{"uuid": "3d6687cf-98ec-4590-9bfa-aa68ffaa6b59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13149", "type": "seen", "source": "https://gist.github.com/djlan/4e47cd0e6c9ac9925a6efe5c077883fe", "content": "# [SECURITY] \u66f4\u65b0 `/sample/react-host-app` \u4e2d\u7684 `brace-expansion`\n\n> **\u4e00\u53e5\u8bdd\u6458\u8981\uff1a** \u6b64 PR \u4ec5\u66f4\u65b0 React Host App \u7684 npm \u9501\u6587\u4ef6\uff0c\u5c06\u4e24\u6761\u4f20\u9012\u4f9d\u8d56\u94fe\u4e2d\u7684 `brace-expansion` \u5206\u522b\u4ece `1.1.11` \u5347\u7ea7\u5230 `1.1.18`\u3001\u4ece `2.0.1` \u5347\u7ea7\u5230 `2.1.4`\uff0c\u4ee5\u5904\u7406 Component Governance \u62a5\u544a\u7684\u4e24\u4e2a\u9ad8\u5371\u5b89\u5168\u544a\u8b66\u3002\n\n| \u9879\u76ee | \u4fe1\u606f |\n|---|---|\n| PR | [767496](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/767496) |\n| \u4f5c\u8005 | Dependabot |\n| \u72b6\u6001 | Active\uff0c\u975e\u8349\u7a3f\uff1b\u5408\u5e76\u72b6\u6001\u4e3a Succeeded |\n| \u5206\u652f | `dependabot/npm_and_yarn/sample%2Freact-host-app/brace-expansion-1.1.18-749884` \u2192 `main` |\n| \u521b\u5efa\u65f6\u95f4 | 2026-08-07 09:45:17 |\n| \u53d8\u66f4\u7edf\u8ba1 | 1 \u4e2a\u6587\u4ef6\u30011 \u4e2a\u63d0\u4ea4\u30011 \u4e2a\u8fed\u4ee3\uff1b\u53ef\u89c1\u5dee\u5f02\u7ea6 `+6 / -6` \u884c |\n| \u5b89\u5168\u80cc\u666f | CG Alert 15400181\uff08CVE-2026-13149\uff09\u4e0e CG Alert 15766343\uff08CVE-2026-14257\uff09\uff0c\u5747\u6807\u8bb0\u4e3a High |\n\n## \u76ee\u5f55\n\n1. [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n2. [\u6309\u529f\u80fd\u6a21\u5757\u8bf4\u660e](#\u6309\u529f\u80fd\u6a21\u5757\u8bf4\u660e)\n3. [\u5de5\u4f5c\u539f\u7406](#\u5de5\u4f5c\u539f\u7406)\n4. [\u5f71\u54cd\u5206\u6790](#\u5f71\u54cd\u5206\u6790)\n5. [\u98ce\u9669\u4e0e\u517c\u5bb9\u6027](#\u98ce\u9669\u4e0e\u517c\u5bb9\u6027)\n6. [\u6d4b\u8bd5\u5efa\u8bae\u4e0e\u73b0\u6709\u8bc1\u636e](#\u6d4b\u8bd5\u5efa\u8bae\u4e0e\u73b0\u6709\u8bc1\u636e)\n7. [\u5dee\u5f02\u8986\u76d6\u8303\u56f4](#\u5dee\u5f02\u8986\u76d6\u8303\u56f4)\n\n## \u53d8\u66f4\u6982\u89c8\n\n\u6b64 PR \u6ca1\u6709\u4fee\u6539\u5e94\u7528\u6e90\u7801\u3001\u6784\u5efa\u811a\u672c\u6216\u4f9d\u8d56\u58f0\u660e\u6587\u4ef6\uff0c\u800c\u662f\u66f4\u65b0 [`sample/react-host-app/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/767496?path=/sample/react-host-app/package-lock.json&_a=files) \u4e2d\u5df2\u7ecf\u89e3\u6790\u597d\u7684\u4f20\u9012\u4f9d\u8d56\u7248\u672c\u3001\u5185\u90e8 npm \u6e90\u4e0b\u8f7d\u5730\u5740\u548c\u5b8c\u6574\u6027\u6821\u9a8c\u503c\u3002\n\n\u9501\u6587\u4ef6\u4e2d\u5b58\u5728\u4e24\u4efd\u5904\u4e8e\u4e0d\u540c\u4f9d\u8d56\u5c42\u7ea7\u3001\u4e0d\u540c\u4e3b\u7248\u672c\u7ebf\u7684 `brace-expansion`\uff1a\n\n| \u4f9d\u8d56\u4f4d\u7f6e | \u539f\u7248\u672c | \u65b0\u7248\u672c | \u6027\u8d28 |\n|---|---:|---:|---|\n| \u9876\u5c42 `node_modules/brace-expansion` | `1.1.11` | `1.1.18` | \u5f00\u53d1\u4f9d\u8d56\u94fe\u4e2d\u7684 1.x \u7248\u672c |\n| `node_modules/filelist/node_modules/brace-expansion` | `2.0.1` | `2.1.4` | `filelist` \u79c1\u6709\u4f9d\u8d56\u6811\u4e2d\u7684 2.x \u7248\u672c |\n\n\u4e24\u4e2a\u7248\u672c\u5206\u522b\u5728\u5404\u81ea\u7684\u4e3b\u7248\u672c\u8303\u56f4\u5185\u5347\u7ea7\uff0c\u907f\u514d\u628a\u4f9d\u8d56\u94fe\u5f3a\u884c\u7edf\u4e00\u5230\u4e0d\u517c\u5bb9\u7684\u4e3b\u7248\u672c\uff0c\u540c\u65f6\u8986\u76d6\u540c\u4e00\u9501\u6587\u4ef6\u5185\u7684\u4e24\u4efd\u6613\u53d7\u5f71\u54cd\u7ec4\u4ef6\u3002\n\n## \u6309\u529f\u80fd\u6a21\u5757\u8bf4\u660e\n\n### 1. React Host App \u4f9d\u8d56\u9501\u5b9a\n\n\u53d8\u66f4\u96c6\u4e2d\u5728 [`sample/react-host-app/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/767496?path=/sample/react-host-app/package-lock.json&_a=files)\u3002\n\n- `brace-expansion` 1.x \u6761\u76ee\u5347\u7ea7\u5230 `1.1.18`\u3002\n- `filelist` \u5d4c\u5957\u4f9d\u8d56\u4e2d\u7684 `brace-expansion` 2.x \u6761\u76ee\u5347\u7ea7\u5230 `2.1.4`\u3002\n- \u4e24\u4e2a\u6761\u76ee\u7684 `resolved` \u5730\u5740\u540c\u6b65\u6307\u5411 Azure DevOps \u5185\u90e8\u5305\u6e90\u4e2d\u7684\u65b0 tarball\u3002\n- \u4e24\u4e2a\u6761\u76ee\u7684 `integrity` \u503c\u540c\u6b65\u66f4\u65b0\uff0c\u4f7f npm \u80fd\u9a8c\u8bc1\u65b0\u5305\u5185\u5bb9\u3002\n- `dev: true` \u548c\u73b0\u6709\u4f9d\u8d56\u5173\u7cfb\u4fdd\u6301\u4e0d\u53d8\uff0c\u56e0\u6b64\u4ece\u9501\u6587\u4ef6\u53ef\u89c1\u4fe1\u606f\u5224\u65ad\uff0c\u8be5\u7ec4\u4ef6\u4ecd\u53ea\u4f4d\u4e8e\u5f00\u53d1\u4f9d\u8d56\u8def\u5f84\uff0c\u4e0d\u4f1a\u56e0\u4e3a\u672c\u6b21\u53d8\u66f4\u88ab\u76f4\u63a5\u63d0\u5347\u4e3a\u751f\u4ea7\u4f9d\u8d56\u3002\n\n### 2. \u5b89\u5168\u4fee\u590d\n\nPR \u63cf\u8ff0\u5c06\u6b64\u5347\u7ea7\u5173\u8054\u5230\u4e24\u4e2a\u9ad8\u5371 Component Governance \u544a\u8b66\uff1aCVE-2026-13149 \u548c CVE-2026-14257\u3002`brace-expansion` \u7528\u4e8e\u5c55\u5f00\u82b1\u62ec\u53f7\u8868\u8fbe\u5f0f\uff1bPR \u63d0\u4f9b\u7684\u4e0a\u6e38\u53d1\u5e03\u8bf4\u660e\u660e\u786e\u63d0\u5230 1.x \u7248\u672c\u5305\u542b\u9488\u5bf9\u6f5c\u5728 ReDoS \u6216\u4f4e\u6548\u6b63\u5219\u8868\u8fbe\u5f0f\u95ee\u9898\u7684\u4fee\u590d\u3002\n\n\u6b64 PR \u7684\u76ee\u7684\u4e0d\u662f\u6539\u53d8 React Host App \u7684\u4e1a\u52a1\u884c\u4e3a\uff0c\u800c\u662f\u8ba9\u540e\u7eed\u57fa\u4e8e\u9501\u6587\u4ef6\u7684 npm \u5b89\u88c5\u89e3\u6790\u5230\u4fee\u590d\u540e\u7684\u8865\u4e01/\u6b21\u7248\u672c\uff0c\u964d\u4f4e\u6076\u610f\u6216\u6781\u7aef\u6a21\u5f0f\u8f93\u5165\u9020\u6210\u8fc7\u91cf CPU \u6d88\u8017\u7684\u98ce\u9669\u3002\n\n## \u5de5\u4f5c\u539f\u7406\n\n1. npm \u5728\u6267\u884c\u786e\u5b9a\u6027\u5b89\u88c5\uff08\u4f8b\u5982 `npm ci`\uff09\u65f6\u8bfb\u53d6\u9501\u6587\u4ef6\uff0c\u800c\u4e0d\u662f\u91cd\u65b0\u81ea\u7531\u9009\u62e9\u6ee1\u8db3\u7248\u672c\u8303\u56f4\u7684\u4efb\u610f\u7248\u672c\u3002\n2. \u66f4\u65b0\u540e\u7684\u9501\u6587\u4ef6\u8981\u6c42 npm \u4e0b\u8f7d `brace-expansion@1.1.18` \u548c\u5d4c\u5957\u7684 `brace-expansion@2.1.4`\u3002\n3. `resolved` \u5b57\u6bb5\u7ee7\u7eed\u4f7f\u7528\u73b0\u6709 Azure DevOps \u5185\u90e8 registry\uff0c\u672a\u6539\u53d8\u5305\u5206\u53d1\u6e20\u9053\u3002\n4. npm \u4f7f\u7528\u65b0\u7684 `integrity` \u503c\u9a8c\u8bc1\u4e0b\u8f7d\u5185\u5bb9\uff0c\u907f\u514d\u65b0\u7248\u672c\u5730\u5740\u4e0e\u65e7\u7248\u672c\u54c8\u5e0c\u4e0d\u5339\u914d\u3002\n5. \u4e24\u6761\u4f9d\u8d56\u94fe\u4fdd\u7559\u5404\u81ea\u7684 1.x/2.x \u4e3b\u7248\u672c\uff0c\u56e0\u6b64\u4fee\u590d\u901a\u8fc7\u540c\u4e3b\u7248\u672c\u5185\u5347\u7ea7\u843d\u5730\uff0c\u517c\u5bb9\u6027\u98ce\u9669\u4f4e\u4e8e\u8de8\u4e3b\u7248\u672c\u66ff\u6362\u3002\n\n## \u5f71\u54cd\u5206\u6790\n\n### \u6b63\u9762\u5f71\u54cd\n\n- \u5904\u7406 PR \u63cf\u8ff0\u4e2d\u5217\u51fa\u7684\u4e24\u4e2a\u9ad8\u5371\u5f00\u6e90\u7ec4\u4ef6\u544a\u8b66\u3002\n- \u56fa\u5b9a\u5b89\u5168\u7248\u672c\uff0c\u4f7f\u672c\u5730\u5f00\u53d1\u3001CI \u548c\u5176\u4ed6\u4f7f\u7528\u9501\u6587\u4ef6\u7684\u73af\u5883\u83b7\u5f97\u4e00\u81f4\u4f9d\u8d56\u7ed3\u679c\u3002\n- \u4e0d\u6d89\u53ca\u4e1a\u52a1\u6e90\u7801\u6216\u516c\u5f00 API\uff0c\u9884\u671f\u4e0d\u4f1a\u6539\u53d8\u4ea7\u54c1\u529f\u80fd\u3002\n- \u4e0d\u6539\u53d8\u5185\u90e8 npm \u6e90\uff0c\u73b0\u6709\u5236\u54c1\u83b7\u53d6\u4e0e\u5408\u89c4\u8def\u5f84\u4fdd\u6301\u4e00\u81f4\u3002\n\n### \u5f71\u54cd\u8303\u56f4\n\n- \u76f4\u63a5\u5f71\u54cd `/sample/react-host-app` \u7684\u4f9d\u8d56\u5b89\u88c5\u7ed3\u679c\u3002\n- \u4e3b\u8981\u5f71\u54cd\u5f00\u53d1\u3001\u6784\u5efa\u6216\u6d4b\u8bd5\u5de5\u5177\u94fe\uff0c\u56e0\u4e3a\u4e24\u4e2a\u6761\u76ee\u5747\u6807\u8bb0\u4e3a\u5f00\u53d1\u4f9d\u8d56\u3002\n- \u5305\u5206\u6790\u6750\u6599\u6ca1\u6709\u63d0\u4f9b\u5b9e\u9645\u8c03\u7528\u8def\u5f84\uff0c\u56e0\u6b64\u4e0d\u80fd\u8fdb\u4e00\u6b65\u65ad\u8a00\u54ea\u4e9b\u5177\u4f53\u547d\u4ee4\u6216\u6784\u5efa\u9636\u6bb5\u4f1a\u6267\u884c `brace-expansion`\u3002\n\n## \u98ce\u9669\u4e0e\u517c\u5bb9\u6027\n\n| \u98ce\u9669/\u5173\u6ce8\u70b9 | \u5177\u4f53\u8bf4\u660e | \u5efa\u8bae |\n|---|---|---|\n| \u4f20\u9012\u4f9d\u8d56\u884c\u4e3a\u53d8\u5316 | \u5373\u4f7f\u672a\u8de8\u4e3b\u7248\u672c\uff0c\u8865\u4e01\u548c\u6b21\u7248\u672c\u4ecd\u53ef\u80fd\u6539\u53d8\u8fb9\u754c\u8f93\u5165\u3001\u9519\u8bef\u5904\u7406\u6216\u8868\u8fbe\u5f0f\u5c55\u5f00\u7ed3\u679c\u3002 | \u8fd0\u884c React Host App \u7684\u73b0\u6709\u6784\u5efa\u4e0e\u6d4b\u8bd5\uff0c\u91cd\u70b9\u8986\u76d6\u4f7f\u7528 glob\u3001\u6587\u4ef6\u5217\u8868\u6216\u82b1\u62ec\u53f7\u8868\u8fbe\u5f0f\u7684\u5de5\u5177\u3002 |\n| \u53cc\u7248\u672c\u5171\u5b58 | \u4f9d\u8d56\u6811\u4ecd\u540c\u65f6\u5305\u542b 1.x \u4e0e 2.x\uff1b\u8fd9\u662f\u7531\u4e0d\u540c\u7236\u4f9d\u8d56\u8981\u6c42\u9020\u6210\u7684\u6b63\u5e38\u5d4c\u5957\uff0c\u4f46\u5b89\u5168\u626b\u63cf\u5fc5\u987b\u786e\u8ba4\u4e24\u4e2a\u65b0\u7248\u672c\u90fd\u4e0d\u518d\u89e6\u53d1\u76ee\u6807\u544a\u8b66\u3002 | \u91cd\u65b0\u8fd0\u884c Component Governance/\u4f9d\u8d56\u626b\u63cf\uff0c\u5e76\u68c0\u67e5\u9501\u6587\u4ef6\u89e3\u6790\u7ed3\u679c\u3002 |\n| \u5185\u90e8\u6e90\u53ef\u7528\u6027 | \u65b0\u7684 `resolved` URL \u6307\u5411\u5185\u90e8 Azure DevOps \u5305\u6e90\uff1b\u82e5\u955c\u50cf\u5c1a\u672a\u540c\u6b65\u6216\u6743\u9650\u914d\u7f6e\u5f02\u5e38\uff0c`npm ci` \u4f1a\u5931\u8d25\u3002 | \u5728\u4e0e CI \u76f8\u540c\u51ed\u636e\u548c registry \u914d\u7f6e\u4e0b\u6267\u884c\u4e00\u6b21\u5e72\u51c0\u5b89\u88c5\u3002 |\n| \u5b8c\u6574\u6027\u6821\u9a8c | \u54c8\u5e0c\u503c\u5df2\u968f\u7248\u672c\u66f4\u65b0\uff1b\u4efb\u4f55\u4ee3\u7406\u7f13\u5b58\u6216\u5236\u54c1\u5185\u5bb9\u4e0d\u4e00\u81f4\u90fd\u4f1a\u8868\u73b0\u4e3a integrity \u9519\u8bef\u3002 | \u4f7f\u7528\u7a7a npm \u7f13\u5b58\u6216\u5e72\u51c0\u4ee3\u7406\u73af\u5883\u9a8c\u8bc1\u5b89\u88c5\u3002 |\n| Node/npm \u517c\u5bb9\u6027 | \u5206\u6790\u5305\u6ca1\u6709\u63d0\u4f9b\u9879\u76ee\u4f7f\u7528\u7684 Node.js/npm \u7248\u672c\uff0c\u4e5f\u6ca1\u6709\u63d0\u4f9b\u65b0\u4f9d\u8d56\u7684 engines \u4fe1\u606f\u3002 | \u4f7f\u7528\u4ed3\u5e93\u89c4\u5b9a\u7684 Node.js/npm \u7248\u672c\u6267\u884c\u9a8c\u8bc1\uff0c\u4e0d\u80fd\u4ec5\u4f9d\u636e\u9501\u6587\u4ef6\u65ad\u8a00\u6240\u6709\u8fd0\u884c\u65f6\u7248\u672c\u5747\u517c\u5bb9\u3002 |\n| \u9501\u6587\u4ef6\u4e0e\u6e05\u5355\u4e00\u81f4\u6027 | \u672c\u6b21\u53ea\u770b\u5230 `package-lock.json` \u53d8\u5316\uff1b\u4f20\u9012\u4f9d\u8d56\u5347\u7ea7\u901a\u5e38\u53ef\u4ee5\u53ea\u6539\u9501\u6587\u4ef6\uff0c\u4f46\u4ecd\u9700\u786e\u8ba4\u91cd\u65b0\u751f\u6210\u9501\u6587\u4ef6\u4e0d\u4f1a\u4ea7\u751f\u989d\u5916\u6f02\u79fb\u3002 | \u5728\u76f8\u540c npm \u7248\u672c\u4e0b\u91cd\u65b0\u751f\u6210\u6216\u6267\u884c `npm install --package-lock-only`\uff0c\u786e\u8ba4\u6ca1\u6709\u610f\u5916\u5dee\u5f02\u3002 |\n\n## \u6d4b\u8bd5\u5efa\u8bae\u4e0e\u73b0\u6709\u8bc1\u636e\n\n\u5206\u6790\u5305\u4e2d**\u6ca1\u6709\u6d4b\u8bd5\u6587\u4ef6\u53d8\u66f4\u3001\u6d4b\u8bd5\u8fd0\u884c\u7ed3\u679c\u6216\u6784\u5efa\u65e5\u5fd7**\uff0c\u56e0\u6b64\u4e0d\u80fd\u58f0\u79f0\u6b64 PR \u5df2\u901a\u8fc7 React Host App \u7684\u5b89\u88c5\u3001\u6784\u5efa\u6216\u6d4b\u8bd5\u3002\n\n\u5efa\u8bae\u81f3\u5c11\u9a8c\u8bc1\uff1a\n\n1. \u5728 `/sample/react-host-app` \u4e2d\u6267\u884c\u5e72\u51c0\u7684 `npm ci`\uff0c\u786e\u8ba4\u5185\u90e8\u6e90\u4e0b\u8f7d\u4e0e integrity \u6821\u9a8c\u6210\u529f\u3002\n2. \u8fd0\u884c\u8be5\u793a\u4f8b\u73b0\u6709\u7684\u6784\u5efa\u3001\u5355\u5143\u6d4b\u8bd5\u548c lint \u547d\u4ee4\uff0c\u786e\u8ba4\u5de5\u5177\u94fe\u884c\u4e3a\u672a\u56de\u5f52\u3002\n3. \u68c0\u67e5\u5b9e\u9645\u5b89\u88c5\u6811\uff0c\u786e\u8ba4\u4e24\u5904 `brace-expansion` \u5206\u522b\u89e3\u6790\u4e3a `1.1.18` \u548c `2.1.4`\u3002\n4. \u91cd\u65b0\u8fd0\u884c Component Governance \u6216\u7b49\u6548\u4f9d\u8d56\u626b\u63cf\uff0c\u786e\u8ba4\u4e24\u4e2a\u76ee\u6807\u544a\u8b66\u88ab\u5173\u95ed\uff0c\u4e14\u6ca1\u6709\u5f15\u5165\u65b0\u7684\u5df2\u77e5\u6f0f\u6d1e\u3002\n5. \u5982\u9879\u76ee\u5b58\u5728 glob/\u6587\u4ef6\u679a\u4e3e\u76f8\u5173\u6d4b\u8bd5\uff0c\u52a0\u5165\u6216\u6267\u884c\u5305\u542b\u6df1\u5c42\u5d4c\u5957\u82b1\u62ec\u53f7\u3001\u8d85\u957f\u8f93\u5165\u53ca\u5f02\u5e38\u8868\u8fbe\u5f0f\u7684\u7528\u4f8b\uff0c\u4ee5\u8986\u76d6\u6b64\u6b21\u5b89\u5168\u4fee\u590d\u6700\u76f8\u5173\u7684\u8fb9\u754c\u3002\n\n## \u5dee\u5f02\u8986\u76d6\u8303\u56f4\n\n- \u5206\u6790\u5305\u58f0\u660e\u672c PR \u5171\u53d8\u66f4 1 \u4e2a\u6587\u4ef6\uff0c\u5305\u5185\u4e5f\u63d0\u4f9b\u4e86\u8be5\u6587\u4ef6\u7684\u5dee\u5f02\u3002\n- \u6587\u4ef6\u7ea7 `truncated` \u4e3a `false`\uff0c\u5168\u5c40 `diffTruncated` \u4e5f\u4e3a `false`\uff1b\u56e0\u6b64\u5305\u4e2d\u62a5\u544a\u7684\u552f\u4e00\u6587\u4ef6\u5dee\u5f02\u672a\u88ab\u622a\u65ad\u3002\n- PR \u63cf\u8ff0\u6587\u672c\u672c\u8eab\u5728\u5bfc\u51fa\u5305\u4e2d\u4ee5\u7701\u7565\u53f7\u7ed3\u5c3e\uff0c\u8868\u793a\u5176\u4e0a\u6e38\u63d0\u4ea4\u5217\u8868\u7b49\u63cf\u8ff0\u5185\u5bb9\u6ca1\u6709\u5b8c\u6574\u6536\u5f55\uff1b\u672c\u8bf4\u660e\u672a\u636e\u6b64\u63a8\u65ad\u7f3a\u5931\u7684\u53d1\u5e03\u8bf4\u660e\u6216\u63d0\u4ea4\u7ec6\u8282\u3002\n- \u5206\u6790\u4ec5\u8986\u76d6\u5305\u4e2d\u63d0\u4f9b\u7684\u9501\u6587\u4ef6\u5dee\u5f02\u548c\u5143\u6570\u636e\u3002\u7531\u4e8e\u6ca1\u6709\u6e90\u7801\u8c03\u7528\u94fe\u3001\u5b8c\u6574\u4f9d\u8d56\u6e05\u5355\u3001\u6d41\u6c34\u7ebf\u7ed3\u679c\u6216\u5b89\u5168\u626b\u63cf\u590d\u68c0\u7ed3\u679c\uff0c\u672c\u8bf4\u660e\u4e0d\u5bf9\u8fd9\u4e9b\u7f3a\u5931\u5185\u5bb9\u4f5c\u5df2\u9a8c\u8bc1\u7ed3\u8bba\u3002\n", "creation_timestamp": "2026-08-31T00:04:37.349996Z"}