{"metadata": {"vulnerability": "CVE-2026-15157", "count": 207, "kinds": {"milestone": 50, "sighting": 5, "kev": 0, "other": 152}}, "data": [{"timestamp": "2026-07-08T20:03:17.332Z", "date_only": false, "value": "2026-07-08T20:03:17.332Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-15157", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-29T16:32:39.519Z", "date_only": false, "value": "2026-07-29T16:32:39.519000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-07-29T16:32:39.519Z", "date_only": false, "value": "2026-07-29T16:32:39.519000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-07-29T16:45:57.001Z", "date_only": false, "value": "2026-07-29T16:45:57.001000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-07-29T16:45:57.001Z", "date_only": false, "value": "2026-07-29T16:45:57.001000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-07-29T17:01:30.886Z", "date_only": false, "value": "2026-07-29T17:01:30.886442+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-07-29T17:01:30.886Z", "date_only": false, "value": "2026-07-29T17:01:30.886442+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-07-29T18:01:13.123Z", "date_only": false, "value": "2026-07-29T18:01:13.123707+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-07-29T18:01:13.123Z", "date_only": false, "value": "2026-07-29T18:01:13.123707+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-07-29T20:59:02.314Z", "date_only": false, "value": "2026-07-29T20:59:02.314000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-07-29T20:59:02.314Z", "date_only": false, "value": "2026-07-29T20:59:02.314000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-07-29T21:08:33.311Z", "date_only": false, "value": "2026-07-29T21:08:33.311000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-07-29T21:08:33.311Z", "date_only": false, "value": "2026-07-29T21:08:33.311000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-07-29T21:17:44.740Z", "date_only": false, "value": "2026-07-29T21:17:44.740Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-15157", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-29T21:17:44.740Z", "date_only": false, "value": "2026-07-29T21:17:44.740000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.2.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-29T21:17:44.740Z", "date_only": false, "value": "2026-07-29T21:17:44.740000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.2.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-29T21:17:44.740Z", "date_only": false, "value": "2026-07-29T21:17:44.740Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / openjs", "record": "CVE-2026-15157", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-29T21:20:54.112Z", "date_only": false, "value": "2026-07-29T21:20:54.112047Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mrsu5wdpic2c", "record": "CVE-2026-15157", "field": "creation_timestamp", "uuid": "d9a08af9-543c-4195-bccc-127855f50427", "content": "\ud83d\udea8 Medium-severity security fix in undici@6.28.0, 7.29.0, and 8.9.0 just released!\n\nPatches CVE-2026-15157: CRLF injection via a blob-like body type property\n\ngithub.com/nodejs/undic...", "url": "https://bsky.app/profile/ulisesgascon.com/post/3mrsu5wdpic2c"}, {"timestamp": "2026-07-29T22:00:55.488Z", "date_only": false, "value": "2026-07-29T22:00:55.488824+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-07-29T22:00:55.488Z", "date_only": false, "value": "2026-07-29T22:00:55.488824+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-07-29T22:00:58.386Z", "date_only": false, "value": "2026-07-29T22:00:58.386985+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.2.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-29T22:00:58.386Z", "date_only": false, "value": "2026-07-29T22:00:58.386985+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.2.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-29T22:01:01.514Z", "date_only": false, "value": "2026-07-29T22:01:01.514325+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-07-29T22:01:01.514Z", "date_only": false, "value": "2026-07-29T22:01:01.514325+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-07-29T22:07:21Z", "date_only": false, "value": "2026-07-29T22:07:21+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-29T22:07:21Z", "date_only": false, "value": "2026-07-29T22:07:21+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-29T22:07:21Z", "date_only": false, "value": "2026-07-29T22:07:21+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.2.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-29T22:16:00Z", "date_only": false, "value": "2026-07-29T22:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-15157", "record": "UBUNTU-CVE-2026-15157", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-29T22:16:52Z", "date_only": false, "value": "2026-07-29T22:16:52Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M8RV-5G2X-5CG5", "record": "GHSA-M8RV-5G2X-5CG5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-29T22:16:52.463Z", "date_only": false, "value": "2026-07-29T22:16:52.463", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15157", "record": "FKIE_CVE-2026-15157", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-30T03:14:48Z", "date_only": false, "value": "2026-07-30T03:14:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-30T03:14:48Z", "date_only": false, "value": "2026-07-30T03:14:48+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-30T03:14:48Z", "date_only": false, "value": "2026-07-30T03:14:48+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.2.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-30T06:02:49.942Z", "date_only": false, "value": "2026-07-30T06:02:49.942000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-07-30T06:02:49.942Z", "date_only": false, "value": "2026-07-30T06:02:49.942000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-07-30T06:02:50.074Z", "date_only": false, "value": "2026-07-30T06:02:50.074000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-07-30T06:02:50.074Z", "date_only": false, "value": "2026-07-30T06:02:50.074000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-07-30T06:02:50.095Z", "date_only": false, "value": "2026-07-30T06:02:50.095000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-07-30T06:02:50.095Z", "date_only": false, "value": "2026-07-30T06:02:50.095000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-07-30T06:02:50.099Z", "date_only": false, "value": "2026-07-30T06:02:50.099000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-07-30T06:02:50.099Z", "date_only": false, "value": "2026-07-30T06:02:50.099000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-07-30T07:02:23.280Z", "date_only": false, "value": "2026-07-30T07:02:23.280145+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-07-30T07:02:23.280Z", "date_only": false, "value": "2026-07-30T07:02:23.280145+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-07-30T07:05:01.799Z", "date_only": false, "value": "2026-07-30T07:05:01.799571+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-07-30T07:05:01.799Z", "date_only": false, "value": "2026-07-30T07:05:01.799571+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-07-30T07:06:56.246Z", "date_only": false, "value": "2026-07-30T07:06:56.246824+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-07-30T07:06:56.246Z", "date_only": false, "value": "2026-07-30T07:06:56.246824+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-07-30T07:07:33.628Z", "date_only": false, "value": "2026-07-30T07:07:33.628354+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-07-30T07:07:33.628Z", "date_only": false, "value": "2026-07-30T07:07:33.628354+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-07-30T14:20:35.188Z", "date_only": false, "value": "2026-07-30T14:20:35.188091Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-15157", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-30T14:20:35.188Z", "date_only": false, "value": "2026-07-30T14:20:35.188091Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15157", "record": "FKIE_CVE-2026-15157", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-30T15:18:02.970Z", "date_only": false, "value": "2026-07-30T15:18:02.970Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-15157", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-30T15:18:02.970Z", "date_only": false, "value": "2026-07-30T15:18:02.970Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-15157", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-31T00:18:49.050Z", "date_only": false, "value": "2026-07-31T00:18:49.050000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-07-31T00:18:49.050Z", "date_only": false, "value": "2026-07-31T00:18:49.050000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-07-31T01:00:57.616Z", "date_only": false, "value": "2026-07-31T01:00:57.616263+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-07-31T01:00:57.616Z", "date_only": false, "value": "2026-07-31T01:00:57.616263+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-08-03T19:33:53Z", "date_only": false, "value": "2026-08-03T19:33:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M8RV-5G2X-5CG5", "record": "GHSA-M8RV-5G2X-5CG5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-03T19:33:53Z", "date_only": false, "value": "2026-08-03T19:33:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M8RV-5G2X-5CG5", "record": "GHSA-M8RV-5G2X-5CG5", "field": "modified"}, {"timestamp": "2026-08-04T00:49:58.112Z", "date_only": false, "value": "2026-08-04T00:49:58.112000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-08-04T00:49:58.266Z", "date_only": false, "value": "2026-08-04T00:49:58.266000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2026-08-04T00:49:58.297Z", "date_only": false, "value": "2026-08-04T00:49:58.297000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-08-04T00:49:58.319Z", "date_only": false, "value": "2026-08-04T00:49:58.319000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-08-04T00:49:58.362Z", "date_only": false, "value": "2026-08-04T00:49:58.362000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-08-04T01:01:05.249Z", "date_only": false, "value": "2026-08-04T01:01:05.249056+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-08-04T01:01:08.018Z", "date_only": false, "value": "2026-08-04T01:01:08.018401+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-08-04T01:01:14.342Z", "date_only": false, "value": "2026-08-04T01:01:14.342521+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-08-04T01:01:17.162Z", "date_only": false, "value": "2026-08-04T01:01:17.162622+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-08-04T01:01:19.967Z", "date_only": false, "value": "2026-08-04T01:01:19.967417+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-08-04T11:32:23.896Z", "date_only": false, "value": "2026-08-04T11:32:23.896142Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/3e65ccff71476d14ba3166941f39bd3f", "record": "CVE-2026-15157", "field": "creation_timestamp", "uuid": "4d81b999-4d84-4c96-9b3e-109424774435", "content": "# CVE-2026-15157: CVE-2026-15157: CRLF Injection in undici HTTP/1.1 Dispatcher\n\n> **CVSS Score:** 4.2\n> **Published:** 2026-08-03\n> **Full Report:** https://cvereports.com/reports/CVE-2026-15157\n\n## Summary\nCVE-2026-15157 details an improper neutralization of CRLF sequences ('CRLF Injection') within undici, a widely used Node.js HTTP/1.1 client. The vulnerability is triggered when processing request bodies that exhibit a duck-typed blob-like interface. When an application accepts untrusted data and assigns it to the .type property of such an object without setting an explicit Content-Type on the request, undici appends the value directly to the outgoing headers array without validating it against control characters. This allows remote attackers to inject carriage return and line feed sequences, culminating in arbitrary header injection, HTTP response splitting, or HTTP request smuggling.\n\n## TL;DR\nA vulnerability in undici allows attackers to inject CRLF sequences via duck-typed blob bodies, leading to HTTP Request Smuggling and Header Injection.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-93\n- **Attack Vector**: Network\n- **CVSS v3.1**: 4.2 (Medium)\n- **EPSS Score**: 0.00142\n- **Impact**: Low Confidentiality, Low Integrity\n- **Exploit Status**: PoC Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- undici HTTP client\n- Node.js applications leveraging undici dispatcher\n- Ecosystem libraries constructing custom duck-typed Blobs\n- **undici**: < 6.28.0 (Fixed in: `6.28.0`)\n- **undici**: >= 7.0.0 < 7.29.0 (Fixed in: `7.29.0`)\n- **undici**: >= 8.0.0 < 8.9.0 (Fixed in: `8.9.0`)\n\n## Mitigation\n\n- Upgrade undici to non-vulnerable versions\n- Enforce explicit Content-Type validation on outgoing requests\n- Sanitize and strip CRLF characters from metadata assigned to duck-typed blobs\n\n**Remediation Steps:**\n1. Analyze the application dependency tree to locate vulnerable undici instances.\n2. Execute 'npm install undici@latest' or pin dependency versions to >=6.28.0, >=7.29.0, or >=8.9.0.\n3. Scan codebases for custom Blob objects containing dynamic properties assigned from user input.\n\n## References\n\n- [GitHub Security Advisory](https://github.com/nodejs/undici/security/advisories/GHSA-m8rv-5g2x-5cg5)\n- [OpenJS Foundation Security Advisories](https://cna.openjsf.org/security-advisories.html)\n- [NVD CVE-2026-15157 Record](https://nvd.nist.gov/vuln/detail/CVE-2026-15157)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-15157)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-15157) - Automated Vulnerability Intelligence*", "url": "https://gist.github.com/alon710/3e65ccff71476d14ba3166941f39bd3f"}, {"timestamp": "2026-08-04T12:00:59.048Z", "date_only": false, "value": "2026-08-04T12:00:59.048020Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msaxoacuzt27", "record": "CVE-2026-15157", "field": "creation_timestamp", "uuid": "cba699f2-5547-45e8-86f9-41f22e8d7e8f", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-15157 impacts undici in 2 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/644\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "url": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msaxoacuzt27"}, {"timestamp": "2026-08-04T15:41:50.450Z", "date_only": false, "value": "2026-08-04T15:41:50.450", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15157", "record": "FKIE_CVE-2026-15157", "field": "lastModified"}, {"timestamp": "2026-08-07T01:16:03Z", "date_only": false, "value": "2026-08-07T01:16:03.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-15157", "record": "MSRC_CVE-2026-15157", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-07T01:16:03Z", "date_only": false, "value": "2026-08-07T01:16:03.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-15157", "record": "MSRC_CVE-2026-15157", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-07T01:16:03Z", "date_only": false, "value": "2026-08-07T01:16:03.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-15157", "record": "MSRC_CVE-2026-15157", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-13T12:10:09Z", "date_only": false, "value": "2026-08-13T12:10:09Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-YP71540", "record": "CLEANSTART-2026-YP71540", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-14T12:25:42Z", "date_only": false, "value": "2026-08-14T12:25:42Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-JN38161", "record": "CLEANSTART-2026-JN38161", "field": "modified"}, {"timestamp": "2026-08-14T18:25:35Z", "date_only": false, "value": "2026-08-14T18:25:35.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-15157", "record": "MSRC_CVE-2026-15157", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-08-14T18:25:45Z", "date_only": false, "value": "2026-08-14T18:25:45.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-15157", "record": "MSRC_CVE-2026-15157", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-08-14T18:25:45Z", "date_only": false, "value": "2026-08-14T18:25:45.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-15157", "record": "MSRC_CVE-2026-15157", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-14T20:31:33.939Z", "date_only": false, "value": "2026-08-14T20:31:33.939Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-15157", "record": "MSRC_CVE-2026-15157", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-BG21634", "record": "CLEANSTART-2026-BG21634", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-BG95605", "record": "CLEANSTART-2026-BG95605", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-EJ32730", "record": "CLEANSTART-2026-EJ32730", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-FV05780", "record": "CLEANSTART-2026-FV05780", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-FY33113", "record": "CLEANSTART-2026-FY33113", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-GB68607", "record": "CLEANSTART-2026-GB68607", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-HY79895", "record": "CLEANSTART-2026-HY79895", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-IK31603", "record": "CLEANSTART-2026-IK31603", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-IP72198", "record": "CLEANSTART-2026-IP72198", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-JR64129", "record": "CLEANSTART-2026-JR64129", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-KA88301", "record": "CLEANSTART-2026-KA88301", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-KR64806", "record": "CLEANSTART-2026-KR64806", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-MV56150", "record": "CLEANSTART-2026-MV56150", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-MX18269", "record": "CLEANSTART-2026-MX18269", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-PY30601", "record": "CLEANSTART-2026-PY30601", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-QK36197", "record": "CLEANSTART-2026-QK36197", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-SS45370", "record": "CLEANSTART-2026-SS45370", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-TC75125", "record": "CLEANSTART-2026-TC75125", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-UH68998", "record": "CLEANSTART-2026-UH68998", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-UL18258", "record": "CLEANSTART-2026-UL18258", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-UX51846", "record": "CLEANSTART-2026-UX51846", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-UX73923", "record": "CLEANSTART-2026-UX73923", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-VA87392", "record": "CLEANSTART-2026-VA87392", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-VR52920", "record": "CLEANSTART-2026-VR52920", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-WJ12510", "record": "CLEANSTART-2026-WJ12510", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-YJ33499", "record": "CLEANSTART-2026-YJ33499", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-YJ84605", "record": "CLEANSTART-2026-YJ84605", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-YK54542", "record": "CLEANSTART-2026-YK54542", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:17:16Z", "date_only": false, "value": "2026-09-01T11:17:16Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-YR55628", "record": "CLEANSTART-2026-YR55628", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-08T00:57:16.959Z", "date_only": false, "value": "2026-09-08T00:57:16.959972Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-ID18571", "record": "CLEANSTART-2026-ID18571", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-15T01:23:42.987Z", "date_only": false, "value": "2026-09-15T01:23:42.987730Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-RA54974", "record": "CLEANSTART-2026-RA54974", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-17T15:59:50Z", "date_only": false, "value": "2026-09-17T15:59:50Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:4248-1", "record": "SUSE-SU-2026:4248-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-17T15:59:50Z", "date_only": false, "value": "2026-09-17T15:59:50Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:4248-1", "record": "SUSE-SU-2026:4248-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-17T15:59:50Z", "date_only": false, "value": "2026-09-17T15:59:50Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2026:4248-1", "record": "SUSE-SU-2026:4248-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-09-17T15:59:50Z", "date_only": false, "value": "2026-09-17T15:59:50Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:4248-1", "record": "SUSE-SU-2026:4248-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-18T09:16:52Z", "date_only": false, "value": "2026-09-18T09:16:52Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:4248-1", "record": "SUSE-SU-2026:4248-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-18T09:16:52Z", "date_only": false, "value": "2026-09-18T09:16:52Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:4248-1", "record": "SUSE-SU-2026:4248-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-18T09:45:48.940Z", "date_only": false, "value": "2026-09-18T09:45:48.940188Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-QY67277", "record": "CLEANSTART-2026-QY67277", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-BG21634", "record": "CLEANSTART-2026-BG21634", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-BG95605", "record": "CLEANSTART-2026-BG95605", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-EJ32730", "record": "CLEANSTART-2026-EJ32730", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-FV05780", "record": "CLEANSTART-2026-FV05780", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-FY33113", "record": "CLEANSTART-2026-FY33113", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-GB68607", "record": "CLEANSTART-2026-GB68607", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-HY79895", "record": "CLEANSTART-2026-HY79895", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-ID18571", "record": "CLEANSTART-2026-ID18571", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-IK31603", "record": "CLEANSTART-2026-IK31603", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-IP72198", "record": "CLEANSTART-2026-IP72198", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-JR64129", "record": "CLEANSTART-2026-JR64129", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-KA88301", "record": "CLEANSTART-2026-KA88301", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-KR64806", "record": "CLEANSTART-2026-KR64806", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-MV56150", "record": "CLEANSTART-2026-MV56150", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-MX18269", "record": "CLEANSTART-2026-MX18269", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-PY30601", "record": "CLEANSTART-2026-PY30601", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-QK36197", "record": "CLEANSTART-2026-QK36197", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-RA54974", "record": "CLEANSTART-2026-RA54974", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-SS45370", "record": "CLEANSTART-2026-SS45370", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-TC75125", "record": "CLEANSTART-2026-TC75125", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-UH68998", "record": "CLEANSTART-2026-UH68998", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-UL18258", "record": "CLEANSTART-2026-UL18258", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-UX51846", "record": "CLEANSTART-2026-UX51846", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-UX73923", "record": "CLEANSTART-2026-UX73923", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-VA87392", "record": "CLEANSTART-2026-VA87392", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-VR52920", "record": "CLEANSTART-2026-VR52920", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-WJ12510", "record": "CLEANSTART-2026-WJ12510", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-YJ33499", "record": "CLEANSTART-2026-YJ33499", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-YJ84605", "record": "CLEANSTART-2026-YJ84605", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-YK54542", "record": "CLEANSTART-2026-YK54542", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-YP71540", "record": "CLEANSTART-2026-YP71540", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-YR55628", "record": "CLEANSTART-2026-YR55628", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-BG21634", "record": "CLEANSTART-2026-BG21634", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-BG95605", "record": "CLEANSTART-2026-BG95605", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-EJ32730", "record": "CLEANSTART-2026-EJ32730", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-FV05780", "record": "CLEANSTART-2026-FV05780", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-FY33113", "record": "CLEANSTART-2026-FY33113", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-GB68607", "record": "CLEANSTART-2026-GB68607", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-HY79895", "record": "CLEANSTART-2026-HY79895", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-ID18571", "record": "CLEANSTART-2026-ID18571", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-IK31603", "record": "CLEANSTART-2026-IK31603", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-IP72198", "record": "CLEANSTART-2026-IP72198", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-JR64129", "record": "CLEANSTART-2026-JR64129", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-KA88301", "record": "CLEANSTART-2026-KA88301", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-KR64806", "record": "CLEANSTART-2026-KR64806", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-MV56150", "record": "CLEANSTART-2026-MV56150", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-MX18269", "record": "CLEANSTART-2026-MX18269", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-PY30601", "record": "CLEANSTART-2026-PY30601", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-QK36197", "record": "CLEANSTART-2026-QK36197", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-RA54974", "record": "CLEANSTART-2026-RA54974", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-SS45370", "record": "CLEANSTART-2026-SS45370", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-TC75125", "record": "CLEANSTART-2026-TC75125", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-UH68998", "record": "CLEANSTART-2026-UH68998", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-UL18258", "record": "CLEANSTART-2026-UL18258", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-UX51846", "record": "CLEANSTART-2026-UX51846", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-UX73923", "record": "CLEANSTART-2026-UX73923", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-VA87392", "record": "CLEANSTART-2026-VA87392", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-VR52920", "record": "CLEANSTART-2026-VR52920", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-WJ12510", "record": "CLEANSTART-2026-WJ12510", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-YJ33499", "record": "CLEANSTART-2026-YJ33499", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-YJ84605", "record": "CLEANSTART-2026-YJ84605", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-YK54542", "record": "CLEANSTART-2026-YK54542", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-YP71540", "record": "CLEANSTART-2026-YP71540", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-YR55628", "record": "CLEANSTART-2026-YR55628", "field": "withdrawn"}, {"timestamp": "2026-09-21T00:00:00Z", "date_only": true, "value": "2026-09-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-09-22T00:00:00Z", "date_only": true, "value": "2026-09-22", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": true, "value": "2026-09-23", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": true, "value": "2026-09-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "vendor_advisories.8.published_at"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "last_revision_date"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "revisions.0.revision_date"}, {"timestamp": "2026-09-29T00:39:59.133Z", "date_only": false, "value": "2026-09-29T00:39:59.133510Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-FK35606", "record": "CLEANSTART-2026-FK35606", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-07T14:22:45Z", "date_only": false, "value": "2026-10-07T14:22:45+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-07T14:22:45Z", "date_only": false, "value": "2026-10-07T14:22:45+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-08T00:44:58.504Z", "date_only": false, "value": "2026-10-08T00:44:58.504411Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-WC12371", "record": "CLEANSTART-2026-WC12371", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-08T15:57:29Z", "date_only": false, "value": "2026-10-08T15:57:29Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-FK35606", "record": "CLEANSTART-2026-FK35606", "field": "modified"}, {"timestamp": "2026-10-08T15:58:02Z", "date_only": false, "value": "2026-10-08T15:58:02Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-WC12371", "record": "CLEANSTART-2026-WC12371", "field": "modified"}, {"timestamp": "2026-10-09T04:52:43Z", "date_only": false, "value": "2026-10-09T04:52:43Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-QY67277", "record": "CLEANSTART-2026-QY67277", "field": "modified"}, {"timestamp": "2026-10-17T09:38:02Z", "date_only": false, "value": "2026-10-17T09:38:02Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-15157", "record": "UBUNTU-CVE-2026-15157", "field": "modified"}, {"timestamp": "2026-10-25T12:01:26.602Z", "date_only": false, "value": "2026-10-25T12:01:26.602858Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3myp5wkd2u72z", "record": "CVE-2026-15157", "field": "creation_timestamp", "uuid": "b0fdc0b3-008b-4370-b9c4-be5680fc266d", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-15157 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/644 #AWS #Lambda #Security #CVE #DevOps #SecOps", "url": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3myp5wkd2u72z"}, {"timestamp": "2026-10-29T12:01:44.323Z", "date_only": false, "value": "2026-10-29T12:01:44.323462Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3myz7sqrjto2e", "record": "CVE-2026-15157", "field": "creation_timestamp", "uuid": "0763c587-545f-432b-b878-3a4f9185c4f2", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-15157 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/644 #AWS #Lambda #Security #CVE #DevOps #SecOps", "url": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3myz7sqrjto2e"}, {"timestamp": "2026-10-29T21:30:30Z", "date_only": false, "value": "2026-10-29T21:30:30+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-29T21:30:30Z", "date_only": false, "value": "2026-10-29T21:30:30+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-29T21:30:30Z", "date_only": false, "value": "2026-10-29T21:30:30+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-29T21:30:30Z", "date_only": false, "value": "2026-10-29T21:30:30+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-29T21:30:30Z", "date_only": false, "value": "2026-10-29T21:30:30+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-29T21:30:30Z", "date_only": false, "value": "2026-10-29T21:30:30+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:48537", "record": "RHSA-2026:48537", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-30T15:44:57.690Z", "date_only": false, "value": "2026-10-30T15:44:57.690273Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-JN38161", "record": "CLEANSTART-2026-JN38161", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}], "metrics": {"as_of": "2026-10-31T12:45:28.147Z", "anchors": {"origin": {"timestamp": "2026-07-29T22:00:58.386Z", "date_only": false, "value": "2026-07-29T22:00:58.386985+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.2.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "discovery": {"timestamp": "2026-07-29T22:00:58.386Z", "date_only": false, "value": "2026-07-29T22:00:58.386985+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.2.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-07-29T21:17:44.740Z", "date_only": false, "value": "2026-07-29T21:17:44.740000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.2.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": {"timestamp": "2026-07-29T22:07:21Z", "date_only": false, "value": "2026-07-29T22:07:21+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.2.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 382.614, "hours": 0.10628166666666666, "days": 0.004428402777777778, "min_seconds": 382.614, "max_seconds": 382.614, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-29T22:00:58.386Z", "date_only": false, "value": "2026-07-29T22:00:58.386985+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.2.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-07-29T22:07:21Z", "date_only": false, "value": "2026-07-29T22:07:21+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.2.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "disclosure_to_patch": {"available": true, "seconds": 2976.26, "hours": 0.8267388888888889, "days": 0.03444745370370371, "min_seconds": 2976.26, "max_seconds": 2976.26, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-29T21:17:44.740Z", "date_only": false, "value": "2026-07-29T21:17:44.740000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.2.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-07-29T22:07:21Z", "date_only": false, "value": "2026-07-29T22:07:21+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.2.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 382.614, "hours": 0.10628166666666666, "days": 0.004428402777777778, "min_seconds": 382.614, "max_seconds": 382.614, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-29T22:00:58.386Z", "date_only": false, "value": "2026-07-29T22:00:58.386985+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.2.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-07-29T22:07:21Z", "date_only": false, "value": "2026-07-29T22:07:21+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:48273", "record": "RHSA-2026:48273", "field": "vulnerabilities.2.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}