{"metadata": {"vulnerability": "CVE-2026-14620", "count": 23, "kinds": {"milestone": 10, "sighting": 2, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-07-03T16:50:55.559Z", "date_only": false, "value": "2026-07-03T16:50:55.559Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-14620", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-03T17:00:00.679Z", "date_only": false, "value": "2026-07-03T17:00:00.679Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-14620", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-07-03T17:00:00.679Z", "date_only": false, "value": "2026-07-03T17:00:00.679Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / openjs", "record": "CVE-2026-14620", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-03T17:04:38.246Z", "date_only": false, "value": "2026-07-03T17:04:38.246814Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mpqzpoxq4c2i", "record": "CVE-2026-14620", "field": "creation_timestamp", "uuid": "b9ded459-82d4-4233-9d9a-bf83c7e44839", "content": "\ud83d\udea8 Medium-severity security fix in webpack-dev-server@5.2.6 just released!\n\nPatches CVE-2026-14620: webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints\n\ngithub.com/webpack/webp...", "url": "https://bsky.app/profile/ulisesgascon.com/post/3mpqzpoxq4c2i"}, {"timestamp": "2026-07-03T17:16:53Z", "date_only": false, "value": "2026-07-03T17:16:53Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F5VJ-F2HX-8M93", "record": "GHSA-F5VJ-F2HX-8M93", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-03T17:16:53.620Z", "date_only": false, "value": "2026-07-03T17:16:53.620", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14620", "record": "FKIE_CVE-2026-14620", "field": "published"}, {"timestamp": "2026-07-03T22:00:41.314Z", "date_only": false, "value": "2026-07-03T22:00:41.314149Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mprkb56qhi2z", "record": "CVE-2026-14620", "field": "creation_timestamp", "uuid": "6f4843c4-ca89-45ab-991d-60871672f317", "content": "CVE-2026-14620 - webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints\nCVE ID : CVE-2026-14620\n \n Published : July 3, 2026, 5 p.m. | 4\u00a0hours, 47\u00a0minutes ago\n \n Description : webpack-dev-server versions 5.2.5 and earlier expose two interna...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mprkb56qhi2z"}, {"timestamp": "2026-07-06T15:54:37.670Z", "date_only": false, "value": "2026-07-06T15:54:37.670158Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-14620", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-06T15:54:37.670Z", "date_only": false, "value": "2026-07-06T15:54:37.670158Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14620", "record": "FKIE_CVE-2026-14620", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-06T15:54:51.519Z", "date_only": false, "value": "2026-07-06T15:54:51.519Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-14620", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-06T15:54:51.519Z", "date_only": false, "value": "2026-07-06T15:54:51.519Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-14620", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-07T15:12:43.947Z", "date_only": false, "value": "2026-07-07T15:12:43.947", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14620", "record": "FKIE_CVE-2026-14620", "field": "lastModified"}, {"timestamp": "2026-07-20T22:01:56Z", "date_only": false, "value": "2026-07-20T22:01:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F5VJ-F2HX-8M93", "record": "GHSA-F5VJ-F2HX-8M93", "field": "published"}, {"timestamp": "2026-07-20T22:01:56Z", "date_only": false, "value": "2026-07-20T22:01:56Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F5VJ-F2HX-8M93", "record": "GHSA-F5VJ-F2HX-8M93", "field": "modified"}, {"timestamp": "2026-09-18T09:35:36.059Z", "date_only": false, "value": "2026-09-18T09:35:36.059206Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-KY31390", "record": "CLEANSTART-2026-KY31390", "field": "published"}, {"timestamp": "2026-09-21T00:00:00Z", "date_only": true, "value": "2026-09-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-09-22T00:00:00Z", "date_only": true, "value": "2026-09-22", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": true, "value": "2026-09-23", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": true, "value": "2026-09-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "vendor_advisories.8.published_at"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "last_revision_date"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "initial_release_date"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-09T03:29:22Z", "date_only": false, "value": "2026-10-09T03:29:22Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-KY31390", "record": "CLEANSTART-2026-KY31390", "field": "modified"}]}