{"metadata": {"vulnerability": "CVE-2026-92392", "count": 104, "kinds": {"milestone": 11, "sighting": 27, "kev": 0, "other": 66}}, "data": [{"timestamp": "2025-09-12T05:10:03.815Z", "date_only": false, "value": "2025-09-12T05:10:03.815000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-09-12T06:01:02.244Z", "date_only": false, "value": "2025-09-12T06:01:02.244669+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-12-31T03:46:56.325Z", "date_only": false, "value": "2025-12-31T03:46:56.325000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-01-07T00:00:00Z", "date_only": false, "value": "2026-01-07T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-01-08T10:07:05.554Z", "date_only": false, "value": "2026-01-08T10:07:05.554000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-01-08T11:01:16.184Z", "date_only": false, "value": "2026-01-08T11:01:16.184214+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-09-16T08:12:53.407Z", "date_only": false, "value": "2026-09-16T08:12:53.407Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-92392", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-09T15:04:00.630Z", "date_only": false, "value": "2026-10-09T15:04:00.630000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:80349", "record": "RHSA-2026:80349", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-09T15:04:00.630Z", "date_only": false, "value": "2026-10-09T15:04:00.630000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.21.discovery_date"}, {"timestamp": "2026-10-11T12:41:29Z", "date_only": false, "value": "2026-10-11T12:41:29+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:80349", "record": "RHSA-2026:80349", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-11T12:41:29Z", "date_only": false, "value": "2026-10-11T12:41:29+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:80349", "record": "RHSA-2026:80349", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-11T12:41:29Z", "date_only": false, "value": "2026-10-11T12:41:29+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:80349", "record": "RHSA-2026:80349", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-12T07:51:30.717Z", "date_only": false, "value": "2026-10-12T07:51:30.717069Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bagder.mastodon.social.ap.brid.gy/post/3mxnzvjvr6yf2", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "857e1d36-e31c-41d9-9877-e8ab0c323e75", "content": "Come Wednesday, CVE-2026-92392 is the #curl CVE everyone will think either was blown out of proportions or was underestimated or something else. That happened the last time we reported a HIGH severity issue and I expect it to happen again.\n\nlibcurl is a rather generic LIBRARY - it is used in [\u2026]", "url": "https://bsky.app/profile/bagder.mastodon.social.ap.brid.gy/post/3mxnzvjvr6yf2"}, {"timestamp": "2026-10-12T07:51:32.846Z", "date_only": false, "value": "2026-10-12T07:51:32.846945Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/bagder/statuses/117426845493633803", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "a3c141ca-1a29-46d1-9bc6-b6289c8919bd", "content": "Come Wednesday, CVE-2026-92392 is the #curl CVE everyone will think either was blown out of proportions or was underestimated or something else. That happened the last time we reported a HIGH severity issue and I expect it to happen again.\nlibcurl is a rather generic LIBRARY - it is used in almost every device on earth, how the heck can we tell how important a particular mistake is for each and every use case? We can't. You need to read the advisory and figure it out yourself.", "url": "https://mastodon.social/users/bagder/statuses/117426845493633803"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.15.discovery_date"}, {"timestamp": "2026-10-13T08:22:40.895Z", "date_only": false, "value": "2026-10-13T08:22:40.895566Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxqm4d56tu26", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "3adac8b6-c2f5-4bb2-bb52-ea6288d2a08f", "content": "Top 3 CVE for last 7 days:\nCVE-2026-21589: 79 interactions\nCVE-2026-102255: 21 interactions\nCVE-2026-107406: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-97229: 14 interactions\nCVE-2026-92392: 7 interactions\nCVE-2025-41450: 5 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxqm4d56tu26"}, {"timestamp": "2026-10-13T09:59:04.450Z", "date_only": false, "value": "2026-10-13T09:59:04.450000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-10-13T11:20:33.991Z", "date_only": false, "value": "2026-10-13T11:20:33.991000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-13T11:33:47.116Z", "date_only": false, "value": "2026-10-13T11:33:47.116000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-10-13T11:50:28.033Z", "date_only": false, "value": "2026-10-13T11:50:28.033000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-10-13T12:09:28.542Z", "date_only": false, "value": "2026-10-13T12:09:28.542000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-13T14:47:07.941Z", "date_only": false, "value": "2026-10-13T14:47:07.941000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-10-13T15:12:25.588Z", "date_only": false, "value": "2026-10-13T15:12:25.588000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-10-13T15:20:35.099Z", "date_only": false, "value": "2026-10-13T15:20:35.099000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-10-13T15:47:55.242Z", "date_only": false, "value": "2026-10-13T15:47:55.242000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-10-13T16:03:12.849Z", "date_only": false, "value": "2026-10-13T16:03:12.849000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-10-13T16:11:12.826Z", "date_only": false, "value": "2026-10-13T16:11:12.826000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-10-13T16:32:04.789Z", "date_only": false, "value": "2026-10-13T16:32:04.789000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-10-13T16:46:12.459Z", "date_only": false, "value": "2026-10-13T16:46:12.459000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.16.discovery_date"}, {"timestamp": "2026-10-13T16:51:39.261Z", "date_only": false, "value": "2026-10-13T16:51:39.261000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.17.discovery_date"}, {"timestamp": "2026-10-13T17:12:36.649Z", "date_only": false, "value": "2026-10-13T17:12:36.649000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.18.discovery_date"}, {"timestamp": "2026-10-13T17:19:58.033Z", "date_only": false, "value": "2026-10-13T17:19:58.033000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.19.discovery_date"}, {"timestamp": "2026-10-13T17:23:12.272Z", "date_only": false, "value": "2026-10-13T17:23:12.272000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.20.discovery_date"}, {"timestamp": "2026-10-13T17:26:23.360Z", "date_only": false, "value": "2026-10-13T17:26:23.360000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.22.discovery_date"}, {"timestamp": "2026-10-13T17:29:59.229Z", "date_only": false, "value": "2026-10-13T17:29:59.229000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.23.discovery_date"}, {"timestamp": "2026-10-13T17:32:16.890Z", "date_only": false, "value": "2026-10-13T17:32:16.890000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.24.discovery_date"}, {"timestamp": "2026-10-13T17:34:28.489Z", "date_only": false, "value": "2026-10-13T17:34:28.489000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.25.discovery_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1307", "record": "CERTFR-2026-AVI-1307", "field": "last_revision_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": true, "value": "2026-10-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1307", "record": "CERTFR-2026-AVI-1307", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1307", "record": "CERTFR-2026-AVI-1307", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-14T06:00:00Z", "date_only": false, "value": "2026-10-14T06:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-92392", "record": "UBUNTU-CVE-2026-92392", "field": "published"}, {"timestamp": "2026-10-14T06:00:00Z", "date_only": false, "value": "2026-10-14T06:00:00Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-92392", "record": "UBUNTU-CVE-2026-92392", "field": "modified"}, {"timestamp": "2026-10-14T06:11:44.059Z", "date_only": false, "value": "2026-10-14T06:11:44.059123Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bagder.mastodon.social.ap.brid.gy/post/3mxsvayrr4qa2", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "ef41bfe4-0653-49a5-9822-40bedf9409dd", "content": "A UAF turned RCE\n\nIn the #curl 8.23.0 release we shipped a fix for one of the worst vulnerabilities in curl in a long time. We grade it severity HIGH. It is known as CVE-2026-92392 with the title HTTP/2 upload Use-After-Free.\n\nhttps://daniel.haxx.se/blog/2026/10/14/a-uaf-turned-rce/", "url": "https://bsky.app/profile/bagder.mastodon.social.ap.brid.gy/post/3mxsvayrr4qa2"}, {"timestamp": "2026-10-14T06:11:45.868Z", "date_only": false, "value": "2026-10-14T06:11:45.868331Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/bagder/statuses/117437778580681991", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "ca5e70cd-7a6f-4b89-9cfd-ac97fe51484b", "content": "A UAF turned RCE\nIn the #curl 8.23.0 release we shipped a fix for one of the worst vulnerabilities in curl in a long time. We grade it severity HIGH. It is known as CVE-2026-92392 with the title HTTP/2 upload Use-After-Free.\nhttps://daniel.haxx.se/blog/2026/10/14/a-uaf-turned-rce/", "url": "https://mastodon.social/users/bagder/statuses/117437778580681991"}, {"timestamp": "2026-10-14T06:24:25.857Z", "date_only": false, "value": "2026-10-14T06:24:25.857349Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dk3jf.radiosocial.de.ap.brid.gy/post/3mxsvwxws2z22", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "1795bf20-d56a-434e-842d-66d1c5f648ad", "content": "It is 0 Days since it was #useafterfree #curl #RCE\n\nPackage : curl\nCVE ID : CVE-2026-92392\n\n#adminLive", "url": "https://bsky.app/profile/dk3jf.radiosocial.de.ap.brid.gy/post/3mxsvwxws2z22"}, {"timestamp": "2026-10-14T07:46:15.160Z", "date_only": false, "value": "2026-10-14T07:46:15.160Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-92392", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T07:46:15.160Z", "date_only": false, "value": "2026-10-14T07:46:15.160Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / curl", "record": "CVE-2026-92392", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T08:17:05Z", "date_only": false, "value": "2026-10-14T08:17:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7JVW-75GF-2H34", "record": "GHSA-7JVW-75GF-2H34", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T08:17:05.997Z", "date_only": false, "value": "2026-10-14T08:17:05.997", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-92392", "record": "FKIE_CVE-2026-92392", "field": "published"}, {"timestamp": "2026-10-14T09:31:35Z", "date_only": false, "value": "2026-10-14T09:31:35Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7JVW-75GF-2H34", "record": "GHSA-7JVW-75GF-2H34", "field": "published"}, {"timestamp": "2026-10-14T09:48:15.395Z", "date_only": false, "value": "2026-10-14T09:48:15.395993Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4oeo4hqb6dfvp", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "b36c18ef-956a-4d6d-a519-a681b94ee2ef", "content": "CVE-2026-92392 - HTTP/2 upload Use-After-Free\nCVE ID : CVE-2026-92392\n \n Published : Oct. 14, 2026, 8:17 a.m. | 1\u00a0hour, 10\u00a0minutes ago\n \n Description : During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server\n(with reason `HTTP_1_1_REQUIRED` or `REFUSED_S...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/4oeo4hqb6dfvp"}, {"timestamp": "2026-10-14T11:39:33Z", "date_only": false, "value": "2026-10-14T11:39:33+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-14T11:39:33Z", "date_only": false, "value": "2026-10-14T11:39:33+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-14T11:39:33Z", "date_only": false, "value": "2026-10-14T11:39:33+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-14T12:00:00Z", "date_only": false, "value": "2026-10-14T12:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:80349", "record": "RHSA-2026:80349", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-14T12:00:00Z", "date_only": false, "value": "2026-10-14T12:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-14T14:48:25.746Z", "date_only": false, "value": "2026-10-14T14:48:25.746680Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxts4zkzgq2g", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "029f9a84-3195-41ed-8d72-2f7a90ae3756", "content": "\ud83e\udd16 CVE-2026-92392 (High): use-after-free in curl's HTTP/2 upload path, versions 8.12.0\u21928.22.0. A malicious server receiving a ~135KB upload corrupts the client's memory \u2014 the reporter turned it into client-side code execution. Fixed in curl 8.23.0.\nhttps://curl.se/docs/CVE-2026-92392.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mxts4zkzgq2g"}, {"timestamp": "2026-10-14T16:35:27.586Z", "date_only": false, "value": "2026-10-14T16:35:27.586582Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xeiaso.net/post/3mxty4fom6d2u", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "f96ac4c1-6ac5-4afa-8a40-e033bc5d9c13", "content": "\"No way to prevent this\" say users of only language where this regularly happens\n\nhttps://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-92392/", "url": "https://bsky.app/profile/xeiaso.net/post/3mxty4fom6d2u"}, {"timestamp": "2026-10-14T16:35:58.573Z", "date_only": false, "value": "2026-10-14T16:35:58.573152Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cadey.pony.social.ap.brid.gy/post/3mxty4vggpl22", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "8b30c752-b1ad-44f9-9f7c-9a596e57496b", "content": "\"No way to prevent this\" say users of only language where this regularly happens\n\nhttps://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-92392/?utm_campaign=mi_irl&utm_medium=social&utm_source=mastodon", "url": "https://bsky.app/profile/cadey.pony.social.ap.brid.gy/post/3mxty4vggpl22"}, {"timestamp": "2026-10-14T17:01:02.083Z", "date_only": false, "value": "2026-10-14T17:01:02.083746Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117440332538962048", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "e8d482e6-8ea3-453a-b716-1bc824496ca8", "content": "curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution\nA use-after-free flaw in how curl handles HTTP/2 uploads (CVE-2026-92392) lets a malicious server corrupt the memory of a client uploading to it, and the reporting researcher demonstrated code execution on the client machine, The Hacker News reports. The flaw affects curl and libcurl 8.12.0 through 8.22.0 and is fixed in curl 8.23.0, released early on October 14. https://thehackernews.com/2026/10/curl-patches-http2-upload-flaw-after.html", "url": "https://infosec.exchange/users/edwardk/statuses/117440332538962048"}, {"timestamp": "2026-10-14T17:01:03.614Z", "date_only": false, "value": "2026-10-14T17:01:03.614931Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxtzk5wdbl2n", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "169e0030-7dcd-4584-8272-adbfb5e8dc6e", "content": "curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution\n\nA use-after-free flaw in how curl handles HTTP/2 uploads (CVE-2026-92392) lets a malicious server corrupt the memory of a client uploading to it,... https://threatintel.cc/2026/10/14/curl-patches-http-upload-flaw.html", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxtzk5wdbl2n"}, {"timestamp": "2026-10-14T17:17:20.743Z", "date_only": false, "value": "2026-10-14T17:17:20.743412Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/some-rss-feeds.bsky.social/post/3mxu2hc73fl2p", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "c3d7c632-d011-4a7c-b792-4532a6c49e29", "content": "[some-subscribed-rss] New Post: \"No way to prevent this\" say users of only language where this regularly happens, by  https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-92392/", "url": "https://bsky.app/profile/some-rss-feeds.bsky.social/post/3mxu2hc73fl2p"}, {"timestamp": "2026-10-14T17:28:48Z", "date_only": false, "value": "2026-10-14T17:28:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:80349", "record": "RHSA-2026:80349", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-14T17:30:46.295Z", "date_only": false, "value": "2026-10-14T17:30:46.295602Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hexonbot.bsky.social/post/3mxu37cstv72e", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "96bfd800-edd3-40b2-8720-7c83f59bc4d9", "content": "A malicious HTTP/2 upload destination can attack the client. CVE-2026-92392 affects curl and libcurl 8.12.0-8.22.0. Find upload workflows, patch, and restrict destinations. https://www.hexon.bot/blog/curl-http2-upload-vulnerability #Cybersecurity #DevSecOps #Curl", "url": "https://bsky.app/profile/hexonbot.bsky.social/post/3mxu37cstv72e"}, {"timestamp": "2026-10-14T17:43:00.031Z", "date_only": false, "value": "2026-10-14T17:43:00.031509Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117440497547756198", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "1fb521de-698e-489b-a7ad-4c0d1127683c", "content": "CVE-2026-92392 HTTP/2 upload Use-After-Free During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server(with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use afterfree of a `struct Curl_easy` object.\nhttps://www.cve.org/CVERecord?id=CVE-2026-92392https://curl.se/docs/CVE-2026-92392.jsonhttps://curl.se/docs/CVE-2026-92392.htmlhttps://hackerone.com/reports/4030333#curl#CVE_2026_92392#bot", "url": "https://infosec.exchange/users/cve/statuses/117440497547756198"}, {"timestamp": "2026-10-15T03:56:56.051Z", "date_only": false, "value": "2026-10-15T03:56:56.051034Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-92392", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-15T03:56:56.051Z", "date_only": false, "value": "2026-10-15T03:56:56.051034Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-92392", "record": "FKIE_CVE-2026-92392", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T04:34:40.725Z", "date_only": false, "value": "2026-10-15T04:34:40.725193Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mxvachqezb2f", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "e3fb42af-e07a-4a21-a5ab-b753a9a5d3e5", "content": "The latest update for #Canonical includes \"Fixes available for CVE-2026-92392 and other curl vulnerabilities\" and \"Myna speech-to-text is now available as a technology preview\".\n \n#Cloud #OpenSource #Ubuntu https://opsmtrs.com/2Wcir8A", "url": "https://bsky.app/profile/opsmatters.com/post/3mxvachqezb2f"}, {"timestamp": "2026-10-15T06:06:13.447Z", "date_only": false, "value": "2026-10-15T06:06:13.447820Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-92392", "record": "BELL-CVE-2026-92392", "field": "published"}, {"timestamp": "2026-10-15T06:21:55.656Z", "date_only": false, "value": "2026-10-15T06:21:55.656701Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxvgcaicci25", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "829c7946-1ac2-4405-b7f2-121bf7127ed8", "content": "Top 3 CVE for last 7 days:\nCVE-2026-92392: 62 interactions\nCVE-2026-97229: 36 interactions\nCVE-2026-104935: 35 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-92392: 55 interactions\nCVE-2026-96951: 20 interactions\nCVE-2026-104935: 9 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxvgcaicci25"}, {"timestamp": "2026-10-15T09:41:48.359Z", "date_only": false, "value": "2026-10-15T09:41:48.359802Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trustlist.bsky.social/post/3mxvrhnfv5h25", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "ca3a3189-78f6-4070-baeb-80cb7e2b4178", "content": "News 12/29\ncurl 8.23.0 fixes 24 flaws, one rated high, and drops SMB support\n\nThe high-rated flaw, CVE-2026-92392, is a use-after-free in HTTP/2 uploads affecting curl 8.12.0 to 8.22.0.\n\n#infosec #cybersecurity\ntrustlist.uk/news/curl-8-23-0-f\u2026", "url": "https://bsky.app/profile/trustlist.bsky.social/post/3mxvrhnfv5h25"}, {"timestamp": "2026-10-15T10:28:17.201Z", "date_only": false, "value": "2026-10-15T10:28:17.201Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-92392", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T13:59:49.364Z", "date_only": false, "value": "2026-10-15T13:59:49.364973Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxw7uyylj22y", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "b3932f7e-da44-44f0-9466-222ae25b07e9", "content": "The cURL CVE-2026-92392 vulnerability enables remote code execution during HTTP/2 uploads. Update to cURL 8.23.0 or disable HTTP/2 to protect systems.\n\n#cURL #CVE202692392 #Cybersecurity #Vulnerability #InfoSec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mxw7uyylj22y"}, {"timestamp": "2026-10-15T15:40:24.672Z", "date_only": false, "value": "2026-10-15T15:40:24.672254Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crawler.baldanders.info/post/3mxwfiuowh52n", "record": "cve-2026-92392", "field": "creation_timestamp", "uuid": "6e510a1f-d2e9-436e-9e8c-285d18677051", "content": "\uff1e Ubuntu 26.04 \u305d\u306e76 - CVE-2026-92392 \u542b\u3080 curl \u306e\u8106\u5f31\u602722\u4ef6\u4fee\u6b63\u30fb\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\nhttps://kledgeb.blogspot.com/2026/10/ubuntu-2604-76-cve-2026-92392-curl-22.html\n", "url": "https://bsky.app/profile/crawler.baldanders.info/post/3mxwfiuowh52n"}, {"timestamp": "2026-10-15T22:03:44.987Z", "date_only": false, "value": "2026-10-15T22:03:44.987962Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxx2wdrfnu2y", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "70fe2dda-6cbb-450c-9038-a9c465423849", "content": "The curl 8.23.0 release fixes critical vulnerability CVE-2026-92392, an HTTP/2 use-after-free flaw surfaced by Anthropic that permits remote code execution.\n\n#curl #CVE202692392 #Cybersecurity #Anthropic #Vulnerability", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mxx2wdrfnu2y"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12150-1", "record": "OPENSUSE-SU-2026:12150-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12150-1", "record": "OPENSUSE-SU-2026:12150-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12150-1", "record": "OPENSUSE-SU-2026:12150-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12150-1", "record": "OPENSUSE-SU-2026:12150-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-16T02:13:20.854Z", "date_only": false, "value": "2026-10-16T02:13:20.854736Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mxxiuo7ltf2k", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "f2de6f1a-81dc-4b33-bbd8-9f7b5cb251d6", "content": "The latest update for #Canonical includes \"Canonical releases #Ubuntu 26.10 Stonking Stingray\" and \"Fixes available for CVE-2026-92392 and other curl vulnerabilities\".\n \n#Cloud #OpenSource https://opsmtrs.com/2Wcir8A", "url": "https://bsky.app/profile/opsmatters.com/post/3mxxiuo7ltf2k"}, {"timestamp": "2026-10-16T06:18:47.121Z", "date_only": false, "value": "2026-10-16T06:18:47.121825Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxxwlkash52j", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "2627d095-c8dd-4487-8e43-a12b9dff58b9", "content": "Top 3 CVE for last 7 days:\nCVE-2026-92392: 65 interactions\nCVE-2026-104935: 46 interactions\nCVE-2026-97229: 38 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-0322: 21 interactions\nCVE-2026-99999: 15 interactions\nCVE-2026-102764: 14 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxxwlkash52j"}, {"timestamp": "2026-10-16T16:14:31.252Z", "date_only": false, "value": "2026-10-16T16:14:31.252872Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3mxyxusjbsn2t", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "7c7228a2-8cfd-443b-9d04-2d07e392bf46", "content": "CVE-2026-92392: Curl HTTP/2 Upload RCE https://packetstorm.news/news/view/45653 #news", "url": "https://bsky.app/profile/packetstorm.bsky.social/post/3mxyxusjbsn2t"}, {"timestamp": "2026-10-16T17:34:55Z", "date_only": false, "value": "2026-10-16T17:34:55+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:80349", "record": "RHSA-2026:80349", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-16T17:34:55Z", "date_only": false, "value": "2026-10-16T17:34:55+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:80349", "record": "RHSA-2026:80349", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-16T17:34:55Z", "date_only": false, "value": "2026-10-16T17:34:55+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:80349", "record": "RHSA-2026:80349", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T18:39:04.398Z", "date_only": false, "value": "2026-10-16T18:39:04.398866Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ai-nerd.bsky.social/post/3mxz7xbuzuq2v", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "642b28e3-6f30-4547-aee3-fac40cc9c95a", "content": "curl's new high-severity use-after-free is credited to \"Luna with Claude, Anthropic\" https://curl.se/docs/CVE-2026-92392.html\n\nthe RCE they proved needs eight preconditions, and even then the command it runs is capped at about 23 bytes", "url": "https://bsky.app/profile/ai-nerd.bsky.social/post/3mxz7xbuzuq2v"}, {"timestamp": "2026-10-16T21:31:22.727Z", "date_only": false, "value": "2026-10-16T21:31:22.727117Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kanonji.misskey.io.ap.brid.gy/post/3mxzjl4ewskh2", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "63fa687e-432a-4dc6-9afe-4846aac8cf0c", "content": "> \u30c7\u30fc\u30bf\u8ee2\u9001\u30e9\u30a4\u30d6\u30e9\u30ea\u300ccurl\u300d\u306e\u6700\u65b0\u5b89\u5b9a\u7248v8.23.0\u304c\u300110\u670814\u65e5\u306b\u516c\u958b\u3055\u308c\u305f\u3002\u516824\u4ef6\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3068\u306a\u3063\u3066\u3044\u308b\u3002\n>\n>  24\u4ef6\u306e\u3046\u3061\u30011\u4ef6\u304c\u6df1\u523b\u5ea6High\u3068\u3055\u308c\u3066\u304a\u308a\u3001\u305d\u306e\u307b\u304b\u306e\u8106\u5f31\u6027\u306e\u6df1\u523b\u5ea6\u306fLow\u3002\u6df1\u523b\u5ea6\u304cHigh\u3068\u8a55\u4fa1\u3055\u308c\u305f\u300cCVE-2026-92392\u300d\u306f\u3001HTTP/2\u3092\u4f7f\u3063\u305f\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u4e2d\u306b\u30e1\u30e2\u30ea\u306e\u89e3\u653e\u5f8c\u4f7f\u7528\uff08Use-After-Free\uff09\u304c\u5f15\u304d\u8d77\u3053\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3068\u3044\u3046\u3082\u306e\u3002\u60aa\u610f\u306e\u3042\u308b\u30b5\u30fc\u30d0\u30fc\u304c\u7279\u5b9a\u306e\u6761\u4ef6\u3092\u6e80\u305f\u3057\u305f\u5834\u5408\u3001\u6700\u60aa\u306e\u5834\u5408\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u6050\u308c\u304c\u3042\u308b\u3002\n>\n> [\u2026]", "url": "https://bsky.app/profile/kanonji.misskey.io.ap.brid.gy/post/3mxzjl4ewskh2"}, {"timestamp": "2026-10-17T01:07:14Z", "date_only": false, "value": "2026-10-17T01:07:14.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-92392", "record": "MSRC_CVE-2026-92392", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-17T01:07:14Z", "date_only": false, "value": "2026-10-17T01:07:14.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-92392", "record": "MSRC_CVE-2026-92392", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-17T01:07:14Z", "date_only": false, "value": "2026-10-17T01:07:14.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-92392", "record": "MSRC_CVE-2026-92392", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-17T01:07:14Z", "date_only": false, "value": "2026-10-17T01:07:14.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-92392", "record": "MSRC_CVE-2026-92392", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-17T01:09:38Z", "date_only": false, "value": "2026-10-17T01:09:38+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-17T06:01:21.550Z", "date_only": false, "value": "2026-10-17T06:01:21.55056Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-92392", "record": "BELL-CVE-2026-92392", "field": "modified"}, {"timestamp": "2026-10-17T06:05:49.032Z", "date_only": false, "value": "2026-10-17T06:05:49.032527Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3my2gdbnb2h2p", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "4ed596d2-3bba-4fe7-a333-eece6c29a09f", "content": "Top 3 CVE for last 7 days:\nCVE-2026-94603: 148 interactions\nCVE-2026-99999: 89 interactions\nCVE-2026-92392: 67 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-94603: 148 interactions\nCVE-2026-99999: 74 interactions\nCVE-2026-102764: 38 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3my2gdbnb2h2p"}, {"timestamp": "2026-10-17T07:00:38.101Z", "date_only": false, "value": "2026-10-17T07:00:38.101Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-92392", "record": "MSRC_CVE-2026-92392", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-17T09:17:45Z", "date_only": false, "value": "2026-10-17T09:17:45Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12150-1", "record": "OPENSUSE-SU-2026:12150-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-17T09:17:45Z", "date_only": false, "value": "2026-10-17T09:17:45Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12150-1", "record": "OPENSUSE-SU-2026:12150-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-17T12:55:05Z", "date_only": false, "value": "2026-10-17T12:55:05+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-17T12:55:05Z", "date_only": false, "value": "2026-10-17T12:55:05+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-17T12:55:05Z", "date_only": false, "value": "2026-10-17T12:55:05+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-18T23:06:21.435Z", "date_only": false, "value": "2026-10-18T23:06:21.435Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-92392", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-18T23:06:21.435Z", "date_only": false, "value": "2026-10-18T23:06:21.435Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-92392", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-18T23:16:57.163Z", "date_only": false, "value": "2026-10-18T23:16:57.163", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-92392", "record": "FKIE_CVE-2026-92392", "field": "lastModified"}, {"timestamp": "2026-10-19T00:30:21Z", "date_only": false, "value": "2026-10-19T00:30:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7JVW-75GF-2H34", "record": "GHSA-7JVW-75GF-2H34", "field": "modified"}]}