{"vulnerability": "cve-2026-7868", "sightings": [{"uuid": "f14d1fbf-667d-4b03-b691-6d1adecacbca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78683", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtuqytwvum2e", "content": "CVE-2026-78683 - nltk\nIf your software uses the NLTK library version 3.9.4 or earlier and loads a model file, a specially crafted file could cause the program to execute any code the attacker wants, using the same\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nltk #CVE #infosec", "creation_timestamp": "2026-08-25T02:20:05.020314Z"}, {"uuid": "339be634-aebe-4704-8d5a-5341c94e9356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78681", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/f7u3oh5poev6s", "content": "CVE-2026-78681 - NLTK before 3.10.3 Entity Expansion DoS via ElementTree\nCVE ID : CVE-2026-78681\n \n Published : Aug. 25, 2026, 1:30 a.m. | 34\u00a0minutes ago\n \n Description : NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which honors entit...", "creation_timestamp": "2026-08-25T02:20:29.138395Z"}, {"uuid": "aa1682df-db7a-4415-80ea-9a146544d965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78680", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bh4tzp56agjfe", "content": "CVE-2026-78680 - NLTK before 3.10.3 Arbitrary Code Execution via Graphviz dot Binary\nCVE ID : CVE-2026-78680\n \n Published : Aug. 25, 2026, 1:30 a.m. | 34\u00a0minutes ago\n \n Description : NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the Graphviz do...", "creation_timestamp": "2026-08-25T02:26:29.297360Z"}, {"uuid": "80aade49-0918-45f5-b6fa-80feca6e79b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78682", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jncnsizlxkj4d", "content": "CVE-2026-78682 - NLTK before 3.10.3 SSRF Protection Bypass via Proxy\nCVE ID : CVE-2026-78682\n \n Published : Aug. 25, 2026, 1:30 a.m. | 34\u00a0minutes ago\n \n Description : NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen (and callers n...", "creation_timestamp": "2026-08-25T02:32:29.210512Z"}, {"uuid": "02b2b752-7912-46f5-877a-5f4eb1e84f1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78683", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6kw3zehwcdngz", "content": "CVE-2026-78683 - NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization\nCVE ID : CVE-2026-78683\n \n Published : Aug. 25, 2026, 1:30 a.m. | 34\u00a0minutes ago\n \n Description : NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserializa...", "creation_timestamp": "2026-08-25T02:34:29.132341Z"}, {"uuid": "14e485f9-80d6-4ef1-8852-22505b54f225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78683", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtux2jtqfy2y", "content": "\ud83d\udea8 CVE-2026-78683 \u2014 CVSS 9.4 CRITICAL\n\nNLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization vulnerability in t...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78683\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T04:08:25.133559Z"}, {"uuid": "ed50a1d8-a265-4a26-99b7-3f94bab67ca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78685", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7eq3ooupagefw", "content": "CVE-2026-78685 - Le-yan\uff5cMedical Practice Management System - Remote Code Execution\nCVE ID : CVE-2026-78685\n \n Published : Aug. 25, 2026, 3:16 a.m. | 1\u00a0hour, 18\u00a0minutes ago\n \n Description : Medical Practice Management System developed by Le-yan has a Remote Code Execution vulne...", "creation_timestamp": "2026-08-25T04:39:30.375799Z"}, {"uuid": "15ef0133-8acd-4a48-8bac-0e48b2a7503e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-78685", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11128-8bd30-2.html", "content": "", "creation_timestamp": "2026-08-25T04:45:06.244680Z"}, {"uuid": "cc026ef9-0ce8-4b77-913d-cdda858938e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78683", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtv23xes3r2b", "content": "Daily IT Security Digest \u2014 2026-08-25\nevents, and files via a single malicious link. Add \"NLTK unsafe pickle deserialization (CVE-2026-78683, CVSS 9.4)\" to your patching queue. [Sources: [@offseq@infosec.exchange](https://infosec.exchange/@offseq/117092687906166890),", "creation_timestamp": "2026-08-25T05:02:53.185857Z"}, {"uuid": "ca03fde5-a153-4be6-b9af-3c8f09e68151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78683", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtv23xxz3y2k", "content": "Daily IT Security Digest \u2014 2026-08-25\n[@stemshop.bsky.social](https://stemshop.top/cve/CVE-2026-78683)]", "creation_timestamp": "2026-08-25T05:02:53.692801Z"}, {"uuid": "7d8b1d04-25db-4598-84cc-c56e573855ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78683", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtvfogn5lj2c", "content": "CVE-2026-78683\nVersions of the NLTK library up to 3.9.4 can load specially crafted model files that run any code on the system. This happens because the library deserializes data without proper safety checks, giving an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T08:30:04.815568Z"}, {"uuid": "bd9d807c-ac9e-4af8-a610-95b8a8e688be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78683", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muh2z4hjli23", "content": "\ud83d\udccc CVE-2026-78683 - NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/pa... https://www.cyberhub.blog/cves/CVE-2026-78683", "creation_timestamp": "2026-09-01T09:07:07.098424Z"}, {"uuid": "78794a16-96f2-474e-82cb-515f0e4030bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78682", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muhk3wgcdl2f", "content": "\ud83d\udccc CVE-2026-78682 - NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen (and callers nltk.data.load, nltk.downloader.Downloade... https://www.cyberhub.blog/cves/CVE-2026-78682", "creation_timestamp": "2026-09-01T13:37:08.027644Z"}, {"uuid": "f2387d22-ebc7-4d76-9cb3-4076e004b87e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78680", "type": "seen", "source": "https://gist.github.com/alon710/7b6bce40e6566e480602c24860523089", "content": "# CVE-2026-78680: CVE-2026-78680: Arbitrary Code Execution in NLTK via Untrusted Graphviz Path Resolution\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-09-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-78680\n\n## Summary\nAn Untrusted Search Path (CWE-426) vulnerability exists in the Natural Language Toolkit (NLTK) library when executing the Graphviz 'dot' utility. Because the library fails to enforce absolute paths when executing external commands, local attackers can plant a malicious binary named 'dot' inside the current working directory. The library then executes the malicious binary, resulting in local arbitrary code execution under the context of the running Python process.\n\n## TL;DR\nNLTK versions prior to 3.10.3 are vulnerable to local arbitrary code execution via an untrusted search path flaw when invoking the Graphviz 'dot' command.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-426, CWE-427\n- **Attack Vector**: Local (L)\n- **CVSS v3.1 Score**: 7.8 (High)\n- **CVSS v4.0 Score**: 8.5 (High)\n- **EPSS Score**: 0.0012 (Percentile: 2.07%)\n- **Exploit Maturity**: Proof of Concept (PoC)\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- NLTK library installations on Windows\n- NLTK library installations on Linux/macOS with relative directory entries in PATH\n- **nltk**: < 3.10.3 (Fixed in: `3.10.3`)\n\n## Mitigation\n\n- Upgrade NLTK dependency to version 3.10.3 or higher.\n- Remove relative directory markers (like '.') and empty paths from the system PATH environment variable.\n- Avoid running Python/NLTK scripts inside directories that contain untrusted or user-writeable files.\n\n**Remediation Steps:**\n1. Identify current NLTK installations using command: pip show nltk\n2. Upgrade NLTK by running: pip install --upgrade nltk>=3.10.3\n3. Verify installation by checking version in Python: python -c \"import nltk; print(nltk.__version__)\"\n4. Ensure that local workspace directories do not contain arbitrary executables named 'dot' or 'dot.exe'\n\n## References\n\n- [https://github.com/nltk/nltk/security/advisories/GHSA-6hwm-xvph-95vm](https://github.com/nltk/nltk/security/advisories/GHSA-6hwm-xvph-95vm)\n- [https://nvd.nist.gov/vuln/detail/CVE-2026-78680](https://nvd.nist.gov/vuln/detail/CVE-2026-78680)\n- [https://www.vulncheck.com/advisories/nltk-before-arbitrary-code-execution-via-graphviz-dot-binary](https://www.vulncheck.com/advisories/nltk-before-arbitrary-code-execution-via-graphviz-dot-binary)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-78680) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-02T09:31:32.902838Z"}, {"uuid": "7b46a1ff-058f-4656-8a9d-efed5a8be5aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78681", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujyv6tniv2v", "content": "\ud83d\udccc CVE-2026-78681 - NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which honors entity declarations in document DTDs. Attackers c... https://www.cyberhub.blog/cves/CVE-2026-78681", "creation_timestamp": "2026-09-02T13:07:06.788277Z"}, {"uuid": "c27d2e10-f0cd-43fe-8bb8-54631a1074a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78689", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mukjonpqaf2t", "content": "\ud83d\udea8 CVE-2026-78689 \u2014 CVSS 9.2 CRITICAL\n\nDescription NGINX JavaScript (njs) has a vulnerability in the XML module's namespace prefix list parser, re...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78689\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-02T18:07:41.228629Z"}, {"uuid": "9375a100-24b2-4207-9cd4-d21e2fc7ee78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78689", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muklimnqxi2o", "content": "CVE-2026-78689 - nginx javascript\nIf your NGINX server uses the JavaScript (njs) module and processes XML data, an attacker can send specially crafted XML that makes the server write data outside its\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nginxjavascript #f5 #CVE #infosec", "creation_timestamp": "2026-09-02T18:40:07.266698Z"}, {"uuid": "5c2a7929-638f-424d-82f9-4717bfcb8ea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78689", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117203030580753677", "content": "I am fortunate enough to not know anything about NGINX JavaScript ( hashtag blessed ) but if you do, this might be of interest.\nhttps://nvd.nist.gov/vuln/detail/cve-2026-78689\n\nDescription NGINX JavaScript (njs) has a vulnerability in the XML module's namespace prefix list parser, reachable through the xml.exclusiveC14n() method. An unauthenticated remote attacker can trigger it when an affected NGINX configuration passes an externally controlled XML namespace prefix list to that method. Both the njs and the QuickJS (qjs) engines are affected. A crafted prefix list causes an out-of-bounds write past the end of a heap allocation. With the njs engine, which is the engine used when the js_engine directive is absent, this corrupts adjacent objects and crashes the NGINX worker. With the QuickJS engine, the same call additionally leaks the prefix list on every invocation, causing worker memory to grow across requests. The official nginxinc/nginx-saml reference implementation is affected during SAML signature verification. It reads InclusiveNamespaces/@PrefixList from an untrusted SAML message and passes it to xml.exclusiveC14n() before the signature has been verified, so a valid SAML signature is not required. A crafted SAML Response, Assertion, LogoutRequest, or LogoutResponse is sufficient. Code execution has not been demonstrated and cannot be ruled out for all platforms, as the effect of the out-of-bounds write depends on conditions beyond the attacker's control.   Impact This vulnerability allows remote attackers to cause a denial of service on the NGINX system, either through repeatable worker restarts or through worker memory growth or possibly trigger code execution. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.", "creation_timestamp": "2026-09-02T19:12:02.029361Z"}, {"uuid": "181f27d5-adbb-4c8f-8ef5-3c6153821f1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-78689", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2047", "content": "", "creation_timestamp": "2026-09-03T08:45:21.004210Z"}, {"uuid": "51db6476-f366-4b94-a779-a5c4d78dab39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-78689", "type": "seen", "source": "https://www.acn.gov.it/portale/w/f5-risolte-vulnerabilita-nei-prodotti-nginx", "content": "", "creation_timestamp": "2026-09-03T12:45:02.506814Z"}, {"uuid": "7450f297-ec55-442f-8c5d-8e60263c62da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78689", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mumli32zq72z", "content": "\ud83d\udd17 CVE : CVE-2026-18329, CVE-2026-33278, CVE-2026-42959, CVE-2026-63020, CVE-2026-66362, CVE-2026-66842, CVE-2026-77180, CVE-2026-78222, CVE-2026-78689", "creation_timestamp": "2026-09-03T13:45:08.261917Z"}, {"uuid": "c758fbc8-b471-425d-b6e9-8d8642ce98c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78689", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3muow76ildd2t", "content": "HIGH severity CVE just published in nginx:\n\nCVE-2026-78689. Description NGINX JavaScript (njs) has a vulnerability in the XML module's namespace prefix list parser, reachable through the xml.exclusiveC14n() method. An unauthenticated remote attacke\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-78689", "creation_timestamp": "2026-09-04T12:02:19.571870Z"}, {"uuid": "43bf5e5d-51dd-4351-87e0-345b0a7ffe82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78681", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3muznadqxhx2i", "content": "NLTK 3.10.2 and earlier can exhaust your process memory when attacker-controlled XML reaches its ACE, ElementWrapper or downloader parsers. CVE-2026-78681 uses recursive entity expansion. #software", "creation_timestamp": "2026-09-08T18:21:12.801575Z"}, {"uuid": "15663284-f188-4e18-accf-d1f5905dad19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-78681", "type": "published-proof-of-concept", "source": "https://github.com/nltk/nltk/security/advisories/GHSA-97qj-x29f-37w7", "content": "", "creation_timestamp": "2026-09-08T18:35:21.579143Z"}, {"uuid": "96e66e70-578e-4c11-a86a-0de0518a611d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-78682", "type": "published-proof-of-concept", "source": "https://github.com/nltk/nltk/security/advisories/GHSA-6ww7-3frv-cqxh", "content": "", "creation_timestamp": "2026-09-08T18:35:23.828007Z"}, {"uuid": "60d7c36e-6522-43ae-892c-f64688b75601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-78683", "type": "published-proof-of-concept", "source": "https://github.com/nltk/nltk/security/advisories/GHSA-rhp5-r9x4-f5g2", "content": "", "creation_timestamp": "2026-09-08T18:35:26.050046Z"}, {"uuid": "62e4d8e4-8af0-4e2e-a123-285d4172fa2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78689", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwvjve4qvs2h", "content": "\u300cNGINX JavaScript\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027 - \u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u516c\u958b\n\nNGINX\u4e0a\u3067JavaScript\u306b\u3088\u308b\u51e6\u7406\u3092\u5b9f\u884c\u3059\u308b\u305f\u3081\u306b\u7528\u3044\u3089\u308c\u308b\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u300cNGINX JavaScript\uff08njs\uff09\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u3002\n\nF5\u306f\u73fe\u5730\u6642\u95932026\u5e749\u67082\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30013\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-78689\u300d\u300cCVE-2026-18329\u300d\u300cCVE-2026-78222\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\u958b\u767a\u30c1\u30fc\u30e0\u306f\u300cCVE-2026-78689\u300d\u3092\u300cmajor\u300d\u3001\u306e\u3053\u308b2\u4ef6\u3092\u300cmedium\u300d\u3068\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0\u3057\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-10-02T14:01:07.326704Z"}]}