{"schema":"vulnpedia.research/1","cve":"CVE-2026-111181","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/expressjs/body-parser/security/advisories/GHSA-27r3-jxmh-p828","tags":["WEB","vendor-reference"],"source":"mitre","sourceId":"openjs","modified":"2026-10-22T14:29:56.577Z","origins":[{"source":"mitre","sourceId":"openjs","modified":"2026-10-22T14:29:56.577Z","url":"https://github.com/expressjs/body-parser/security/advisories/GHSA-27r3-jxmh-p828"},{"source":"nvd","sourceId":"CVE-2026-111181","modified":"2026-10-22T19:17:35.797","url":"https://github.com/expressjs/body-parser/security/advisories/GHSA-27r3-jxmh-p828"},{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","url":"https://github.com/expressjs/body-parser/security/advisories/GHSA-27r3-jxmh-p828"},{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","modified":"2026-10-23T21:00:06.131613693Z","url":"https://github.com/expressjs/body-parser/security/advisories/GHSA-27r3-jxmh-p828"},{"source":"redhat","sourceId":"CVE-2026-111181","modified":"2026-10-23T01:11:40+00:00","url":"https://github.com/expressjs/body-parser/security/advisories/GHSA-27r3-jxmh-p828"}]},{"url":"https://cna.openjsf.org/security-advisories.html","tags":["WEB","vendor-reference"],"source":"mitre","sourceId":"openjs","modified":"2026-10-22T14:29:56.577Z","origins":[{"source":"mitre","sourceId":"openjs","modified":"2026-10-22T14:29:56.577Z","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"nvd","sourceId":"CVE-2026-111181","modified":"2026-10-22T19:17:35.797","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","modified":"2026-10-23T21:00:06.131613693Z","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"redhat","sourceId":"CVE-2026-111181","modified":"2026-10-23T01:11:40+00:00","url":"https://cna.openjsf.org/security-advisories.html"}]},{"url":"https://osv.dev/vulnerability/GHSA-27r3-jxmh-p828","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","modified":"2026-10-23T21:00:06.131613693Z","origins":[{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","url":"https://osv.dev/vulnerability/GHSA-27r3-jxmh-p828"},{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","modified":"2026-10-23T21:00:06.131613693Z","url":"https://osv.dev/vulnerability/GHSA-27r3-jxmh-p828"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111181","tags":["ADVISORY","vendor-reference"],"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","modified":"2026-10-23T21:00:06.131613693Z","origins":[{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111181"},{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","modified":"2026-10-23T21:00:06.131613693Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111181"},{"source":"redhat","sourceId":"CVE-2026-111181","modified":"2026-10-23T01:11:40+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111181"}]},{"url":"https://github.com/expressjs/body-parser/commit/1260c3845f54502a05a87594f09a334786bb34d7","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","modified":"2026-10-23T21:00:06.131613693Z","origins":[{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","url":"https://github.com/expressjs/body-parser/commit/1260c3845f54502a05a87594f09a334786bb34d7"},{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","modified":"2026-10-23T21:00:06.131613693Z","url":"https://github.com/expressjs/body-parser/commit/1260c3845f54502a05a87594f09a334786bb34d7"}]},{"url":"https://github.com/expressjs/body-parser/commit/f7075eae3a84c3473ab4bf0a777da28db208e916","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","modified":"2026-10-23T21:00:06.131613693Z","origins":[{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","url":"https://github.com/expressjs/body-parser/commit/f7075eae3a84c3473ab4bf0a777da28db208e916"},{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","modified":"2026-10-23T21:00:06.131613693Z","url":"https://github.com/expressjs/body-parser/commit/f7075eae3a84c3473ab4bf0a777da28db208e916"}]},{"url":"https://github.com/expressjs/body-parser","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","modified":"2026-10-23T21:00:06.131613693Z","origins":[{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","url":"https://github.com/expressjs/body-parser"},{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","modified":"2026-10-23T21:00:06.131613693Z","url":"https://github.com/expressjs/body-parser"}]},{"url":"https://github.com/expressjs/body-parser/releases/tag/1.20.9","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","modified":"2026-10-23T21:00:06.131613693Z","origins":[{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","url":"https://github.com/expressjs/body-parser/releases/tag/1.20.9"},{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","modified":"2026-10-23T21:00:06.131613693Z","url":"https://github.com/expressjs/body-parser/releases/tag/1.20.9"}]},{"url":"https://github.com/expressjs/body-parser/releases/tag/v2.4.0","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","modified":"2026-10-23T21:00:06.131613693Z","origins":[{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","url":"https://github.com/expressjs/body-parser/releases/tag/v2.4.0"},{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","modified":"2026-10-23T21:00:06.131613693Z","url":"https://github.com/expressjs/body-parser/releases/tag/v2.4.0"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111181.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-111181","modified":"2026-10-23T01:11:40+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-111181","modified":"2026-10-23T01:11:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111181.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-111181","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-111181","modified":"2026-10-23T01:11:40+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-111181","modified":"2026-10-23T01:11:40+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-111181"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2559049","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-111181","modified":"2026-10-23T01:11:40+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-111181","modified":"2026-10-23T01:11:40+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2559049"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-111181","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-111181","modified":"2026-10-23T01:11:40+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-111181","modified":"2026-10-23T01:11:40+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-111181"}]},{"source":"euvd","sourceId":"EUVD-2026-108189","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-108189","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-108189","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-108189"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","url":"https://osv.dev/vulnerability/GHSA-27r3-jxmh-p828","ecosystem":"npm","name":"body-parser","purl":"pkg:npm/body-parser","ranges":[{"type":"SEMVER","events":[{"introduced":"2.0.0"},{"fixed":"2.4.0"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-27r3-jxmh-p828/GHSA-27r3-jxmh-p828.json"},"modified":"2026-10-23T21:00:06.131613693Z","origins":[{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","modified":"2026-10-23T21:00:06.131613693Z","url":"https://osv.dev/vulnerability/GHSA-27r3-jxmh-p828"}]},{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","url":"https://osv.dev/vulnerability/GHSA-27r3-jxmh-p828","ecosystem":"npm","name":"body-parser","purl":"pkg:npm/body-parser","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.20.9"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-27r3-jxmh-p828/GHSA-27r3-jxmh-p828.json"},"modified":"2026-10-23T21:00:06.131613693Z","origins":[{"source":"ghsa","sourceId":"GHSA-27r3-jxmh-p828","modified":"2026-10-23T21:00:06.131613693Z","url":"https://osv.dev/vulnerability/GHSA-27r3-jxmh-p828"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-111181","modified":"2026-10-23T01:11:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111181.json","productId":"red_hat_hardened_images:grafana12.4.src","product":"grafana12.4.src as a component of Red Hat Hardened Images","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/grafana12.4@12.4.13-0.2.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-111181","modified":"2026-10-23T01:11:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111181.json"}]},{"source":"redhat","sourceId":"CVE-2026-111181","modified":"2026-10-23T01:11:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111181.json","productId":"red_hat_hardened_images:grafana13.1.src","product":"grafana13.1.src as a component of Red Hat Hardened Images","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/grafana13.1@13.1.8-0.3.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-111181","modified":"2026-10-23T01:11:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111181.json"}]},{"source":"redhat","sourceId":"CVE-2026-111181","modified":"2026-10-23T01:11:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111181.json","productId":"red_hat_hardened_images:grafana13.2.src","product":"grafana13.2.src as a component of Red Hat Hardened Images","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/grafana13.2@13.2.4-0.2.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-111181","modified":"2026-10-23T01:11:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111181.json"}]},{"source":"redhat","sourceId":"CVE-2026-111181","modified":"2026-10-23T01:11:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111181.json","productId":"red_hat_hardened_images:prometheus3.13.src","product":"prometheus3.13.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/prometheus3.13@3.13.4-0.2.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-111181","modified":"2026-10-23T01:11:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111181.json"}]}],"vendorCoverage":{"total":4,"shown":4,"omitted":0,"source":"redhat"}}