{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"netdata","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":[],"id":"tcs_01M5NVX8KMVW73CJDXYRJGWB3B","modified_at":"2026-09-26T08:47:42.344449621Z","published_at":"2026-09-22T17:17:26.247Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-83601","https://security-tracker.debian.org/tracker/CVE-2026-83601"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-83601","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-83601"}],"summary":"Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized DIMENSION SLOT value that str2ull_encoded passes to pluginsd_rrddim_put_to_slot in src"}