{"metadata": {"vulnerability": "CVE-2020-35149", "count": 43, "kinds": {"milestone": 6, "sighting": 9, "kev": 0, "other": 28}}, "data": [{"timestamp": "2020-06-17T00:00:00Z", "date_only": false, "value": "2020-06-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:1369", "record": "RHSA-2021:1369", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2020-06-17T00:00:00Z", "date_only": false, "value": "2020-06-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021_1369", "record": "RHSA-2021_1369", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2020-06-17T00:00:00Z", "date_only": false, "value": "2020-06-17T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:1369", "record": "RHSA-2021:1369", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2020-06-17T00:00:00Z", "date_only": false, "value": "2020-06-17T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021_1369", "record": "RHSA-2021_1369", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2020-12-11T00:00:00Z", "date_only": true, "value": "2020-12-11", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2020-35149", "record": "GSD-2020-35149", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2020-12-11T00:00:00Z", "date_only": false, "value": "2020-12-11T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:1369", "record": "RHSA-2021:1369", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-12-11T00:00:00Z", "date_only": false, "value": "2020-12-11T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021_1369", "record": "RHSA-2021_1369", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-12-11T00:00:00Z", "date_only": false, "value": "2020-12-11T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-35149", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-12-11T19:00:00Z", "date_only": false, "value": "2020-12-11T19:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-35149", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-12-11T19:00:00Z", "date_only": false, "value": "2020-12-11T19:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2020-35149", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-12-11T19:15:00Z", "date_only": false, "value": "2020-12-11T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-35149", "record": "GSD-2020-35149", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-12-11T19:15:12.887Z", "date_only": false, "value": "2020-12-11T19:15:12.887", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-35149", "record": "FKIE_CVE-2020-35149", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-12-11T22:38:51Z", "date_only": false, "value": "2020-12-11T22:38:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20478", "record": "CVE-2020-35149", "field": "creation_timestamp", "uuid": "5227acda-eb85-4504-a106-9ef773b42478", "content": "\u203c CVE-2020-35149 \u203c\n\nlib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20478"}, {"timestamp": "2020-12-11T22:54:26Z", "date_only": false, "value": "2020-12-11T22:54:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20497", "record": "CVE-2020-35149", "field": "creation_timestamp", "uuid": "860b67cb-b105-4549-8e4d-eee247d1f680", "content": "\u203c CVE-2020-35149 \u203c\n\nlib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20497"}, {"timestamp": "2020-12-11T23:25:20Z", "date_only": false, "value": "2020-12-11T23:25:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20517", "record": "CVE-2020-35149", "field": "creation_timestamp", "uuid": "0f62fb55-77f7-4932-9b1e-ffc001513514", "content": "\u203c CVE-2020-35149 \u203c\n\nlib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20517"}, {"timestamp": "2020-12-12T00:25:20Z", "date_only": false, "value": "2020-12-12T00:25:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20537", "record": "CVE-2020-35149", "field": "creation_timestamp", "uuid": "f450acc4-7e2d-4359-82b7-0862496afa57", "content": "\u203c CVE-2020-35149 \u203c\n\nlib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20537"}, {"timestamp": "2020-12-12T00:35:45Z", "date_only": false, "value": "2020-12-12T00:35:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20550", "record": "CVE-2020-35149", "field": "creation_timestamp", "uuid": "4edf44a6-36ee-4445-88f8-612d0422645d", "content": "\u203c CVE-2020-35149 \u203c\n\nlib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20550"}, {"timestamp": "2020-12-12T00:45:39Z", "date_only": false, "value": "2020-12-12T00:45:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20570", "record": "CVE-2020-35149", "field": "creation_timestamp", "uuid": "53b6b54d-ef3c-4cff-8868-b7f4c4f30eb6", "content": "\u203c CVE-2020-35149 \u203c\n\nlib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20570"}, {"timestamp": "2020-12-12T01:04:57Z", "date_only": false, "value": "2020-12-12T01:04:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20589", "record": "CVE-2020-35149", "field": "creation_timestamp", "uuid": "aa724b32-4aa2-4aba-a1b7-f3f1a6e01c4c", "content": "\u203c CVE-2020-35149 \u203c\n\nlib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20589"}, {"timestamp": "2020-12-12T01:25:08Z", "date_only": false, "value": "2020-12-12T01:25:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20609", "record": "CVE-2020-35149", "field": "creation_timestamp", "uuid": "c8c0e699-1d38-41c8-81e4-801bb72231ae", "content": "\u203c CVE-2020-35149 \u203c\n\nlib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20609"}, {"timestamp": "2020-12-12T02:25:12Z", "date_only": false, "value": "2020-12-12T02:25:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20629", "record": "CVE-2020-35149", "field": "creation_timestamp", "uuid": "019912ea-78cf-4e12-b7b3-f03d6c01a6cd", "content": "\u203c CVE-2020-35149 \u203c\n\nlib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20629"}, {"timestamp": "2020-12-14T00:00:00Z", "date_only": true, "value": "2020-12-14", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2020-35149", "record": "GSD-2020-35149", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2020-12-14T21:12:00Z", "date_only": false, "value": "2020-12-14T21:12Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-35149", "record": "GSD-2020-35149", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2020-12-17T22:54:00Z", "date_only": false, "value": "2020-12-17T22:54:00Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-45Q2-34RF-MR94", "record": "GHSA-45Q2-34RF-MR94", "field": "modified"}, {"timestamp": "2020-12-18T18:23:43Z", "date_only": false, "value": "2020-12-18T18:23:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-45Q2-34RF-MR94", "record": "GHSA-45Q2-34RF-MR94", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-02-16T00:00:00Z", "date_only": false, "value": "2021-02-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:1369", "record": "RHSA-2021:1369", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2021-02-16T00:00:00Z", "date_only": false, "value": "2021-02-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021_1369", "record": "RHSA-2021_1369", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2021-04-26T16:26:19Z", "date_only": false, "value": "2021-04-26T16:26:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:1369", "record": "RHSA-2021:1369", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-04-26T16:26:19Z", "date_only": false, "value": "2021-04-26T16:26:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021_1369", "record": "RHSA-2021_1369", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-04-26T16:26:19Z", "date_only": false, "value": "2021-04-26T16:26:19+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2021:1369", "record": "RHSA-2021:1369", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-04-26T16:26:19Z", "date_only": false, "value": "2021-04-26T16:26:19+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2021_1369", "record": "RHSA-2021_1369", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-04-26T16:26:19Z", "date_only": false, "value": "2021-04-26T16:26:19+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2021:1369", "record": "RHSA-2021:1369", "field": "vulnerabilities.1.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2021-04-26T16:26:19Z", "date_only": false, "value": "2021-04-26T16:26:19+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2021_1369", "record": "RHSA-2021_1369", "field": "vulnerabilities.1.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2023-12-13T01:22:00.847Z", "date_only": false, "value": "2023-12-13T01:22:00.847177Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-35149", "record": "GSD-2020-35149", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T16:55:10.821Z", "date_only": false, "value": "2024-08-04T16:55:10.821Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-35149", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T16:55:10.821Z", "date_only": false, "value": "2024-08-04T16:55:10.821Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-35149", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-17T21:13:28Z", "date_only": false, "value": "2024-12-17T21:13:28+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021_1369", "record": "RHSA-2021_1369", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-12-17T21:13:28Z", "date_only": false, "value": "2024-12-17T21:13:28+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2021_1369", "record": "RHSA-2021_1369", "field": "document.tracking.generator.date"}, {"timestamp": "2024-12-17T21:13:28Z", "date_only": false, "value": "2024-12-17T21:13:28+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2021_1369", "record": "RHSA-2021_1369", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-17T03:13:26.873Z", "date_only": false, "value": "2026-06-17T03:13:26.873", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-35149", "record": "FKIE_CVE-2020-35149", "field": "lastModified"}, {"timestamp": "2026-11-01T04:51:36Z", "date_only": false, "value": "2026-11-01T04:51:36+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:1369", "record": "RHSA-2021:1369", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-11-01T04:51:36Z", "date_only": false, "value": "2026-11-01T04:51:36+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2021:1369", "record": "RHSA-2021:1369", "field": "document.tracking.generator.date"}, {"timestamp": "2026-11-01T04:51:36Z", "date_only": false, "value": "2026-11-01T04:51:36+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2021:1369", "record": "RHSA-2021:1369", "field": "document.tracking.current_release_date"}], "metrics": {"as_of": "2026-11-01T21:19:40.573Z", "anchors": {"origin": {"timestamp": "2021-02-16T00:00:00Z", "date_only": false, "value": "2021-02-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:1369", "record": "RHSA-2021:1369", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "discovery": {"timestamp": "2021-02-16T00:00:00Z", "date_only": false, "value": "2021-02-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:1369", "record": "RHSA-2021:1369", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2020-12-11T00:00:00Z", "date_only": false, "value": "2020-12-11T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:1369", "record": "RHSA-2021:1369", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": {"timestamp": "2021-04-26T16:26:19Z", "date_only": false, "value": "2021-04-26T16:26:19+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2021:1369", "record": "RHSA-2021:1369", "field": "vulnerabilities.1.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 6020779.0, "hours": 1672.4386111111112, "days": 69.68494212962963, "min_seconds": 5934379.0, "max_seconds": 6020779.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-02-16T00:00:00Z", "date_only": false, "value": "2021-02-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:1369", "record": "RHSA-2021:1369", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-04-26T16:26:19Z", "date_only": false, "value": "2021-04-26T16:26:19+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2021:1369", "record": "RHSA-2021:1369", "field": "vulnerabilities.1.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "disclosure_to_patch": {"available": true, "seconds": 11809579.0, "hours": 3280.438611111111, "days": 136.68494212962963, "min_seconds": 11723179.0, "max_seconds": 11809579.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-12-11T00:00:00Z", "date_only": false, "value": "2020-12-11T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:1369", "record": "RHSA-2021:1369", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-04-26T16:26:19Z", "date_only": false, "value": "2021-04-26T16:26:19+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2021:1369", "record": "RHSA-2021:1369", "field": "vulnerabilities.1.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 6020779.0, "hours": 1672.4386111111112, "days": 69.68494212962963, "min_seconds": 5934379.0, "max_seconds": 6020779.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-02-16T00:00:00Z", "date_only": false, "value": "2021-02-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:1369", "record": "RHSA-2021:1369", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-04-26T16:26:19Z", "date_only": false, "value": "2021-04-26T16:26:19+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2021:1369", "record": "RHSA-2021:1369", "field": "vulnerabilities.1.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}