{"metadata": {"vulnerability": "CVE-2026-112309", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-15T13:33:38Z", "date_only": false, "value": "2026-10-15T13:33:38.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-112309", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-19T14:14:29.420Z", "date_only": false, "value": "2026-10-19T14:14:29.420Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-112309", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-19T15:28:58.442Z", "date_only": false, "value": "2026-10-19T15:28:58.442Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-112309", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-19T15:28:58.442Z", "date_only": false, "value": "2026-10-19T15:28:58.442Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-112309", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-19T15:40:55.520Z", "date_only": false, "value": "2026-10-19T15:40:55.520662Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117468329068073956", "record": "CVE-2026-112309", "field": "creation_timestamp", "uuid": "aafbb467-41ed-4856-8a59-0d5cd4eb565e", "content": "CVE-2026-112309 @rvf/set-get before 7.0.4 Prototype Pollution via setPath Inherited Methods @rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite properties of shared built-in functions via inherited Object.prototype methods. Attackers can submit a form field named hasOwnProperty.call through @rvf/core form parsing to replace the shared function property, causing process-wide denial of service until restart.\nhttps://www.cve.org/CVERecord?id=CVE-2026-112309https://github.com/airjp73/rvf/commit/4a5e118667549ac41f065b4cfa80b995841c3811https://github.com/airjp73/rvf/blob/61172ff01bf1250893108e5c80f35b5ac0388ecb/packages/set-get/src/setPath.tshttps://github.com/airjp73/rvf/blob/61172ff01bf1250893108e5c80f35b5ac0388ecb/packages/core/src/native-form-data/flatten.tshttps://www.vulncheck.com/advisories/rvf-set-get-before-7.0.4-prototype-pollution-via-setpath-inherited-methods#airjp73 #@rvf/set-get#CVE_2026_112309#bot", "url": "https://infosec.exchange/users/cve/statuses/117468329068073956"}, {"timestamp": "2026-10-19T16:17:07Z", "date_only": false, "value": "2026-10-19T16:17:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FFHP-5372-CCMJ", "record": "GHSA-FFHP-5372-CCMJ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-19T16:17:07.050Z", "date_only": false, "value": "2026-10-19T16:17:07.050", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112309", "record": "FKIE_CVE-2026-112309", "field": "published"}, {"timestamp": "2026-10-19T18:32:12Z", "date_only": false, "value": "2026-10-19T18:32:12Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FFHP-5372-CCMJ", "record": "GHSA-FFHP-5372-CCMJ", "field": "published"}, {"timestamp": "2026-10-19T18:32:12Z", "date_only": false, "value": "2026-10-19T18:32:12Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FFHP-5372-CCMJ", "record": "GHSA-FFHP-5372-CCMJ", "field": "modified"}, {"timestamp": "2026-10-22T03:00:25.046Z", "date_only": false, "value": "2026-10-22T03:00:25.046183Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-112309", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-22T03:00:25.046Z", "date_only": false, "value": "2026-10-22T03:00:25.046183Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112309", "record": "FKIE_CVE-2026-112309", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-22T03:00:39.446Z", "date_only": false, "value": "2026-10-22T03:00:39.446Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-112309", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-22T03:00:39.446Z", "date_only": false, "value": "2026-10-22T03:00:39.446Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-112309", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-22T04:17:32.947Z", "date_only": false, "value": "2026-10-22T04:17:32.947", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112309", "record": "FKIE_CVE-2026-112309", "field": "lastModified"}]}