{"metadata": {"vulnerability": "CVE-2026-109349", "count": 59, "kinds": {"milestone": 10, "sighting": 1, "kev": 0, "other": 48}}, "data": [{"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-109349", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-12T14:19:45.860Z", "date_only": false, "value": "2026-10-12T14:19:45.860Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-109349", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T16:05:32.535Z", "date_only": false, "value": "2026-10-12T16:05:32.535Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-109349", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T16:05:32.535Z", "date_only": false, "value": "2026-10-12T16:05:32.535000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:83849", "record": "RHSA-2026:83849", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-12T16:05:32.535Z", "date_only": false, "value": "2026-10-12T16:05:32.535000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:83879", "record": "RHSA-2026:83879", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-12T16:05:32.535Z", "date_only": false, "value": "2026-10-12T16:05:32.535Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-109349", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T16:05:33.204Z", "date_only": false, "value": "2026-10-12T16:05:33.204000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:83849", "record": "RHSA-2026:83849", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-12T16:05:33.204Z", "date_only": false, "value": "2026-10-12T16:05:33.204000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:83879", "record": "RHSA-2026:83879", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-12T16:05:33.808Z", "date_only": false, "value": "2026-10-12T16:05:33.808000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:83849", "record": "RHSA-2026:83849", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-12T16:05:33.808Z", "date_only": false, "value": "2026-10-12T16:05:33.808000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:83879", "record": "RHSA-2026:83879", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-12T16:44:53.150Z", "date_only": false, "value": "2026-10-12T16:44:53.150129+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:83849", "record": "RHSA-2026:83849", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-12T16:44:53.150Z", "date_only": false, "value": "2026-10-12T16:44:53.150129+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:83879", "record": "RHSA-2026:83879", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-12T16:50:39.967Z", "date_only": false, "value": "2026-10-12T16:50:39.967138+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:83849", "record": "RHSA-2026:83849", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-12T16:50:39.967Z", "date_only": false, "value": "2026-10-12T16:50:39.967138+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:83879", "record": "RHSA-2026:83879", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-12T16:54:51.196Z", "date_only": false, "value": "2026-10-12T16:54:51.196441+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:83849", "record": "RHSA-2026:83849", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-12T16:54:51.196Z", "date_only": false, "value": "2026-10-12T16:54:51.196441+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:83879", "record": "RHSA-2026:83879", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-12T17:17:00Z", "date_only": false, "value": "2026-10-12T17:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-109349", "record": "UBUNTU-CVE-2026-109349", "field": "published"}, {"timestamp": "2026-10-12T17:17:00Z", "date_only": false, "value": "2026-10-12T17:17:00Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-109349", "record": "UBUNTU-CVE-2026-109349", "field": "modified"}, {"timestamp": "2026-10-12T17:17:31Z", "date_only": false, "value": "2026-10-12T17:17:31Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WMW6-CP8F-C6Q8", "record": "GHSA-WMW6-CP8F-C6Q8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-12T17:17:31.823Z", "date_only": false, "value": "2026-10-12T17:17:31.823", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109349", "record": "FKIE_CVE-2026-109349", "field": "published"}, {"timestamp": "2026-10-12T17:42:10.070Z", "date_only": false, "value": "2026-10-12T17:42:10.070411Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117429169660842367", "record": "CVE-2026-109349", "field": "creation_timestamp", "uuid": "c9da6f2b-5186-4ba0-98fb-8f4c728ee9ab", "content": "CVE-2026-109349 gix-pack before 0.75.0 Reachable Assertion DoS via Pack Version 3 Header gitoxide gix-pack before 0.75.0 contains a reachable assertion in BytesToEntriesIter::new_from_header: the pack header decoder accepts version 3, but a release-enabled assert_eq! requires version 2. A malicious remote can send a 12-byte pack header declaring version 3 to panic the client and abort the clone or fetch.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109349https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-633h-mqjc-8rwghttps://www.vulncheck.com/advisories/gix-pack-before-0.75.0-reachable-assertion-dos-via-pack-version-3-header#GitoxideLabs #gix-pack#CVE_2026_109349#bot", "url": "https://infosec.exchange/users/cve/statuses/117429169660842367"}, {"timestamp": "2026-10-12T18:31:52Z", "date_only": false, "value": "2026-10-12T18:31:52Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WMW6-CP8F-C6Q8", "record": "GHSA-WMW6-CP8F-C6Q8", "field": "published"}, {"timestamp": "2026-10-12T18:31:52Z", "date_only": false, "value": "2026-10-12T18:31:52Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WMW6-CP8F-C6Q8", "record": "GHSA-WMW6-CP8F-C6Q8", "field": "modified"}, {"timestamp": "2026-10-13T16:22:09.256Z", "date_only": false, "value": "2026-10-13T16:22:09.256469Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109349", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T16:22:09.256Z", "date_only": false, "value": "2026-10-13T16:22:09.256469Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109349", "record": "FKIE_CVE-2026-109349", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T16:53:40.906Z", "date_only": false, "value": "2026-10-13T16:53:40.906Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-109349", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T16:53:40.906Z", "date_only": false, "value": "2026-10-13T16:53:40.906Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109349", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12141-1", "record": "OPENSUSE-SU-2026:12141-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12144-1", "record": "OPENSUSE-SU-2026:12144-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12141-1", "record": "OPENSUSE-SU-2026:12141-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12144-1", "record": "OPENSUSE-SU-2026:12144-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12141-1", "record": "OPENSUSE-SU-2026:12141-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12144-1", "record": "OPENSUSE-SU-2026:12144-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12141-1", "record": "OPENSUSE-SU-2026:12141-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12144-1", "record": "OPENSUSE-SU-2026:12144-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-15T01:13:23Z", "date_only": false, "value": "2026-10-15T01:13:23.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-109349", "record": "MSRC_CVE-2026-109349", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-15T01:13:23Z", "date_only": false, "value": "2026-10-15T01:13:23.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-109349", "record": "MSRC_CVE-2026-109349", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-15T01:13:23Z", "date_only": false, "value": "2026-10-15T01:13:23.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-109349", "record": "MSRC_CVE-2026-109349", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-15T01:13:23Z", "date_only": false, "value": "2026-10-15T01:13:23.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-109349", "record": "MSRC_CVE-2026-109349", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-15T07:01:21.004Z", "date_only": false, "value": "2026-10-15T07:01:21.004Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-109349", "record": "MSRC_CVE-2026-109349", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-16T09:51:35Z", "date_only": false, "value": "2026-10-16T09:51:35Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12141-1", "record": "OPENSUSE-SU-2026:12141-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-16T09:51:35Z", "date_only": false, "value": "2026-10-16T09:51:35Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12141-1", "record": "OPENSUSE-SU-2026:12141-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T09:51:38Z", "date_only": false, "value": "2026-10-16T09:51:38Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12144-1", "record": "OPENSUSE-SU-2026:12144-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-16T09:51:38Z", "date_only": false, "value": "2026-10-16T09:51:38Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12144-1", "record": "OPENSUSE-SU-2026:12144-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T17:27:24.847Z", "date_only": false, "value": "2026-10-16T17:27:24.847", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109349", "record": "FKIE_CVE-2026-109349", "field": "lastModified"}, {"timestamp": "2026-10-16T21:08:52Z", "date_only": false, "value": "2026-10-16T21:08:52+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:83849", "record": "RHSA-2026:83849", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-16T21:08:52Z", "date_only": false, "value": "2026-10-16T21:08:52+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:83849", "record": "RHSA-2026:83849", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-16T21:08:52Z", "date_only": false, "value": "2026-10-16T21:08:52+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:83849", "record": "RHSA-2026:83849", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-16T21:11:58Z", "date_only": false, "value": "2026-10-16T21:11:58+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:83849", "record": "RHSA-2026:83849", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-17T02:03:28Z", "date_only": false, "value": "2026-10-17T02:03:28+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:83879", "record": "RHSA-2026:83879", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-17T02:03:28Z", "date_only": false, "value": "2026-10-17T02:03:28+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:83879", "record": "RHSA-2026:83879", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-17T02:03:28Z", "date_only": false, "value": "2026-10-17T02:03:28+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:83879", "record": "RHSA-2026:83879", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-19T20:57:15Z", "date_only": false, "value": "2026-10-19T20:57:15+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:83879", "record": "RHSA-2026:83879", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-20T06:57:23Z", "date_only": false, "value": "2026-10-20T06:57:23+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:83879", "record": "RHSA-2026:83879", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-20T06:57:23Z", "date_only": false, "value": "2026-10-20T06:57:23+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:83879", "record": "RHSA-2026:83879", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-20T06:57:23Z", "date_only": false, "value": "2026-10-20T06:57:23+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:83879", "record": "RHSA-2026:83879", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-20T06:57:54Z", "date_only": false, "value": "2026-10-20T06:57:54+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:83849", "record": "RHSA-2026:83849", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-20T06:57:54Z", "date_only": false, "value": "2026-10-20T06:57:54+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:83849", "record": "RHSA-2026:83849", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-20T06:57:54Z", "date_only": false, "value": "2026-10-20T06:57:54+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:83849", "record": "RHSA-2026:83849", "field": "document.tracking.current_release_date"}]}