{"metadata": {"vulnerability": "CVE-2021-41259", "count": 45, "kinds": {"milestone": 8, "sighting": 1, "kev": 0, "other": 36}}, "data": [{"timestamp": "2021-09-15T00:00:00Z", "date_only": false, "value": "2021-09-15T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-41259", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-11-12T18:15:00Z", "date_only": false, "value": "2021-11-12T18:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-41259", "record": "UBUNTU-CVE-2021-41259", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-11-12T18:15:00Z", "date_only": false, "value": "2021-11-12T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-41259", "record": "GSD-2021-41259", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-11-12T18:15:07.667Z", "date_only": false, "value": "2021-11-12T18:15:07.667", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-41259", "record": "FKIE_CVE-2021-41259", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-11-12T20:39:07Z", "date_only": false, "value": "2021-11-12T20:39:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/32322", "record": "CVE-2021-41259", "field": "creation_timestamp", "uuid": "c5d8e5b2-928d-4b30-aae1-ababb9a9e6e4", "content": "\u203c CVE-2021-41259 \u203c\n\nNim is a systems programming language with a focus on efficiency, expressiveness, and elegance. In affected versions the uri.parseUri function which may be used to validate URIs accepts null bytes in the input URI. This behavior could be used to bypass URI validation. For example: parseUri(\"http://localhost\\0hello\").hostname is set to \"localhost\\0hello\". Additionally, httpclient.getContent accepts null bytes in the input URL and ignores any data after the first null byte. Example: getContent(\"http://localhost\\0hello\") makes a request to localhost:80. An attacker can use a null bytes to bypass the check and mount a SSRF attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/32322"}, {"timestamp": "2021-11-16T00:00:00Z", "date_only": true, "value": "2021-11-16", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-17991", "record": "CNVD-2022-17991", "field": "submitTime"}, {"timestamp": "2021-11-17T15:45:00Z", "date_only": false, "value": "2021-11-17T15:45Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-41259", "record": "GSD-2021-41259", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-12-14T23:06:30Z", "date_only": false, "value": "2021-12-14T23:06:30Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1585-1", "record": "OPENSUSE-SU-2021:1585-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-12-14T23:06:30Z", "date_only": false, "value": "2021-12-14T23:06:30Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1585-1", "record": "OPENSUSE-SU-2021:1585-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-12-14T23:06:30Z", "date_only": false, "value": "2021-12-14T23:06:30Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1585-1", "record": "OPENSUSE-SU-2021:1585-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-12-14T23:06:30Z", "date_only": false, "value": "2021-12-14T23:06:30Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1585-1", "record": "OPENSUSE-SU-2021:1585-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-12-18T11:06:04Z", "date_only": false, "value": "2021-12-18T11:06:04Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1592-1", "record": "OPENSUSE-SU-2021:1592-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-12-18T11:06:04Z", "date_only": false, "value": "2021-12-18T11:06:04Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1592-1", "record": "OPENSUSE-SU-2021:1592-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-12-18T11:06:04Z", "date_only": false, "value": "2021-12-18T11:06:04Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1592-1", "record": "OPENSUSE-SU-2021:1592-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-12-18T11:06:04Z", "date_only": false, "value": "2021-12-18T11:06:04Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1592-1", "record": "OPENSUSE-SU-2021:1592-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-03-10T00:00:00Z", "date_only": true, "value": "2022-03-10", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-17991", "record": "CNVD-2022-17991", "field": "openTime"}, {"timestamp": "2022-08-24T02:33:29Z", "date_only": false, "value": "2022-08-24T02:33:29Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10095-1", "record": "OPENSUSE-SU-2022:10095-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-08-24T02:33:29Z", "date_only": false, "value": "2022-08-24T02:33:29Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10095-1", "record": "OPENSUSE-SU-2022:10095-1", "field": "document.tracking.generator.date"}, {"timestamp": "2022-08-24T02:33:29Z", "date_only": false, "value": "2022-08-24T02:33:29Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10095-1", "record": "OPENSUSE-SU-2022:10095-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-08-24T02:33:29Z", "date_only": false, "value": "2022-08-24T02:33:29Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10095-1", "record": "OPENSUSE-SU-2022:10095-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-08-27T12:33:24Z", "date_only": false, "value": "2022-08-27T12:33:24Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10101-1", "record": "OPENSUSE-SU-2022:10101-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-08-27T12:33:24Z", "date_only": false, "value": "2022-08-27T12:33:24Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10101-1", "record": "OPENSUSE-SU-2022:10101-1", "field": "document.tracking.generator.date"}, {"timestamp": "2022-08-27T12:33:24Z", "date_only": false, "value": "2022-08-27T12:33:24Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10101-1", "record": "OPENSUSE-SU-2022:10101-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-08-27T12:33:24Z", "date_only": false, "value": "2022-08-27T12:33:24Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10101-1", "record": "OPENSUSE-SU-2022:10101-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-04-07T00:00:00Z", "date_only": false, "value": "2023-04-07T00:00:00.000Z", "kind": "other", "label": "Rejected", "source": "cvelistv5", "record": "CVE-2021-41259", "field": "cveMetadata.dateRejected"}, {"timestamp": "2023-04-07T00:00:00Z", "date_only": false, "value": "2023-04-07T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-41259", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2023-04-07T00:00:00Z", "date_only": false, "value": "2023-04-07T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2021-41259", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-11-07T03:38:54.230Z", "date_only": false, "value": "2023-11-07T03:38:54.230", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-41259", "record": "FKIE_CVE-2021-41259", "field": "lastModified"}, {"timestamp": "2023-12-13T01:23:27.482Z", "date_only": false, "value": "2023-12-13T01:23:27.482404Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-41259", "record": "GSD-2021-41259", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12253-1", "record": "OPENSUSE-SU-2024:12253-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12253-1", "record": "OPENSUSE-SU-2024:12253-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12253-1", "record": "OPENSUSE-SU-2024:12253-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12253-1", "record": "OPENSUSE-SU-2024:12253-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-07-08T10:40:49Z", "date_only": false, "value": "2025-07-08T10:40:49Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-41259", "record": "UBUNTU-CVE-2021-41259", "field": "modified"}, {"timestamp": "2025-07-08T10:45:48Z", "date_only": false, "value": "2025-07-08T10:45:48Z", "kind": "other", "label": "Withdrawn", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-41259", "record": "UBUNTU-CVE-2021-41259", "field": "withdrawn"}, {"timestamp": "2026-09-20T19:31:17Z", "date_only": false, "value": "2026-09-20T19:31:17Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1585-1", "record": "OPENSUSE-SU-2021:1585-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:31:17Z", "date_only": false, "value": "2026-09-20T19:31:17Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1585-1", "record": "OPENSUSE-SU-2021:1585-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:31:22Z", "date_only": false, "value": "2026-09-20T19:31:22Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1592-1", "record": "OPENSUSE-SU-2021:1592-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:31:22Z", "date_only": false, "value": "2026-09-20T19:31:22Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1592-1", "record": "OPENSUSE-SU-2021:1592-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:42:13Z", "date_only": false, "value": "2026-09-20T19:42:13Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10095-1", "record": "OPENSUSE-SU-2022:10095-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:42:13Z", "date_only": false, "value": "2026-09-20T19:42:13Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10095-1", "record": "OPENSUSE-SU-2022:10095-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:42:19Z", "date_only": false, "value": "2026-09-20T19:42:19Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10101-1", "record": "OPENSUSE-SU-2022:10101-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:42:19Z", "date_only": false, "value": "2026-09-20T19:42:19Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10101-1", "record": "OPENSUSE-SU-2022:10101-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:34:51Z", "date_only": false, "value": "2026-09-20T20:34:51Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12253-1", "record": "OPENSUSE-SU-2024:12253-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:34:51Z", "date_only": false, "value": "2026-09-20T20:34:51Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12253-1", "record": "OPENSUSE-SU-2024:12253-1", "field": "document.tracking.current_release_date"}], "metrics": {"as_of": "2026-11-01T11:16:18.107Z", "anchors": {"origin": {"timestamp": "2021-11-12T18:15:00Z", "date_only": false, "value": "2021-11-12T18:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-41259", "record": "UBUNTU-CVE-2021-41259", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2021-11-12T18:15:00Z", "date_only": false, "value": "2021-11-12T18:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-41259", "record": "UBUNTU-CVE-2021-41259", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 156790878.107317, "hours": 43553.02169647694, "days": 1814.709237353206, "min_seconds": 156790878.107317, "max_seconds": 156790878.107317, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-11-12T18:15:00Z", "date_only": false, "value": "2021-11-12T18:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-41259", "record": "UBUNTU-CVE-2021-41259", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-01T11:16:18.107Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}