{"metadata": {"vulnerability": "CVE-2020-7663", "count": 174, "kinds": {"milestone": 18, "sighting": 3, "kev": 0, "other": 153}}, "data": [{"timestamp": "2015-05-25T00:00:00Z", "date_only": false, "value": "2015-05-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2015-05-25T00:00:00Z", "date_only": false, "value": "2015-05-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2018-01-10T00:00:00Z", "date_only": false, "value": "2018-01-10T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2018-01-10T00:00:00Z", "date_only": false, "value": "2018-01-10T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2018-10-17T00:00:00Z", "date_only": false, "value": "2018-10-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2018-10-17T00:00:00Z", "date_only": false, "value": "2018-10-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2018-10-17T00:00:00Z", "date_only": false, "value": "2018-10-17T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2018-10-17T00:00:00Z", "date_only": false, "value": "2018-10-17T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2019-05-23T00:00:00Z", "date_only": false, "value": "2019-05-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2019-05-23T00:00:00Z", "date_only": false, "value": "2019-05-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2019-06-24T00:00:00Z", "date_only": false, "value": "2019-06-24T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2019-06-24T00:00:00Z", "date_only": false, "value": "2019-06-24T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2019-07-01T00:00:00Z", "date_only": false, "value": "2019-07-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2019-07-01T00:00:00Z", "date_only": false, "value": "2019-07-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2019-08-28T00:00:00Z", "date_only": false, "value": "2019-08-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2019-08-28T00:00:00Z", "date_only": false, "value": "2019-08-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2019-12-12T00:00:00Z", "date_only": false, "value": "2019-12-12T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2019-12-12T00:00:00Z", "date_only": false, "value": "2019-12-12T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2019-12-13T00:00:00Z", "date_only": false, "value": "2019-12-13T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2019-12-13T00:00:00Z", "date_only": false, "value": "2019-12-13T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2019-12-18T00:00:00Z", "date_only": false, "value": "2019-12-18T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2019-12-18T00:00:00Z", "date_only": false, "value": "2019-12-18T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2020-01-08T00:00:00Z", "date_only": false, "value": "2020-01-08T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2020-01-08T00:00:00Z", "date_only": false, "value": "2020-01-08T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2020-01-21T00:00:00Z", "date_only": false, "value": "2020-01-21T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-7663", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-01-22T00:00:00Z", "date_only": false, "value": "2020-01-22T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2020-01-22T00:00:00Z", "date_only": false, "value": "2020-01-22T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2020-01-26T00:00:00Z", "date_only": false, "value": "2020-01-26T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2020-01-26T00:00:00Z", "date_only": false, "value": "2020-01-26T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2020-01-27T00:00:00Z", "date_only": false, "value": "2020-01-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2020-01-27T00:00:00Z", "date_only": false, "value": "2020-01-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2020-02-05T00:00:00Z", "date_only": false, "value": "2020-02-05T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.19.discovery_date"}, {"timestamp": "2020-02-05T00:00:00Z", "date_only": false, "value": "2020-02-05T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.19.discovery_date"}, {"timestamp": "2020-02-10T00:00:00Z", "date_only": false, "value": "2020-02-10T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2020-02-10T00:00:00Z", "date_only": false, "value": "2020-02-10T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2020-02-18T00:00:00Z", "date_only": false, "value": "2020-02-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2020-02-18T00:00:00Z", "date_only": false, "value": "2020-02-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2020-02-18T00:00:00Z", "date_only": false, "value": "2020-02-18T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2020-02-18T00:00:00Z", "date_only": false, "value": "2020-02-18T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2020-03-02T00:00:00Z", "date_only": false, "value": "2020-03-02T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.15.discovery_date"}, {"timestamp": "2020-03-02T00:00:00Z", "date_only": false, "value": "2020-03-02T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.15.discovery_date"}, {"timestamp": "2020-03-02T00:00:00Z", "date_only": false, "value": "2020-03-02T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.15.release_date"}, {"timestamp": "2020-03-02T00:00:00Z", "date_only": false, "value": "2020-03-02T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.15.release_date"}, {"timestamp": "2020-03-03T00:00:00Z", "date_only": false, "value": "2020-03-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.21.release_date"}, {"timestamp": "2020-03-03T00:00:00Z", "date_only": false, "value": "2020-03-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.21.release_date"}, {"timestamp": "2020-03-10T00:00:00Z", "date_only": false, "value": "2020-03-10T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2020-03-10T00:00:00Z", "date_only": false, "value": "2020-03-10T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2020-03-19T00:00:00Z", "date_only": false, "value": "2020-03-19T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2020-03-19T00:00:00Z", "date_only": false, "value": "2020-03-19T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2020-03-19T00:00:00Z", "date_only": false, "value": "2020-03-19T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2020-03-19T00:00:00Z", "date_only": false, "value": "2020-03-19T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2020-03-22T00:00:00Z", "date_only": false, "value": "2020-03-22T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.20.release_date"}, {"timestamp": "2020-03-22T00:00:00Z", "date_only": false, "value": "2020-03-22T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.20.release_date"}, {"timestamp": "2020-03-26T00:00:00Z", "date_only": false, "value": "2020-03-26T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.20.discovery_date"}, {"timestamp": "2020-03-26T00:00:00Z", "date_only": false, "value": "2020-03-26T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.20.discovery_date"}, {"timestamp": "2020-04-06T00:00:00Z", "date_only": false, "value": "2020-04-06T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.22.release_date"}, {"timestamp": "2020-04-06T00:00:00Z", "date_only": false, "value": "2020-04-06T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.22.release_date"}, {"timestamp": "2020-04-08T00:00:00Z", "date_only": false, "value": "2020-04-08T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.22.discovery_date"}, {"timestamp": "2020-04-08T00:00:00Z", "date_only": false, "value": "2020-04-08T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.22.discovery_date"}, {"timestamp": "2020-04-24T00:00:00Z", "date_only": false, "value": "2020-04-24T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2020-04-24T00:00:00Z", "date_only": false, "value": "2020-04-24T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2020-05-05T00:00:00Z", "date_only": false, "value": "2020-05-05T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.19.release_date"}, {"timestamp": "2020-05-05T00:00:00Z", "date_only": false, "value": "2020-05-05T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.19.release_date"}, {"timestamp": "2020-05-12T00:00:00Z", "date_only": false, "value": "2020-05-12T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2020-05-12T00:00:00Z", "date_only": false, "value": "2020-05-12T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2020-05-12T00:00:00Z", "date_only": false, "value": "2020-05-12T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2020-05-12T00:00:00Z", "date_only": false, "value": "2020-05-12T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2020-05-19T00:00:00Z", "date_only": false, "value": "2020-05-19T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.23.release_date"}, {"timestamp": "2020-05-19T00:00:00Z", "date_only": false, "value": "2020-05-19T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.23.release_date"}, {"timestamp": "2020-06-02T00:00:00Z", "date_only": false, "value": "2020-06-02T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.10.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2020-06-02T00:00:00Z", "date_only": false, "value": "2020-06-02T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.10.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2020-06-02T00:00:00Z", "date_only": false, "value": "2020-06-02T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / snyk", "record": "CVE-2020-7663", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-06-02T00:00:00Z", "date_only": true, "value": "2020-06-02", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2020-7663", "record": "GSD-2020-7663", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2020-06-02T00:00:00Z", "date_only": false, "value": "2020-06-02T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.10.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-06-02T00:00:00Z", "date_only": false, "value": "2020-06-02T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.10.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-06-02T18:25:01Z", "date_only": false, "value": "2020-06-02T18:25:01.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-7663", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-06-02T19:15:00Z", "date_only": false, "value": "2020-06-02T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-G6WQ-QCWM-J5G2", "record": "GHSA-G6WQ-QCWM-J5G2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-06-02T19:15:00Z", "date_only": false, "value": "2020-06-02T19:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2020-7663", "record": "UBUNTU-CVE-2020-7663", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-06-02T19:15:00Z", "date_only": false, "value": "2020-06-02T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-7663", "record": "GSD-2020-7663", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-06-02T19:15:12.467Z", "date_only": false, "value": "2020-06-02T19:15:12.467", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-7663", "record": "FKIE_CVE-2020-7663", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-06-05T00:00:00Z", "date_only": true, "value": "2020-06-05", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2020-7663", "record": "GSD-2020-7663", "field": "namespaces.github.com/rubysec/ruby-advisory-db.date"}, {"timestamp": "2020-06-05T00:00:00Z", "date_only": false, "value": "2020-06-05T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2020-7663", "record": "GSD-2020-7663", "field": "gsd.osvSchema.published"}, {"timestamp": "2020-06-05T00:00:00Z", "date_only": false, "value": "2020-06-05T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-7663", "record": "GSD-2020-7663", "field": "gsd.osvSchema.modified"}, {"timestamp": "2020-06-05T14:21:29Z", "date_only": false, "value": "2020-06-05T14:21:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G6WQ-QCWM-J5G2", "record": "GHSA-G6WQ-QCWM-J5G2", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-06-14T00:00:00Z", "date_only": false, "value": "2020-06-14T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.25.release_date"}, {"timestamp": "2020-06-14T00:00:00Z", "date_only": false, "value": "2020-06-14T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.25.release_date"}, {"timestamp": "2020-06-15T00:00:00Z", "date_only": false, "value": "2020-06-15T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2020-06-15T00:00:00Z", "date_only": false, "value": "2020-06-15T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2020-06-15T00:00:00Z", "date_only": false, "value": "2020-06-15T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2020-06-15T00:00:00Z", "date_only": false, "value": "2020-06-15T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2020-06-17T00:00:00Z", "date_only": false, "value": "2020-06-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.25.discovery_date"}, {"timestamp": "2020-06-17T00:00:00Z", "date_only": false, "value": "2020-06-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.25.discovery_date"}, {"timestamp": "2020-07-17T00:00:00Z", "date_only": false, "value": "2020-07-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.26.discovery_date"}, {"timestamp": "2020-07-17T00:00:00Z", "date_only": false, "value": "2020-07-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.26.discovery_date"}, {"timestamp": "2020-07-28T13:30:00Z", "date_only": false, "value": "2020-07-28T13:30:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.26.release_date"}, {"timestamp": "2020-07-28T13:30:00Z", "date_only": false, "value": "2020-07-28T13:30:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.26.release_date"}, {"timestamp": "2020-08-28T00:00:00Z", "date_only": false, "value": "2020-08-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.27.discovery_date"}, {"timestamp": "2020-08-28T00:00:00Z", "date_only": false, "value": "2020-08-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.27.discovery_date"}, {"timestamp": "2020-08-31T02:44:00Z", "date_only": false, "value": "2020-08-31T02:44:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.27.release_date"}, {"timestamp": "2020-08-31T02:44:00Z", "date_only": false, "value": "2020-08-31T02:44:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.27.release_date"}, {"timestamp": "2020-09-02T22:00:00Z", "date_only": false, "value": "2020-09-02T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1087", "record": "WID-SEC-W-2025-1087", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2020-09-02T22:00:00Z", "date_only": false, "value": "2020-09-02T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1087", "record": "WID-SEC-W-2025-1087", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-09-02T22:00:00Z", "date_only": false, "value": "2020-09-02T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1087", "record": "WID-SEC-W-2025-1087", "field": "vulnerabilities.26.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-09-16T22:00:00Z", "date_only": false, "value": "2020-09-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1087", "record": "WID-SEC-W-2025-1087", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2020-09-17T00:00:00Z", "date_only": true, "value": "2020-09-17", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2020-7663", "record": "GSD-2020-7663", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2020-09-17T14:27:33Z", "date_only": false, "value": "2020-09-17T14:27:33.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / snyk", "record": "CVE-2020-7663", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-10-27T12:58:12Z", "date_only": false, "value": "2020-10-27T12:58:12+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2020-10-27T12:58:12Z", "date_only": false, "value": "2020-10-27T12:58:12+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2020-10-27T12:58:12Z", "date_only": false, "value": "2020-10-27T12:58:12+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-10-27T12:58:12Z", "date_only": false, "value": "2020-10-27T12:58:12+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-10-27T12:58:12Z", "date_only": false, "value": "2020-10-27T12:58:12+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.10.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2020-10-27T12:58:12Z", "date_only": false, "value": "2020-10-27T12:58:12+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "vulnerabilities.10.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2022-03-07T11:04:50Z", "date_only": false, "value": "2022-03-07T11:04:50Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2022-1553", "record": "OESA-2022-1553", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-11T11:05:24Z", "date_only": false, "value": "2022-11-11T11:05:24Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2022-2093", "record": "OESA-2022-2093", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-01-20T18:22:00Z", "date_only": false, "value": "2023-01-20T18:22Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-7663", "record": "GSD-2020-7663", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-01-24T12:23:20Z", "date_only": false, "value": "2023-01-24T12:23:20Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:0127-1", "record": "SUSE-SU-2023:0127-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-01-24T12:23:20Z", "date_only": false, "value": "2023-01-24T12:23:20Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:0127-1", "record": "SUSE-SU-2023:0127-1", "field": "document.tracking.generator.date"}, {"timestamp": "2023-01-24T12:23:20Z", "date_only": false, "value": "2023-01-24T12:23:20Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2023:0127-1", "record": "SUSE-SU-2023:0127-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-01-24T12:23:20Z", "date_only": false, "value": "2023-01-24T12:23:20Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:0127-1", "record": "SUSE-SU-2023:0127-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-05-16T16:17:54Z", "date_only": false, "value": "2023-05-16T16:17:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-G6WQ-QCWM-J5G2", "record": "GHSA-G6WQ-QCWM-J5G2", "field": "modified"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11357-1", "record": "OPENSUSE-SU-2024:11357-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13173-1", "record": "OPENSUSE-SU-2024:13173-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11357-1", "record": "OPENSUSE-SU-2024:11357-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13173-1", "record": "OPENSUSE-SU-2024:13173-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11357-1", "record": "OPENSUSE-SU-2024:11357-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13173-1", "record": "OPENSUSE-SU-2024:13173-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11357-1", "record": "OPENSUSE-SU-2024:11357-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13173-1", "record": "OPENSUSE-SU-2024:13173-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-07-12T00:00:00Z", "date_only": false, "value": "2024-07-12T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14180-1", "record": "OPENSUSE-SU-2024:14180-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-12T00:00:00Z", "date_only": false, "value": "2024-07-12T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14180-1", "record": "OPENSUSE-SU-2024:14180-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-07-12T00:00:00Z", "date_only": false, "value": "2024-07-12T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14180-1", "record": "OPENSUSE-SU-2024:14180-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-07-12T00:00:00Z", "date_only": false, "value": "2024-07-12T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14180-1", "record": "OPENSUSE-SU-2024:14180-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-04T09:33:20.058Z", "date_only": false, "value": "2024-08-04T09:33:20.058Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-7663", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T09:33:20.058Z", "date_only": false, "value": "2024-08-04T09:33:20.058Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-7663", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-26T03:07:30Z", "date_only": false, "value": "2024-11-26T03:07:30+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-11-26T03:07:30Z", "date_only": false, "value": "2024-11-26T03:07:30+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-26T03:07:30Z", "date_only": false, "value": "2024-11-26T03:07:30+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2020_4366", "record": "RHSA-2020_4366", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-05-17T00:00:00Z", "date_only": false, "value": "2025-05-17T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15130-1", "record": "OPENSUSE-SU-2025:15130-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-05-17T00:00:00Z", "date_only": false, "value": "2025-05-17T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15130-1", "record": "OPENSUSE-SU-2025:15130-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-05-17T00:00:00Z", "date_only": false, "value": "2025-05-17T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15130-1", "record": "OPENSUSE-SU-2025:15130-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-05-17T00:00:00Z", "date_only": false, "value": "2025-05-17T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15130-1", "record": "OPENSUSE-SU-2025:15130-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-05-18T22:00:00Z", "date_only": false, "value": "2025-05-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1087", "record": "WID-SEC-W-2025-1087", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-05-18T22:00:00Z", "date_only": false, "value": "2025-05-18T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1087", "record": "WID-SEC-W-2025-1087", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-05-19T08:27:29.362Z", "date_only": false, "value": "2025-05-19T08:27:29.362+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1087", "record": "WID-SEC-W-2025-1087", "field": "document.tracking.generator.date"}, {"timestamp": "2025-07-18T16:45:44Z", "date_only": false, "value": "2025-07-18T16:45:44Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2020-7663", "record": "UBUNTU-CVE-2020-7663", "field": "modified"}, {"timestamp": "2026-03-13T00:00:00Z", "date_only": false, "value": "2026-03-13T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10368-1", "record": "OPENSUSE-SU-2026:10368-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-03-13T00:00:00Z", "date_only": false, "value": "2026-03-13T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10368-1", "record": "OPENSUSE-SU-2026:10368-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-03-13T00:00:00Z", "date_only": false, "value": "2026-03-13T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10368-1", "record": "OPENSUSE-SU-2026:10368-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-03-13T00:00:00Z", "date_only": false, "value": "2026-03-13T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10368-1", "record": "OPENSUSE-SU-2026:10368-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-07T15:02:10Z", "date_only": false, "value": "2026-04-07T15:02:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/codeby_sec/9952", "record": "CVE-2020-7663", "field": "creation_timestamp", "uuid": "926dc561-00cf-46e7-8707-b3ef3eaf1753", "content": "\ud83c\udf10STEWS \u2014 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f WebSockets.\n\n\ud83c\udfaf\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438\n\u23fa\ufe0f\u041d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a WebSockets, \u043f\u0443\u0442\u0435\u043c \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0447\u043d\u044f \u0434\u043e\u043c\u0435\u043d\u043e\u0432. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e ZGrab2 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 WebSocket \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u043f\u0435\u0440\u0432\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u044b \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f WebSocket.\n\n\u23fa\ufe0f\u041e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435, \u043a\u0430\u043a\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 WebSockets \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435: \n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u044f \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f\u0445 WebSocket, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043f\u044b\u0442\u0430\u0442\u044c\u0441\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b WebSocket. STEWS \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043a\u0430\u043a \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f WebSocket (\u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 HTTP), \u0442\u0430\u043a \u0438 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 WebSocket (\u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 WebSocket).\n\n\u23fa\ufe0f\u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430, \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440 WebSockets \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c CVE \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c WebSockets: CSWSH (\u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u044b\u0445 \u0432\u0435\u0431-\u0441\u043e\u043a\u0435\u0442\u043e\u0432), CVE-2020-27813,CVE-2020-7662 \u0438 CVE-2020-7663, CVE-2021-32640.\n\n\u0427\u0442\u043e \u0442\u0430\u043a\u043e\u0435 WebSockets\u2753\nWebSocket \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043c\u0435\u0436\u0434\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c. \u0414\u0430\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0442\u0441\u044f \u0432 \u043e\u0431\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0431\u0435\u0437 \u0437\u0430\u0434\u0435\u0440\u0436\u0435\u043a - \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u0447\u0430\u0442\u0435 \u043f\u0440\u0438\u0445\u043e\u0434\u044f\u0442 \u0441\u0440\u0430\u0437\u0443, \u0430 \u0438\u0433\u0440\u043e\u0432\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438. \u041f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 WebSocket \u0441\u0442\u0430\u043b\u043e \u043f\u0440\u043e\u0440\u044b\u0432\u043e\u043c \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u0433\u0434\u0435 \u0432\u0430\u0436\u043d\u0430 \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043a\u0446\u0438\u044f.\n\n\u27a1\ufe0f\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f. \u0421\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 WebSocket \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Upgrade,\u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0449\u0438\u0439 \u043e \u0436\u0435\u043b\u0430\u043d\u0438\u0438 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b Websocket. \u042d\u0442\u043e\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f Websocket-handshake\n \n\u27a1\ufe0f\u041e\u0431\u043c\u0435\u043d \u0434\u0430\u043d\u043d\u044b\u043c\u0438. \u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u201c\u0440\u0443\u043a\u043e\u043f\u043e\u0436\u0430\u0442\u0438\u044f\u201d \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0432 \u043e\u0431\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\n1\ufe0f\u20e3\u041f\u043e\u0438\u0441\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0432\u044b\u0431\u043e\u0440 \u0438\u0437 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0442\u0435\u0441\u0442\u043e\u0432. \u041d\u0438\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u0431\u043e\u0440 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u043e\u0433\u043e \u0442\u0435\u0441\u0442\u0430 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 CVE-2020-27813. \npython3 STEWS-vuln-detect.py -4 -n -u 127.0.0.1:8084\n\n2\ufe0f\u20e3\u0417\u0430\u043f\u0443\u0441\u043a \u0432\u0441\u0435\u0445 \u0442\u0435\u0441\u0442\u043e\u0432\u044b\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0441 \u0444\u043b\u0430\u0433\u043e\u043c -a \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u043e\u0447\u043d\u043e\u0435 \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0442\u043f\u0435\u0447\u0430\u0442\u043a\u043e\u0432, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043d\u044f\u0442\u044c \u043c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0438 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u043e\u0431\u044a\u0435\u043c\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441\u043d\u044f\u0442\u0438\u0435 \u043e\u0442\u043f\u0435\u0447\u0430\u0442\u043a\u0430.\npython3 STEWS-fingerprint.py -1 -k -u streamer.finance.yahoo.com\n\n3\ufe0f\u20e3\u0414\u043b\u044f \u043d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a WebSockets \u0432 \u0444\u0430\u0439\u043b\u0435 known-endpoints.txt \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0434\u043e\u043c\u0435\u043d\u044b \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439.\nSTEWS-discovery.sh\n\n#tools #websockets #network\n\n\ud83d\udd17 \u0412\u0441\u0435 \u043d\u0430\u0448\u0438 \u043a\u0430\u043d\u0430\u043b\u044b \ud83d\udd01 \u0412\u0441\u0435 \u043d\u0430\u0448\u0438 \u0447\u0430\u0442\u044b \ud83e\udea7 \u0414\u043b\u044f \u0441\u0432\u044f\u0437\u0438 \u0441 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u043e\u043c", "url": "https://t.me/codeby_sec/9952"}, {"timestamp": "2026-06-17T03:25:13.380Z", "date_only": false, "value": "2026-06-17T03:25:13.380", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-7663", "record": "FKIE_CVE-2020-7663", "field": "lastModified"}, {"timestamp": "2026-08-06T11:04:50Z", "date_only": false, "value": "2026-08-06T11:04:50Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2022-1553", "record": "OESA-2022-1553", "field": "modified"}, {"timestamp": "2026-08-06T11:05:24Z", "date_only": false, "value": "2026-08-06T11:05:24Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2022-2093", "record": "OESA-2022-2093", "field": "modified"}, {"timestamp": "2026-08-13T17:11:30Z", "date_only": false, "value": "2026-08-13T17:11:30Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-MAILCATCHER-CVE-2020-7663", "record": "BREW-MAILCATCHER-CVE-2020-7663", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-13T17:11:30Z", "date_only": false, "value": "2026-08-13T17:11:30Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-MAILCATCHER-CVE-2020-7663", "record": "BREW-MAILCATCHER-CVE-2020-7663", "field": "modified"}, {"timestamp": "2026-09-01T20:01:57.658Z", "date_only": false, "value": "2026-09-01T20:01:57.658990Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/41067", "record": "CVE-2020-7663", "field": "creation_timestamp", "uuid": "3c914462-1228-4ff8-9c22-db33316e706f", "content": "et-Extensions (series 400)\n* Sec-WebSocket-Protocol (series 500)\n\nThe WebSocket communication contains several fields that can determine the server-size supported features, including:\n\n* Opcodes (series 100)\n* Reserved bits (series 200)\n* Maximum payload length (series 600)\n* Older WebSocket hybi draft protocol features support (series 700)\n\nBy sending unexpected or edge case inputs to the WebSocket server, the STEWS fingerprinting tool can receive different responses from the WebSocket server depending on what server is running. For example, compare the server responses to test case 200 between three different WebSocket implementations:\n\n* Faye: One or more reserved bits are on: reserved1 = 0, reserved2 = 0, reserved3 = 1* Gorilla: unexpected reserved bits 0x10* Java Spring Boot: The client frame set the reserved bits to* Ratchet: Ratchet detected an invalid reserve codeBy collecting many such varying responses, the STEWS finger printer can compare any Web Socket server\u2019s fingerprint against database of known Web Socket servers to attempt to identify it. The current fingerprint database was created using the\u00a0Web Sockets-Playground repository, which simplifies the process of starting multiple local Web Sockets servers. The current fingerprint matching algorithm is very basic and assigns one or two points to each test case to weight some test case results more heavily than others. The fingerprint in the STEWS finger printer database with the smallest points delta is considered the top candidate for an identification match. Adding New Web Socket Server Fingerprints\n\nPlease submit a pull request (PR) if you have a Web Socket fingerprint to add. The fingerprint definition for a WebSocket server is created in the form of a list. You can generate this list for a known Web Socket server using the -gor --generate-fingerprintflag of the STEWS fingerprint tool. Manual edits of the automatically generated fingerprint are recommended based on the test case. For example, the test cases in the \u201ccontain Cases\u201d array (currently test cases 104-206) use a string find test rather than an exact match to determine the fingerprint delta. False Positives and Errors\n\nIf testing a Web Socket server over the internet, additional network elements can interfere with the fingerprinting results. Fingerprinting identifiers from the handshake process, which happens over HTTP, may be modified by a reverse proxy or WAF. It is better to focus on using the Web Socket post-connection fingerprinting identifiers in this situation (see the categorization in the\u00a0How it works\u00a0section), especially error messages that are usually unique to specific Web Socket servers. Web Socket Vulnerability Detection\n\nSTEWS Vulnerability Detection Tool\n\nThe STEWS (Security Tool for Enumerating WebSockets) vulnerability detection tool allows users to test whether a WebSockets endpoint is vulnerable to known CVEs or other WebSockets vulnerabilities.\n\nThe tool currently supports tests for vulnerabilities including:\n\n* CSWSH (Cross-Site WebSocket Hijacking)\n* CVE-2020-27813 (Gorilla DoS Integer Overflow)\n* CVE-2020-7662 &amp; CVE-2020-7663 (faye Sec-WebSocket-Extensions Regex DoS)\n* CVE-2021-32640 (ws Sec-Websocket-Protocol Regex DoS)\n\nA more complete list of CVEs that this tool might support in the future can be found in the\u00a0Awesome WebSocket Security repository. Basic Usage\n\nFirst, make sure you have the necessary Python 3 dependencies installed using pip3 install -r requirements.txt. Then if you run python3 STEWS-vuln-detect.py -hyou will be greeted by the following options:\n\nusage: STEWS-vuln-detect.py [-h] [-v] [-d] [-u URL] [-f FILE] [-n] [-k] [-o ORIGIN] [-1] [-2] [-3] [-4]\nSecurity Testing and Enumeration of WebSockets (STEWS) Vulnerability Detection Tool\noptional arguments:\n-h, \u2013help show this help message and exit\n-v, \u2013verbose Enable [...]", "url": "https://t.me/hacking_Attack/41067"}, {"timestamp": "2026-09-06T11:00:05.872Z", "date_only": false, "value": "2026-09-06T11:00:05.872931Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/41067", "record": "CVE-2020-7663", "field": "creation_timestamp", "uuid": "2efb983f-f6ee-4bac-9254-f8e1af424aa8", "content": "et-Extensions (series 400)\n* Sec-WebSocket-Protocol (series 500)\n\nThe WebSocket communication contains several fields that can determine the server-size supported features, including:\n\n* Opcodes (series 100)\n* Reserved bits (series 200)\n* Maximum payload length (series 600)\n* Older WebSocket hybi draft protocol features support (series 700)\n\nBy sending unexpected or edge case inputs to the WebSocket server, the STEWS fingerprinting tool can receive different responses from the WebSocket server depending on what server is running. For example, compare the server responses to test case 200 between three different WebSocket implementations:\n\n* Faye: One or more reserved bits are on: reserved1 = 0, reserved2 = 0, reserved3 = 1* Gorilla: unexpected reserved bits 0x10* Java Spring Boot: The client frame set the reserved bits to* Ratchet: Ratchet detected an invalid reserve codeBy collecting many such varying responses, the STEWS finger printer can compare any Web Socket server\u2019s fingerprint against database of known Web Socket servers to attempt to identify it. The current fingerprint database was created using the\u00a0Web Sockets-Playground repository, which simplifies the process of starting multiple local Web Sockets servers. The current fingerprint matching algorithm is very basic and assigns one or two points to each test case to weight some test case results more heavily than others. The fingerprint in the STEWS finger printer database with the smallest points delta is considered the top candidate for an identification match. Adding New Web Socket Server Fingerprints\n\nPlease submit a pull request (PR) if you have a Web Socket fingerprint to add. The fingerprint definition for a WebSocket server is created in the form of a list. You can generate this list for a known Web Socket server using the -gor --generate-fingerprintflag of the STEWS fingerprint tool. Manual edits of the automatically generated fingerprint are recommended based on the test case. For example, the test cases in the \u201ccontain Cases\u201d array (currently test cases 104-206) use a string find test rather than an exact match to determine the fingerprint delta. False Positives and Errors\n\nIf testing a Web Socket server over the internet, additional network elements can interfere with the fingerprinting results. Fingerprinting identifiers from the handshake process, which happens over HTTP, may be modified by a reverse proxy or WAF. It is better to focus on using the Web Socket post-connection fingerprinting identifiers in this situation (see the categorization in the\u00a0How it works\u00a0section), especially error messages that are usually unique to specific Web Socket servers. Web Socket Vulnerability Detection\n\nSTEWS Vulnerability Detection Tool\n\nThe STEWS (Security Tool for Enumerating WebSockets) vulnerability detection tool allows users to test whether a WebSockets endpoint is vulnerable to known CVEs or other WebSockets vulnerabilities.\n\nThe tool currently supports tests for vulnerabilities including:\n\n* CSWSH (Cross-Site WebSocket Hijacking)\n* CVE-2020-27813 (Gorilla DoS Integer Overflow)\n* CVE-2020-7662 &amp; CVE-2020-7663 (faye Sec-WebSocket-Extensions Regex DoS)\n* CVE-2021-32640 (ws Sec-Websocket-Protocol Regex DoS)\n\nA more complete list of CVEs that this tool might support in the future can be found in the\u00a0Awesome WebSocket Security repository. Basic Usage\n\nFirst, make sure you have the necessary Python 3 dependencies installed using pip3 install -r requirements.txt. Then if you run python3 STEWS-vuln-detect.py -hyou will be greeted by the following options:\n\nusage: STEWS-vuln-detect.py [-h] [-v] [-d] [-u URL] [-f FILE] [-n] [-k] [-o ORIGIN] [-1] [-2] [-3] [-4]\nSecurity Testing and Enumeration of WebSockets (STEWS) Vulnerability Detection Tool\noptional arguments:\n-h, \u2013help show this help message and exit\n-v, \u2013verbose Enable [...]", "url": "https://t.me/hacking_Attack/41067", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-16T20:02:54Z", "date_only": false, "value": "2026-09-16T20:02:54Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10368-1", "record": "OPENSUSE-SU-2026:10368-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T21:04:40Z", "date_only": false, "value": "2026-09-16T21:04:40Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10368-1", "record": "OPENSUSE-SU-2026:10368-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-17T16:57:36Z", "date_only": false, "value": "2026-09-17T16:57:36Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10368-1", "record": "OPENSUSE-SU-2026:10368-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T16:57:36Z", "date_only": false, "value": "2026-09-17T16:57:36Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10368-1", "record": "OPENSUSE-SU-2026:10368-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T14:51:57Z", "date_only": false, "value": "2026-09-20T14:51:57Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:0127-1", "record": "SUSE-SU-2023:0127-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T14:51:57Z", "date_only": false, "value": "2026-09-20T14:51:57Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:0127-1", "record": "SUSE-SU-2023:0127-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:16:51Z", "date_only": false, "value": "2026-09-20T20:16:51Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11357-1", "record": "OPENSUSE-SU-2024:11357-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:16:51Z", "date_only": false, "value": "2026-09-20T20:16:51Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11357-1", "record": "OPENSUSE-SU-2024:11357-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:55:34Z", "date_only": false, "value": "2026-09-20T20:55:34Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13173-1", "record": "OPENSUSE-SU-2024:13173-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:55:34Z", "date_only": false, "value": "2026-09-20T20:55:34Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13173-1", "record": "OPENSUSE-SU-2024:13173-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T21:15:11Z", "date_only": false, "value": "2026-09-20T21:15:11Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14180-1", "record": "OPENSUSE-SU-2024:14180-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:15:11Z", "date_only": false, "value": "2026-09-20T21:15:11Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14180-1", "record": "OPENSUSE-SU-2024:14180-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T21:33:34Z", "date_only": false, "value": "2026-09-20T21:33:34Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15130-1", "record": "OPENSUSE-SU-2025:15130-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:33:34Z", "date_only": false, "value": "2026-09-20T21:33:34Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15130-1", "record": "OPENSUSE-SU-2025:15130-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-11-02T01:13:48Z", "date_only": false, "value": "2026-11-02T01:13:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-11-02T01:13:48Z", "date_only": false, "value": "2026-11-02T01:13:48+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "document.tracking.generator.date"}, {"timestamp": "2026-11-02T01:13:48Z", "date_only": false, "value": "2026-11-02T01:13:48+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "document.tracking.current_release_date"}], "metrics": {"as_of": "2026-11-02T09:01:12.336Z", "anchors": {"origin": {"timestamp": "2020-06-02T00:00:00Z", "date_only": false, "value": "2020-06-02T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.10.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "discovery": {"timestamp": "2020-06-02T00:00:00Z", "date_only": false, "value": "2020-06-02T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.10.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2020-06-02T00:00:00Z", "date_only": false, "value": "2020-06-02T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.10.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-09-06T11:00:05.872Z", "date_only": false, "value": "2026-09-06T11:00:05.872931Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/41067", "record": "CVE-2020-7663", "field": "creation_timestamp", "uuid": "2efb983f-f6ee-4bac-9254-f8e1af424aa8", "content": "et-Extensions (series 400)\n* Sec-WebSocket-Protocol (series 500)\n\nThe WebSocket communication contains several fields that can determine the server-size supported features, including:\n\n* Opcodes (series 100)\n* Reserved bits (series 200)\n* Maximum payload length (series 600)\n* Older WebSocket hybi draft protocol features support (series 700)\n\nBy sending unexpected or edge case inputs to the WebSocket server, the STEWS fingerprinting tool can receive different responses from the WebSocket server depending on what server is running. For example, compare the server responses to test case 200 between three different WebSocket implementations:\n\n* Faye: One or more reserved bits are on: reserved1 = 0, reserved2 = 0, reserved3 = 1* Gorilla: unexpected reserved bits 0x10* Java Spring Boot: The client frame set the reserved bits to* Ratchet: Ratchet detected an invalid reserve codeBy collecting many such varying responses, the STEWS finger printer can compare any Web Socket server\u2019s fingerprint against database of known Web Socket servers to attempt to identify it. The current fingerprint database was created using the\u00a0Web Sockets-Playground repository, which simplifies the process of starting multiple local Web Sockets servers. The current fingerprint matching algorithm is very basic and assigns one or two points to each test case to weight some test case results more heavily than others. The fingerprint in the STEWS finger printer database with the smallest points delta is considered the top candidate for an identification match. Adding New Web Socket Server Fingerprints\n\nPlease submit a pull request (PR) if you have a Web Socket fingerprint to add. The fingerprint definition for a WebSocket server is created in the form of a list. You can generate this list for a known Web Socket server using the -gor --generate-fingerprintflag of the STEWS fingerprint tool. Manual edits of the automatically generated fingerprint are recommended based on the test case. For example, the test cases in the \u201ccontain Cases\u201d array (currently test cases 104-206) use a string find test rather than an exact match to determine the fingerprint delta. False Positives and Errors\n\nIf testing a Web Socket server over the internet, additional network elements can interfere with the fingerprinting results. Fingerprinting identifiers from the handshake process, which happens over HTTP, may be modified by a reverse proxy or WAF. It is better to focus on using the Web Socket post-connection fingerprinting identifiers in this situation (see the categorization in the\u00a0How it works\u00a0section), especially error messages that are usually unique to specific Web Socket servers. Web Socket Vulnerability Detection\n\nSTEWS Vulnerability Detection Tool\n\nThe STEWS (Security Tool for Enumerating WebSockets) vulnerability detection tool allows users to test whether a WebSockets endpoint is vulnerable to known CVEs or other WebSockets vulnerabilities.\n\nThe tool currently supports tests for vulnerabilities including:\n\n* CSWSH (Cross-Site WebSocket Hijacking)\n* CVE-2020-27813 (Gorilla DoS Integer Overflow)\n* CVE-2020-7662 &amp; CVE-2020-7663 (faye Sec-WebSocket-Extensions Regex DoS)\n* CVE-2021-32640 (ws Sec-Websocket-Protocol Regex DoS)\n\nA more complete list of CVEs that this tool might support in the future can be found in the\u00a0Awesome WebSocket Security repository. Basic Usage\n\nFirst, make sure you have the necessary Python 3 dependencies installed using pip3 install -r requirements.txt. Then if you run python3 STEWS-vuln-detect.py -hyou will be greeted by the following options:\n\nusage: STEWS-vuln-detect.py [-h] [-v] [-d] [-u URL] [-f FILE] [-n] [-k] [-o ORIGIN] [-1] [-2] [-3] [-4]\nSecurity Testing and Enumeration of WebSockets (STEWS) Vulnerability Detection Tool\noptional arguments:\n-h, \u2013help show this help message and exit\n-v, \u2013verbose Enable [...]", "url": "https://t.me/hacking_Attack/41067", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2020-10-27T12:58:12Z", "date_only": false, "value": "2020-10-27T12:58:12+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.10.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 197636405.872, "hours": 54899.00163111111, "days": 2287.4584012962964, "min_seconds": 197550005.872, "max_seconds": 197636405.872, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-06-02T00:00:00Z", "date_only": false, "value": "2020-06-02T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.10.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-06T11:00:05.872Z", "date_only": false, "value": "2026-09-06T11:00:05.872931Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/41067", "record": "CVE-2020-7663", "field": "creation_timestamp", "uuid": "2efb983f-f6ee-4bac-9254-f8e1af424aa8", "content": "et-Extensions (series 400)\n* Sec-WebSocket-Protocol (series 500)\n\nThe WebSocket communication contains several fields that can determine the server-size supported features, including:\n\n* Opcodes (series 100)\n* Reserved bits (series 200)\n* Maximum payload length (series 600)\n* Older WebSocket hybi draft protocol features support (series 700)\n\nBy sending unexpected or edge case inputs to the WebSocket server, the STEWS fingerprinting tool can receive different responses from the WebSocket server depending on what server is running. For example, compare the server responses to test case 200 between three different WebSocket implementations:\n\n* Faye: One or more reserved bits are on: reserved1 = 0, reserved2 = 0, reserved3 = 1* Gorilla: unexpected reserved bits 0x10* Java Spring Boot: The client frame set the reserved bits to* Ratchet: Ratchet detected an invalid reserve codeBy collecting many such varying responses, the STEWS finger printer can compare any Web Socket server\u2019s fingerprint against database of known Web Socket servers to attempt to identify it. The current fingerprint database was created using the\u00a0Web Sockets-Playground repository, which simplifies the process of starting multiple local Web Sockets servers. The current fingerprint matching algorithm is very basic and assigns one or two points to each test case to weight some test case results more heavily than others. The fingerprint in the STEWS finger printer database with the smallest points delta is considered the top candidate for an identification match. Adding New Web Socket Server Fingerprints\n\nPlease submit a pull request (PR) if you have a Web Socket fingerprint to add. The fingerprint definition for a WebSocket server is created in the form of a list. You can generate this list for a known Web Socket server using the -gor --generate-fingerprintflag of the STEWS fingerprint tool. Manual edits of the automatically generated fingerprint are recommended based on the test case. For example, the test cases in the \u201ccontain Cases\u201d array (currently test cases 104-206) use a string find test rather than an exact match to determine the fingerprint delta. False Positives and Errors\n\nIf testing a Web Socket server over the internet, additional network elements can interfere with the fingerprinting results. Fingerprinting identifiers from the handshake process, which happens over HTTP, may be modified by a reverse proxy or WAF. It is better to focus on using the Web Socket post-connection fingerprinting identifiers in this situation (see the categorization in the\u00a0How it works\u00a0section), especially error messages that are usually unique to specific Web Socket servers. Web Socket Vulnerability Detection\n\nSTEWS Vulnerability Detection Tool\n\nThe STEWS (Security Tool for Enumerating WebSockets) vulnerability detection tool allows users to test whether a WebSockets endpoint is vulnerable to known CVEs or other WebSockets vulnerabilities.\n\nThe tool currently supports tests for vulnerabilities including:\n\n* CSWSH (Cross-Site WebSocket Hijacking)\n* CVE-2020-27813 (Gorilla DoS Integer Overflow)\n* CVE-2020-7662 &amp; CVE-2020-7663 (faye Sec-WebSocket-Extensions Regex DoS)\n* CVE-2021-32640 (ws Sec-Websocket-Protocol Regex DoS)\n\nA more complete list of CVEs that this tool might support in the future can be found in the\u00a0Awesome WebSocket Security repository. Basic Usage\n\nFirst, make sure you have the necessary Python 3 dependencies installed using pip3 install -r requirements.txt. Then if you run python3 STEWS-vuln-detect.py -hyou will be greeted by the following options:\n\nusage: STEWS-vuln-detect.py [-h] [-v] [-d] [-u URL] [-f FILE] [-n] [-k] [-o ORIGIN] [-1] [-2] [-3] [-4]\nSecurity Testing and Enumeration of WebSockets (STEWS) Vulnerability Detection Tool\noptional arguments:\n-h, \u2013help show this help message and exit\n-v, \u2013verbose Enable [...]", "url": "https://t.me/hacking_Attack/41067", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 12747492.0, "hours": 3540.97, "days": 147.54041666666666, "min_seconds": 12661092.0, "max_seconds": 12747492.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-06-02T00:00:00Z", "date_only": false, "value": "2020-06-02T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.10.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2020-10-27T12:58:12Z", "date_only": false, "value": "2020-10-27T12:58:12+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.10.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "disclosure_to_patch": {"available": true, "seconds": 12747492.0, "hours": 3540.97, "days": 147.54041666666666, "min_seconds": 12661092.0, "max_seconds": 12747492.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-06-02T00:00:00Z", "date_only": false, "value": "2020-06-02T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.10.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2020-10-27T12:58:12Z", "date_only": false, "value": "2020-10-27T12:58:12+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.10.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 12747492.0, "hours": 3540.97, "days": 147.54041666666666, "min_seconds": 12661092.0, "max_seconds": 12747492.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-06-02T00:00:00Z", "date_only": false, "value": "2020-06-02T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.10.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2020-10-27T12:58:12Z", "date_only": false, "value": "2020-10-27T12:58:12+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.10.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": -184888913.872, "hours": -51358.03163111112, "days": -2139.9179846296297, "min_seconds": -184888913.872, "max_seconds": -184888913.872, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-09-06T11:00:05.872Z", "date_only": false, "value": "2026-09-06T11:00:05.872931Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/41067", "record": "CVE-2020-7663", "field": "creation_timestamp", "uuid": "2efb983f-f6ee-4bac-9254-f8e1af424aa8", "content": "et-Extensions (series 400)\n* Sec-WebSocket-Protocol (series 500)\n\nThe WebSocket communication contains several fields that can determine the server-size supported features, including:\n\n* Opcodes (series 100)\n* Reserved bits (series 200)\n* Maximum payload length (series 600)\n* Older WebSocket hybi draft protocol features support (series 700)\n\nBy sending unexpected or edge case inputs to the WebSocket server, the STEWS fingerprinting tool can receive different responses from the WebSocket server depending on what server is running. For example, compare the server responses to test case 200 between three different WebSocket implementations:\n\n* Faye: One or more reserved bits are on: reserved1 = 0, reserved2 = 0, reserved3 = 1* Gorilla: unexpected reserved bits 0x10* Java Spring Boot: The client frame set the reserved bits to* Ratchet: Ratchet detected an invalid reserve codeBy collecting many such varying responses, the STEWS finger printer can compare any Web Socket server\u2019s fingerprint against database of known Web Socket servers to attempt to identify it. The current fingerprint database was created using the\u00a0Web Sockets-Playground repository, which simplifies the process of starting multiple local Web Sockets servers. The current fingerprint matching algorithm is very basic and assigns one or two points to each test case to weight some test case results more heavily than others. The fingerprint in the STEWS finger printer database with the smallest points delta is considered the top candidate for an identification match. Adding New Web Socket Server Fingerprints\n\nPlease submit a pull request (PR) if you have a Web Socket fingerprint to add. The fingerprint definition for a WebSocket server is created in the form of a list. You can generate this list for a known Web Socket server using the -gor --generate-fingerprintflag of the STEWS fingerprint tool. Manual edits of the automatically generated fingerprint are recommended based on the test case. For example, the test cases in the \u201ccontain Cases\u201d array (currently test cases 104-206) use a string find test rather than an exact match to determine the fingerprint delta. False Positives and Errors\n\nIf testing a Web Socket server over the internet, additional network elements can interfere with the fingerprinting results. Fingerprinting identifiers from the handshake process, which happens over HTTP, may be modified by a reverse proxy or WAF. It is better to focus on using the Web Socket post-connection fingerprinting identifiers in this situation (see the categorization in the\u00a0How it works\u00a0section), especially error messages that are usually unique to specific Web Socket servers. Web Socket Vulnerability Detection\n\nSTEWS Vulnerability Detection Tool\n\nThe STEWS (Security Tool for Enumerating WebSockets) vulnerability detection tool allows users to test whether a WebSockets endpoint is vulnerable to known CVEs or other WebSockets vulnerabilities.\n\nThe tool currently supports tests for vulnerabilities including:\n\n* CSWSH (Cross-Site WebSocket Hijacking)\n* CVE-2020-27813 (Gorilla DoS Integer Overflow)\n* CVE-2020-7662 &amp; CVE-2020-7663 (faye Sec-WebSocket-Extensions Regex DoS)\n* CVE-2021-32640 (ws Sec-Websocket-Protocol Regex DoS)\n\nA more complete list of CVEs that this tool might support in the future can be found in the\u00a0Awesome WebSocket Security repository. Basic Usage\n\nFirst, make sure you have the necessary Python 3 dependencies installed using pip3 install -r requirements.txt. Then if you run python3 STEWS-vuln-detect.py -hyou will be greeted by the following options:\n\nusage: STEWS-vuln-detect.py [-h] [-v] [-d] [-u URL] [-f FILE] [-n] [-k] [-o ORIGIN] [-1] [-2] [-3] [-4]\nSecurity Testing and Enumeration of WebSockets (STEWS) Vulnerability Detection Tool\noptional arguments:\n-h, \u2013help show this help message and exit\n-v, \u2013verbose Enable [...]", "url": "https://t.me/hacking_Attack/41067", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2020-10-27T12:58:12Z", "date_only": false, "value": "2020-10-27T12:58:12+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2020:4366", "record": "RHSA-2020:4366", "field": "vulnerabilities.10.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}}}
