https://github.com/microsoft/PilotSwarm/commit/857417805e32704f47a8a85cf5aea942395471c3); 0.8.3; MIT; Node \u226524; experimental | **19/20** | External-only durable-runtime comparator, not a second production orchestrator. |\n| **5** | **[OpenAI Codex Security](https://github.com/openai/codex-security)** \u2014 TypeScript SDK/CLI, GitHub Action, Deep Scan and standalone validation. Version 0.3.0 exposes explicit source/scopes, budgets, health and structured findings; October 16 consolidates process contracts. | [`54860007cc2a8b3dc30083017359556161c459b6`](https://github.com/openai/codex-security/commit/54860007cc2a8b3dc30083017359556161c459b6); 0.3.0; Apache-2.0; Node 22/24/26 | **19/20** | Read-only adversarial-evidence sidecar; patch, PR and publication capabilities denied. |\n| **6** | **[Microsoft FocalRL](https://github.com/microsoft/FocalRL)** \u2014 October 9 release localizes consequential errors, restores pre-error state, samples short continuations and scores repairs. | [`bfdf5f9aee6aedb00a9c66d7217421373bb753c2`](https://github.com/microsoft/FocalRL/commit/bfdf5f9aee6aedb00a9c66d7217421373bb753c2); 0.1.0; Apache-2.0 | **16/20** | Later offline learning lane; GPU/Ray stack excludes the first vertical slice. |\n| **7** | **[OpenAI MCP Extensions](https://github.com/openai/mcp-extensions)** \u2014 0.2.0 Python/TypeScript SDKs for entrypoints, file handlers, mentions and elicitation forms. | [`0d606217705e0e71eb21fff009619b67b80611dc`](https://github.com/openai/mcp-extensions/commit/0d606217705e0e71eb21fff009619b67b80611dc); 0.2.0; Apache-2.0 | **15/20** | Operator-review interface only; never a decision authority. |\n| **8** | **[NVIDIA swe-serve](https://github.com/NVIDIA/swe-serve)** \u2014 software-engineering task serving/evaluation substrate; current pin updates a vendored verifier dependency for CVE-2025-71176. | [`84d8fd92739a4a76ceddba56e5a70605921c4ad2`](https://github.com/NVIDIA/swe-serve/commit/84d8fd92739a4a76ceddba56e5a70605921c4ad2); v1.0 line; Apache-2.0 | **15/20** | Optional frozen-corpus service; include only if it improves reproducibility over checked-in fixtures. |\n| **9** | **[AWS UAEF](https://github.com/awslabs/uaef)** \u2014 `AgentTrace`, 36 metrics, adapters and batch evaluation; September 21 adds EKS IMDS egress protection. | [`47a1048ef78fe7dfeef1bc9ff36cbf633443a9da`](https://github.com/awslabs/uaef/commit/47a1048ef78fe7dfeef1bc9ff36cbf633443a9da); 0.2.0; Apache-2.0 | **14/20** | External evaluation comparator; overlaps MetaHarness and adds provider coupling. |\n\n### Horizon signals and exclusions\n\n- **[NVIDIA Agent Package Specification](https://github.com/NVIDIA/agent-package-spec)** at [`69787257`](https://github.com/NVIDIA/agent-package-spec/commit/697872570744c8cfc1cf6b1d72e04db66e1a2c83) remains draft design evidence. The source is Apache-2.0 and documentation/assets are CC-BY-4.0, but its CLI is illustrative and the proposal is not an adopted standard.\n- **[Anthropic OSS Scanner](https://github.com/anthropics/oss-scanner)** advanced October 16 to [`0389ca3e`](https://github.com/anthropics/oss-scanner/commit/0389ca3ea0f44055c753069dc2a879d300ff9990). The open repository provides enrollment configuration and local checks, while the scanner is separately operated. It is a CI trust-boundary precedent, not an executable scanner dependency.\n- **Meta SWE-sweep** remains excluded because the inspected repository lacks a usable current license. Public source without a usable license is not an OSS ingredient.\n- **Meta Logbook** is executable but CC-BY-NC-4.0 and its long-audio domain make it unsuitable here.\n- **OpenAI math** contains Apache-2.0 Lean artifacts but is a proof corpus, not an agent-runtime component.\n- Microsoft AI Night Scientist lacked a verified root license at the inspected point. Google/DeepMind and IBM official repositories were checked for current candidates; no newly verified component displaced the ranked system ingredients. Closed APIs, model announcements and research papers without usable code were excluded.\n\n## Buildable integration matrix\n\n| Candidate / pinned revision | Capability reused | Concrete API / FFI / process / protocol boundary | Rust integration strategy | License / bounded context | End-to-end test and measurable hypothesis |\n|---|---|---|---|---|---|\n| LogAct `43049bae` | Typed intentions, votes, commit/abort, replayable bus and typed access justification | Native Cargo crates and generated gRPC CommitService; `AgentBusAccessJustification` only on read RPCs | Pin Git revision; wrap typed IDs/errors; propagate SEV/task justification into read receipts; reject write attachment | MIT. **Action Governance / Evidence Access:** `acttrace-logact`, `acttrace-commit-coordinator`, `acttrace-policy` | 120 scenarios \u00d7 10 seeds. No justification reaches append/write, all supported read justifications preserve kind/value, unsupported use fails closed, and combined lane reduces duplicate/conflicting execution \u226530% vs enterprise-only and \u226520% vs Ruvnet-only. |\n| NeMo Relay `3f6561c4` / 0.11.0 | ATOF/ATIF lifecycle, request interception, plugins, OTEL, status/endpoint provenance and explicit stream failures | Native Rust `nemo_relay::api::{llm,scope,tool}`; Node conformance fixture returns `AsyncIterable` and `AbortSignal`; worker process for untrusted plugins | Compile pin; translate IDs; retain raw/normalized digests; treat provider/collector/finalizer error as terminal error evidence, never process success | Apache-2.0 with NOTICE. **Trajectory Observation:** `acttrace-nemo-relay`, `acttrace-ingest` | Require \u226599.5% mandatory coverage, 100% paired agent/tool/LLM lifecycle records, exact status/endpoint fidelity, every injected stream failure surfaced once, zero process crashes and byte-identical RVF replay. |\n| SkillEvaluator `a53af93d` / 0.5.0+head | Tier 1 checks, semantic overlap, paired Tier 3 evaluation, criterion scoring and Kata isolation | Frozen Python 3.12 process with JSON/ATIF I/O; optional Harbor 0.24 Kata backend when KVM/runtime exists | Canonical request/result schema; independently recompute score from criterion verdicts; retain excluded criteria and failed-read flags; Tier 1 always offline | Apache-2.0. **Evaluation Integrity:** `acttrace-evaluator` | Zero failed isolated reads receive credit; 100% scores equal applicable passing criteria/applicable criteria; negative denominator correct; host/verifier match; missing Kata infrastructure makes isolation lane INCONCLUSIVE, not pass. |\n| PilotSwarm `28e9cf39` release / `85741780` head | Durable timers, recovery, stop/steer, session events and migration | Isolated Node 24 service over management HTTP plus MCP; upstream PostgreSQL/Blob | `reqwest` + MCP client, strict schemas/request IDs/deadlines/idempotency; release behavior and head regression tested separately | MIT. **Durable Runtime Comparator:** `acttrace-pilotswarm` | Every admitted stop/steer has one matching outcome and terminal state; 100% crash recovery; combined overhead \u226415% p95. |\n| Codex Security `54860007` / 0.3.0 | Source validation, Deep Scan, scope/budget/health receipts and structured findings | Pinned TypeScript SDK/CLI child process; directory + inline context input; JSON/SARIF output | Validate schemas and hashes; sandbox FS/network; deny patch/apply/PR/publish; pin package and commit | Apache-2.0. **Adversarial Evidence:** `acttrace-codex-security` | 40 seeded vulnerabilities/refactors: \u226595% identity retention, all scope/status/budget receipts preserved, zero credentials and zero mutation effects. |\n| FocalRL `bfdf5f9` | Error localization, restore, continuation sampling and repair rubric | Offline Python/Ray job over de-identified ATIF exports | Schema-locked Parquet/JSONL; validate returned artifacts; no online policy authority | Apache-2.0. **Learning Experiment:** `acttrace-focal-export` | Later frozen holdout: outcome-only vs FocalRL vs combined; accept only preregistered gain with CI excluding zero and no safety regression. |\n| MCP Extensions `0d60621` | Entry points, viewers, mentions and forms | TypeScript MCP App sidecar over 0.2 schemas; Rust exposes read-only resources | Generate Rust types; Node UI sidecar; no policy decisions | Apache-2.0. **Operator Review** | 1,000-action trace: each selection resolves to one RVF digest, malformed references fail closed, zero mutation tools. |\n| UAEF `47a1048` | `AgentTrace` ingestion and 36 metrics | Frozen Python GenericJSON process; cloud persistence disabled in CI | Validate JSON and retain outputs; no provider credentials in core | Apache-2.0. **Evaluation Comparator** | UAEF-only vs MetaHarness-only vs combined on identical digests; disagreements reported rather than averaged. |\n\n## Dream Machine Build Cycle handoff\n\n```yaml\ndream_cycle_input:\n  id: DM-RADAR-2026-10-16-ACTTRACE-EVIDENCE-INTEGRITY\n  target_repository: github.com/nicholas-ruest/ruvnet-dream-machine\n  status: RESEARCH_COMPLETE_IMPLEMENTATION_NOT_STARTED\n  mode: read-only-research-handoff\n  continuity_rule: continue_ActTrace_do_not_mint_a_new_utility_repo\n\n  structural_contract:\n    planned_meaningful_rust_crates: 29\n    required_adrs: 25\n    required_ddd_documents: 12\n    required_readme_animations: 2\n    small_cli_build_acceptable: false\n\n  pins:\n    target_fork: 3edd426f6c9c4b1e80235f7447dc863e749345cc\n    dream_machine_upstream: b2abcc14a632d7e0948962065a7c6c8920cf306c\n    core_memory_guidance: f57cc3deebe89f2ec0fa2369e05ddf76a56db965\n    ruflo_repository: 1882006a02487590c8c66a7eec8d7504f6af33c3\n    ruflo_installed_cli: 3.47.1\n    ruvector: 46d816ddc4c2a8a06cd3613534a79b1d557d858b\n    ruvector_napi_source: 2a257cdba714aa746123b196bfba04d56d4ff17a\n    rvf_runtime_version: 0.3.2\n    metaharness: e0dfd44da72b7adfb7c57fdd42d124be58ed7086\n    logact: 43049bae0d63f16c7b848f339f7a8085d3382427\n    nemo_relay: 3f6561c4fb32b0372d0b9b0e14ac191b61e2b95a\n    skill_evaluator: a53af93d0059409679179a0d6bd2f594a351a32e\n    pilotswarm_release: 28e9cf39f86fa7c3901119452e9cd1d9fe1b1352\n    pilotswarm_head_comparator: 857417805e32704f47a8a85cf5aea942395471c3\n    codex_security_sidecar: 54860007cc2a8b3dc30083017359556161c459b6\n    uaef_comparator: 47a1048ef78fe7dfeef1bc9ff36cbf633443a9da\n\n  hypothesis: >\n    On a frozen corpus of 120 conflicting, retried, reordered, crashed,\n    upstream-error, stream-error, stop/steer, access-justified and policy-denied\n    agent-action scenarios run with 10 deterministic seeds, the combined\n    ActTrace lane (Ruflo + LogAct + NeMo Relay + RuVector/RVF + MetaHarness +\n    Dream Machine) will reduce duplicate or conflicting executed actions by at\n    least 30% versus enterprise-only and 20% versus Ruvnet-only, preserve at\n    least 99.5% mandatory events, 100% paired lifecycle records and HTTP\n    status/endpoint provenance, attach typed access justification only to reads,\n    surface every provider/collector/finalizer failure exactly once without a\n    process crash, give zero credit to failed isolated skill reads, reproduce\n    byte-identical verdict inputs after RVF close/reopen, add no more than 15%\n    p95 adapter overhead excluding model time, and create zero unauthorized\n    source, credential, PR, publication or promotion effects. Accept measured\n    gains only when the 95% bootstrap confidence interval excludes zero.\n\n  baselines:\n    R0_RUVNET_ONLY: Ruflo + RuVector/RVF + MetaHarness + Dream witness\n    E1_ENTERPRISE_ONLY: LogAct + NeMo Relay with native stores and tests\n    E2_DURABLE_RUNTIME_ONLY: PilotSwarm 0.8.3 through HTTP_MCP\n    E3_EVALUATION_ONLY: SkillEvaluator + UAEF over identical frozen traces\n    C_COMBINED: R0 + LogAct + NeMo Relay\n    ABLATIONS: [minus_LogAct, minus_Relay, minus_RuVector, minus_MetaHarness,\n      minus_Dream_witness, flat_file_instead_of_RVF]\n\n  vertical_workflow:\n    - Ruflo routes a proposed action with explicit policy context\n    - LogAct permits typed SEV_or_task justification on reads only\n    - NeMo Relay records paired lifecycle, endpoint, status, tool and stream-error events\n    - LogAct commits an intention only after voter and policy agreement\n    - RuVector correlates intent, retry, semantic duplicate and prior outcome\n    - RVF appends digest-anchored raw and normalized evidence\n    - MetaHarness evaluates frozen baselines and ablations\n    - SkillEvaluator independently recomputes applicable-criterion scores\n    - Dream Machine re-verifies the evidence read set and emits ACCEPT_REJECT_INCONCLUSIVE\n\n  crates:\n    - acttrace-domain\n    - acttrace-contracts\n    - acttrace-identifiers\n    - acttrace-intent-model\n    - acttrace-policy\n    - acttrace-provenance\n    - acttrace-verdict\n    - acttrace-ingest\n    - acttrace-correlator\n    - acttrace-commit-coordinator\n    - acttrace-replay\n    - acttrace-baselines\n    - acttrace-evaluator\n    - acttrace-logact\n    - acttrace-nemo-relay\n    - acttrace-ruflo\n    - acttrace-ruvector\n    - acttrace-rvf\n    - acttrace-metaharness\n    - acttrace-dream-witness\n    - acttrace-codex-security\n    - acttrace-pilotswarm\n    - acttrace-config\n    - acttrace-observability\n    - acttrace-worker\n    - acttrace-service-api\n    - acttrace-cli\n    - acttrace-evidence-corpus\n    - acttrace-receipts\n\n  adrs:\n    count: 25\n    topics: [system_scope_and_non_authority, typed_action_identity,\n      typed_read_access_justification, logact_native_vs_grpc_boundary,\n      relay_native_api_and_event_normalization, raw_vs_normalized_evidence,\n      rvf_append_only_layout, ruvector_similarity_policy,\n      duplicate_action_semantics, conflict_resolution, retry_idempotency,\n      crash_recovery, stream_failure_integrity, stop_steer_control_integrity,\n      policy_fail_closed, evidence_read_set_freshness,\n      ruflo_routing_is_telemetry, metaharness_baseline_contract,\n      evaluator_credit_integrity, statistical_acceptance_rule,\n      pilotswarm_comparator_isolation, codex_security_read_only_sidecar,\n      pii_and_secret_redaction, schema_versioning, supply_chain_pinning]\n\n  ddd_documents:\n    count: 12\n    topics: [context_map, ubiquitous_language, action_governance,\n      evidence_access, trajectory_observation, evidence_memory, evaluation,\n      dream_governance, operator_review, aggregates_and_invariants,\n      domain_events, ownership_and_failure_boundaries]\n\n  acceptance_gates:\n    conflicting_action_reduction_vs_E1: \">=30% and 95% bootstrap CI excludes 0\"\n    conflicting_action_reduction_vs_R0: \">=20% and 95% bootstrap CI excludes 0\"\n    mandatory_event_coverage: \">=99.5%\"\n    paired_lifecycle_records: \"100% agent/tool/LLM start/end pairs\"\n    upstream_status_and_endpoint_fidelity: \"100%\"\n    access_justification: \"100% kind/value fidelity on reads; 0 write attachments; unsupported use fails closed\"\n    stream_failure_integrity: \"100% injected provider/collector/finalizer errors surfaced once; 0 crashes; 0 false success\"\n    evaluator_credit_integrity: \"0 failed isolated reads credited; 100% score recomputation matches applicable criteria\"\n    stop_steer_integrity: \"exactly one matching outcome and terminal state per admitted control\"\n    rvf_replay: \"10/10 byte-identical normalized verdict inputs after close/reopen\"\n    crash_recovery: \"100% admitted actions reach one terminal state after one worker crash\"\n    duplicate_execution: \"0 committed action IDs execute more than once\"\n    adapter_overhead: \"p95 <=15% excluding model and sandbox time\"\n    provenance: \"100% revision, config, artifact, event, access and decision digests round-trip\"\n    secret_handling: \"0 credentials or raw secrets serialized\"\n    authority: \"0 source, branch, PR, release, Gist, credential or promotion effects from runtime\"\n    structural: \"29 substantive crates, 25 ADRs, 12 DDD docs, README, 2 animated SVGs\"\n\n  verdict_rule:\n    ACCEPT: every measured gate passes on the frozen corpus\n    REJECT: any safety, authority, determinism, false-success or duplicate-execution gate fails\n    INCONCLUSIVE: missing sandbox, Kata runtime, provider, statistical or comparable evidence\n    evaluation_is_not_promotion: true\n```\n\n## Required implementation sequence\n\n1. Freeze the 120-scenario corpus, access-justification cases, failure injection, schemas, seeds, pins, licenses and null hypothesis before observing candidate results.\n2. Write the system specification, `docs/core-memory-guidance-map.md`, all 25 decision-specific ADRs and all 12 DDD documents. Each crate identifies its owning context and applicable decisions.\n3. Implement one real vertical slice: Ruflo \u2192 LogAct typed access/commit \u2192 NeMo Relay native API \u2192 RuVector/RVF \u2192 MetaHarness \u2192 SkillEvaluator score verification \u2192 Dream witness.\n4. Derive conformance fixtures from the official NeMo Rust quickstart and stream-error tests. Verify LogAct read-only justification propagation and denial on writes.\n5. Run PilotSwarm 0.8.3 stop/steer and crash-recovery comparators; preserve release and head results separately.\n6. Execute upstream conformance suites and failures. Known upstream failures remain separate and may not be relabelled or averaged away.\n7. Run locked Rust tests, formatting, strict Clippy, dependency/license/security checks, four baselines and six ablations; retain raw samples, criterion verdicts and evaluator disagreements.\n8. Produce an enterprise README with realistic input/output, architecture/workspace maps, integration table, benchmark/ablation results, limitations, licensed icons and two project-specific animated SVGs for the commit/access path and witnessed replay.\n9. Re-read source, docs, tests and raw evidence; run structural checks and Dream freshness verification. Promotion remains out of scope without a separate authorized workflow.\n\n## Dated report inventory\n\n| Original research date | Artifact status | Public publication status |\n|---|---|---|\n| 2026-10-02 | Complete report; recovered 2026-10-13 | [Public Gist](https://gist.github.com/nicholas-ruest/6d110df4738d2cae65bf4af7b6a1aeca) |\n| 2026-10-06 | Complete report; recovered 2026-10-13 | [Public Gist](https://gist.github.com/nicholas-ruest/c5d70ec1890327748b7f8fc9c0860f26) |\n| 2026-10-07 | Complete report; recovered 2026-10-13 | [Public Gist](https://gist.github.com/nicholas-ruest/906b40cb34abb624a6c2a31b22b75086) |\n| 2026-10-08 | Original run missing; reconstructed 2026-10-09 to original cutoff; recovered 2026-10-13 | [Public Gist](https://gist.github.com/nicholas-ruest/fede54777c330f9d954250b1c5ecd777) |\n| 2026-10-09 | Complete report; recovered 2026-10-13 | [Public Gist](https://gist.github.com/nicholas-ruest/9cf6785b3f5c540b34c00e58de17522e) |\n| 2026-10-12 | Complete report; recovered 2026-10-13 | [Public Gist](https://gist.github.com/nicholas-ruest/824a103a48a82f30d44bc74c79fbca46) |\n| 2026-10-13 | Complete; published and read back on research date | [Public Gist](https://gist.github.com/nicholas-ruest/47d7cf837cfcdfb7e5726eb8a6c9d867) |\n| 2026-10-14 | Complete; original blocker preserved; recovered 2026-10-15 | [Public Gist](https://gist.github.com/nicholas-ruest/4b2f874f797254139d0b903ffc262128) |\n| 2026-10-15 | Complete; published and read back on research date | [Public Gist](https://gist.github.com/nicholas-ruest/0945fdffe56d2e56907d43a24f1afc39) |\n| 2026-10-16 | This complete report | `{{TODAY_GIST_URL}}` |\n\nNo missing weekday report was inferred without preserved evidence. No report was expected on Saturday October 10 or Sunday October 11.\n\n## Publication receipt\n\n- Authenticated GitHub/Gist identity: `nicholas-ruest` (GitHub connector and `gh api user` agree)\n- Gist authorization: authenticated CLI includes `gist` scope\n- Deterministic filename: `enterprise-open-source-radar-2026-10-16.md`\n- Gist ID: `{{GIST_ID}}`\n- Verified public URL: `{{TODAY_GIST_URL}}`\n- Publication status: `{{PUBLICATION_STATUS}}`\n- Read-back owner: `{{READBACK_OWNER}}`\n- Read-back complete: `{{READBACK_COMPLETE}}`\n- Canonical pre-hash SHA-256 (calculated with this field's value set to `CONTENT_SHA256_PLACEHOLDER`): `{{CONTENT_SHA256}}`\n\n## Limitations\n\n- This is a research and implementation handoff, not a completed ActTrace build. No acceptance gate is claimed to pass.\n- Repository commits and manifests establish public source state, not production support, adoption or fitness.\n- SkillEvaluator\u2019s October 16 changes are on its unreleased head while the package manifest remains 0.5.0. Head and release behavior must be recorded separately.\n- Kata isolation requires Linux, KVM and a registered runtime. Absence of that environment makes the hardened-isolation comparison INCONCLUSIVE, not successful.\n- NeMo Relay\u2019s October 16 stream change is a breaking Node boundary. ActTrace\u2019s production path remains native Rust; Node is a conformance sidecar.\n- PilotSwarm is explicitly experimental. Codex Security, SkillEvaluator, FocalRL and UAEF remain pre-1.0/research-stage surfaces requiring independent reproduction.\n- Ruflo repository 3.56.10 differs from installed CLI 3.47.1. The CLI\u2019s 12.5%-confidence exploratory route is telemetry only.\n- Federation traffic is third-party and untrusted; no software or performance claim depends on it.\n- Public Gist publication is the only authorized external write in this run. ActTrace runtime authority remains zero for source, branches, PRs, releases, credentials, publication and promotion.\n", "url": "https://gist.github.com/nicholas-ruest/8a85fc12b24c3e8da39a4732d4759c93"}, {"timestamp": "2026-10-17T09:37:31Z", "date_only": false, "value": "2026-10-17T09:37:31Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-71176", "record": "UBUNTU-CVE-2025-71176", "field": "modified"}]}