{"metadata": {"vulnerability": "CVE-2026-59944", "count": 51, "kinds": {"milestone": 10, "sighting": 4, "kev": 0, "other": 37}}, "data": [{"timestamp": "2026-07-07T18:49:15.607Z", "date_only": false, "value": "2026-07-07T18:49:15.607Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-59944", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-28T00:00:00Z", "date_only": false, "value": "2026-08-28T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11633-1", "record": "OPENSUSE-SU-2026:11633-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-08-28T00:00:00Z", "date_only": false, "value": "2026-08-28T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11633-1", "record": "OPENSUSE-SU-2026:11633-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-08-28T00:00:00Z", "date_only": false, "value": "2026-08-28T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11633-1", "record": "OPENSUSE-SU-2026:11633-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2026-08-28T00:00:00Z", "date_only": false, "value": "2026-08-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11633-1", "record": "OPENSUSE-SU-2026:11633-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-31T08:30:30.252Z", "date_only": false, "value": "2026-08-31T08:30:30.252320Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mueiipkaee27", "record": "CVE-2026-59944", "field": "creation_timestamp", "uuid": "3edde02a-0771-4bca-9b05-2a4e10f1d1c3", "content": "Composer-kwetsbaarheid opent deuren voor gevaarlijke permissiewijzigingen\n\nEen ernstige beveiligingsfout, met de identificatie CVE-2026-59944, is ontdekt in Composer, de veelgebruikte dependency manager voor PHP. De kwetsbaarheid stelt kwaadaardige of gecompromitteerde pakketten in st...", "url": "https://bsky.app/profile/newsfacts.bsky.social/post/3mueiipkaee27"}, {"timestamp": "2026-09-01T20:06:48.375Z", "date_only": false, "value": "2026-09-01T20:06:48.375000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:63151", "record": "RHSA-2026:63151", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2026-09-01T20:21:06.509Z", "date_only": false, "value": "2026-09-01T20:21:06.509116+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:63151", "record": "RHSA-2026:63151", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2026-09-03T11:17:00Z", "date_only": false, "value": "2026-09-03T11:17:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:63151", "record": "RHSA-2026:63151", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-09-03T11:17:00Z", "date_only": false, "value": "2026-09-03T11:17:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:63151", "record": "RHSA-2026:63151", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-03T11:17:00Z", "date_only": false, "value": "2026-09-03T11:17:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:63151", "record": "RHSA-2026:63151", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-16T16:09:43.258Z", "date_only": false, "value": "2026-09-16T16:09:43.258Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-59944", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-16T16:09:43.258Z", "date_only": false, "value": "2026-09-16T16:09:43.258000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:63151", "record": "RHSA-2026:63151", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-16T16:09:43.258Z", "date_only": false, "value": "2026-09-16T16:09:43.258Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-59944", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-16T16:24:11.759Z", "date_only": false, "value": "2026-09-16T16:24:11.759313+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:63151", "record": "RHSA-2026:63151", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-16T17:17:00Z", "date_only": false, "value": "2026-09-16T17:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-59944", "record": "UBUNTU-CVE-2026-59944", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-16T17:17:28Z", "date_only": false, "value": "2026-09-16T17:17:28Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-96H3-5X6V-M776", "record": "GHSA-96H3-5X6V-M776", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-09-16T17:17:28.590Z", "date_only": false, "value": "2026-09-16T17:17:28.590", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-59944", "record": "FKIE_CVE-2026-59944", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-16T17:29:17.703Z", "date_only": false, "value": "2026-09-16T17:29:17.703299Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-59944", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-16T17:29:17.703Z", "date_only": false, "value": "2026-09-16T17:29:17.703299Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-59944", "record": "FKIE_CVE-2026-59944", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-09-16T17:29:39.824Z", "date_only": false, "value": "2026-09-16T17:29:39.824Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-59944", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-16T17:29:39.824Z", "date_only": false, "value": "2026-09-16T17:29:39.824Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-59944", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-16T20:26:11Z", "date_only": false, "value": "2026-09-16T20:26:11Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11633-1", "record": "OPENSUSE-SU-2026:11633-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-16T21:28:21Z", "date_only": false, "value": "2026-09-16T21:28:21Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11633-1", "record": "OPENSUSE-SU-2026:11633-1", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-09-17T16:15:31Z", "date_only": false, "value": "2026-09-17T16:15:31+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:63151", "record": "RHSA-2026:63151", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-17T17:21:55Z", "date_only": false, "value": "2026-09-17T17:21:55Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11633-1", "record": "OPENSUSE-SU-2026:11633-1", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-09-17T17:21:55Z", "date_only": false, "value": "2026-09-17T17:21:55Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11633-1", "record": "OPENSUSE-SU-2026:11633-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-23T06:25:02.019Z", "date_only": false, "value": "2026-09-23T06:25:02.019747Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/fortrabbit.com/post/3mw647katym2g", "record": "CVE-2026-59944", "field": "creation_timestamp", "uuid": "1d46e0dc-6276-47e3-96c2-f0acc0455e11", "content": "Busy security week. Keep your software updated:\n- WordPress core, back to 4.7: CVE-2026-87902\n- Craft CMS 5, fixed in 5.10.13: CVE-2026-92591, CVE-2026-92593\n- Composer, fixed in 2.10.3: CVE-2026-59944", "url": "https://bsky.app/profile/fortrabbit.com/post/3mw647katym2g"}, {"timestamp": "2026-09-25T12:20:02.481Z", "date_only": false, "value": "2026-09-25T12:20:02.481Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-COMPOSER-2026-59944", "record": "BIT-COMPOSER-2026-59944", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-29T14:45:31Z", "date_only": false, "value": "2026-09-29T14:45:31Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:23943-1", "record": "SUSE-SU-2026:23943-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-09-29T14:45:31Z", "date_only": false, "value": "2026-09-29T14:45:31Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:23943-1", "record": "SUSE-SU-2026:23943-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-09-29T14:45:31Z", "date_only": false, "value": "2026-09-29T14:45:31Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2026:23943-1", "record": "SUSE-SU-2026:23943-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2026-09-29T14:45:31Z", "date_only": false, "value": "2026-09-29T14:45:31Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:23943-1", "record": "SUSE-SU-2026:23943-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-29T14:57:30Z", "date_only": false, "value": "2026-09-29T14:57:30Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21970-1", "record": "OPENSUSE-SU-2026:21970-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-09-29T14:57:30Z", "date_only": false, "value": "2026-09-29T14:57:30Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21970-1", "record": "OPENSUSE-SU-2026:21970-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-09-29T14:57:30Z", "date_only": false, "value": "2026-09-29T14:57:30Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21970-1", "record": "OPENSUSE-SU-2026:21970-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2026-09-29T14:57:30Z", "date_only": false, "value": "2026-09-29T14:57:30Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21970-1", "record": "OPENSUSE-SU-2026:21970-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-30T17:43:24.057Z", "date_only": false, "value": "2026-09-30T17:43:24.057", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-59944", "record": "FKIE_CVE-2026-59944", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-01T16:39:31Z", "date_only": false, "value": "2026-10-01T16:39:31Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21970-1", "record": "OPENSUSE-SU-2026:21970-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-01T16:39:31Z", "date_only": false, "value": "2026-10-01T16:39:31Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21970-1", "record": "OPENSUSE-SU-2026:21970-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-02T10:44:39Z", "date_only": false, "value": "2026-10-02T10:44:39Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:23943-1", "record": "SUSE-SU-2026:23943-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-02T10:44:39Z", "date_only": false, "value": "2026-10-02T10:44:39Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:23943-1", "record": "SUSE-SU-2026:23943-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-02T19:14:34Z", "date_only": false, "value": "2026-10-02T19:14:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-96H3-5X6V-M776", "record": "GHSA-96H3-5X6V-M776", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-02T19:14:34Z", "date_only": false, "value": "2026-10-02T19:14:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-96H3-5X6V-M776", "record": "GHSA-96H3-5X6V-M776", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-02T22:30:28Z", "date_only": false, "value": "2026-10-02T22:30:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/2c7a60e8d5c6d36989c99c8115383040", "record": "CVE-2026-59944", "field": "creation_timestamp", "uuid": "5d4de25b-9260-4690-99ca-668ed7c4dfdf", "content": "# CVE-2026-59944: CVE-2026-59944: Path Traversal and Symlink Resolution Bypass in Composer\n\n> **CVSS Score:** 6.1\n> **Published:** 2026-10-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-59944\n\n## Summary\nCVE-2026-59944 is a path traversal and link-following vulnerability in Composer, the PHP dependency manager. This flaw allows malicious or compromised packages to bypass previous path-hardening protections and perform arbitrary filesystem operations outside of their designated installation directory, leading to unauthorized permission modifications or execution proxy creations.\n\n## TL;DR\nA vulnerability in Composer allows malicious dependencies or manipulated installed.json files to bypass binary path validation. This enables attackers to execute chmod operations or create execution proxies targeting sensitive files outside the package installation directory.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22, CWE-59\n- **Attack Vector**: Local\n- **CVSS v3.1 Score**: 6.1 (Medium)\n- **EPSS Score / Percentile**: 0.00322 / 22.99%\n- **Impact**: Filesystem Permission Modification, Execution Proxying\n- **Exploit Status**: Proof of Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Composer (PHP dependency manager)\n\n## Mitigation\n\n- Upgrade Composer to patched versions (2.2.30 or 2.10.3)\n- Enforce least-privilege principles for execution context\n- Audit existing deployment scripts and dependency directories for unauthorized symlinks\n\n**Remediation Steps:**\n1. Run 'composer self-update' to obtain the latest security patches.\n2. If running legacy environments, pin to the 2.2 branch via 'composer self-update --2.2'.\n3. Utilize 'find vendor/ -type l -lname \"../*\"' to scan dependencies for external symbolic links.\n\n## References\n\n- [GHSA-96h3-5x6v-m776: Path Traversal/Bypass in Composer Binary Installer](https://github.com/composer/composer/security/advisories/GHSA-96h3-5x6v-m776)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-59944) - Automated Vulnerability Intelligence*", "url": "https://gist.github.com/alon710/2c7a60e8d5c6d36989c99c8115383040"}, {"timestamp": "2026-10-06T12:12:21.709Z", "date_only": false, "value": "2026-10-06T12:12:21.709Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-COMPOSER-2026-59944", "record": "BIT-COMPOSER-2026-59944", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-08T12:43:28.172Z", "date_only": false, "value": "2026-10-08T12:43:28.172030Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedroptimes.bsky.social/post/3mxeidu5j6s2a", "record": "CVE-2026-59944", "field": "creation_timestamp", "uuid": "9414873e-fab9-49f6-a2fc-d8956577e522", "content": "CVE-2026-59944 affects Composer versions still compatible with Drupal 11, allowing a malicious dependency to abuse symlinks during binary installation. Composer fixed the issue in 2.10.3 and 2.2.30.\n\nwww.thedroptimes.com/72672/compos...\n\n#Drupal #Composer #Security", "url": "https://bsky.app/profile/thedroptimes.bsky.social/post/3mxeidu5j6s2a"}, {"timestamp": "2026-10-17T09:45:59Z", "date_only": false, "value": "2026-10-17T09:45:59Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-59944", "record": "UBUNTU-CVE-2026-59944", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T07:46:56Z", "date_only": false, "value": "2026-10-31T07:46:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:63151", "record": "RHSA-2026:63151", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-31T07:46:56Z", "date_only": false, "value": "2026-10-31T07:46:56+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:63151", "record": "RHSA-2026:63151", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-10-31T07:46:56Z", "date_only": false, "value": "2026-10-31T07:46:56+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:63151", "record": "RHSA-2026:63151", "field": "document.tracking.current_release_date", "linked_record": true}], "metrics": {"as_of": "2026-11-06T16:23:44.935Z", "anchors": {"origin": {"timestamp": "2026-08-28T00:00:00Z", "date_only": false, "value": "2026-08-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11633-1", "record": "OPENSUSE-SU-2026:11633-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": {"timestamp": "2026-09-16T16:24:11.759Z", "date_only": false, "value": "2026-09-16T16:24:11.759313+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:63151", "record": "RHSA-2026:63151", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-08-28T00:00:00Z", "date_only": false, "value": "2026-08-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11633-1", "record": "OPENSUSE-SU-2026:11633-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": {"timestamp": "2026-09-03T11:17:00Z", "date_only": false, "value": "2026-09-03T11:17:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:63151", "record": "RHSA-2026:63151", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": -1141631.759, "hours": -317.1199330555556, "days": -13.213330543981483, "min_seconds": -1141631.759, "max_seconds": -1141631.759, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-09-16T16:24:11.759Z", "date_only": false, "value": "2026-09-16T16:24:11.759313+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:63151", "record": "RHSA-2026:63151", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-09-03T11:17:00Z", "date_only": false, "value": "2026-09-03T11:17:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:63151", "record": "RHSA-2026:63151", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, "discovery_after_disclosure": true}, "disclosure_to_patch": {"available": true, "seconds": 559020.0, "hours": 155.28333333333333, "days": 6.470138888888889, "min_seconds": 472620.0, "max_seconds": 559020.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-28T00:00:00Z", "date_only": false, "value": "2026-08-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11633-1", "record": "OPENSUSE-SU-2026:11633-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-09-03T11:17:00Z", "date_only": false, "value": "2026-09-03T11:17:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:63151", "record": "RHSA-2026:63151", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "time_unpatched": {"available": true, "seconds": 559020.0, "hours": 155.28333333333333, "days": 6.470138888888889, "min_seconds": 472620.0, "max_seconds": 559020.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-28T00:00:00Z", "date_only": false, "value": "2026-08-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11633-1", "record": "OPENSUSE-SU-2026:11633-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-09-03T11:17:00Z", "date_only": false, "value": "2026-09-03T11:17:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:63151", "record": "RHSA-2026:63151", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}