{"metadata": {"vulnerability": "CVE-2020-37280", "count": 15, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 9}}, "data": [{"timestamp": "2020-11-10T00:00:00Z", "date_only": false, "value": "2020-11-10T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2020-37280", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-12T19:27:44.866Z", "date_only": false, "value": "2026-10-12T19:27:44.866Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-37280", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T20:55:04.662Z", "date_only": false, "value": "2026-10-12T20:55:04.662Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-37280", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T20:55:04.662Z", "date_only": false, "value": "2026-10-12T20:55:04.662Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2020-37280", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T21:04:00.506Z", "date_only": false, "value": "2026-10-12T21:04:00.506028Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117429963329698476", "record": "CVE-2020-37280", "field": "creation_timestamp", "uuid": "8f92d694-fcbc-4839-af86-a49836dd45f6", "content": "CVE-2020-37280 cbor-sync through 1.0.4 Memory Exhaustion via Unchecked CBOR Array Lengths cbor-sync through 1.0.4 contains a resource exhaustion vulnerability in CBOR.decode that trusts declared array and map lengths without checking remaining input. Remote attackers can supply a tiny crafted CBOR payload declaring huge lengths to drive billions of iterations, exhausting CPU and process memory.\nhttps://www.cve.org/CVERecord?id=CVE-2020-37280https://github.com/PelionIoT/cbor-sync/pull/4https://github.com/PelionIoT/cbor-sync/issues/6https://github.com/PelionIoT/cbor-synchttps://www.vulncheck.com/advisories/cbor-sync-through-1.0.4-memory-exhaustion-via-unchecked-cbor-array-lengths#PelionIoT #cbor-sync#CVE_2020_37280#bot", "url": "https://infosec.exchange/users/cve/statuses/117429963329698476"}, {"timestamp": "2026-10-12T21:17:05Z", "date_only": false, "value": "2026-10-12T21:17:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FPG7-639F-4V49", "record": "GHSA-FPG7-639F-4V49", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-12T21:17:05.733Z", "date_only": false, "value": "2026-10-12T21:17:05.733", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-37280", "record": "FKIE_CVE-2020-37280", "field": "published"}, {"timestamp": "2026-10-12T21:31:57Z", "date_only": false, "value": "2026-10-12T21:31:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FPG7-639F-4V49", "record": "GHSA-FPG7-639F-4V49", "field": "published"}, {"timestamp": "2026-10-12T21:31:57Z", "date_only": false, "value": "2026-10-12T21:31:57Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FPG7-639F-4V49", "record": "GHSA-FPG7-639F-4V49", "field": "modified"}, {"timestamp": "2026-10-13T06:38:01.957Z", "date_only": false, "value": "2026-10-13T06:38:01.957206Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxqgb7bujw2k", "record": "CVE-2020-37280", "field": "creation_timestamp", "uuid": "2bec17fd-41f9-4cb0-9f90-2f1e366a3e30", "content": "cbor-sync 1.0.4\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u3001CBOR.decode\u3067\u3001\u5165\u529b\u30d0\u30a4\u30c8\u6570\u78ba\u8a8d\u305b\u305a\u306b\u5ba3\u8a00\u3055\u308c\u305f\u914d\u5217\u30fb\u30de\u30c3\u30d7\u9577\u3092\u4fe1\u983c\u3059\u308b\u30ea\u30bd\u30fc\u30b9\u67af\u6e07\u306e\u8106\u5f31\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u653b\u6483\u8005\u306f\u7d30\u5de5\u3055\u308c\u305fCBOR\u30da\u30a4\u30ed\u30fc\u2026\nCVE-2020-37280 CVSS 7.5 | HIGH", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mxqgb7bujw2k"}, {"timestamp": "2026-10-13T16:22:06.815Z", "date_only": false, "value": "2026-10-13T16:22:06.815030Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-37280", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T16:22:06.815Z", "date_only": false, "value": "2026-10-13T16:22:06.815030Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-37280", "record": "FKIE_CVE-2020-37280", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T16:52:41.604Z", "date_only": false, "value": "2026-10-13T16:52:41.604Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-37280", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T16:52:41.604Z", "date_only": false, "value": "2026-10-13T16:52:41.604Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-37280", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T19:18:44.867Z", "date_only": false, "value": "2026-10-16T19:18:44.867", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-37280", "record": "FKIE_CVE-2020-37280", "field": "lastModified"}]}