{"metadata": {"vulnerability": "CVE-2026-110857", "count": 15, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-30T00:00:00Z", "date_only": false, "value": "2026-09-30T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-110857", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-14T22:16:22.734Z", "date_only": false, "value": "2026-10-14T22:16:22.734Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-110857", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T22:52:40.373Z", "date_only": false, "value": "2026-10-14T22:52:40.373Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110857", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T22:52:40.373Z", "date_only": false, "value": "2026-10-14T22:52:40.373Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-110857", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T23:17:26Z", "date_only": false, "value": "2026-10-14T23:17:26Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JJ45-MJ3G-556C", "record": "GHSA-JJ45-MJ3G-556C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T23:17:26.903Z", "date_only": false, "value": "2026-10-14T23:17:26.903", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110857", "record": "FKIE_CVE-2026-110857", "field": "published"}, {"timestamp": "2026-10-15T00:31:18Z", "date_only": false, "value": "2026-10-15T00:31:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JJ45-MJ3G-556C", "record": "GHSA-JJ45-MJ3G-556C", "field": "published"}, {"timestamp": "2026-10-15T00:31:18Z", "date_only": false, "value": "2026-10-15T00:31:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JJ45-MJ3G-556C", "record": "GHSA-JJ45-MJ3G-556C", "field": "modified"}, {"timestamp": "2026-10-15T01:14:50.803Z", "date_only": false, "value": "2026-10-15T01:14:50.803389Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117442274060031754", "record": "CVE-2026-110857", "field": "creation_timestamp", "uuid": "d74c3b08-96f2-498f-833f-d0f285931ac1", "content": "CVE-2026-110857 GitPython before 3.2.0 Command Execution via ls_remote ext:: URLs GitPython before 3.2.0 contains a remote code execution vulnerability that allows attackers to run commands because Git.ls_remote forwards URLs without check_unsafe_protocols validation. Attackers can supply ext:: remote-helper URLs to execute commands when git permits the ext transport, while merge_base and IndexFile.move also accept unguarded option injection.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110857https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-w8jc-g24h-crhwhttps://www.vulncheck.com/advisories/gitpython-before-3.2.0-command-execution-via-ls-remote-ext-urls#gitpython-developers #GitPython#CVE_2026_110857#bot", "url": "https://infosec.exchange/users/cve/statuses/117442274060031754"}, {"timestamp": "2026-10-15T12:10:05.439Z", "date_only": false, "value": "2026-10-15T12:10:05.439893Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxvzqsunyy2l", "record": "CVE-2026-110857", "field": "creation_timestamp", "uuid": "29112465-9c48-49f0-9a37-2bb0d1d363ee", "content": "CVE-2026-110857 - gitpython\nVersions of GitPython older than 3.2.0 can be tricked into running arbitrary system commands when they process specially crafted remote URLs. An attacker who can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitpython #gitpythondevelopers #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxvzqsunyy2l"}, {"timestamp": "2026-10-15T13:36:00.939Z", "date_only": false, "value": "2026-10-15T13:36:00.939555Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110857", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T13:36:00.939Z", "date_only": false, "value": "2026-10-15T13:36:00.939555Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110857", "record": "FKIE_CVE-2026-110857", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T13:36:14.066Z", "date_only": false, "value": "2026-10-15T13:36:14.066Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-110857", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T13:36:14.066Z", "date_only": false, "value": "2026-10-15T13:36:14.066Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110857", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T20:33:06.527Z", "date_only": false, "value": "2026-10-15T20:33:06.527", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110857", "record": "FKIE_CVE-2026-110857", "field": "lastModified"}]}