{"metadata": {"vulnerability": "CVE-2026-3949", "count": 49, "kinds": {"milestone": 9, "sighting": 1, "kev": 0, "other": 39}}, "data": [{"timestamp": "2026-03-11T00:00:00Z", "date_only": false, "value": "2026-03-11T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-3949", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-03-11T01:00:00Z", "date_only": false, "value": "2026-03-11T01:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-3949", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-03-11T11:59:39.639Z", "date_only": false, "value": "2026-03-11T11:59:39.639Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-3949", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-03-11T13:04:43Z", "date_only": false, "value": "2026-03-11T13:04:43.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-3949", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-03-11T18:32:09.358Z", "date_only": false, "value": "2026-03-11T18:32:09.358Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-3949", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-03-11T18:32:09.358Z", "date_only": false, "value": "2026-03-11T18:32:09.358Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2026-3949", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-11T19:16:00Z", "date_only": false, "value": "2026-03-11T19:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-3949", "record": "UBUNTU-CVE-2026-3949", "field": "published"}, {"timestamp": "2026-03-11T19:16:05Z", "date_only": false, "value": "2026-03-11T19:16:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2RVX-JPM5-G848", "record": "GHSA-2RVX-JPM5-G848", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-03-11T19:16:05.297Z", "date_only": false, "value": "2026-03-11T19:16:05.297", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-3949", "record": "FKIE_CVE-2026-3949", "field": "published"}, {"timestamp": "2026-03-11T19:37:14.390Z", "date_only": false, "value": "2026-03-11T19:37:14.390113Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-3949", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-03-11T19:37:14.390Z", "date_only": false, "value": "2026-03-11T19:37:14.390113Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-3949", "record": "FKIE_CVE-2026-3949", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-03-11T19:38:00.870Z", "date_only": false, "value": "2026-03-11T19:38:00.870Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-3949", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-03-11T19:38:00.870Z", "date_only": false, "value": "2026-03-11T19:38:00.870Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-3949", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-11T21:31:03Z", "date_only": false, "value": "2026-03-11T21:31:03Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2RVX-JPM5-G848", "record": "GHSA-2RVX-JPM5-G848", "field": "published"}, {"timestamp": "2026-03-11T21:31:03Z", "date_only": false, "value": "2026-03-11T21:31:03Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2RVX-JPM5-G848", "record": "GHSA-2RVX-JPM5-G848", "field": "modified"}, {"timestamp": "2026-03-19T05:25:34Z", "date_only": false, "value": "2026-03-19T05:25:34Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-3949", "record": "UBUNTU-CVE-2026-3949", "field": "modified"}, {"timestamp": "2026-03-29T00:00:00Z", "date_only": false, "value": "2026-03-29T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10460-1", "record": "OPENSUSE-SU-2026:10460-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-03-29T00:00:00Z", "date_only": false, "value": "2026-03-29T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10460-1", "record": "OPENSUSE-SU-2026:10460-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-03-29T00:00:00Z", "date_only": false, "value": "2026-03-29T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10460-1", "record": "OPENSUSE-SU-2026:10460-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-03-29T00:00:00Z", "date_only": false, "value": "2026-03-29T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10460-1", "record": "OPENSUSE-SU-2026:10460-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-04-02T17:29:38Z", "date_only": false, "value": "2026-04-02T17:29:38Z", "kind": "other", "label": "Withdrawn", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-3949", "record": "UBUNTU-CVE-2026-3949", "field": "withdrawn"}, {"timestamp": "2026-04-29T14:38:03Z", "date_only": false, "value": "2026-04-29T14:38:03Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:1660-1", "record": "SUSE-SU-2026:1660-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-04-29T14:38:03Z", "date_only": false, "value": "2026-04-29T14:38:03Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:1660-1", "record": "SUSE-SU-2026:1660-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-04-29T14:38:03Z", "date_only": false, "value": "2026-04-29T14:38:03Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:1660-1", "record": "SUSE-SU-2026:1660-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-29T14:38:03Z", "date_only": false, "value": "2026-04-29T14:38:03Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:1660-1", "record": "SUSE-SU-2026:1660-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-04-29T14:38:03Z", "date_only": false, "value": "2026-04-29T14:38:03Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:1660-1", "record": "SUSE-SU-2026:1660-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-17T08:36:56Z", "date_only": false, "value": "2026-06-17T08:36:56Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22153-1", "record": "SUSE-SU-2026:22153-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-17T08:36:56Z", "date_only": false, "value": "2026-06-17T08:36:56Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:22153-1", "record": "SUSE-SU-2026:22153-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-17T08:36:56Z", "date_only": false, "value": "2026-06-17T08:36:56Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:22153-1", "record": "SUSE-SU-2026:22153-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-17T08:36:56Z", "date_only": false, "value": "2026-06-17T08:36:56Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:22153-1", "record": "SUSE-SU-2026:22153-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-17T08:37:36Z", "date_only": false, "value": "2026-06-17T08:37:36Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20974-1", "record": "OPENSUSE-SU-2026:20974-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-17T08:37:36Z", "date_only": false, "value": "2026-06-17T08:37:36Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20974-1", "record": "OPENSUSE-SU-2026:20974-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-17T08:37:36Z", "date_only": false, "value": "2026-06-17T08:37:36Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20974-1", "record": "OPENSUSE-SU-2026:20974-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-17T08:37:36Z", "date_only": false, "value": "2026-06-17T08:37:36Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20974-1", "record": "OPENSUSE-SU-2026:20974-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-17T10:44:29.823Z", "date_only": false, "value": "2026-06-17T10:44:29.823", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-3949", "record": "FKIE_CVE-2026-3949", "field": "lastModified"}, {"timestamp": "2026-07-22T15:01:13.342Z", "date_only": false, "value": "2026-07-22T15:01:13.342521Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mralokicje22", "record": "CVE-2026-3949", "field": "creation_timestamp", "uuid": "b3be6148-1143-4e45-bf6d-8bfcac134cf2", "content": "\ud83d\udea8 EUVD-2026-46435\n\ud83d\udcca 6.8/10\n\ud83c\udfe2 strukturag\n\n\ud83d\udcdd libheif is a HEIF and AVIF file format decoder and encoder. The fix for CVE-2026-3949 (commit `b97c8b5`, PR #1712) introduced an integer overflow in th...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-46435\n\n#cybersecurity #infosec #cve #euvd", "url": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mralokicje22"}, {"timestamp": "2026-09-16T19:07:42Z", "date_only": false, "value": "2026-09-16T19:07:42Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22153-1", "record": "SUSE-SU-2026:22153-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T19:56:55Z", "date_only": false, "value": "2026-09-16T19:56:55Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22153-1", "record": "SUSE-SU-2026:22153-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-16T19:56:55Z", "date_only": false, "value": "2026-09-16T19:56:55Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:22153-1", "record": "SUSE-SU-2026:22153-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-16T20:04:39Z", "date_only": false, "value": "2026-09-16T20:04:39Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10460-1", "record": "OPENSUSE-SU-2026:10460-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T20:37:41Z", "date_only": false, "value": "2026-09-16T20:37:41Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20974-1", "record": "OPENSUSE-SU-2026:20974-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T21:06:02Z", "date_only": false, "value": "2026-09-16T21:06:02Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10460-1", "record": "OPENSUSE-SU-2026:10460-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T21:40:18Z", "date_only": false, "value": "2026-09-16T21:40:18Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20974-1", "record": "OPENSUSE-SU-2026:20974-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T16:59:28Z", "date_only": false, "value": "2026-09-17T16:59:28Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10460-1", "record": "OPENSUSE-SU-2026:10460-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T17:35:04Z", "date_only": false, "value": "2026-09-17T17:35:04Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20974-1", "record": "OPENSUSE-SU-2026:20974-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-09-30T11:17:18Z", "date_only": false, "value": "2026-09-30T11:17:18Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10460-1", "record": "OPENSUSE-SU-2026:10460-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-09-30T11:17:18Z", "date_only": false, "value": "2026-09-30T11:17:18Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10460-1", "record": "OPENSUSE-SU-2026:10460-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-30T11:19:09Z", "date_only": false, "value": "2026-09-30T11:19:09Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20974-1", "record": "OPENSUSE-SU-2026:20974-1", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-09-30T11:19:09Z", "date_only": false, "value": "2026-09-30T11:19:09Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20974-1", "record": "OPENSUSE-SU-2026:20974-1", "field": "document.tracking.current_release_date"}]}